last executing test programs: 22.426103121s ago: executing program 1 (id=9886): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x10df, 0x9}, 0x11efa, 0x4, 0x4, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0x6}, 0x8000, 0x5, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x3, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4d31, 0x0, 0xa1a47bcc7aa58d07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x7}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7fffffffffffffd, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c6394", 0xf}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r0}) 21.547729257s ago: executing program 1 (id=9890): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x28, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x2, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x23}]}, {0x0, [0x61, 0x0, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x4c}, 0x28) 21.373262036s ago: executing program 1 (id=9892): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9b141, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x4}, 0x100904, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9b141, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x4}, 0x100904, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="5650033a0c9b", @ANYBLOB="00ffffff7f000000"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000003a00)}, {0x0}], 0x2, &(0x7f0000000300)}, 0x4010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'batadv0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) (async) close(r3) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864160af36504001a0038001d00120000009ee517d34460bc24eab556a705251e6182949a3651f60a84", 0x44}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x1a, &(0x7f0000000040), 0x10) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x1a, &(0x7f0000000040), 0x10) socket$kcm(0x29, 0x2, 0x0) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x745a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) r7 = openat$cgroup_ro(r0, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) 20.818085839s ago: executing program 2 (id=9897): openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 20.521197009s ago: executing program 2 (id=9898): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe4, 0x1c, &(0x7f0000000280)="22f8970a04749865044f48640a757387df26c19be4de32ceee6608fa7e54c74ce75c1e3d472a7444cafc92dcaecba99a7a1738c6bdddc3e0a46cd9cb3ea7f4efbf821bfe52e2328c791e55877d651cab54b4bec09d6df2f7c1043ec738735ebc176790b7a5d5d1db235515542e71ee9872f1bf29b0cc77f800a44fd4f93beda441768ab18ada49f622de6d3308439288edf63dc9751d3bed275fbca10971ad9c69c658ad296c7b3ef07d90b36c1d2efdddc2304cc8334d807e569d8d905e8e6e95e0b65f4e2125b3cf31ae552ea29a3fd6a3306f4b2180dc2ad2515b68022d7b3c18db6c", &(0x7f0000000380)=""/28, 0x9, 0x0, 0x69, 0x66, &(0x7f00000003c0)="11125566ba6e491812236e5b42b0700ee3c9845979c548ce6707cba8e48fd9bf849c02345912f94201a92fb82c2328db05aa1d4ad7a6ce361d9776cd4a2de025fa6f9235a85d1a41419cd2be5e7937ad1eb14090eafe6cb27791333dc9474bfea240b635fa2fe0627d", &(0x7f00000004c0)="3cfb325edc0edd67ae8115b221d257a02ccbd0928628f3da37915eda15b64c58f13dddc716186eea9e3627e551bbf5ebbc0a614da90ef6a88363b83a15393e072a72dca1347e9c12e236d1f15c982ba0b653225c8f24769c2d5eef78b1720ff161786b35c73c", 0x0, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x2, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r2}, 0x38) 19.875237137s ago: executing program 1 (id=9907): socket$kcm(0x15, 0x5, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r0}, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/176, 0xb0}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB], 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r4) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r6 = perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x3, 0x2, 0x3, 0xd, 0x0, 0x5, 0x2, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf09, 0x1, @perf_bp={&(0x7f0000000040)}, 0x100000, 0xa79, 0x7, 0x2, 0xc4, 0xffff, 0x1, 0x0, 0x15, 0x0, 0x101}, 0x0, 0x2, r4, 0xa) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, r6, 0xa) r7 = socket$kcm(0x22, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180a0000fbffffff000000000000c667850000006c0000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x80044943, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 19.865340579s ago: executing program 2 (id=9900): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, &(0x7f00000001c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}], 0x78}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x5, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0xc, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r5, 0x0, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x1b, 0x0, &(0x7f0000000540)="f8ad48cc8bd37058c8007f5b86dd1555f459d057450700e754084e", 0x0, 0x40000000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{r1}, &(0x7f0000001240), &(0x7f0000001280)=r0}, 0x20) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f00000002c0)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e86f835663a4968c8bf5afd7cf80549f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb90800000001cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb0270642a96a9e14d116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a95525b5f3f2edd74ae9d664a1f2e932493b61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723ce92ada6ff0c4f498d42d4218a9f799a216facb7377a1532e0755b894bfc0ee99a4072ac54ee5727846631574f348bf650e7d54b0ef3a1b5cc8233e660a2615bb7401f6c23e08ff0ddb488b9d504fc42508449b8fdd70afb387016e8c9206482c334f37d26fa3bdb6063f8147db9363e22c4b43b89ba0f68d06646fc1eb74fec0be4f59a17b274e0db67b2c0398250da219c9caf7e0f6cb1f828b6f89a67cacfd0fe0132bd94261410f8d8d7eb819bc783b8e66a1786285e1e429b71ccc22f7f4c216001375c7a816719e29abc98652b6752923132256cb5f0470223e2c685c9ebf635e316a12b35a429160d1c7688dbc3edcb1af64032177e41def01696e7100bbe102ae1b68a44b50c484b23164ab0387c3e23b8a5", 0xf35}, {&(0x7f0000001200)="d0", 0x1}], 0x3}, 0x9cdc2384016f48f8) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000000180)) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) 19.627513809s ago: executing program 0 (id=9901): socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x448b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x1009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xa, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000b6", @ANYRES32, @ANYBLOB="79c90000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000040000000d00"/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r1, &(0x7f0000000280)="9151526903a70dc4b11fb42544d3c0f26ba749375c", 0x0, 0x4}, 0x20) r2 = socket$kcm(0x23, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRESHEX=r0, @ANYBLOB="000000000000000000000000000000000050026bc3b1e6679c40c5", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/19], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000000), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000a40)={&(0x7f0000000740)="1d1a57a54be69aecfcf1a45bd32b5dc96551483bdb9c1c9174432415ad717917d9016ddf232b9502a37b3fe298d009a4c956d3b4d1dbc0d386a65bc31fd3a28e15396de503485741b844c7b14d6baa4af2ab662598db5645ecadd1d5bb3062d6125e69297abab47c79bb2a14b21cc3f8e291336d649f162910fe2b95efd469849c80b4e6d25bad58b678c644d6a782", &(0x7f0000000800)=""/57, &(0x7f0000000940)="8967b76f73763dc7b9967e73cfaecaf564c8d1abf5f30eea8c89bb19e7f27432661a2611b1870f359511d7216cb29ef6c449bf8de67b8b9e9fa073eb960a9ed66f9e4df40c8ea8fd7186346c29a56570857a8b5989d5a2b5c1d8001a26c582fcfe22ca28a8a29fb86ce7fb9ffb72496f49cc522fbbb2316ddf322ca3616006fbcce5631c", &(0x7f0000000a00)="9793323c0171ddb1cccfbd6f08f1ecce10", 0x81, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, 0x0, 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4010, r7}, 0x18) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x20}, 0x80, 0x0}, 0x0) 19.442673589s ago: executing program 1 (id=9903): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000ed000f0000000000000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="180200000900000000000000ff03000085000000170008009500000000000000b95af401da1ac19f4386bdd136d7448f504211a3af2c2fb9311ced0a27474d18501525bb493c8b97625626e8df09c041160cd0ab2d1e1d52c4be84fe541846731a459e213818cba13b9fb2d6b7ed1e1b23c547653bef48ef2452652a92701d0c59f7900cec2a109db6e69fb7d3"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r1, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x8054) 18.926411255s ago: executing program 0 (id=9904): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xa}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3e}, 0x28) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x2000000000000079, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x6d, 0x0, &(0x7f0000000700)="d1fd5b41a5ae09dfdf77a4392cd819a4054d5240de98da5b90a9855a0592d15168de09be86add0088bf87dc6fc21157515a43dee7020b6ca27377bb0d55cb3b23f2179695a5750ef57e07b99756901ea4a4b60f7aff4662cf13dc1170d24bd32b3160b1dce34330a6870cee42f", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0x3e) 18.925983725s ago: executing program 1 (id=9905): r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xe, &(0x7f0000002000)=ANY=[@ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x3}, 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0xfffffff2, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x40, 0x3, 0x1, 0x0, 0x2ffff, 0x8a052, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x4}, 0x10050a, 0x0, 0x1, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f00000001c0)=r3, 0x4) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x461c574afe861d41) r6 = syz_clone(0xc3000480, &(0x7f0000000c40), 0x0, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)="2d749115443e0fc696f38278d7c61a2d6ca6732c98d72ca2a5b1655cad6b92bf6fd479123bd61d7f6bbdfdef271ee56789a87cf5dafd3f9ec0f707139150f0308ec2b1e0c79c6169b2c876f617d8b0749feb9a245935927278a77891fa05352f93b0cc5cbe3b7343689405aa5d234b766d32dc8fc299611d2157b848d1ce74") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xea58}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) 17.985435743s ago: executing program 0 (id=9908): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x1, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910900000000000c3000000000000009500000000000000a45c8b106d45385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc2644f3f168925abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3117a99ecbddbfee7f7abeba22c29a9cb001001079a87ed58d2cbaf30b8fc3b5fd11e6ca750a6dc5dba2cd1d9fed1fb63bafef7d7bdd5bad81e40379623de9000000000054395605e46e00ded1acb26f8fa9c2702a8aac94fcbbdd2fbbba184bc337d5cb0c04a788fd76b402d5229125c274b171290fdfb32d00504a2a4f797a0103b19a04911e2ab1f208858be1873ee684e45ce2dd5de070f1aabdaa2de7edcbd27f403caffe57995b4e2d914a3c5b9bcf7ba242d1ed391d564b18b3de9c1db2b9232c5e"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="00003000ff0301002d250500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0xee, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xb}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r4}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) sendmsg$unix(r5, &(0x7f0000000580)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="180000a8cdb929f34954cf0001000000", @ANYRES32=r0, @ANYRES32], 0x58, 0x8830}, 0x20000000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r7, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000580)="b9fe030768045c8c989a14f088a8657986dd", 0x0, 0x764, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_clone(0x48400, 0x0, 0xf0ff, 0x0, 0x0, 0x0) perf_event_open(0x0, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180)={0x10, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r9, 0x10000, 0x10}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0xec) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 17.676796395s ago: executing program 2 (id=9910): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115d0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x8501, 0x8800, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x400, 0xfffffffffffffffb, 0x7fffffff, 0x5, 0x2, 0x7ff, 0x3, 0x0, 0x1000, 0x0, 0xffff}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbfffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0xffffffff, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)}, 0x24040841) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x5, 0x0, 0x3e, 0xed, 0x0, 0xfa1c, 0x4044, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, @perf_config_ext={0x200, 0x35f}, 0x204, 0x5, 0x1000, 0x2, 0x0, 0x4, 0x7, 0x0, 0xe, 0x0, 0x5}, 0xffffffffffffffff, 0xc, r2, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x3, 0x80, 0x5, 0x2, 0x5d, 0x70, 0x0, 0x8, 0x88300, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x5908, 0x5, 0xffffff80, 0x3, 0x5, 0xffd, 0x0, 0x0, 0xf, 0x0, 0x200}) r4 = syz_clone(0x40000, &(0x7f0000000500)="ea1400a79d634970e0e00dde4003e061be554f6b9d042c337380aac4d5a076b659c0ff65de63f511a75b185125e65e4e86dfa63c89db9e603c9ea253541975e9583648f2a478899c13662277e3fc41775d4c4d7663e19f8fbcac8be0539240fb", 0x60, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000640)="e974bc001ece64cd0010a4fb6d4d9be03056b906be1ba379b6fba962f41e0f042b909fbe936c687fb95e677c87ae92d3f96cd2e1b03c5438bf4c1473cc32809b2a5a76e86e14a2eeb1fde1fdc4e198ada14956e74888edcfb48acc1dd1dde2fd7b39a92d1f7afba0dc37c1c903675e93dd98c652e894b61b1dbaec6a6f5e196c6c99491c6eb5d30fb5540ef5c238dad61e79e48a0ca95ac7a1bcaaa9e26790a15913dc837d1bf5977a9780a6b71c1da3571b99c95faba0bf82d6fe2628c1d534df3b6232637ce8c890d38caff3") perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x0, 0x80, 0x5, 0x6, 0x0, 0x6, 0x10000, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x8000000000000000, 0x3}, 0x8000, 0x6, 0x0, 0x6, 0x1000, 0xafc, 0x1ff, 0x0, 0x65, 0x0, 0x5}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x5828cd77edfd5526) 16.314798162s ago: executing program 2 (id=9914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) (async) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ba000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x2124, 0x6, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000720000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0xf, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0xf, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000040)) (async) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000040)) close(r0) (async) close(r0) 15.863271237s ago: executing program 0 (id=9916): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1c0000001a007f049e", 0x9}, {&(0x7f0000000140)="03000000fb73fc8040250080f2dc06a9258f2e", 0x13}], 0x2}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x81, 0x0, 0x6, 0xc, 0x0, 0x7f, 0x404, 0x12, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x8000000000000000, 0x9}, 0x5081, 0x6, 0xd52, 0x2, 0x8, 0x1, 0x2, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x2, 0x922000000001, 0x106) r3 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000180), 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x1e, 0x0, 0xb00) 9.804055341s ago: executing program 0 (id=9918): openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x4f, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f20e94d079f199b8a1fb521f3756a955ecdf157902f64d1c3c941187f21467c767be90f8829742af2bc17d5721b550573478b6b8282040c5a3747186fdbb5cd07a0", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 9.57035301s ago: executing program 2 (id=9921): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x7e}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x3, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bf800000000000000701eefff7ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9}, 0x94) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000400000006000000ff00000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a1bc9f21d708fe319df424ca28a03cba39b3c9"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000080), 0x619, r4}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x105d30, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000061be18710000", @ANYRES32=r5], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x36) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) 9.067529304s ago: executing program 0 (id=9922): socket$kcm(0x15, 0x5, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r0}, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/176, 0xb0}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB], 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r4) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r6 = perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x3, 0x2, 0x3, 0xd, 0x0, 0x5, 0x2, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf09, 0x1, @perf_bp={&(0x7f0000000040)}, 0x100000, 0xa79, 0x7, 0x2, 0xc4, 0xffff, 0x1, 0x0, 0x15, 0x0, 0x101}, 0x0, 0x2, r4, 0xa) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, r6, 0xa) r7 = socket$kcm(0x22, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180a0000fbffffff000000000000c667850000006c0000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x80044943, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 7.928123265s ago: executing program 3 (id=9924): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115d0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x8501, 0x8800, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x400, 0xfffffffffffffffb, 0x7fffffff, 0x5, 0x2, 0x7ff, 0x3, 0x0, 0x1000, 0x0, 0xffff}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbfffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0xffffffff, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)}, 0x24040841) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x3, 0x80, 0x5, 0x2, 0x5d, 0x70, 0x0, 0x8, 0x88300, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x5908, 0x5, 0xffffff80, 0x3, 0x5, 0xffd, 0x0, 0x0, 0xf, 0x0, 0x200}) r3 = syz_clone(0x40000, &(0x7f0000000500)="ea1400a79d634970e0e00dde4003e061be554f6b9d042c337380aac4d5a076b659c0ff65de63f511a75b185125e65e4e86dfa63c89db9e603c9ea253541975e9583648f2a478899c13662277e3fc41775d4c4d7663e19f8fbcac8be0539240fb", 0x60, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000640)="e974bc001ece64cd0010a4fb6d4d9be03056b906be1ba379b6fba962f41e0f042b909fbe936c687fb95e677c87ae92d3f96cd2e1b03c5438bf4c1473cc32809b2a5a76e86e14a2eeb1fde1fdc4e198ada14956e74888edcfb48acc1dd1dde2fd7b39a92d1f7afba0dc37c1c903675e93dd98c652e894b61b1dbaec6a6f5e196c6c99491c6eb5d30fb5540ef5c238dad61e79e48a0ca95ac7a1bcaaa9e26790a15913dc837d1bf5977a9780a6b71c1da3571b99c95faba0bf82d6fe2628c1d534df3b6232637ce8c890d38caff3") perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x0, 0x80, 0x5, 0x6, 0x0, 0x6, 0x10000, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x8000000000000000, 0x3}, 0x8000, 0x6, 0x0, 0x6, 0x1000, 0xafc, 0x1ff, 0x0, 0x65, 0x0, 0x5}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x5828cd77edfd5526) 3.047799331s ago: executing program 32 (id=9905): r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xe, &(0x7f0000002000)=ANY=[@ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x3}, 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0xfffffff2, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x40, 0x3, 0x1, 0x0, 0x2ffff, 0x8a052, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x4}, 0x10050a, 0x0, 0x1, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f00000001c0)=r3, 0x4) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x461c574afe861d41) r6 = syz_clone(0xc3000480, &(0x7f0000000c40), 0x0, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)="2d749115443e0fc696f38278d7c61a2d6ca6732c98d72ca2a5b1655cad6b92bf6fd479123bd61d7f6bbdfdef271ee56789a87cf5dafd3f9ec0f707139150f0308ec2b1e0c79c6169b2c876f617d8b0749feb9a245935927278a77891fa05352f93b0cc5cbe3b7343689405aa5d234b766d32dc8fc299611d2157b848d1ce74") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xea58}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) 2.3347838s ago: executing program 3 (id=9926): perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={0xffffffffffffffff, &(0x7f0000000880)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000800000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5452, &(0x7f0000000000)) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.014367671s ago: executing program 3 (id=9927): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000d0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) (fail_nth: 1) 357.15942ms ago: executing program 3 (id=9928): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="1f47f9af71a300000000000000000e234be07e7fb09f28468fa4a58f2292986c60a177d07707a8ea5c5d4b65af52ca2caea47b0e8f1b87b89f880f016dc26b05c4b08aa0c9fbf70c06632d2ce12d1e062828ae41467c9d925f410d1a5010e77ca8e506d350e1eece8bf63ec894f665a0af4fac000000000000bd6eb9a29976385fc602effdf509cad6ac10601770859d5cad6d564abcb9d621e5831e2bc8fb2ce11d1779c256b0ba27beb11511acf31087ac4d3644ab3d4bd4db609b0fa57b4266895bb678cc616adb022afb328afd59c41d44d17327eaeaaf8ccf14e724c7caf94e04e63bdf6673e1be18f0d215647d", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0, {0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000d0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffff7fff, r0, 0x0) 162.266123ms ago: executing program 3 (id=9929): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4200d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x8963, 0x0, 0x0, 0x3, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x10, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}, 0x10140) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 0s ago: executing program 3 (id=9930): openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x4f, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f20e94d079f199b8a1fb521f3756a955ecdf157902f64d1c3c941187f21467c767be90f8829742af2bc17d5721b550573478b6b8282040c5a3747186fdbb5cd07a0", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) kernel console output (not intermixed with test programs): ute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1954.535008][ T1282] Call Trace: [ 1954.538329][ T1282] [ 1954.541298][ T1282] dump_stack_lvl+0x18c/0x250 [ 1954.546033][ T1282] ? show_regs_print_info+0x20/0x20 [ 1954.551358][ T1282] ? load_image+0x420/0x420 [ 1954.556091][ T1282] should_fail_ex+0x39d/0x4d0 [ 1954.560955][ T1282] should_failslab+0x9/0x20 [ 1954.565616][ T1282] slab_pre_alloc_hook+0x59/0x310 [ 1954.570887][ T1282] kmem_cache_alloc_node+0x60/0x320 [ 1954.576173][ T1282] ? __alloc_skb+0x103/0x2c0 [ 1954.580807][ T1282] __alloc_skb+0x103/0x2c0 [ 1954.585272][ T1282] rtnl_bridge_notify+0xa1/0x250 [ 1954.590250][ T1282] rtnl_bridge_setlink+0x697/0x7d0 [ 1954.595400][ T1282] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 1954.600733][ T1282] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1954.606098][ T1282] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1954.611442][ T1282] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 1954.612366][ T1286] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.8773'. [ 1954.616859][ T1282] rtnetlink_rcv_msg+0x869/0xfa0 [ 1954.616903][ T1282] ? rtnetlink_bind+0x80/0x80 [ 1954.616923][ T1282] ? mark_lock+0x94/0x320 [ 1954.616953][ T1282] ? __lock_acquire+0x1273/0x7d40 [ 1954.616979][ T1282] ? __kernel_text_address+0xd/0x30 [ 1954.617015][ T1282] ? mark_lock+0x94/0x320 [ 1954.617042][ T1282] ? mark_lock+0x94/0x320 [ 1954.617070][ T1282] ? __lock_acquire+0x1273/0x7d40 [ 1954.617114][ T1282] ? kmalloc_reserve+0x95/0x240 [ 1954.617138][ T1282] ? verify_lock_unused+0x140/0x140 [ 1954.617167][ T1282] ? verify_lock_unused+0x140/0x140 [ 1954.617216][ T1282] netlink_rcv_skb+0x241/0x4d0 [ 1954.617248][ T1282] ? rtnetlink_bind+0x80/0x80 [ 1954.617272][ T1282] ? netlink_ack+0x1180/0x1180 [ 1954.617318][ T1282] ? __lock_acquire+0x7d40/0x7d40 [ 1954.617342][ T1282] ? net_generic+0x1e/0x240 [ 1954.617373][ T1282] ? netlink_deliver_tap+0x2e/0x1b0 [ 1954.617409][ T1282] netlink_unicast+0x751/0x8d0 [ 1954.617451][ T1282] netlink_sendmsg+0x8d0/0xbf0 [ 1954.617492][ T1282] ? netlink_getsockopt+0x590/0x590 [ 1954.617534][ T1282] ? aa_sock_msg_perm+0x94/0x150 [ 1954.617563][ T1282] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1954.617588][ T1282] ? security_socket_sendmsg+0x80/0xa0 [ 1954.617610][ T1282] ? netlink_getsockopt+0x590/0x590 [ 1954.617641][ T1282] ____sys_sendmsg+0x5ba/0x960 [ 1954.617672][ T1282] ? __asan_memset+0x22/0x40 [ 1954.617699][ T1282] ? __sys_sendmsg_sock+0x30/0x30 [ 1954.617717][ T1282] ? __import_iovec+0x5f2/0x850 [ 1954.617749][ T1282] ? import_iovec+0x73/0xa0 [ 1954.617775][ T1282] ___sys_sendmsg+0x2a6/0x360 [ 1954.617796][ T1282] ? get_pid_task+0x20/0x1e0 [ 1954.617826][ T1282] ? __sys_sendmsg+0x2a0/0x2a0 [ 1954.617875][ T1282] ? __lock_acquire+0x7d40/0x7d40 [ 1954.617931][ T1282] __se_sys_sendmsg+0x1c2/0x2b0 [ 1954.617957][ T1282] ? __x64_sys_sendmsg+0x80/0x80 [ 1954.618000][ T1282] ? lockdep_hardirqs_on+0x98/0x150 [ 1954.618030][ T1282] do_syscall_64+0x55/0xa0 [ 1954.618048][ T1282] ? clear_bhb_loop+0x40/0x90 [ 1954.618071][ T1282] ? clear_bhb_loop+0x40/0x90 [ 1954.618098][ T1282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1954.618124][ T1282] RIP: 0033:0x7f039119c819 [ 1954.618145][ T1282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1954.618162][ T1282] RSP: 002b:00007f039203f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1954.618188][ T1282] RAX: ffffffffffffffda RBX: 00007f0391415fa0 RCX: 00007f039119c819 [ 1954.618204][ T1282] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000004 [ 1954.618217][ T1282] RBP: 00007f039203f090 R08: 0000000000000000 R09: 0000000000000000 [ 1954.618231][ T1282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1954.618244][ T1282] R13: 00007f0391416038 R14: 00007f0391415fa0 R15: 00007fff7383fea8 [ 1954.618279][ T1282] [ 1955.327320][T31719] Bluetooth: hci3: command tx timeout [ 1955.503287][ T1251] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1955.674926][ T1251] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1955.864923][ T1251] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1955.986761][T25952] tipc: Subscription rejected, illegal request [ 1956.091278][ T1251] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1956.162883][ T1302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8779'. [ 1956.802921][ T1251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1956.905863][ T1251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1956.934826][ T1251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1956.962273][ T1251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1957.274833][ T1251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1957.373659][ T1251] 8021q: adding VLAN 0 to HW filter on device team0 [ 1957.397416][T31719] Bluetooth: hci3: command tx timeout [ 1957.491339][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1957.498733][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1957.549228][T21563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1957.556441][T21563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1957.603102][ T1315] netlink: 'syz.1.8782': attribute type 2 has an invalid length. [ 1957.631407][ T1315] netlink: 'syz.1.8782': attribute type 8 has an invalid length. [ 1957.676056][ T1315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8782'. [ 1957.923709][ T1325] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.8786'. [ 1958.077870][T25944] tipc: Subscription rejected, illegal request [ 1958.607709][ T1251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1958.627692][ T1346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8791'. [ 1958.822162][ T1251] veth0_vlan: entered promiscuous mode [ 1958.858942][ T1251] veth1_vlan: entered promiscuous mode [ 1958.969333][ T1251] veth0_macvtap: entered promiscuous mode [ 1958.990197][ T1251] veth1_macvtap: entered promiscuous mode [ 1959.070092][ T1343] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8789'. [ 1959.160686][ T1343] bond0: (slave bond_slave_0): Releasing backup interface [ 1959.231413][ T1343] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1959.295812][ T1251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.326227][ T1251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.336443][ T1251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.347430][ T1251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.357888][ T1251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.368397][ T1251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.378458][ T1251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.389092][ T1251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.402207][ T1251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1959.448526][ T1251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.461741][ T1251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.473370][ T1251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.484000][T31719] Bluetooth: hci3: command tx timeout [ 1959.489703][ T1251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.505854][ T1251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.516615][ T1251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.529709][ T1251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1959.542153][ T1251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.551325][ T1251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.561819][ T1251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.571207][ T1251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.662453][T25942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1959.672181][T25942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1959.757040][ T6461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1959.765904][ T6461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1959.992142][T25945] tipc: Subscription rejected, illegal request [ 1961.292492][ T1379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8800'. [ 1961.677309][T31719] Bluetooth: hci3: command tx timeout [ 1962.653066][ T1395] netlink: 'syz.1.8803': attribute type 1 has an invalid length. [ 1962.667365][ T1395] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.8803'. [ 1963.029871][ T1405] netlink: 'syz.3.8807': attribute type 2 has an invalid length. [ 1963.039477][ T1405] netlink: 'syz.3.8807': attribute type 8 has an invalid length. [ 1963.047835][ T1405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8807'. [ 1963.211535][T25942] tipc: Subscription rejected, illegal request [ 1963.631407][ T1416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8810'. [ 1964.184042][ T1424] netlink: 'syz.1.8813': attribute type 2 has an invalid length. [ 1964.210018][ T1424] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.8813'. [ 1964.395501][ T1434] netlink: 'syz.0.8816': attribute type 21 has an invalid length. [ 1964.434506][ T1434] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8816'. [ 1964.446447][ T1434] netlink: 'syz.0.8816': attribute type 4 has an invalid length. [ 1964.459258][ T1434] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8816'. [ 1964.514603][ T1438] netlink: 'syz.3.8819': attribute type 2 has an invalid length. [ 1964.523866][ T1438] netlink: 'syz.3.8819': attribute type 8 has an invalid length. [ 1964.539623][ T1438] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8819'. [ 1964.659377][ T1440] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8820'. [ 1964.680171][ T1440] bridge_slave_1: default FDB implementation only supports local addresses [ 1964.694812][T25950] tipc: Subscription rejected, illegal request [ 1964.878706][ T1449] netlink: 'syz.3.8823': attribute type 21 has an invalid length. [ 1964.890072][ T1449] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8823'. [ 1965.142780][ T1461] netlink: 'syz.1.8828': attribute type 2 has an invalid length. [ 1965.293939][ T1464] FAULT_INJECTION: forcing a failure. [ 1965.293939][ T1464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1965.331455][ T1464] CPU: 1 PID: 1464 Comm: syz.1.8829 Not tainted syzkaller #0 [ 1965.338920][ T1464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1965.349024][ T1464] Call Trace: [ 1965.352350][ T1464] [ 1965.355405][ T1464] dump_stack_lvl+0x18c/0x250 [ 1965.360158][ T1464] ? show_regs_print_info+0x20/0x20 [ 1965.365482][ T1464] ? load_image+0x420/0x420 [ 1965.370039][ T1464] ? __might_fault+0xaa/0x120 [ 1965.374773][ T1464] ? __lock_acquire+0x7d40/0x7d40 [ 1965.379864][ T1464] should_fail_ex+0x39d/0x4d0 [ 1965.385036][ T1464] _copy_from_iter+0x1d9/0x12e0 [ 1965.390045][ T1464] ? rep_movs_alternative+0x4a/0x90 [ 1965.395674][ T1464] ? _copy_from_iter+0x24e/0x12e0 [ 1965.400858][ T1464] ? __virt_addr_valid+0x18c/0x540 [ 1965.406117][ T1464] ? __lock_acquire+0x7d40/0x7d40 [ 1965.411216][ T1464] ? copyout_mc+0x70/0x70 [ 1965.415612][ T1464] ? copyout_mc+0x70/0x70 [ 1965.419993][ T1464] ? __virt_addr_valid+0x18c/0x540 [ 1965.425156][ T1464] ? page_copy_sane+0x16a/0x270 [ 1965.430062][ T1464] copy_page_from_iter+0x7b/0x100 [ 1965.435131][ T1464] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1965.440978][ T1464] tun_get_user+0x15db/0x3ca0 [ 1965.445687][ T1464] ? aa_file_perm+0x11b/0xee0 [ 1965.450392][ T1464] ? rcu_read_unlock+0xa0/0xa0 [ 1965.455384][ T1464] ? tun_get+0x1c/0x2e0 [ 1965.459605][ T1464] ? __lock_acquire+0x7d40/0x7d40 [ 1965.464692][ T1464] ? tun_get+0x1c/0x2e0 [ 1965.468975][ T1464] tun_chr_write_iter+0x119/0x200 [ 1965.474116][ T1464] vfs_write+0x46c/0x990 [ 1965.478484][ T1464] ? file_end_write+0x250/0x250 [ 1965.483364][ T1464] ? __fget_files+0x43d/0x4b0 [ 1965.488102][ T1464] ? __fdget_pos+0x1d8/0x330 [ 1965.492727][ T1464] ? ksys_write+0x75/0x260 [ 1965.497177][ T1464] ksys_write+0x150/0x260 [ 1965.501536][ T1464] ? __ia32_sys_read+0x90/0x90 [ 1965.506398][ T1464] ? lockdep_hardirqs_on+0x98/0x150 [ 1965.511764][ T1464] do_syscall_64+0x55/0xa0 [ 1965.516211][ T1464] ? clear_bhb_loop+0x40/0x90 [ 1965.520927][ T1464] ? clear_bhb_loop+0x40/0x90 [ 1965.525739][ T1464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1965.531834][ T1464] RIP: 0033:0x7f039119c819 [ 1965.536268][ T1464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1965.556072][ T1464] RSP: 002b:00007f039203f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1965.565056][ T1464] RAX: ffffffffffffffda RBX: 00007f0391415fa0 RCX: 00007f039119c819 [ 1965.573233][ T1464] RDX: 000000000000fdef RSI: 0000200000000200 RDI: 00000000000000c8 [ 1965.581288][ T1464] RBP: 00007f039203f090 R08: 0000000000000000 R09: 0000000000000000 [ 1965.589457][ T1464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1965.597538][ T1464] R13: 00007f0391416038 R14: 00007f0391415fa0 R15: 00007fff7383fea8 [ 1965.605553][ T1464] [ 1966.083732][ T6461] tipc: Subscription rejected, illegal request [ 1966.568958][ T1492] __nla_validate_parse: 2 callbacks suppressed [ 1966.568996][ T1492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8839'. [ 1966.748367][ T1490] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8840'. [ 1966.770059][ T1490] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1966.962320][ T1496] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8842'. [ 1967.256729][ T1501] delete_channel: no stack [ 1967.423458][ T6461] tipc: Subscription rejected, illegal request [ 1967.868929][ T1526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8852'. [ 1969.299873][ T1541] syzkaller0: entered promiscuous mode [ 1969.324157][ T1541] syzkaller0: entered allmulticast mode [ 1969.471955][T21563] tipc: Subscription rejected, illegal request [ 1969.520531][ T1540] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8857'. [ 1969.666985][ T1540] bond0: (slave bond_slave_0): Releasing backup interface [ 1969.708362][ T1540] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1972.861574][ T1571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8864'. [ 1973.214613][ T1580] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.8868'. [ 1973.267216][ T1580] openvswitch: netlink: Duplicate key (type 0). [ 1973.364449][ T1584] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8870'. [ 1973.405432][ T1586] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8870'. [ 1973.468979][T31719] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1973.476610][T31719] Bluetooth: hci2: Invalid handle: 0xf800 > 0x0eff [ 1973.521943][T25950] tipc: Subscription rejected, illegal request [ 1973.675055][ T1592] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8872'. [ 1973.735544][ T1594] sock: sock_set_timeout: `syz.2.8873' (pid 1594) tries to set negative timeout [ 1974.153302][ T1606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8877'. [ 1974.799113][ T1620] validate_nla: 3 callbacks suppressed [ 1974.799130][ T1620] netlink: 'syz.1.8881': attribute type 2 has an invalid length. [ 1974.830372][ T1620] netlink: 'syz.1.8881': attribute type 8 has an invalid length. [ 1974.843602][ T1620] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8881'. [ 1975.003008][ T1629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8885'. [ 1975.043354][ T1629] netlink: 'syz.2.8885': attribute type 3 has an invalid length. [ 1975.051493][ T1629] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8885'. [ 1975.256232][ T1637] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8888'. [ 1975.274920][ T1637] netlink: 'syz.0.8888': attribute type 21 has an invalid length. [ 1975.285063][ T1637] netlink: 'syz.0.8888': attribute type 10 has an invalid length. [ 1975.295486][ T1637] netlink: 'syz.0.8888': attribute type 12 has an invalid length. [ 1975.317461][ T1637] netlink: 'syz.0.8888': attribute type 13 has an invalid length. [ 1975.337349][ T1637] netlink: 'syz.0.8888': attribute type 14 has an invalid length. [ 1975.355621][ T1637] netlink: 'syz.0.8888': attribute type 15 has an invalid length. [ 1975.366508][ T1637] netlink: 'syz.0.8888': attribute type 16 has an invalid length. [ 1975.714963][T25950] tipc: Subscription rejected, illegal request [ 1976.078135][ T1663] FAULT_INJECTION: forcing a failure. [ 1976.078135][ T1663] name failslab, interval 1, probability 0, space 0, times 0 [ 1976.117175][ T1663] CPU: 1 PID: 1663 Comm: syz.3.8898 Not tainted syzkaller #0 [ 1976.124801][ T1663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1976.135073][ T1663] Call Trace: [ 1976.138411][ T1663] [ 1976.141362][ T1663] dump_stack_lvl+0x18c/0x250 [ 1976.146071][ T1663] ? show_regs_print_info+0x20/0x20 [ 1976.151298][ T1663] ? load_image+0x420/0x420 [ 1976.155855][ T1663] should_fail_ex+0x39d/0x4d0 [ 1976.160592][ T1663] should_failslab+0x9/0x20 [ 1976.165150][ T1663] slab_pre_alloc_hook+0x59/0x310 [ 1976.170216][ T1663] ? nf_ct_ext_add+0x1ab/0x440 [ 1976.175002][ T1663] ? nf_ct_ext_add+0x1ab/0x440 [ 1976.179878][ T1663] __kmem_cache_alloc_node+0x53/0x250 [ 1976.185398][ T1663] ? nf_ct_ext_add+0x1ab/0x440 [ 1976.190392][ T1663] __kmalloc_node_track_caller+0xa2/0x230 [ 1976.196161][ T1663] krealloc+0x86/0x120 [ 1976.200339][ T1663] nf_ct_ext_add+0x1ab/0x440 [ 1976.204967][ T1663] init_conntrack+0x69c/0xf10 [ 1976.209756][ T1663] ? early_drop+0x7f0/0x7f0 [ 1976.214375][ T1663] ? nf_conntrack_find_get+0x650/0x650 [ 1976.219846][ T1663] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1976.225252][ T1663] ? __siphash_unaligned+0x22e/0x3a0 [ 1976.230591][ T1663] nf_conntrack_in+0xc06/0x15c0 [ 1976.235508][ T1663] ? nf_ct_pernet+0x270/0x270 [ 1976.240248][ T1663] ? ipt_do_table+0x2c1/0x15e0 [ 1976.245051][ T1663] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 1976.250529][ T1663] ? ip_select_ttl+0xb1/0x330 [ 1976.255259][ T1663] ? ipv4_conntrack_local+0x123/0x200 [ 1976.260658][ T1663] ? ipv4_conntrack_in+0x20/0x20 [ 1976.265614][ T1663] nf_hook_slow+0xbd/0x200 [ 1976.270054][ T1663] ? nf_hook+0x390/0x390 [ 1976.274319][ T1663] nf_hook+0x228/0x390 [ 1976.278416][ T1663] ? nf_hook+0xa2/0x390 [ 1976.282697][ T1663] ? __ip_local_out+0x5f0/0x5f0 [ 1976.287665][ T1663] ? nf_hook+0x390/0x390 [ 1976.291955][ T1663] ? ip_fast_csum+0x1ee/0x2b0 [ 1976.296661][ T1663] __ip_local_out+0x4db/0x5f0 [ 1976.301354][ T1663] ? nf_hook+0x390/0x390 [ 1976.305627][ T1663] ip_send_skb+0x4c/0x1d0 [ 1976.309974][ T1663] raw_sendmsg+0x163e/0x1c00 [ 1976.314965][ T1663] ? compat_raw_ioctl+0x70/0x70 [ 1976.319910][ T1663] ? __lock_acquire+0x1273/0x7d40 [ 1976.325058][ T1663] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1976.331533][ T1663] ? sock_rps_record_flow+0x19/0x3f0 [ 1976.337024][ T1663] ? inet_sendmsg+0x7c/0x2f0 [ 1976.341640][ T1663] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1976.346948][ T1663] ? security_socket_sendmsg+0x80/0xa0 [ 1976.352424][ T1663] ? inet_send_prepare+0x260/0x260 [ 1976.357646][ T1663] ____sys_sendmsg+0x5ba/0x960 [ 1976.362515][ T1663] ? __lock_acquire+0x7d40/0x7d40 [ 1976.367579][ T1663] ? __asan_memset+0x22/0x40 [ 1976.372191][ T1663] ? __sys_sendmsg_sock+0x30/0x30 [ 1976.377407][ T1663] ? __import_iovec+0x3fa/0x850 [ 1976.382301][ T1663] ? import_iovec+0x73/0xa0 [ 1976.386821][ T1663] ___sys_sendmsg+0x2a6/0x360 [ 1976.391519][ T1663] ? get_pid_task+0x20/0x1e0 [ 1976.396220][ T1663] ? __sys_sendmsg+0x2a0/0x2a0 [ 1976.401018][ T1663] ? __lock_acquire+0x7d40/0x7d40 [ 1976.406179][ T1663] __se_sys_sendmsg+0x1c2/0x2b0 [ 1976.411159][ T1663] ? __x64_sys_sendmsg+0x80/0x80 [ 1976.416126][ T1663] ? lockdep_hardirqs_on+0x98/0x150 [ 1976.421430][ T1663] do_syscall_64+0x55/0xa0 [ 1976.425888][ T1663] ? clear_bhb_loop+0x40/0x90 [ 1976.430588][ T1663] ? clear_bhb_loop+0x40/0x90 [ 1976.435335][ T1663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1976.441369][ T1663] RIP: 0033:0x7f4bee99c819 [ 1976.445804][ T1663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1976.465603][ T1663] RSP: 002b:00007f4bef88c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1976.474150][ T1663] RAX: ffffffffffffffda RBX: 00007f4beec15fa0 RCX: 00007f4bee99c819 [ 1976.482228][ T1663] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 1976.490215][ T1663] RBP: 00007f4bef88c090 R08: 0000000000000000 R09: 0000000000000000 [ 1976.498198][ T1663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1976.506267][ T1663] R13: 00007f4beec16038 R14: 00007f4beec15fa0 R15: 00007ffffcd11fc8 [ 1976.514267][ T1663] [ 1976.530029][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.536609][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.330968][ T1685] FAULT_INJECTION: forcing a failure. [ 1977.330968][ T1685] name failslab, interval 1, probability 0, space 0, times 0 [ 1977.368067][ T1685] CPU: 0 PID: 1685 Comm: syz.2.8914 Not tainted syzkaller #0 [ 1977.375550][ T1685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1977.385686][ T1685] Call Trace: [ 1977.389049][ T1685] [ 1977.392202][ T1685] dump_stack_lvl+0x18c/0x250 [ 1977.396990][ T1685] ? show_regs_print_info+0x20/0x20 [ 1977.402275][ T1685] ? load_image+0x420/0x420 [ 1977.406893][ T1685] ? __might_sleep+0xe0/0xe0 [ 1977.411650][ T1685] ? __lock_acquire+0x7d40/0x7d40 [ 1977.416827][ T1685] should_fail_ex+0x39d/0x4d0 [ 1977.421671][ T1685] should_failslab+0x9/0x20 [ 1977.426321][ T1685] slab_pre_alloc_hook+0x59/0x310 [ 1977.431408][ T1685] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1977.437099][ T1685] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1977.442777][ T1685] __kmem_cache_alloc_node+0x53/0x250 [ 1977.448227][ T1685] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1977.453808][ T1685] __kmalloc+0xa4/0x230 [ 1977.458274][ T1685] bpf_prog_test_run_skb+0x238/0x12b0 [ 1977.463796][ T1685] ? __fget_files+0x28/0x4b0 [ 1977.468449][ T1685] ? __fget_files+0x28/0x4b0 [ 1977.473111][ T1685] ? __fget_files+0x43d/0x4b0 [ 1977.477961][ T1685] ? cpu_online+0x60/0x60 [ 1977.482342][ T1685] bpf_prog_test_run+0x321/0x390 [ 1977.487419][ T1685] __sys_bpf+0x49d/0x890 [ 1977.491708][ T1685] ? bpf_link_show_fdinfo+0x390/0x390 [ 1977.497174][ T1685] ? lock_chain_count+0x20/0x20 [ 1977.502093][ T1685] __x64_sys_bpf+0x7c/0x90 [ 1977.506550][ T1685] do_syscall_64+0x55/0xa0 [ 1977.510998][ T1685] ? clear_bhb_loop+0x40/0x90 [ 1977.515707][ T1685] ? clear_bhb_loop+0x40/0x90 [ 1977.520424][ T1685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1977.526353][ T1685] RIP: 0033:0x7f746739c819 [ 1977.530806][ T1685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1977.551426][ T1685] RSP: 002b:00007f7468310028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1977.559884][ T1685] RAX: ffffffffffffffda RBX: 00007f7467615fa0 RCX: 00007f746739c819 [ 1977.567887][ T1685] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1977.576066][ T1685] RBP: 00007f7468310090 R08: 0000000000000000 R09: 0000000000000000 [ 1977.584091][ T1685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1977.592213][ T1685] R13: 00007f7467616038 R14: 00007f7467615fa0 R15: 00007ffe1ae9e038 [ 1977.600371][ T1685] [ 1977.965726][ T1697] __nla_validate_parse: 4 callbacks suppressed [ 1977.965747][ T1697] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8909'. [ 1978.382318][ T1704] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.8912'. [ 1978.775831][ T1708] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8913'. [ 1979.104570][ T1712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8915'. [ 1980.112170][ T1727] syz.1.8920[1727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1980.112448][ T1727] syz.1.8920[1727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1980.509205][ T1730] validate_nla: 9 callbacks suppressed [ 1980.509231][ T1730] netlink: 'syz.0.8921': attribute type 2 has an invalid length. [ 1980.708438][ T1730] netlink: 'syz.0.8921': attribute type 8 has an invalid length. [ 1980.737956][ T1730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8921'. [ 1983.373081][ T1736] netlink: 'syz.3.8923': attribute type 1 has an invalid length. [ 1983.567745][ T1752] syz.1.8928: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1983.587110][ T1751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8929'. [ 1983.596534][ T1736] netlink: 59176 bytes leftover after parsing attributes in process `syz.3.8923'. [ 1983.801233][ T1736] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8923'. [ 1983.927511][ T1752] CPU: 0 PID: 1752 Comm: syz.1.8928 Not tainted syzkaller #0 [ 1983.935076][ T1752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1983.945197][ T1752] Call Trace: [ 1983.948537][ T1752] [ 1983.951528][ T1752] dump_stack_lvl+0x18c/0x250 [ 1983.956318][ T1752] ? show_regs_print_info+0x20/0x20 [ 1983.961590][ T1752] ? load_image+0x420/0x420 [ 1983.966207][ T1752] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1983.972845][ T1752] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1983.979535][ T1752] warn_alloc+0x246/0x340 [ 1983.984211][ T1752] ? stack_trace_save+0xaa/0x100 [ 1983.989243][ T1752] ? zone_watermark_ok_safe+0x230/0x230 [ 1983.994899][ T1752] ? kasan_set_track+0x5f/0x70 [ 1983.999730][ T1752] ? kasan_set_track+0x4e/0x70 [ 1984.004561][ T1752] ? __kasan_kmalloc+0x8f/0xa0 [ 1984.009397][ T1752] ? xsk_init_queue+0xad/0x100 [ 1984.014418][ T1752] ? xsk_setsockopt+0x4e5/0x760 [ 1984.019507][ T1752] ? do_sock_setsockopt+0x175/0x1a0 [ 1984.024776][ T1752] ? __x64_sys_setsockopt+0x182/0x200 [ 1984.030229][ T1752] __vmalloc_node_range+0x126/0x1330 [ 1984.035797][ T1752] ? free_vm_area+0x50/0x50 [ 1984.040415][ T1752] vmalloc_user+0x74/0x80 [ 1984.044827][ T1752] ? xskq_create+0xbf/0x170 [ 1984.049407][ T1752] xskq_create+0xbf/0x170 [ 1984.053928][ T1752] xsk_init_queue+0xad/0x100 [ 1984.058656][ T1752] xsk_setsockopt+0x4e5/0x760 [ 1984.063520][ T1752] ? xsk_poll+0x680/0x680 [ 1984.068123][ T1752] ? __fget_files+0x28/0x4b0 [ 1984.072873][ T1752] ? __fget_files+0x28/0x4b0 [ 1984.077546][ T1752] ? aa_sock_opt_perm+0x74/0x100 [ 1984.082566][ T1752] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1984.088184][ T1752] ? security_socket_setsockopt+0x7e/0xa0 [ 1984.093969][ T1752] ? xsk_poll+0x680/0x680 [ 1984.098471][ T1752] do_sock_setsockopt+0x175/0x1a0 [ 1984.103652][ T1752] ? __fdget+0x180/0x210 [ 1984.107979][ T1752] __x64_sys_setsockopt+0x182/0x200 [ 1984.113287][ T1752] do_syscall_64+0x55/0xa0 [ 1984.117768][ T1752] ? clear_bhb_loop+0x40/0x90 [ 1984.122512][ T1752] ? clear_bhb_loop+0x40/0x90 [ 1984.127272][ T1752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1984.133759][ T1752] RIP: 0033:0x7f039119c819 [ 1984.138244][ T1752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1984.157919][ T1752] RSP: 002b:00007f039201e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1984.166527][ T1752] RAX: ffffffffffffffda RBX: 00007f0391416090 RCX: 00007f039119c819 [ 1984.174578][ T1752] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1984.182615][ T1752] RBP: 00007f0391232c91 R08: 0000000000000004 R09: 0000000000000000 [ 1984.190748][ T1752] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1984.198955][ T1752] R13: 00007f0391416128 R14: 00007f0391416090 R15: 00007fff7383fea8 [ 1984.207157][ T1752] [ 1984.949741][ T1752] Mem-Info: [ 1984.953344][ T1752] active_anon:12037 inactive_anon:0 isolated_anon:0 [ 1984.953344][ T1752] active_file:19477 inactive_file:40683 isolated_file:0 [ 1984.953344][ T1752] unevictable:768 dirty:170 writeback:0 [ 1984.953344][ T1752] slab_reclaimable:12086 slab_unreclaimable:98223 [ 1984.953344][ T1752] mapped:30119 shmem:1361 pagetables:571 [ 1984.953344][ T1752] sec_pagetables:0 bounce:0 [ 1984.953344][ T1752] kernel_misc_reclaimable:0 [ 1984.953344][ T1752] free:1311053 free_pcp:11198 free_cma:0 [ 1985.953715][ T1752] Node 0 active_anon:48168kB inactive_anon:0kB active_file:77908kB inactive_file:162532kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120744kB dirty:688kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10652kB pagetables:2340kB sec_pagetables:0kB all_unreclaimable? no [ 1986.027303][ T1752] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1986.147163][ T1752] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1986.244307][ T1752] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1986.362275][ T1752] Node 0 DMA32 free:1340868kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:48024kB inactive_anon:0kB active_file:77908kB inactive_file:161708kB unevictable:1536kB writepending:684kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:24256kB local_pcp:12908kB free_cma:0kB [ 1986.534936][ T1752] lowmem_reserve[]: 0 0 0 0 0 [ 1987.537714][ T1752] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1987.681803][ T1752] lowmem_reserve[]: 0 0 0 0 0 [ 1987.767191][ T1752] Node 1 Normal free:3887984kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20208kB local_pcp:11432kB free_cma:0kB [ 1987.849698][ T1752] lowmem_reserve[]: 0 0 0 0 0 [ 1987.862063][ T1752] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1987.894996][ T1752] Node 0 DMA32: 491*4kB (ME) 873*8kB (ME) 1067*16kB (UME) 921*32kB (UM) 1419*64kB (UME) 787*128kB (UME) 275*256kB (UM) 99*512kB (UME) 40*1024kB (UME) 15*2048kB (UM) 220*4096kB (UM) = 1340932kB [ 1987.939475][ T1752] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1987.966399][ T1752] Node 1 Normal: 206*4kB (UM) 49*8kB (UME) 25*16kB (UME) 51*32kB (UME) 17*64kB (UME) 7*128kB (UM) 1*256kB (M) 1*512kB (U) 1*1024kB (U) 1*2048kB (U) 947*4096kB (ME) = 3887984kB [ 1987.994940][ T1752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1988.005627][ T1752] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1988.024261][ T1752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1988.071537][ T1752] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1988.086960][ T1752] 61521 total pagecache pages [ 1988.115428][ T1752] 0 pages in swap cache [ 1988.135192][ T1752] Free swap = 124380kB [ 1988.146446][ T1752] Total swap = 124996kB [ 1988.155339][ T1752] 2097051 pages RAM [ 1988.167724][ T1752] 0 pages HighMem/MovableOnly [ 1988.182622][ T1752] 416927 pages reserved [ 1988.194844][ T1752] 0 pages cma reserved [ 1988.582882][ T1777] netlink: 'syz.1.8935': attribute type 2 has an invalid length. [ 1988.593590][ T1777] netlink: 'syz.1.8935': attribute type 8 has an invalid length. [ 1988.608882][ T1777] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8935'. [ 1989.795750][ T6678] tipc: Subscription rejected, illegal request [ 1989.811860][T25944] tipc: Subscription rejected, illegal request [ 1989.864335][ T1783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8938'. [ 1989.991615][ T1785] netlink: 'syz.1.8939': attribute type 10 has an invalid length. [ 1990.292881][ T1785] team0: Device wg1 is of different type [ 1990.558646][ T1792] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.8941'. [ 1990.645216][ T1798] netlink: 'syz.1.8944': attribute type 6 has an invalid length. [ 1990.673720][ T1798] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8944'. [ 1991.344967][ T1799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8941'. [ 1991.546148][ T1811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8946'. [ 1991.598782][ T1813] netlink: 'syz.2.8947': attribute type 29 has an invalid length. [ 1991.607408][ T1813] netlink: 'syz.2.8947': attribute type 29 has an invalid length. [ 1991.616367][ T1809] netlink: 'syz.2.8947': attribute type 29 has an invalid length. [ 1991.658483][ T1813] netlink: 'syz.2.8947': attribute type 29 has an invalid length. [ 1992.361101][ T6461] tipc: Subscription rejected, illegal request [ 1992.689493][ T6461] tipc: Subscription rejected, illegal request [ 1993.373912][ T1850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8960'. [ 1993.436361][ T6678] tipc: Subscription rejected, illegal request [ 1994.259880][ T6678] tipc: Subscription rejected, illegal request [ 1994.289746][ T1874] netlink: 'syz.0.8972': attribute type 10 has an invalid length. [ 1994.523301][ T1874] team0: Device wg1 is of different type [ 1994.561430][ T6461] tipc: Subscription rejected, illegal request [ 1995.814104][T25944] tipc: Subscription rejected, illegal request [ 1995.869231][T25944] tipc: Subscription rejected, illegal request [ 1996.210884][ T1925] FAULT_INJECTION: forcing a failure. [ 1996.210884][ T1925] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.224298][ T1925] CPU: 0 PID: 1925 Comm: syz.1.8991 Not tainted syzkaller #0 [ 1996.231742][ T1925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1996.241924][ T1925] Call Trace: [ 1996.245226][ T1925] [ 1996.248178][ T1925] dump_stack_lvl+0x18c/0x250 [ 1996.252899][ T1925] ? show_regs_print_info+0x20/0x20 [ 1996.258118][ T1925] ? load_image+0x420/0x420 [ 1996.262659][ T1925] should_fail_ex+0x39d/0x4d0 [ 1996.267480][ T1925] should_failslab+0x9/0x20 [ 1996.272008][ T1925] slab_pre_alloc_hook+0x59/0x310 [ 1996.277070][ T1925] kmem_cache_alloc_node+0x60/0x320 [ 1996.282408][ T1925] ? __alloc_skb+0x103/0x2c0 [ 1996.287052][ T1925] __alloc_skb+0x103/0x2c0 [ 1996.291513][ T1925] fdb_notify+0xa6/0x160 [ 1996.295793][ T1925] fdb_delete+0xdd6/0x1060 [ 1996.300420][ T1925] ? fdb_delete+0x33a/0x1060 [ 1996.305176][ T1925] ? fdb_notify+0x160/0x160 [ 1996.309744][ T1925] ? br_fdb_delete_by_port+0x3b/0x310 [ 1996.315243][ T1925] br_fdb_delete_by_port+0x15f/0x310 [ 1996.320565][ T1925] br_setport+0xdc7/0x1680 [ 1996.325010][ T1925] ? br_setlink+0x8b0/0x8b0 [ 1996.329706][ T1925] ? __rwlock_init+0x150/0x150 [ 1996.334497][ T1925] ? br_setlink+0x51d/0x8b0 [ 1996.339028][ T1925] br_setlink+0x52f/0x8b0 [ 1996.343378][ T1925] ? br_vlan_info+0x460/0x460 [ 1996.348105][ T1925] ? trace_contention_end+0x39/0xe0 [ 1996.353417][ T1925] ? __mutex_lock+0x315/0xcc0 [ 1996.358202][ T1925] ? mutex_is_locked+0x12/0x40 [ 1996.362993][ T1925] rtnl_bridge_setlink+0x5b7/0x7d0 [ 1996.368130][ T1925] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 1996.373609][ T1925] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1996.378739][ T1925] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1996.383868][ T1925] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 1996.389232][ T1925] rtnetlink_rcv_msg+0x869/0xfa0 [ 1996.394297][ T1925] ? rtnetlink_bind+0x80/0x80 [ 1996.399254][ T1925] ? mark_lock+0x94/0x320 [ 1996.403604][ T1925] ? __lock_acquire+0x1273/0x7d40 [ 1996.408653][ T1925] ? __kernel_text_address+0xd/0x30 [ 1996.413875][ T1925] ? mark_lock+0x94/0x320 [ 1996.418771][ T1925] ? mark_lock+0x94/0x320 [ 1996.423124][ T1925] ? __lock_acquire+0x1273/0x7d40 [ 1996.428234][ T1925] ? kmalloc_reserve+0x95/0x240 [ 1996.433140][ T1925] ? verify_lock_unused+0x140/0x140 [ 1996.438579][ T1925] ? verify_lock_unused+0x140/0x140 [ 1996.443933][ T1925] netlink_rcv_skb+0x241/0x4d0 [ 1996.448744][ T1925] ? rtnetlink_bind+0x80/0x80 [ 1996.453584][ T1925] ? netlink_ack+0x1180/0x1180 [ 1996.458385][ T1925] ? __lock_acquire+0x7d40/0x7d40 [ 1996.463437][ T1925] ? net_generic+0x1e/0x240 [ 1996.468055][ T1925] ? netlink_deliver_tap+0x2e/0x1b0 [ 1996.473276][ T1925] netlink_unicast+0x751/0x8d0 [ 1996.478081][ T1925] netlink_sendmsg+0x8d0/0xbf0 [ 1996.482872][ T1925] ? netlink_getsockopt+0x590/0x590 [ 1996.488096][ T1925] ? aa_sock_msg_perm+0x94/0x150 [ 1996.493054][ T1925] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1996.498359][ T1925] ? security_socket_sendmsg+0x80/0xa0 [ 1996.504017][ T1925] ? netlink_getsockopt+0x590/0x590 [ 1996.509242][ T1925] ____sys_sendmsg+0x5ba/0x960 [ 1996.514035][ T1925] ? __asan_memset+0x22/0x40 [ 1996.518649][ T1925] ? __sys_sendmsg_sock+0x30/0x30 [ 1996.523690][ T1925] ? __import_iovec+0x5f2/0x850 [ 1996.528569][ T1925] ? import_iovec+0x73/0xa0 [ 1996.533178][ T1925] ___sys_sendmsg+0x2a6/0x360 [ 1996.538104][ T1925] ? get_pid_task+0x20/0x1e0 [ 1996.542763][ T1925] ? __sys_sendmsg+0x2a0/0x2a0 [ 1996.547599][ T1925] ? __lock_acquire+0x7d40/0x7d40 [ 1996.552674][ T1925] __se_sys_sendmsg+0x1c2/0x2b0 [ 1996.557637][ T1925] ? __x64_sys_sendmsg+0x80/0x80 [ 1996.562619][ T1925] ? lockdep_hardirqs_on+0x98/0x150 [ 1996.567950][ T1925] do_syscall_64+0x55/0xa0 [ 1996.572424][ T1925] ? clear_bhb_loop+0x40/0x90 [ 1996.577407][ T1925] ? clear_bhb_loop+0x40/0x90 [ 1996.582205][ T1925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1996.588275][ T1925] RIP: 0033:0x7f039119c819 [ 1996.592720][ T1925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1996.612539][ T1925] RSP: 002b:00007f039203f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1996.621282][ T1925] RAX: ffffffffffffffda RBX: 00007f0391415fa0 RCX: 00007f039119c819 [ 1996.629399][ T1925] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1996.637418][ T1925] RBP: 00007f039203f090 R08: 0000000000000000 R09: 0000000000000000 [ 1996.645401][ T1925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1996.653403][ T1925] R13: 00007f0391416038 R14: 00007f0391415fa0 R15: 00007fff7383fea8 [ 1996.661514][ T1925] [ 1997.278815][T21563] tipc: Subscription rejected, illegal request [ 1997.511532][ T1952] netlink: 'syz.3.8997': attribute type 1 has an invalid length. [ 1997.547135][ T1952] netlink: 'syz.3.8997': attribute type 2 has an invalid length. [ 1997.594288][ T1952] netlink: 'syz.3.8997': attribute type 2 has an invalid length. [ 1997.604746][ T1952] netlink: 'syz.3.8997': attribute type 3 has an invalid length. [ 1997.612893][ T1952] netlink: 'syz.3.8997': attribute type 4 has an invalid length. [ 1997.620949][ T1952] netlink: 'syz.3.8997': attribute type 5 has an invalid length. [ 1997.628915][ T1952] netlink: 'syz.3.8997': attribute type 6 has an invalid length. [ 1997.637332][ T1952] netlink: 'syz.3.8997': attribute type 7 has an invalid length. [ 1997.646733][ T1952] netlink: 'syz.3.8997': attribute type 9 has an invalid length. [ 1997.655160][ T1952] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.8997'. [ 1997.889284][ T1959] mac80211_hwsim hwsim59 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1997.926007][ T1959] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.9002'. [ 1997.987316][ T1959] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9002'. [ 1998.474322][ T1961] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.9003'. [ 1998.589359][ T1961] netlink: 22828 bytes leftover after parsing attributes in process `syz.1.9003'. [ 1999.027444][ T1983] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.9008'. [ 1999.285443][T21563] tipc: Subscription rejected, illegal request [ 2000.063475][ T1989] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9008'. [ 2002.072579][ T2030] validate_nla: 5 callbacks suppressed [ 2002.072600][ T2030] netlink: 'syz.0.9026': attribute type 6 has an invalid length. [ 2002.088642][ T2023] syz.3.9024: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2002.129976][ T2023] CPU: 0 PID: 2023 Comm: syz.3.9024 Not tainted syzkaller #0 [ 2002.131695][ T2030] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9026'. [ 2002.137499][ T2023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2002.137567][ T2023] Call Trace: [ 2002.137578][ T2023] [ 2002.137588][ T2023] dump_stack_lvl+0x18c/0x250 [ 2002.137625][ T2023] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2002.137657][ T2023] ? show_regs_print_info+0x20/0x20 [ 2002.137686][ T2023] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2002.137719][ T2023] ? dump_stack+0x9/0x20 [ 2002.137757][ T2023] warn_alloc+0x246/0x340 [ 2002.194862][ T2023] ? zone_watermark_ok_safe+0x230/0x230 [ 2002.200478][ T2023] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2002.206242][ T2023] __vmalloc_node_range+0x126/0x1330 [ 2002.211571][ T2023] ? mark_lock+0x94/0x320 [ 2002.215930][ T2023] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2002.222024][ T2023] ? lock_chain_count+0x20/0x20 [ 2002.226894][ T2023] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2002.233091][ T2023] ? lockdep_hardirqs_on+0x98/0x150 [ 2002.238313][ T2023] ? free_vm_area+0x50/0x50 [ 2002.242839][ T2023] ? vmalloc_user+0xd/0x80 [ 2002.247280][ T2023] vmalloc_user+0x74/0x80 [ 2002.251632][ T2023] ? xskq_create+0xbf/0x170 [ 2002.256225][ T2023] xskq_create+0xbf/0x170 [ 2002.260582][ T2023] xsk_init_queue+0xad/0x100 [ 2002.265343][ T2023] xsk_setsockopt+0x4e5/0x760 [ 2002.270127][ T2023] ? xsk_poll+0x680/0x680 [ 2002.274482][ T2023] ? security_socket_setsockopt+0x44/0xa0 [ 2002.280224][ T2023] ? security_socket_setsockopt+0x7e/0xa0 [ 2002.286043][ T2023] ? xsk_poll+0x680/0x680 [ 2002.290392][ T2023] do_sock_setsockopt+0x175/0x1a0 [ 2002.295433][ T2023] ? __fdget+0x180/0x210 [ 2002.299714][ T2023] __x64_sys_setsockopt+0x182/0x200 [ 2002.304933][ T2023] do_syscall_64+0x55/0xa0 [ 2002.309378][ T2023] ? clear_bhb_loop+0x40/0x90 [ 2002.314070][ T2023] ? clear_bhb_loop+0x40/0x90 [ 2002.318851][ T2023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2002.324774][ T2023] RIP: 0033:0x7f4bee99c819 [ 2002.329222][ T2023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2002.348933][ T2023] RSP: 002b:00007f4bef88c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2002.357578][ T2023] RAX: ffffffffffffffda RBX: 00007f4beec15fa0 RCX: 00007f4bee99c819 [ 2002.365748][ T2023] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 2002.373745][ T2023] RBP: 00007f4beea32c91 R08: 0000000000000004 R09: 0000000000000000 [ 2002.381926][ T2023] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 2002.389938][ T2023] R13: 00007f4beec16038 R14: 00007f4beec15fa0 R15: 00007ffffcd11fc8 [ 2002.398036][ T2023] [ 2002.507244][ T2023] Mem-Info: [ 2002.521201][ T2023] active_anon:23922 inactive_anon:0 isolated_anon:0 [ 2002.521201][ T2023] active_file:19477 inactive_file:40689 isolated_file:0 [ 2002.521201][ T2023] unevictable:768 dirty:284 writeback:0 [ 2002.521201][ T2023] slab_reclaimable:12156 slab_unreclaimable:97587 [ 2002.521201][ T2023] mapped:30130 shmem:13199 pagetables:573 [ 2002.521201][ T2023] sec_pagetables:0 bounce:0 [ 2002.521201][ T2023] kernel_misc_reclaimable:0 [ 2002.521201][ T2023] free:1295664 free_pcp:14821 free_cma:0 [ 2002.711975][ T2023] Node 0 active_anon:90388kB inactive_anon:0kB active_file:77908kB inactive_file:162556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120520kB dirty:1136kB writeback:0kB shmem:45960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10716kB pagetables:2392kB sec_pagetables:0kB all_unreclaimable? no [ 2002.838629][ T2023] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2002.904471][ T2023] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2003.131721][ T2023] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2003.167254][ T2023] Node 0 DMA32 free:1292412kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:85748kB inactive_anon:0kB active_file:77908kB inactive_file:161732kB unevictable:1536kB writepending:1136kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:35876kB local_pcp:14924kB free_cma:0kB [ 2003.311912][ T2023] lowmem_reserve[]: 0 0 0 0 0 [ 2003.316760][ T2023] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2003.422678][ T2023] lowmem_reserve[]: 0 0 0 0 0 [ 2003.476292][ T2023] Node 1 Normal free:3887984kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20208kB local_pcp:11432kB free_cma:0kB [ 2003.597139][ T2023] lowmem_reserve[]: 0 0 0 0 0 [ 2003.602077][ T2023] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2003.707557][ T2023] Node 0 DMA32: 1575*4kB (UME) 1114*8kB (UME) 807*16kB (UME) 1006*32kB (UME) 1179*64kB (UME) 790*128kB (UME) 274*256kB (UM) 98*512kB (UME) 41*1024kB (UME) 15*2048kB (UM) 220*4096kB (UM) = 1331036kB [ 2003.759642][ T2023] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2003.786700][ T2023] Node 1 Normal: 206*4kB (UM) 49*8kB (UME) 25*16kB (UME) 51*32kB (UME) 17*64kB (UME) 7*128kB (UM) 1*256kB (M) 1*512kB (U) 1*1024kB (U) 1*2048kB (U) 947*4096kB (ME) = 3887984kB [ 2003.967238][ T2023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2004.027095][ T2023] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2004.070580][ T2023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2004.195922][ T2023] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2004.237142][ T2023] 68004 total pagecache pages [ 2004.277240][ T2023] 0 pages in swap cache [ 2004.281493][ T2023] Free swap = 124380kB [ 2004.296347][ T2023] Total swap = 124996kB [ 2004.306548][ T2023] 2097051 pages RAM [ 2004.316738][ T2023] 0 pages HighMem/MovableOnly [ 2004.326939][ T2023] 416927 pages reserved [ 2004.341970][ T2023] 0 pages cma reserved [ 2005.273615][ T2088] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.9047'. [ 2005.747691][ T2096] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9047'. [ 2006.000731][T25944] tipc: Subscription rejected, illegal request [ 2007.304118][ T2107] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.9051'. [ 2007.363636][ T2107] netlink: 21096 bytes leftover after parsing attributes in process `syz.1.9051'. [ 2007.448030][ T2107] tipc: Started in network mode [ 2007.490842][ T2107] tipc: Node identity 1a, cluster identity 4711 [ 2007.527266][ T2107] tipc: Node number set to 26 [ 2008.094342][ T2126] netlink: 'syz.3.9058': attribute type 10 has an invalid length. [ 2008.224531][ T2126] 8021q: adding VLAN 0 to HW filter on device team0 [ 2008.256633][ T2126] bond0: (slave team0): Enslaving as an active interface with an up link [ 2009.151249][ T6678] tipc: Subscription rejected, illegal request [ 2010.833087][ T2166] netlink: 'syz.0.9070': attribute type 4 has an invalid length. [ 2010.884328][ T2166] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9070'. [ 2011.078114][ T2166] .`: renamed from bond0 (while UP) [ 2011.234030][ T2170] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9070'. [ 2011.630619][ T2176] netlink: 'syz.1.9073': attribute type 21 has an invalid length. [ 2011.647305][ T2176] netlink: 'syz.1.9073': attribute type 1 has an invalid length. [ 2011.656353][ T2176] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9073'. [ 2012.380766][ T6678] tipc: Subscription rejected, illegal request [ 2012.613207][ T2189] netlink: 'syz.1.9077': attribute type 9 has an invalid length. [ 2012.995660][ T2195] netlink: 763 bytes leftover after parsing attributes in process `syz.0.9080'. [ 2014.260074][ T2205] €Â0: renamed from batadv_slave_1 (while UP) [ 2014.352100][ T2206] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9083'. [ 2014.403004][ T2205] netlink: 'syz.0.9091': attribute type 39 has an invalid length. [ 2015.360236][ T6461] tipc: Subscription rejected, illegal request [ 2015.516706][ T2226] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9087'. [ 2015.587597][ T2226] bridge_slave_1: default FDB implementation only supports local addresses [ 2016.282968][ T2239] FAULT_INJECTION: forcing a failure. [ 2016.282968][ T2239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2016.402998][ T2239] CPU: 1 PID: 2239 Comm: syz.1.9094 Not tainted syzkaller #0 [ 2016.410501][ T2239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2016.420606][ T2239] Call Trace: [ 2016.423927][ T2239] [ 2016.426995][ T2239] dump_stack_lvl+0x18c/0x250 [ 2016.431738][ T2239] ? show_regs_print_info+0x20/0x20 [ 2016.437100][ T2239] ? load_image+0x420/0x420 [ 2016.441668][ T2239] ? __lock_acquire+0x7d40/0x7d40 [ 2016.446745][ T2239] ? snprintf+0xe9/0x140 [ 2016.451086][ T2239] should_fail_ex+0x39d/0x4d0 [ 2016.455925][ T2239] _copy_to_user+0x2f/0xa0 [ 2016.460583][ T2239] simple_read_from_buffer+0xe7/0x150 [ 2016.466114][ T2239] proc_fail_nth_read+0x1e8/0x260 [ 2016.471217][ T2239] ? proc_fault_inject_write+0x360/0x360 [ 2016.476971][ T2239] ? fsnotify_perm+0x271/0x5e0 [ 2016.481789][ T2239] ? proc_fault_inject_write+0x360/0x360 [ 2016.487475][ T2239] vfs_read+0x28b/0x970 [ 2016.491699][ T2239] ? kernel_read+0x1e0/0x1e0 [ 2016.496345][ T2239] ? __fget_files+0x28/0x4b0 [ 2016.501062][ T2239] ? __fget_files+0x28/0x4b0 [ 2016.505713][ T2239] ? __fget_files+0x43d/0x4b0 [ 2016.510471][ T2239] ? __fdget_pos+0x2a3/0x330 [ 2016.515121][ T2239] ? ksys_read+0x75/0x260 [ 2016.519519][ T2239] ksys_read+0x150/0x260 [ 2016.523827][ T2239] ? vfs_write+0x990/0x990 [ 2016.528318][ T2239] ? lockdep_hardirqs_on+0x98/0x150 [ 2016.533575][ T2239] do_syscall_64+0x55/0xa0 [ 2016.538038][ T2239] ? clear_bhb_loop+0x40/0x90 [ 2016.542774][ T2239] ? clear_bhb_loop+0x40/0x90 [ 2016.547516][ T2239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2016.553480][ T2239] RIP: 0033:0x7f039115d04e [ 2016.557957][ T2239] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2016.577672][ T2239] RSP: 002b:00007f039203efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2016.586152][ T2239] RAX: ffffffffffffffda RBX: 00007f039203f6c0 RCX: 00007f039115d04e [ 2016.594180][ T2239] RDX: 000000000000000f RSI: 00007f039203f0a0 RDI: 0000000000000008 [ 2016.602295][ T2239] RBP: 00007f039203f090 R08: 0000000000000000 R09: 0000000000000000 [ 2016.610407][ T2239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2016.618511][ T2239] R13: 00007f0391416038 R14: 00007f0391415fa0 R15: 00007fff7383fea8 [ 2016.626638][ T2239] [ 2017.104208][ T2245] FAULT_INJECTION: forcing a failure. [ 2017.104208][ T2245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2017.153672][ T2245] CPU: 0 PID: 2245 Comm: syz.0.9096 Not tainted syzkaller #0 [ 2017.161240][ T2245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2017.171431][ T2245] Call Trace: [ 2017.174760][ T2245] [ 2017.177747][ T2245] dump_stack_lvl+0x18c/0x250 [ 2017.182574][ T2245] ? show_regs_print_info+0x20/0x20 [ 2017.187822][ T2245] ? load_image+0x420/0x420 [ 2017.192391][ T2245] ? __lock_acquire+0x7d40/0x7d40 [ 2017.197474][ T2245] ? snprintf+0xe9/0x140 [ 2017.201856][ T2245] should_fail_ex+0x39d/0x4d0 [ 2017.206685][ T2245] _copy_to_user+0x2f/0xa0 [ 2017.211163][ T2245] simple_read_from_buffer+0xe7/0x150 [ 2017.216610][ T2245] proc_fail_nth_read+0x1e8/0x260 [ 2017.221698][ T2245] ? proc_fault_inject_write+0x360/0x360 [ 2017.227478][ T2245] ? fsnotify_perm+0x271/0x5e0 [ 2017.232299][ T2245] ? proc_fault_inject_write+0x360/0x360 [ 2017.237990][ T2245] vfs_read+0x28b/0x970 [ 2017.242242][ T2245] ? kernel_read+0x1e0/0x1e0 [ 2017.246988][ T2245] ? __fget_files+0x28/0x4b0 [ 2017.251634][ T2245] ? __fget_files+0x28/0x4b0 [ 2017.256386][ T2245] ? __fget_files+0x43d/0x4b0 [ 2017.261261][ T2245] ? __fdget_pos+0x2a3/0x330 [ 2017.266182][ T2245] ? ksys_read+0x75/0x260 [ 2017.270573][ T2245] ksys_read+0x150/0x260 [ 2017.274872][ T2245] ? vfs_write+0x990/0x990 [ 2017.279376][ T2245] ? lockdep_hardirqs_on+0x98/0x150 [ 2017.284628][ T2245] do_syscall_64+0x55/0xa0 [ 2017.289423][ T2245] ? clear_bhb_loop+0x40/0x90 [ 2017.294213][ T2245] ? clear_bhb_loop+0x40/0x90 [ 2017.298918][ T2245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2017.304921][ T2245] RIP: 0033:0x7f15d6d5d04e [ 2017.309451][ T2245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2017.329124][ T2245] RSP: 002b:00007f15d7cf6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2017.337625][ T2245] RAX: ffffffffffffffda RBX: 00007f15d7cf76c0 RCX: 00007f15d6d5d04e [ 2017.345614][ T2245] RDX: 000000000000000f RSI: 00007f15d7cf70a0 RDI: 0000000000000006 [ 2017.353616][ T2245] RBP: 00007f15d7cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 2017.361621][ T2245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2017.369951][ T2245] R13: 00007f15d7016038 R14: 00007f15d7015fa0 R15: 00007fffe4e21f48 [ 2017.378045][ T2245] [ 2017.911904][ T2255] netlink: 'syz.3.9098': attribute type 4 has an invalid length. [ 2017.953316][ T2255] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9098'. [ 2018.907761][ T2255] .`: renamed from bond0 (while UP) [ 2019.609019][ T2261] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9098'. [ 2019.784569][ T2272] netlink: 'syz.1.9101': attribute type 2 has an invalid length. [ 2019.868587][ T2272] netlink: 'syz.1.9101': attribute type 8 has an invalid length. [ 2019.878747][ T2272] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9101'. [ 2020.525271][ T6678] tipc: Subscription rejected, illegal request [ 2020.615468][ T2285] netlink: 'syz.3.9114': attribute type 2 has an invalid length. [ 2020.707378][ T2285] netlink: 'syz.3.9114': attribute type 8 has an invalid length. [ 2020.812549][ T2285] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9114'. [ 2021.648289][ T2303] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9109'. [ 2022.409133][ T2309] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9113'. [ 2022.687779][ T2313] netlink: 'syz.3.9112': attribute type 2 has an invalid length. [ 2022.717133][ T2313] netlink: 'syz.3.9112': attribute type 8 has an invalid length. [ 2022.725474][ T2313] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9112'. [ 2022.767367][ T2312] netlink: 'syz.2.9115': attribute type 10 has an invalid length. [ 2022.823549][ T2312] team0: Device ipvlan1 failed to register rx_handler [ 2023.971962][ T2329] netlink: 'syz.0.9120': attribute type 9 has an invalid length. [ 2024.997227][ T2347] netlink: 'syz.2.9124': attribute type 2 has an invalid length. [ 2025.005025][ T2347] netlink: 'syz.2.9124': attribute type 8 has an invalid length. [ 2025.042688][ T2347] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9124'. [ 2025.488796][ T2351] netlink: 'syz.0.9126': attribute type 2 has an invalid length. [ 2025.517177][ T2351] netlink: 'syz.0.9126': attribute type 8 has an invalid length. [ 2025.556513][ T2351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9126'. [ 2026.011669][ T2363] netlink: 'syz.2.9132': attribute type 4 has an invalid length. [ 2026.039049][ T2363] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9132'. [ 2026.079836][ T2365] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9129'. [ 2026.442491][ T2368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9133'. [ 2028.024554][ T6678] tipc: Subscription rejected, illegal request [ 2028.039938][ T2399] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9142'. [ 2028.072687][ T2399] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9142'. [ 2028.306709][ T2405] netlink: 'syz.2.9143': attribute type 9 has an invalid length. [ 2028.534088][ T2412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9146'. [ 2028.731447][ T2454] netlink: 'syz.1.9150': attribute type 29 has an invalid length. [ 2028.740275][ T2454] netlink: 'syz.1.9150': attribute type 29 has an invalid length. [ 2028.761620][ T2475] FAULT_INJECTION: forcing a failure. [ 2028.761620][ T2475] name failslab, interval 1, probability 0, space 0, times 0 [ 2028.786468][ T2475] CPU: 0 PID: 2475 Comm: syz.2.9149 Not tainted syzkaller #0 [ 2028.794025][ T2475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2028.804302][ T2475] Call Trace: [ 2028.807603][ T2475] [ 2028.810557][ T2475] dump_stack_lvl+0x18c/0x250 [ 2028.815280][ T2475] ? show_regs_print_info+0x20/0x20 [ 2028.820498][ T2475] ? load_image+0x420/0x420 [ 2028.825023][ T2475] ? verify_lock_unused+0x140/0x140 [ 2028.830249][ T2475] should_fail_ex+0x39d/0x4d0 [ 2028.834955][ T2475] should_failslab+0x9/0x20 [ 2028.839565][ T2475] slab_pre_alloc_hook+0x59/0x310 [ 2028.844711][ T2475] kmem_cache_alloc+0x5a/0x2d0 [ 2028.849594][ T2475] ? skb_clone+0x1eb/0x370 [ 2028.854032][ T2475] skb_clone+0x1eb/0x370 [ 2028.858298][ T2475] __netlink_deliver_tap+0x41c/0x830 [ 2028.863634][ T2475] ? netlink_deliver_tap+0x2e/0x1b0 [ 2028.868942][ T2475] netlink_deliver_tap+0x19c/0x1b0 [ 2028.874080][ T2475] netlink_unicast+0x72c/0x8d0 [ 2028.878871][ T2475] netlink_sendmsg+0x8d0/0xbf0 [ 2028.883755][ T2475] ? netlink_getsockopt+0x590/0x590 [ 2028.888980][ T2475] ? aa_sock_msg_perm+0x94/0x150 [ 2028.893936][ T2475] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2028.899253][ T2475] ? security_socket_sendmsg+0x80/0xa0 [ 2028.904743][ T2475] ? netlink_getsockopt+0x590/0x590 [ 2028.909967][ T2475] ____sys_sendmsg+0x5ba/0x960 [ 2028.914807][ T2475] ? __asan_memset+0x22/0x40 [ 2028.919527][ T2475] ? __sys_sendmsg_sock+0x30/0x30 [ 2028.924763][ T2475] ? __import_iovec+0x5f2/0x850 [ 2028.929767][ T2475] ? import_iovec+0x73/0xa0 [ 2028.934294][ T2475] ___sys_sendmsg+0x2a6/0x360 [ 2028.939019][ T2475] ? get_pid_task+0x20/0x1e0 [ 2028.943731][ T2475] ? __sys_sendmsg+0x2a0/0x2a0 [ 2028.948533][ T2475] ? __lock_acquire+0x7d40/0x7d40 [ 2028.953596][ T2475] __se_sys_sendmsg+0x1c2/0x2b0 [ 2028.958474][ T2475] ? __x64_sys_sendmsg+0x80/0x80 [ 2028.963470][ T2475] ? lockdep_hardirqs_on+0x98/0x150 [ 2028.968734][ T2475] do_syscall_64+0x55/0xa0 [ 2028.973179][ T2475] ? clear_bhb_loop+0x40/0x90 [ 2028.977882][ T2475] ? clear_bhb_loop+0x40/0x90 [ 2028.982583][ T2475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2028.988497][ T2475] RIP: 0033:0x7f746739c819 [ 2028.992935][ T2475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2029.012649][ T2475] RSP: 002b:00007f7468310028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2029.021085][ T2475] RAX: ffffffffffffffda RBX: 00007f7467615fa0 RCX: 00007f746739c819 [ 2029.029165][ T2475] RDX: 0000000000000044 RSI: 0000200000000000 RDI: 0000000000000003 [ 2029.037241][ T2475] RBP: 00007f7468310090 R08: 0000000000000000 R09: 0000000000000000 [ 2029.045227][ T2475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2029.053216][ T2475] R13: 00007f7467616038 R14: 00007f7467615fa0 R15: 00007ffe1ae9e038 [ 2029.061216][ T2475] [ 2029.127183][ T2475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9149'. [ 2029.449581][ T2557] netlink: 'syz.0.9153': attribute type 2 has an invalid length. [ 2029.459961][ T2557] netlink: 'syz.0.9153': attribute type 8 has an invalid length. [ 2029.469703][ T2557] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9153'. [ 2029.586072][ T6678] tipc: Subscription rejected, illegal request [ 2029.863985][T25944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.988714][T25944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.158773][T25944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.898992][ T2575] netlink: 'syz.1.9159': attribute type 10 has an invalid length. [ 2030.926463][ T2575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9159'. [ 2031.000310][ T2575] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 2031.125677][ T2575] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2031.270594][ T2575] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 2031.530824][T25944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.611515][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2031.621792][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2031.636472][ T2590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9161'. [ 2031.672457][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2031.761952][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2031.770130][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2031.783731][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2033.273549][ T2612] netlink: 'syz.0.9165': attribute type 2 has an invalid length. [ 2033.299735][ T2612] netlink: 'syz.0.9165': attribute type 8 has an invalid length. [ 2033.333565][ T2612] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9165'. [ 2033.887479][ T5779] Bluetooth: hci3: command tx timeout [ 2034.209900][ T2588] chnl_net:caif_netlink_parms(): no params data found [ 2035.535822][ T2662] netlink: 'syz.1.9172': attribute type 10 has an invalid length. [ 2035.614972][ T2662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9172'. [ 2035.974733][ T5779] Bluetooth: hci3: command tx timeout [ 2036.143797][ T2683] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2036.150947][ T2683] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2036.751061][ T2588] bridge0: port 1(bridge_slave_0) entered blocking state [ 2036.817449][ T2588] bridge0: port 1(bridge_slave_0) entered disabled state [ 2036.829601][ T2588] bridge_slave_0: entered allmulticast mode [ 2036.882647][ T2588] bridge_slave_0: entered promiscuous mode [ 2037.103572][ T2588] bridge0: port 2(bridge_slave_1) entered blocking state [ 2037.123879][ T2588] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.131423][ T2588] bridge_slave_1: entered allmulticast mode [ 2037.139215][ T2588] bridge_slave_1: entered promiscuous mode [ 2037.210003][ T2588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2037.247692][ T2588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2037.457864][T11334] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 2037.976911][ T2588] team0: Port device team_slave_0 added [ 2038.038428][ T2588] team0: Port device team_slave_1 added [ 2038.163250][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.169922][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.183721][ T2588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2038.207680][ T5779] Bluetooth: hci3: command tx timeout [ 2038.224676][ T2588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2038.375130][ T2588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2038.773483][T25944] hsr_slave_0: left promiscuous mode [ 2038.786211][T25944] hsr_slave_1: left promiscuous mode [ 2038.899063][T25944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2038.913411][T25944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2038.923157][T25944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2038.945020][T25944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2038.961516][T25944] bridge_slave_1: left allmulticast mode [ 2038.986727][T25944] bridge_slave_1: left promiscuous mode [ 2039.009289][T25944] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.071061][T25944] bridge_slave_0: left allmulticast mode [ 2039.076822][T25944] bridge_slave_0: left promiscuous mode [ 2039.102342][T25944] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.180939][T25944] veth1_macvtap: left promiscuous mode [ 2039.200914][T25944] veth0_macvtap: left promiscuous mode [ 2039.206741][T25944] veth1_vlan: left promiscuous mode [ 2039.234795][T25944] veth0_vlan: left promiscuous mode [ 2040.277242][ T5779] Bluetooth: hci3: command tx timeout [ 2040.751597][T25944] team0 (unregistering): Port device team_slave_1 removed [ 2040.813544][T25944] team0 (unregistering): Port device team_slave_0 removed [ 2040.904235][T25944] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2040.999206][T25944] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 2041.413480][T25944] .` (unregistering): (slave team0): Releasing backup interface [ 2041.464538][T25944] .` (unregistering): Released all slaves [ 2041.579571][ T2588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2041.587454][ T2588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2041.613751][ T2588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2041.625099][ T2701] netlink: 'syz.1.9178': attribute type 2 has an invalid length. [ 2041.647121][ T2701] netlink: 'syz.1.9178': attribute type 8 has an invalid length. [ 2041.658610][ T2701] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9178'. [ 2041.673641][ T2718] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.9182'. [ 2041.683888][ T2724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9183'. [ 2041.848749][ T2732] FAULT_INJECTION: forcing a failure. [ 2041.848749][ T2732] name failslab, interval 1, probability 0, space 0, times 0 [ 2041.858665][ T2588] hsr_slave_0: entered promiscuous mode [ 2041.861494][ T2732] CPU: 1 PID: 2732 Comm: syz.1.9184 Not tainted syzkaller #0 [ 2041.874403][ T2732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2041.884754][ T2732] Call Trace: [ 2041.888039][ T2732] [ 2041.890974][ T2732] dump_stack_lvl+0x18c/0x250 [ 2041.895660][ T2732] ? show_regs_print_info+0x20/0x20 [ 2041.900863][ T2732] ? load_image+0x420/0x420 [ 2041.905380][ T2732] ? perf_tp_event+0x13d7/0x1520 [ 2041.910344][ T2732] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2041.916360][ T2732] should_fail_ex+0x39d/0x4d0 [ 2041.921227][ T2732] should_failslab+0x9/0x20 [ 2041.925756][ T2732] slab_pre_alloc_hook+0x59/0x310 [ 2041.930903][ T2732] kmem_cache_alloc+0x5a/0x2d0 [ 2041.935681][ T2732] ? skb_clone+0x1eb/0x370 [ 2041.940134][ T2732] skb_clone+0x1eb/0x370 [ 2041.944602][ T2732] bpf_clone_redirect+0x167/0x4a0 [ 2041.949694][ T2732] bpf_prog_b960c4b57b3b3b2a+0x5e/0x63 [ 2041.955223][ T2732] ? perf_output_sample+0x18a0/0x2130 [ 2041.960657][ T2732] ? perf_trace_preemptirq_template+0x269/0x330 [ 2041.967403][ T2732] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2041.973447][ T2732] ? lockdep_softirqs_on+0x580/0x580 [ 2041.978798][ T2732] ? lock_chain_count+0x20/0x20 [ 2041.983701][ T2732] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 2041.990186][ T2732] ? __local_bh_disable_ip+0x108/0x1a0 [ 2041.995692][ T2732] ? __cant_sleep+0x220/0x220 [ 2042.000430][ T2732] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2042.006035][ T2732] ? _local_bh_enable+0xa0/0xa0 [ 2042.011066][ T2732] ? bpf_test_timer_continue+0x135/0x380 [ 2042.016826][ T2732] ? bpf_test_run+0x174/0x870 [ 2042.021559][ T2732] bpf_test_run+0x2df/0x870 [ 2042.026129][ T2732] ? bpf_test_run+0x174/0x870 [ 2042.030861][ T2732] ? convert___skb_to_skb+0x590/0x590 [ 2042.036300][ T2732] ? eth_get_headlen+0x210/0x210 [ 2042.041289][ T2732] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 2042.046880][ T2732] ? convert___skb_to_skb+0x3d/0x590 [ 2042.052752][ T2732] bpf_prog_test_run_skb+0xad2/0x12b0 [ 2042.058194][ T2732] ? cpu_online+0x60/0x60 [ 2042.062608][ T2732] bpf_prog_test_run+0x321/0x390 [ 2042.067688][ T2732] __sys_bpf+0x49d/0x890 [ 2042.071988][ T2732] ? bpf_link_show_fdinfo+0x390/0x390 [ 2042.077426][ T2732] ? lock_chain_count+0x20/0x20 [ 2042.082425][ T2732] __x64_sys_bpf+0x7c/0x90 [ 2042.086993][ T2732] do_syscall_64+0x55/0xa0 [ 2042.091450][ T2732] ? clear_bhb_loop+0x40/0x90 [ 2042.096173][ T2732] ? clear_bhb_loop+0x40/0x90 [ 2042.100956][ T2732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2042.106901][ T2732] RIP: 0033:0x7f039119c819 [ 2042.111362][ T2732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2042.131028][ T2732] RSP: 002b:00007f039203f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2042.139504][ T2732] RAX: ffffffffffffffda RBX: 00007f0391415fa0 RCX: 00007f039119c819 [ 2042.147536][ T2732] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2042.155645][ T2732] RBP: 00007f039203f090 R08: 0000000000000000 R09: 0000000000000000 [ 2042.163830][ T2732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2042.171870][ T2732] R13: 00007f0391416038 R14: 00007f0391415fa0 R15: 00007fff7383fea8 [ 2042.179981][ T2732] [ 2042.225497][ T2588] hsr_slave_1: entered promiscuous mode [ 2042.255046][ T2588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2042.273222][ T2588] Cannot create hsr debugfs directory [ 2043.673065][ T2775] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.9191'. [ 2043.790971][T21563] tipc: Subscription rejected, illegal request [ 2044.003985][ T2787] netlink: 'syz.1.9193': attribute type 2 has an invalid length. [ 2044.020441][ T2787] netlink: 'syz.1.9193': attribute type 8 has an invalid length. [ 2044.030097][ T2787] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9193'. [ 2044.684155][ T2588] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2045.428629][ T2588] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2045.445779][ T2588] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2045.471357][ T2588] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2045.766551][ T2842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9204'. [ 2045.845188][ T2588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2045.896703][ T2844] netlink: 'syz.2.9205': attribute type 21 has an invalid length. [ 2045.980632][ T2588] 8021q: adding VLAN 0 to HW filter on device team0 [ 2046.046118][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.053392][ T6461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2046.084447][T25945] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.091760][T25945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2046.147229][T25942] tipc: Subscription rejected, illegal request [ 2046.183592][ T2851] netlink: 'syz.2.9207': attribute type 10 has an invalid length. [ 2046.214313][ T2851] bridge0: port 2(bridge_slave_1) entered disabled state [ 2046.221845][ T2851] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.327536][ T2851] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.335099][ T2851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2046.343875][ T2851] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.351253][ T2851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2046.391627][ T2851] team0: Port device bridge0 added [ 2046.674684][ T2868] netlink: 'syz.1.9218': attribute type 4 has an invalid length. [ 2047.082028][ T2588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2047.172110][ T2588] veth0_vlan: entered promiscuous mode [ 2047.214857][ T2588] veth1_vlan: entered promiscuous mode [ 2047.304125][ T2588] veth0_macvtap: entered promiscuous mode [ 2047.346561][ T2588] veth1_macvtap: entered promiscuous mode [ 2047.432226][ T2588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2047.453576][ T2588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.473270][ T2588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2047.506344][ T2588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.530033][ T2588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2047.566880][ T2588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.717349][ T2588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2047.777810][ T2588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.799454][ T2588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2048.116089][ T2588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2048.207201][ T2588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.237884][ T2588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 2048.276218][ T2588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.312826][ T2588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2048.327423][ T2588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.358612][ T2588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2048.394819][ T2588] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.456839][ T2588] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.469859][ T2588] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.505535][ T2588] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2049.065905][T25945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2049.094559][ T2907] FAULT_INJECTION: forcing a failure. [ 2049.094559][ T2907] name failslab, interval 1, probability 0, space 0, times 0 [ 2049.117481][T25945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2049.186039][ T2907] CPU: 0 PID: 2907 Comm: syz.2.9215 Not tainted syzkaller #0 [ 2049.193526][ T2907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2049.203620][ T2907] Call Trace: [ 2049.206938][ T2907] [ 2049.209908][ T2907] dump_stack_lvl+0x18c/0x250 [ 2049.214913][ T2907] ? show_regs_print_info+0x20/0x20 [ 2049.220167][ T2907] ? load_image+0x420/0x420 [ 2049.224727][ T2907] ? __might_sleep+0xe0/0xe0 [ 2049.229362][ T2907] ? __lock_acquire+0x7d40/0x7d40 [ 2049.234514][ T2907] ? __lock_acquire+0x1347/0x7d40 [ 2049.239593][ T2907] should_fail_ex+0x39d/0x4d0 [ 2049.244335][ T2907] should_failslab+0x9/0x20 [ 2049.248941][ T2907] slab_pre_alloc_hook+0x59/0x310 [ 2049.254131][ T2907] kmem_cache_alloc_lru+0x4d/0x2d0 [ 2049.259303][ T2907] ? __d_alloc+0x31/0x730 [ 2049.263715][ T2907] __d_alloc+0x31/0x730 [ 2049.267951][ T2907] d_alloc_parallel+0xe0/0x1530 [ 2049.272912][ T2907] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 2049.278772][ T2907] ? __asan_memset+0x22/0x40 [ 2049.283419][ T2907] ? __asan_memset+0x22/0x40 [ 2049.288065][ T2907] ? lockdep_init_map_type+0x9c/0x8e0 [ 2049.293490][ T2907] ? lockdep_softirqs_off+0x430/0x430 [ 2049.298913][ T2907] ? d_hash_and_lookup+0x1b0/0x1b0 [ 2049.304097][ T2907] ? __init_waitqueue_head+0xa9/0x150 [ 2049.309527][ T2907] __lookup_slow+0x138/0x400 [ 2049.314181][ T2907] ? lookup_one_len+0x2e0/0x2e0 [ 2049.319187][ T2907] ? try_to_unlazy+0x34c/0x5a0 [ 2049.324285][ T2907] ? down_read+0x1ac/0x2e0 [ 2049.328759][ T2907] lookup_slow+0x53/0x70 [ 2049.333054][ T2907] link_path_walk+0x990/0xe30 [ 2049.337820][ T2907] ? handle_lookup_down+0x130/0x130 [ 2049.343093][ T2907] path_openat+0x293/0x3230 [ 2049.347727][ T2907] ? verify_lock_unused+0x140/0x140 [ 2049.352977][ T2907] ? do_filp_open+0x430/0x430 [ 2049.357728][ T2907] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2049.364399][ T2907] do_filp_open+0x1f5/0x430 [ 2049.368965][ T2907] ? vfs_tmpfile+0x490/0x490 [ 2049.373638][ T2907] ? noop_direct_IO+0x20/0x20 [ 2049.378517][ T2907] ? _raw_spin_unlock+0x28/0x40 [ 2049.383408][ T2907] ? alloc_fd+0x58f/0x630 [ 2049.387811][ T2907] do_sys_openat2+0x134/0x1d0 [ 2049.392545][ T2907] ? do_sys_open+0xe0/0xe0 [ 2049.397111][ T2907] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2049.403197][ T2907] ? lock_chain_count+0x20/0x20 [ 2049.408104][ T2907] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2049.414152][ T2907] __x64_sys_openat+0x139/0x160 [ 2049.419595][ T2907] do_syscall_64+0x55/0xa0 [ 2049.424055][ T2907] ? clear_bhb_loop+0x40/0x90 [ 2049.428789][ T2907] ? clear_bhb_loop+0x40/0x90 [ 2049.433516][ T2907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2049.439450][ T2907] RIP: 0033:0x7f746735d04e [ 2049.444261][ T2907] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2049.464197][ T2907] RSP: 002b:00007f746830fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2049.472664][ T2907] RAX: ffffffffffffffda RBX: 00007f74683106c0 RCX: 00007f746735d04e [ 2049.480683][ T2907] RDX: 0000000000000002 RSI: 00007f746830ff90 RDI: ffffffffffffff9c [ 2049.488934][ T2907] RBP: 00007f7468310090 R08: 0000000000000000 R09: 0000000000000000 [ 2049.496949][ T2907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2049.505052][ T2907] R13: 00007f7467616038 R14: 00007f7467615fa0 R15: 00007ffe1ae9e038 [ 2049.513150][ T2907] [ 2049.580052][ T6461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2049.618629][ T6461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2049.805296][ T2912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9216'. [ 2050.398238][ T2924] FAULT_INJECTION: forcing a failure. [ 2050.398238][ T2924] name failslab, interval 1, probability 0, space 0, times 0 [ 2050.442021][ T2924] CPU: 0 PID: 2924 Comm: syz.2.9217 Not tainted syzkaller #0 [ 2050.449478][ T2924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2050.459580][ T2924] Call Trace: [ 2050.462981][ T2924] [ 2050.465948][ T2924] dump_stack_lvl+0x18c/0x250 [ 2050.470678][ T2924] ? show_regs_print_info+0x20/0x20 [ 2050.475904][ T2924] ? load_image+0x420/0x420 [ 2050.480464][ T2924] ? __might_sleep+0xe0/0xe0 [ 2050.485087][ T2924] ? __lock_acquire+0x7d40/0x7d40 [ 2050.490221][ T2924] should_fail_ex+0x39d/0x4d0 [ 2050.494937][ T2924] should_failslab+0x9/0x20 [ 2050.499462][ T2924] slab_pre_alloc_hook+0x59/0x310 [ 2050.504596][ T2924] ? apparmor_sk_alloc_security+0x77/0x100 [ 2050.510422][ T2924] __kmem_cache_alloc_node+0x53/0x250 [ 2050.515818][ T2924] ? apparmor_sk_alloc_security+0x77/0x100 [ 2050.521641][ T2924] kmalloc_trace+0x2a/0xe0 [ 2050.526078][ T2924] apparmor_sk_alloc_security+0x77/0x100 [ 2050.531733][ T2924] security_sk_alloc+0x6e/0xa0 [ 2050.536517][ T2924] sk_prot_alloc+0x101/0x210 [ 2050.541128][ T2924] ? sk_alloc+0x24/0x360 [ 2050.545393][ T2924] sk_alloc+0x3a/0x360 [ 2050.549478][ T2924] ? bpf_ctx_init+0x163/0x1a0 [ 2050.554169][ T2924] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 2050.559825][ T2924] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 2050.565395][ T2924] ? __fget_files+0x28/0x4b0 [ 2050.570019][ T2924] ? __fget_files+0x28/0x4b0 [ 2050.574625][ T2924] ? __fget_files+0x43d/0x4b0 [ 2050.579417][ T2924] ? cpu_online+0x60/0x60 [ 2050.583767][ T2924] bpf_prog_test_run+0x321/0x390 [ 2050.588727][ T2924] __sys_bpf+0x49d/0x890 [ 2050.593022][ T2924] ? bpf_link_show_fdinfo+0x390/0x390 [ 2050.598454][ T2924] ? lock_chain_count+0x20/0x20 [ 2050.603341][ T2924] __x64_sys_bpf+0x7c/0x90 [ 2050.607780][ T2924] do_syscall_64+0x55/0xa0 [ 2050.612209][ T2924] ? clear_bhb_loop+0x40/0x90 [ 2050.616991][ T2924] ? clear_bhb_loop+0x40/0x90 [ 2050.621693][ T2924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2050.627700][ T2924] RIP: 0033:0x7f746739c819 [ 2050.632138][ T2924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2050.651890][ T2924] RSP: 002b:00007f7468310028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2050.660320][ T2924] RAX: ffffffffffffffda RBX: 00007f7467615fa0 RCX: 00007f746739c819 [ 2050.668317][ T2924] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 2050.676391][ T2924] RBP: 00007f7468310090 R08: 0000000000000000 R09: 0000000000000000 [ 2050.684375][ T2924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2050.692536][ T2924] R13: 00007f7467616038 R14: 00007f7467615fa0 R15: 00007ffe1ae9e038 [ 2050.700534][ T2924] [ 2050.802086][ T2928] netlink: 'syz.3.9221': attribute type 4 has an invalid length. [ 2051.169228][ T2938] netlink: 'syz.1.9226': attribute type 3 has an invalid length. [ 2051.250689][ T2938] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.9226'. [ 2051.356309][ T2938] netlink: 'syz.1.9226': attribute type 21 has an invalid length. [ 2051.372640][ T2938] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9226'. [ 2051.705455][ T2951] netlink: 'syz.0.9227': attribute type 2 has an invalid length. [ 2051.734874][ T2951] netlink: 'syz.0.9227': attribute type 8 has an invalid length. [ 2051.768571][ T2951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9227'. [ 2052.499581][ T2966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9232'. [ 2052.542397][ T2967] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9231'. [ 2052.938645][ T2980] netlink: 'syz.2.9235': attribute type 4 has an invalid length. [ 2053.511112][ T2995] netlink: 'syz.2.9238': attribute type 2 has an invalid length. [ 2053.559404][ T2995] netlink: 'syz.2.9238': attribute type 8 has an invalid length. [ 2053.611728][ T2995] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9238'. [ 2054.718447][ T3019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9245'. [ 2056.570269][ T3043] netlink: 'syz.3.9251': attribute type 2 has an invalid length. [ 2056.607282][ T3043] netlink: 'syz.3.9251': attribute type 8 has an invalid length. [ 2056.637419][ T3043] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9251'. [ 2056.982222][ T3066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9255'. [ 2057.559575][ T3075] netlink: 'syz.2.9256': attribute type 3 has an invalid length. [ 2057.600241][ T3075] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9256'. [ 2057.778881][ T3075] netlink: 'syz.2.9256': attribute type 21 has an invalid length. [ 2057.786834][ T3075] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9256'. [ 2058.129227][ T3092] FAULT_INJECTION: forcing a failure. [ 2058.129227][ T3092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2058.189995][ T3092] CPU: 1 PID: 3092 Comm: syz.0.9258 Not tainted syzkaller #0 [ 2058.197544][ T3092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2058.207721][ T3092] Call Trace: [ 2058.211172][ T3092] [ 2058.214301][ T3092] dump_stack_lvl+0x18c/0x250 [ 2058.219141][ T3092] ? show_regs_print_info+0x20/0x20 [ 2058.224480][ T3092] ? load_image+0x420/0x420 [ 2058.229392][ T3092] ? __lock_acquire+0x7d40/0x7d40 [ 2058.234558][ T3092] ? snprintf+0xe9/0x140 [ 2058.238967][ T3092] should_fail_ex+0x39d/0x4d0 [ 2058.243804][ T3092] _copy_to_user+0x2f/0xa0 [ 2058.248345][ T3092] simple_read_from_buffer+0xe7/0x150 [ 2058.253882][ T3092] proc_fail_nth_read+0x1e8/0x260 [ 2058.259160][ T3092] ? proc_fault_inject_write+0x360/0x360 [ 2058.264964][ T3092] ? fsnotify_perm+0x271/0x5e0 [ 2058.269859][ T3092] ? proc_fault_inject_write+0x360/0x360 [ 2058.275636][ T3092] vfs_read+0x28b/0x970 [ 2058.279965][ T3092] ? kernel_read+0x1e0/0x1e0 [ 2058.284678][ T3092] ? __fget_files+0x28/0x4b0 [ 2058.289472][ T3092] ? __fget_files+0x28/0x4b0 [ 2058.294163][ T3092] ? __fget_files+0x43d/0x4b0 [ 2058.298959][ T3092] ? __fdget_pos+0x2a3/0x330 [ 2058.303606][ T3092] ? ksys_read+0x75/0x260 [ 2058.308019][ T3092] ksys_read+0x150/0x260 [ 2058.312340][ T3092] ? vfs_write+0x990/0x990 [ 2058.316846][ T3092] ? lockdep_hardirqs_on+0x98/0x150 [ 2058.322132][ T3092] do_syscall_64+0x55/0xa0 [ 2058.326613][ T3092] ? clear_bhb_loop+0x40/0x90 [ 2058.331349][ T3092] ? clear_bhb_loop+0x40/0x90 [ 2058.336102][ T3092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2058.342059][ T3092] RIP: 0033:0x7f15d6d5d04e [ 2058.346543][ T3092] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2058.366307][ T3092] RSP: 002b:00007f15d7cf6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2058.374869][ T3092] RAX: ffffffffffffffda RBX: 00007f15d7cf76c0 RCX: 00007f15d6d5d04e [ 2058.382938][ T3092] RDX: 000000000000000f RSI: 00007f15d7cf70a0 RDI: 0000000000000007 [ 2058.391152][ T3092] RBP: 00007f15d7cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 2058.399361][ T3092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2058.407478][ T3092] R13: 00007f15d7016038 R14: 00007f15d7015fa0 R15: 00007fffe4e21f48 [ 2058.415680][ T3092] [ 2058.839804][ T3104] netlink: 'syz.3.9263': attribute type 2 has an invalid length. [ 2058.878147][ T3104] netlink: 'syz.3.9263': attribute type 8 has an invalid length. [ 2058.886994][ T3104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9263'. [ 2059.435809][ T3116] netlink: 'syz.2.9262': attribute type 4 has an invalid length. [ 2059.639037][ T3112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9267'. [ 2059.767682][ T3122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9269'. [ 2059.943352][ T3120] syzkaller0: entered promiscuous mode [ 2059.949471][ T3120] syzkaller0: entered allmulticast mode [ 2061.078701][ T3137] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.9274'. [ 2064.002667][ T3143] netlink: 'syz.0.9275': attribute type 2 has an invalid length. [ 2064.011098][ T3143] netlink: 'syz.0.9275': attribute type 8 has an invalid length. [ 2064.021612][ T3143] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9275'. [ 2066.118178][ T3187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9286'. [ 2067.875768][ T3203] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.9292'. [ 2068.191302][ T3200] netlink: 'syz.2.9290': attribute type 2 has an invalid length. [ 2068.264904][ T3200] netlink: 'syz.2.9290': attribute type 8 has an invalid length. [ 2068.279433][ T3200] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9290'. [ 2068.866568][ T3211] netlink: 'syz.0.9303': attribute type 2 has an invalid length. [ 2068.927492][ T3211] netlink: 'syz.0.9303': attribute type 8 has an invalid length. [ 2068.945399][ T3211] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9303'. [ 2073.931192][ T3252] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9305'. [ 2073.990952][ T3253] netlink: 'syz.3.9307': attribute type 2 has an invalid length. [ 2074.047272][ T3253] netlink: 'syz.3.9307': attribute type 8 has an invalid length. [ 2074.055181][ T3253] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9307'. [ 2074.688292][ T3270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9317'. [ 2075.089886][ T3277] netlink: 'syz.3.9318': attribute type 2 has an invalid length. [ 2075.135936][ T3277] netlink: 'syz.3.9318': attribute type 8 has an invalid length. [ 2075.157792][ T3277] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9318'. [ 2075.764189][ T3281] netlink: 'syz.3.9319': attribute type 1 has an invalid length. [ 2075.783840][ T3281] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9319'. [ 2075.815149][ T3280] netlink: 'syz.1.9320': attribute type 2 has an invalid length. [ 2075.847296][ T3280] netlink: 'syz.1.9320': attribute type 8 has an invalid length. [ 2075.866655][ T3280] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9320'. [ 2075.930517][ T3281] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.9319'. [ 2075.980201][ T3281] bridge_slave_1: default FDB implementation only supports local addresses [ 2076.831713][T31719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2076.854220][T31719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2076.891280][T31719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2076.901132][T31719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2076.914527][T31719] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2076.922645][T31719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2077.011681][ T6461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.089449][ T6461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.180072][ T6461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.384077][ T6461] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.605060][ T3322] netlink: 'syz.1.9328': attribute type 2 has an invalid length. [ 2077.619003][ T3322] netlink: 'syz.1.9328': attribute type 8 has an invalid length. [ 2077.637412][ T3322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9328'. [ 2077.836686][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 2078.385237][ T3327] netlink: 'syz.1.9331': attribute type 2 has an invalid length. [ 2078.423233][ T3327] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9331'. [ 2078.997199][T31719] Bluetooth: hci1: command tx timeout [ 2079.308030][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.315239][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.335630][ T3300] bridge_slave_0: entered allmulticast mode [ 2079.346450][ T3300] bridge_slave_0: entered promiscuous mode [ 2079.357862][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 2079.366333][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.373810][ T3300] bridge_slave_1: entered allmulticast mode [ 2079.406316][ T3300] bridge_slave_1: entered promiscuous mode [ 2079.506810][ T3349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9334'. [ 2079.740935][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2079.771360][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2080.098884][ T3300] team0: Port device team_slave_0 added [ 2080.159456][ T3300] team0: Port device team_slave_1 added [ 2080.313471][ T3370] validate_nla: 1 callbacks suppressed [ 2080.313560][ T3370] netlink: 'syz.1.9339': attribute type 29 has an invalid length. [ 2080.408153][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2080.588210][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2080.636541][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2080.657451][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2080.664832][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2080.749671][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2080.776097][ T3370] netlink: 'syz.1.9339': attribute type 29 has an invalid length. [ 2080.835886][ T3382] netlink: 'syz.2.9342': attribute type 2 has an invalid length. [ 2080.853283][ T3382] netlink: 'syz.2.9342': attribute type 8 has an invalid length. [ 2080.888058][ T3382] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9342'. [ 2081.077280][T31719] Bluetooth: hci1: command tx timeout [ 2081.361519][ T3376] netlink: 'syz.1.9339': attribute type 29 has an invalid length. [ 2081.970057][ T3300] hsr_slave_0: entered promiscuous mode [ 2081.993799][ T3300] hsr_slave_1: entered promiscuous mode [ 2082.003705][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2082.013844][ T3300] Cannot create hsr debugfs directory [ 2082.472407][ T3407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9346'. [ 2083.021616][ T6461] hsr_slave_0: left promiscuous mode [ 2083.077945][ T6461] hsr_slave_1: left promiscuous mode [ 2083.094639][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2083.108362][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2083.136685][ T6461] batman_adv: batadv0: Interface deactivated: €Â0 [ 2083.158179][T31719] Bluetooth: hci1: command tx timeout [ 2083.165130][ T6461] batman_adv: batadv0: Removing interface: €Â0 [ 2083.173594][ T6461] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2083.182310][ T6461] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2083.191642][ T6461] bridge_slave_1: left allmulticast mode [ 2083.197833][ T6461] bridge_slave_1: left promiscuous mode [ 2083.203822][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 2083.214268][ T6461] bridge_slave_0: left allmulticast mode [ 2083.220100][ T6461] bridge_slave_0: left promiscuous mode [ 2083.226069][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 2083.278761][ T6461] veth1_macvtap: left promiscuous mode [ 2083.296885][ T6461] veth0_macvtap: left promiscuous mode [ 2083.302662][ T6461] veth1_vlan: left promiscuous mode [ 2083.308882][ T6461] veth0_vlan: left promiscuous mode [ 2084.235032][ T6461] team0 (unregistering): Port device team_slave_1 removed [ 2084.301618][ T6461] team0 (unregistering): Port device team_slave_0 removed [ 2084.362985][ T6461] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2084.682400][ T6461] .` (unregistering): (slave batadv0): Releasing backup interface [ 2084.794238][ T6461] .` (unregistering): Released all slaves [ 2084.909755][ T3429] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9352'. [ 2084.921119][ T3432] netlink: 'syz.2.9351': attribute type 2 has an invalid length. [ 2084.939478][ T3432] netlink: 'syz.2.9351': attribute type 8 has an invalid length. [ 2084.958309][ T3432] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9351'. [ 2085.237881][T31719] Bluetooth: hci1: command tx timeout [ 2085.465660][ T3442] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9354'. [ 2085.508232][ T3442] bridge_slave_1: default FDB implementation only supports local addresses [ 2085.519663][ T3439] netlink: 'syz.1.9354': attribute type 1 has an invalid length. [ 2085.558699][ T3439] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9354'. [ 2086.278698][ T3460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9359'. [ 2086.890421][ T3473] netlink: 'syz.1.9360': attribute type 21 has an invalid length. [ 2087.166956][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2087.198060][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2087.307219][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2087.383457][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2087.572577][ T3483] netlink: 'syz.3.9362': attribute type 2 has an invalid length. [ 2087.604946][ T3483] netlink: 'syz.3.9362': attribute type 8 has an invalid length. [ 2087.627568][ T3483] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9362'. [ 2087.761089][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2087.862810][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 2087.880025][ T3490] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9364'. [ 2087.927599][ T3490] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2088.693569][T25944] bridge0: port 1(bridge_slave_0) entered blocking state [ 2088.700866][T25944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2088.719556][T25944] bridge0: port 2(bridge_slave_1) entered blocking state [ 2088.726766][T25944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2089.998192][ T3526] netlink: 'syz.3.9373': attribute type 2 has an invalid length. [ 2090.010146][ T3526] netlink: 'syz.3.9373': attribute type 8 has an invalid length. [ 2090.022210][ T3526] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9373'. [ 2090.132181][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2090.328964][ T3300] veth0_vlan: entered promiscuous mode [ 2090.377247][ T3300] veth1_vlan: entered promiscuous mode [ 2090.757902][ T3300] veth0_macvtap: entered promiscuous mode [ 2090.831786][ T3300] veth1_macvtap: entered promiscuous mode [ 2090.981539][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2090.992334][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2091.002975][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2091.013784][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2091.023902][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2091.034736][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2091.057178][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2091.077982][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2091.102254][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2091.220302][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2091.249283][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2091.259948][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2091.271010][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2091.283668][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2091.295040][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2091.315843][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2091.381020][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2091.411836][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2091.451199][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2091.472596][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2091.695519][ T6461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2091.738284][ T6461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2091.831879][T21563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2091.851973][T21563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2093.692704][ T3584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9383'. [ 2093.784238][ T3581] netlink: 'syz.1.9382': attribute type 2 has an invalid length. [ 2094.284918][ T3581] netlink: 'syz.1.9382': attribute type 8 has an invalid length. [ 2094.292888][ T3581] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9382'. [ 2094.400572][ T5779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2094.421078][ T5779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2094.454571][ T5779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2094.464469][ T5779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2094.472913][ T5779] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2094.480868][ T5779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2094.747624][ T6678] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.911582][ T6678] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.495870][ T6678] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.547899][ T3616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9390'. [ 2095.603620][ T3596] chnl_net:caif_netlink_parms(): no params data found [ 2095.684348][ T6678] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.822658][ T3626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9392'. [ 2096.533453][ T5779] Bluetooth: hci5: command tx timeout [ 2096.706542][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 2096.715101][ T3596] bridge0: port 1(bridge_slave_0) entered disabled state [ 2096.723103][ T3596] bridge_slave_0: entered allmulticast mode [ 2096.731663][ T3596] bridge_slave_0: entered promiscuous mode [ 2096.820622][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 2096.869577][ T3596] bridge0: port 2(bridge_slave_1) entered disabled state [ 2096.897722][ T3596] bridge_slave_1: entered allmulticast mode [ 2096.945432][ T3596] bridge_slave_1: entered promiscuous mode [ 2097.268150][ T3596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2097.366215][ T3596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2097.407891][ T6678] tipc: Left network mode [ 2097.501874][ T3596] team0: Port device team_slave_0 added [ 2097.531900][ T3596] team0: Port device team_slave_1 added [ 2097.786865][ T3596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2097.834179][ T3596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2097.882169][ T3596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2097.903128][ T3655] netlink: 'syz.3.9396': attribute type 7 has an invalid length. [ 2098.607179][ T5779] Bluetooth: hci5: command tx timeout [ 2099.242420][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.249693][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.285570][ T3596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2099.303758][ T3596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2099.357957][ T3596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2099.407854][ T3679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9400'. [ 2099.825937][ T3596] hsr_slave_0: entered promiscuous mode [ 2099.953867][ T3596] hsr_slave_1: entered promiscuous mode [ 2100.018898][ T3596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2100.060161][ T3596] Cannot create hsr debugfs directory [ 2100.167392][ T3704] netlink: 'syz.1.9403': attribute type 2 has an invalid length. [ 2100.175256][ T3704] netlink: 'syz.1.9403': attribute type 8 has an invalid length. [ 2100.207532][ T3704] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9403'. [ 2100.679261][ T5779] Bluetooth: hci5: command tx timeout [ 2101.561584][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2101.585506][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2101.603914][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2101.622094][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2101.643028][ T6678] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 2101.657908][ T6678] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 2101.666273][ T6678] bridge_slave_1: left allmulticast mode [ 2101.684516][ T6678] bridge_slave_1: left promiscuous mode [ 2101.692579][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.703894][ T6678] bridge_slave_0: left allmulticast mode [ 2101.713316][ T6678] bridge_slave_0: left promiscuous mode [ 2101.719558][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.775619][ T6678] veth1_macvtap: left promiscuous mode [ 2101.786270][ T6678] veth0_macvtap: left promiscuous mode [ 2101.800218][ T6678] veth1_vlan: left promiscuous mode [ 2101.818180][ T6678] veth0_vlan: left promiscuous mode [ 2102.757111][ T5779] Bluetooth: hci5: command tx timeout [ 2103.005025][ T6678] team0 (unregistering): Port device team_slave_1 removed [ 2103.066171][ T6678] team0 (unregistering): Port device team_slave_0 removed [ 2103.518402][ T6678] team0 (unregistering): Port device bridge0 removed [ 2103.928558][ T3738] netlink: 'syz.3.9410': attribute type 23 has an invalid length. [ 2104.033414][ T3740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9409'. [ 2104.251800][ T3596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2104.293907][ T3749] netlink: 'syz.1.9411': attribute type 2 has an invalid length. [ 2104.384499][ T3749] netlink: 'syz.1.9411': attribute type 8 has an invalid length. [ 2104.467730][ T3749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9411'. [ 2104.497554][ T3596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2104.630560][ T3596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2104.695240][ T3596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2105.084250][ T3596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2105.133982][ T3596] 8021q: adding VLAN 0 to HW filter on device team0 [ 2105.163675][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.170917][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2105.196512][T25942] bridge0: port 2(bridge_slave_1) entered blocking state [ 2105.203786][T25942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2105.281942][ T3596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2105.522870][ T3596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2105.565265][ T3596] veth0_vlan: entered promiscuous mode [ 2105.576888][ T3596] veth1_vlan: entered promiscuous mode [ 2105.609392][ T3596] veth0_macvtap: entered promiscuous mode [ 2105.621958][ T3596] veth1_macvtap: entered promiscuous mode [ 2105.641437][ T3596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2105.654059][ T3596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2105.664368][ T3596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2105.675014][ T3596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2105.685486][ T3596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2105.696141][ T3596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2105.706401][ T3596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2105.717528][ T3596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2105.729081][ T3596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2105.749739][ T3596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2105.760339][ T3596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2105.770496][ T3596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2105.781107][ T3596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2105.791518][ T3596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2105.802677][ T3596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2105.814398][ T3596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2105.828756][ T3596] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.839054][ T3596] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.848106][ T3596] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.856826][ T3596] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.940777][T25942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2105.948909][T25942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2105.981078][T21563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2105.989501][T21563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2106.109090][ T3771] netlink: 'syz.3.9422': attribute type 10 has an invalid length. [ 2106.118724][ T3771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9422'. [ 2106.132343][ T3771] vcan0: entered promiscuous mode [ 2106.138364][ T3771] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 2106.212661][ T3774] netlink: 'syz.2.9381': attribute type 21 has an invalid length. [ 2107.222721][ T3784] bridge_slave_1: left allmulticast mode [ 2107.241125][ T3784] bridge_slave_1: left promiscuous mode [ 2107.465269][ T3784] bridge0: port 2(bridge_slave_1) entered disabled state [ 2107.622439][ T3784] bridge_slave_0: left allmulticast mode [ 2107.675686][ T3784] bridge_slave_0: left promiscuous mode [ 2107.682267][ T3784] bridge0: port 1(bridge_slave_0) entered disabled state [ 2109.515028][ T3819] netlink: 'syz.1.9425': attribute type 4 has an invalid length. [ 2109.547505][ T3819] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9425'. [ 2110.110094][ T3821] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9425'. [ 2110.419146][ T3828] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9428'. [ 2110.499688][ T3828] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9428'. [ 2110.548943][ T3829] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9428'. [ 2110.619069][ T3828] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9428'. [ 2110.808252][ T3833] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.9431'. [ 2110.825937][ T3833] netlink: 173112 bytes leftover after parsing attributes in process `syz.3.9431'. [ 2111.881216][ T3846] netlink: 'syz.3.9434': attribute type 10 has an invalid length. [ 2111.911345][ T3846] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9434'. [ 2113.119467][ T3859] netlink: 'syz.1.9439': attribute type 3 has an invalid length. [ 2113.131378][ T3859] netlink: 'syz.1.9439': attribute type 5 has an invalid length. [ 2113.187203][ T3862] bridge_slave_1: left allmulticast mode [ 2113.192946][ T3862] bridge_slave_1: left promiscuous mode [ 2113.249672][ T3862] bridge0: port 2(bridge_slave_1) entered disabled state [ 2113.582412][ T3862] bridge_slave_0: left allmulticast mode [ 2113.611077][ T3862] bridge_slave_0: left promiscuous mode [ 2113.629717][ T3862] bridge0: port 1(bridge_slave_0) entered disabled state [ 2114.141127][ T3883] netlink: 'syz.2.9444': attribute type 2 has an invalid length. [ 2114.152702][ T3883] netlink: 'syz.2.9444': attribute type 8 has an invalid length. [ 2114.165328][ T3883] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9444'. [ 2114.324326][ T3888] FAULT_INJECTION: forcing a failure. [ 2114.324326][ T3888] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.356879][ T3888] CPU: 0 PID: 3888 Comm: syz.1.9446 Not tainted syzkaller #0 [ 2114.364339][ T3888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2114.374421][ T3888] Call Trace: [ 2114.377719][ T3888] [ 2114.380669][ T3888] dump_stack_lvl+0x18c/0x250 [ 2114.385389][ T3888] ? show_regs_print_info+0x20/0x20 [ 2114.390622][ T3888] ? load_image+0x420/0x420 [ 2114.395145][ T3888] ? __might_sleep+0xe0/0xe0 [ 2114.399754][ T3888] ? __lock_acquire+0x7d40/0x7d40 [ 2114.404805][ T3888] ? lock_chain_count+0x20/0x20 [ 2114.409761][ T3888] should_fail_ex+0x39d/0x4d0 [ 2114.414475][ T3888] should_failslab+0x9/0x20 [ 2114.419005][ T3888] slab_pre_alloc_hook+0x59/0x310 [ 2114.424056][ T3888] ? _raw_spin_unlock+0x40/0x40 [ 2114.428923][ T3888] ? string+0x26d/0x2b0 [ 2114.433101][ T3888] ? __request_module+0x2d1/0x600 [ 2114.438144][ T3888] __kmem_cache_alloc_node+0x53/0x250 [ 2114.443540][ T3888] ? __request_module+0x2d1/0x600 [ 2114.448580][ T3888] kmalloc_trace+0x2a/0xe0 [ 2114.453102][ T3888] __request_module+0x2d1/0x600 [ 2114.457988][ T3888] ? module_enforce_rwx_sections+0x150/0x150 [ 2114.464011][ T3888] ? dev_load+0x21/0x1f0 [ 2114.468317][ T3888] ? bpf_lsm_capable+0x9/0x10 [ 2114.473064][ T3888] ? dev_load+0x21/0x1f0 [ 2114.477353][ T3888] dev_load+0x18b/0x1f0 [ 2114.481629][ T3888] dev_ioctl+0x384/0x1140 [ 2114.485982][ T3888] sock_do_ioctl+0x239/0x310 [ 2114.490594][ T3888] ? sock_show_fdinfo+0xb0/0xb0 [ 2114.495471][ T3888] sock_ioctl+0x5ba/0x7e0 [ 2114.499820][ T3888] ? sock_poll+0x3e0/0x3e0 [ 2114.504256][ T3888] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2114.509207][ T3888] ? security_file_ioctl+0x80/0xa0 [ 2114.514423][ T3888] ? sock_poll+0x3e0/0x3e0 [ 2114.518852][ T3888] __se_sys_ioctl+0xfd/0x170 [ 2114.523462][ T3888] do_syscall_64+0x55/0xa0 [ 2114.527890][ T3888] ? clear_bhb_loop+0x40/0x90 [ 2114.532757][ T3888] ? clear_bhb_loop+0x40/0x90 [ 2114.537542][ T3888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2114.543458][ T3888] RIP: 0033:0x7f039119c819 [ 2114.548334][ T3888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2114.568133][ T3888] RSP: 002b:00007f039201e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2114.576826][ T3888] RAX: ffffffffffffffda RBX: 00007f0391416090 RCX: 00007f039119c819 [ 2114.584810][ T3888] RDX: 0000200000000400 RSI: 0000000000008946 RDI: 0000000000000005 [ 2114.592793][ T3888] RBP: 00007f039201e090 R08: 0000000000000000 R09: 0000000000000000 [ 2114.600782][ T3888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2114.608768][ T3888] R13: 00007f0391416128 R14: 00007f0391416090 R15: 00007fff7383fea8 [ 2114.616766][ T3888] [ 2114.702762][T25950] hsr_slave_0: left promiscuous mode [ 2114.802215][T25950] hsr_slave_1: left promiscuous mode [ 2114.818393][T25950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2114.826048][T25950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2114.842110][T25950] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 2114.850056][T25950] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 2114.858742][T25950] bridge_slave_1: left allmulticast mode [ 2114.864867][T25950] bridge_slave_1: left promiscuous mode [ 2114.870897][T25950] bridge0: port 2(bridge_slave_1) entered disabled state [ 2114.887398][T25950] bridge_slave_0: left allmulticast mode [ 2114.896073][T25950] bridge_slave_0: left promiscuous mode [ 2114.908153][T25950] bridge0: port 1(bridge_slave_0) entered disabled state [ 2114.951688][T25950] veth1_macvtap: left promiscuous mode [ 2114.958787][T25950] veth0_macvtap: left promiscuous mode [ 2114.964578][T25950] veth1_vlan: left promiscuous mode [ 2114.970709][T25950] veth0_vlan: left promiscuous mode [ 2115.852230][T25950] team0 (unregistering): Port device team_slave_1 removed [ 2115.915374][T25950] team0 (unregistering): Port device team_slave_0 removed [ 2115.980698][T25950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2116.039766][T25950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2116.449026][T25950] bond0 (unregistering): Released all slaves [ 2116.567845][ T3902] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.9451'. [ 2118.147576][T25945] tipc: Subscription rejected, illegal request [ 2118.161937][ T3931] netlink: 'syz.0.9459': attribute type 10 has an invalid length. [ 2118.231762][ T3931] hsr_slave_0: left promiscuous mode [ 2118.682550][ T3931] hsr_slave_1: left promiscuous mode [ 2119.866035][ T3956] netlink: 'syz.2.9467': attribute type 10 has an invalid length. [ 2119.961067][ T3956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2119.995219][ T3956] team0: Port device bond0 added [ 2120.093179][ T3958] netlink: 'syz.1.9468': attribute type 39 has an invalid length. [ 2120.158595][ T3958] veth0_macvtap: left promiscuous mode [ 2120.580570][ T3971] FAULT_INJECTION: forcing a failure. [ 2120.580570][ T3971] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2120.604430][ T3971] CPU: 0 PID: 3971 Comm: syz.3.9472 Not tainted syzkaller #0 [ 2120.611882][ T3971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2120.621973][ T3971] Call Trace: [ 2120.625368][ T3971] [ 2120.628327][ T3971] dump_stack_lvl+0x18c/0x250 [ 2120.633064][ T3971] ? show_regs_print_info+0x20/0x20 [ 2120.638394][ T3971] ? load_image+0x420/0x420 [ 2120.643174][ T3971] ? __lock_acquire+0x7d40/0x7d40 [ 2120.648414][ T3971] ? perf_trace_lock+0xfc/0x3b0 [ 2120.653311][ T3971] should_fail_ex+0x39d/0x4d0 [ 2120.658051][ T3971] prepare_alloc_pages+0x1e2/0x5f0 [ 2120.663416][ T3971] __alloc_pages+0x134/0x460 [ 2120.668072][ T3971] ? zone_statistics+0x170/0x170 [ 2120.673238][ T3971] ? alloc_pages+0x4dc/0x740 [ 2120.677987][ T3971] ? do_raw_spin_unlock+0x121/0x230 [ 2120.683508][ T3971] __get_free_pages+0xc/0x30 [ 2120.688144][ T3971] kasan_populate_vmalloc_pte+0x35/0x100 [ 2120.693837][ T3971] __apply_to_page_range+0x860/0xdd0 [ 2120.699192][ T3971] ? kasan_populate_vmalloc+0x70/0x70 [ 2120.704633][ T3971] ? apply_to_page_range+0x50/0x50 [ 2120.709898][ T3971] ? do_raw_spin_unlock+0x121/0x230 [ 2120.715151][ T3971] alloc_vmap_area+0x1d0c/0x1e30 [ 2120.720299][ T3971] ? vm_map_ram+0xcb0/0xcb0 [ 2120.725034][ T3971] ? rcu_is_watching+0x15/0xb0 [ 2120.729948][ T3971] __get_vm_area_node+0x162/0x370 [ 2120.735046][ T3971] __vmalloc_node_range+0x36e/0x1330 [ 2120.740241][T25945] tipc: Subscription rejected, illegal request [ 2120.740368][ T3971] ? sock_hash_alloc+0x261/0x4d0 [ 2120.751847][ T3971] ? free_vm_area+0x50/0x50 [ 2120.756501][ T3971] ? bpf_map_area_alloc+0x5e/0x110 [ 2120.761939][ T3971] ? rcu_is_watching+0x15/0xb0 [ 2120.766762][ T3971] ? bpf_map_area_alloc+0x5e/0x110 [ 2120.771960][ T3971] bpf_map_area_alloc+0xf1/0x110 [ 2120.777143][ T3971] ? sock_hash_alloc+0x261/0x4d0 [ 2120.782220][ T3971] sock_hash_alloc+0x261/0x4d0 [ 2120.787143][ T3971] map_create+0x877/0x12f0 [ 2120.791647][ T3971] ? bpf_lsm_bpf+0x9/0x10 [ 2120.796124][ T3971] __sys_bpf+0x651/0x890 [ 2120.800425][ T3971] ? bpf_link_show_fdinfo+0x390/0x390 [ 2120.805953][ T3971] ? lock_chain_count+0x20/0x20 [ 2120.811127][ T3971] __x64_sys_bpf+0x7c/0x90 [ 2120.815779][ T3971] do_syscall_64+0x55/0xa0 [ 2120.820321][ T3971] ? clear_bhb_loop+0x40/0x90 [ 2120.825042][ T3971] ? clear_bhb_loop+0x40/0x90 [ 2120.829773][ T3971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2120.835788][ T3971] RIP: 0033:0x7ffb4739c819 [ 2120.840400][ T3971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2120.860052][ T3971] RSP: 002b:00007ffb48346028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2120.868499][ T3971] RAX: ffffffffffffffda RBX: 00007ffb47615fa0 RCX: 00007ffb4739c819 [ 2120.876493][ T3971] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 2120.884677][ T3971] RBP: 00007ffb48346090 R08: 0000000000000000 R09: 0000000000000000 [ 2120.892668][ T3971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2120.900659][ T3971] R13: 00007ffb47616038 R14: 00007ffb47615fa0 R15: 00007ffe840b0fe8 [ 2120.908771][ T3971] [ 2122.011685][ T3986] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9477'. [ 2122.255372][ T3999] FAULT_INJECTION: forcing a failure. [ 2122.255372][ T3999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2122.274759][ T3999] CPU: 1 PID: 3999 Comm: syz.0.9479 Not tainted syzkaller #0 [ 2122.282227][ T3999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2122.292331][ T3999] Call Trace: [ 2122.295650][ T3999] [ 2122.298700][ T3999] dump_stack_lvl+0x18c/0x250 [ 2122.303431][ T3999] ? show_regs_print_info+0x20/0x20 [ 2122.308667][ T3999] ? load_image+0x420/0x420 [ 2122.313203][ T3999] ? __might_fault+0xaa/0x120 [ 2122.317916][ T3999] ? __lock_acquire+0x7d40/0x7d40 [ 2122.322999][ T3999] should_fail_ex+0x39d/0x4d0 [ 2122.327741][ T3999] _copy_from_user+0x2f/0xe0 [ 2122.332384][ T3999] __sys_bpf+0x23e/0x890 [ 2122.336755][ T3999] ? bpf_link_show_fdinfo+0x390/0x390 [ 2122.342186][ T3999] ? lock_chain_count+0x20/0x20 [ 2122.347090][ T3999] __x64_sys_bpf+0x7c/0x90 [ 2122.351539][ T3999] do_syscall_64+0x55/0xa0 [ 2122.355987][ T3999] ? clear_bhb_loop+0x40/0x90 [ 2122.360701][ T3999] ? clear_bhb_loop+0x40/0x90 [ 2122.365416][ T3999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2122.371621][ T3999] RIP: 0033:0x7f5f6559c819 [ 2122.376071][ T3999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2122.395884][ T3999] RSP: 002b:00007f5f663ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2122.404431][ T3999] RAX: ffffffffffffffda RBX: 00007f5f65816090 RCX: 00007f5f6559c819 [ 2122.412569][ T3999] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000008 [ 2122.420855][ T3999] RBP: 00007f5f663ba090 R08: 0000000000000000 R09: 0000000000000000 [ 2122.429038][ T3999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2122.437130][ T3999] R13: 00007f5f65816128 R14: 00007f5f65816090 R15: 00007ffd360315e8 [ 2122.445295][ T3999] [ 2122.648030][T21563] tipc: Subscription rejected, illegal request [ 2123.172482][ T4015] netlink: 'syz.0.9486': attribute type 2 has an invalid length. [ 2123.204813][ T4015] netlink: 'syz.0.9486': attribute type 8 has an invalid length. [ 2123.230876][ T4015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9486'. [ 2123.272852][ T4021] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9489'. [ 2123.304842][ T4021] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9489'. [ 2123.754874][T25945] tipc: Subscription rejected, illegal request [ 2123.863278][ T4031] delete_channel: no stack [ 2124.449776][ T4039] netlink: 'syz.3.9495': attribute type 10 has an invalid length. [ 2124.883884][ T4039] hsr_slave_0: left promiscuous mode [ 2124.922927][ T4039] hsr_slave_1: left promiscuous mode [ 2125.089305][T25945] tipc: Subscription rejected, illegal request [ 2125.381440][ T4054] mac80211_hwsim hwsim75 wlan0: entered promiscuous mode [ 2125.428415][ T4054] mac80211_hwsim hwsim75 wlan0: entered allmulticast mode [ 2125.482986][ T4055] netlink: 'syz.3.9500': attribute type 2 has an invalid length. [ 2125.507968][ T4055] netlink: 'syz.3.9500': attribute type 8 has an invalid length. [ 2125.522135][ T4055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9500'. [ 2125.743930][ T4062] netlink: 'syz.1.9501': attribute type 2 has an invalid length. [ 2125.794137][ T4062] netlink: 'syz.1.9501': attribute type 8 has an invalid length. [ 2125.843597][ T4062] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9501'. [ 2126.105857][T21563] tipc: Subscription rejected, illegal request [ 2126.421984][T21563] tipc: Subscription rejected, illegal request [ 2127.156545][ T4089] netlink: 'syz.0.9512': attribute type 2 has an invalid length. [ 2127.172738][ T4089] netlink: 'syz.0.9512': attribute type 8 has an invalid length. [ 2127.198799][ T4089] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9512'. [ 2127.462908][ T4093] netlink: 'syz.1.9513': attribute type 10 has an invalid length. [ 2127.683247][ T4093] hsr_slave_0: left promiscuous mode [ 2128.159280][ T4093] hsr_slave_1: left promiscuous mode [ 2128.423533][ T4102] netlink: 'syz.0.9516': attribute type 39 has an invalid length. [ 2128.474883][ T4095] netlink: 'syz.3.9514': attribute type 2 has an invalid length. [ 2128.483158][ T4095] netlink: 'syz.3.9514': attribute type 8 has an invalid length. [ 2128.491504][ T4095] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9514'. [ 2128.721360][ T4113] IPv6: Can't replace route, no match found [ 2128.941199][ T4115] delete_channel: no stack [ 2129.047470][ T4123] netlink: 'syz.0.9523': attribute type 22 has an invalid length. [ 2129.057366][ T4123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9523'. [ 2129.069572][ T4123] netlink: 'syz.0.9523': attribute type 22 has an invalid length. [ 2129.078806][ T4123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9523'. [ 2129.092485][ T4122] netlink: 'syz.1.9524': attribute type 2 has an invalid length. [ 2129.102430][ T4122] netlink: 'syz.1.9524': attribute type 8 has an invalid length. [ 2129.115323][ T4122] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9524'. [ 2129.235112][ T4125] netlink: 'syz.0.9525': attribute type 46 has an invalid length. [ 2129.331160][ T4129] netlink: 'syz.0.9525': attribute type 39 has an invalid length. [ 2129.565294][ T4131] netlink: 'syz.3.9528': attribute type 10 has an invalid length. [ 2129.573516][ T4131] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9528'. [ 2129.615338][ T4131] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9528'. [ 2130.035237][ T4139] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9527'. [ 2130.118056][ T4141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9535'. [ 2132.612148][ T4179] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9543'. [ 2136.106875][ T4204] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.9551'. [ 2136.557839][ T4214] validate_nla: 9 callbacks suppressed [ 2136.557857][ T4214] netlink: 'syz.1.9554': attribute type 2 has an invalid length. [ 2136.611872][ T4214] netlink: 'syz.1.9554': attribute type 8 has an invalid length. [ 2136.651362][ T4214] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9554'. [ 2141.646580][T31719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2141.707111][T31719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2141.732175][T31719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2141.750736][T31719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2141.767334][T31719] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2141.774852][T31719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2142.503576][ T4282] syzkaller0: entered promiscuous mode [ 2142.511928][ T4282] syzkaller0: entered allmulticast mode [ 2143.886905][T31719] Bluetooth: hci2: command tx timeout [ 2145.965230][T31719] Bluetooth: hci2: command tx timeout [ 2145.982261][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 2146.374281][ T4315] veth0_vlan: entered allmulticast mode [ 2146.461920][ T4315] ªªªªªª: renamed from vlan0 [ 2146.470227][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 2146.480180][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 2146.489148][ T4273] bridge_slave_0: entered allmulticast mode [ 2146.496075][ T4273] bridge_slave_0: entered promiscuous mode [ 2146.516543][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 2146.523965][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 2146.531609][ T4273] bridge_slave_1: entered allmulticast mode [ 2146.539860][ T4273] bridge_slave_1: entered promiscuous mode [ 2146.575236][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2146.596782][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2146.709083][ T4273] team0: Port device team_slave_0 added [ 2146.729676][ T4273] team0: Port device team_slave_1 added [ 2146.812755][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2146.820890][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2146.851085][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2146.879715][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2146.886734][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2146.913075][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2147.092139][ T4273] hsr_slave_0: entered promiscuous mode [ 2147.106773][ T4273] hsr_slave_1: entered promiscuous mode [ 2150.068600][T31719] Bluetooth: hci2: command tx timeout [ 2152.117183][T31719] Bluetooth: hci2: command tx timeout [ 2153.784894][T25952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.939202][T25952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.025687][T25952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.445037][T25952] tipc: Left network mode [ 2154.981776][ T4367] veth1_macvtap: left promiscuous mode [ 2154.993501][ T4367] macsec0: entered allmulticast mode [ 2155.027603][ T4370] veth1_macvtap: entered promiscuous mode [ 2155.050304][ T4370] veth1_macvtap: entered allmulticast mode [ 2155.073030][ T4370] macsec0: entered promiscuous mode [ 2156.718134][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2156.788058][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2157.049565][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2157.098710][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2157.638969][T31719] Bluetooth: hci3: command 0x0406 tx timeout [ 2158.137925][T25952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2158.145428][T25952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2158.168379][T25952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2158.175881][T25952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2158.221579][T25952] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 2158.247991][T25952] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 2158.285630][T25952] bridge0: port 3(dummy0) entered disabled state [ 2158.428445][T25952] bridge_slave_1: left allmulticast mode [ 2158.434195][T25952] bridge_slave_1: left promiscuous mode [ 2158.489935][T25952] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.530396][T25952] bridge_slave_0: left allmulticast mode [ 2158.575485][T25952] bridge_slave_0: left promiscuous mode [ 2158.588844][T25952] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.711508][T25952] veth1_macvtap: left promiscuous mode [ 2158.724102][T25952] veth1_vlan: left promiscuous mode [ 2158.733807][T25952] veth0_vlan: left promiscuous mode [ 2160.392361][T25952] team0 (unregistering): Port device team_slave_1 removed [ 2160.451824][T25952] team0 (unregistering): Port device team_slave_0 removed [ 2160.504793][T25952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2160.682632][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.689648][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.977181][T25952] team0 (unregistering): Port device bond0 removed [ 2161.025928][T25952] bond0 (unregistering): Released all slaves [ 2161.209148][ T4435] syzkaller0: entered promiscuous mode [ 2161.214708][ T4435] syzkaller0: entered allmulticast mode [ 2164.034238][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2164.115621][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 2164.145714][ T3906] bridge0: port 1(bridge_slave_0) entered blocking state [ 2164.152981][ T3906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2164.189684][ T3906] bridge0: port 2(bridge_slave_1) entered blocking state [ 2164.196902][ T3906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2164.846542][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2165.106179][ T4273] veth0_vlan: entered promiscuous mode [ 2165.214374][ T4273] veth1_vlan: entered promiscuous mode [ 2165.296706][ T4273] veth0_macvtap: entered promiscuous mode [ 2165.350883][ T4273] veth1_macvtap: entered promiscuous mode [ 2165.525686][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2165.547024][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.557579][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2165.577057][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.610660][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2165.621667][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.651764][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2168.876083][ T4476] sit0: entered allmulticast mode [ 2168.917766][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2168.972454][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.042984][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2169.079199][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.177097][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2169.217027][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.268199][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2169.608040][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2169.616818][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2169.902324][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2169.967140][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2170.214326][ T4486] syzkaller0: entered promiscuous mode [ 2170.220127][ T4486] syzkaller0: entered allmulticast mode [ 2174.098367][T25942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2174.106356][T25942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2174.220070][T25942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2174.240834][T25942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2174.331721][ T4524] syzkaller0: entered promiscuous mode [ 2174.337498][ T4524] syzkaller0: entered allmulticast mode [ 2178.495519][ T4577] bridge0: port 3(gretap0) entered blocking state [ 2178.526039][ T4577] bridge0: port 3(gretap0) entered disabled state [ 2178.571275][ T4577] gretap0: entered allmulticast mode [ 2178.744206][ T4577] gretap0: entered promiscuous mode [ 2178.830237][ T4577] bridge0: port 3(gretap0) entered blocking state [ 2178.841078][ T4577] bridge0: port 3(gretap0) entered forwarding state [ 2178.973085][ T4582] bridge0: port 3(gretap0) entered disabled state [ 2178.980090][ T4582] bridge0: port 2(bridge_slave_1) entered disabled state [ 2178.987874][ T4582] bridge0: port 1(bridge_slave_0) entered disabled state [ 2179.046771][ T4582] bridge0: entered allmulticast mode [ 2181.278397][ T4632] syzkaller0: entered promiscuous mode [ 2181.285292][ T4632] syzkaller0: entered allmulticast mode [ 2182.761388][T31719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2182.772607][T31719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2182.783607][T31719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2182.822214][T31719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2182.834704][T31719] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2182.843259][T31719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2183.500662][ T4654] cgroup: fork rejected by pids controller in /syz1 [ 2184.926702][ T5779] Bluetooth: hci3: command tx timeout [ 2185.243731][ T4637] syzkaller0: entered promiscuous mode [ 2185.250003][ T4637] syzkaller0: entered allmulticast mode [ 2186.314500][T31719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2186.350259][T31719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2186.371067][T31719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2186.383821][T31719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2186.425646][T31719] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2186.433402][T31719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2187.004865][T31719] Bluetooth: hci3: command tx timeout [ 2188.138711][T21563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.306087][T21563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.449686][T21563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.523229][T31719] Bluetooth: hci2: command tx timeout [ 2188.571376][T21563] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.077299][T31719] Bluetooth: hci3: command tx timeout [ 2189.376437][ T4648] chnl_net:caif_netlink_parms(): no params data found [ 2189.695595][ T4660] chnl_net:caif_netlink_parms(): no params data found [ 2190.008799][ T4689] cgroup: fork rejected by pids controller in /syz2 [ 2190.597141][T31719] Bluetooth: hci2: command tx timeout [ 2190.616509][ T4695] syz.0.9696 (4695) used obsolete PPPIOCDETACH ioctl [ 2190.785089][ T4648] bridge0: port 1(bridge_slave_0) entered blocking state [ 2190.800264][ T4648] bridge0: port 1(bridge_slave_0) entered disabled state [ 2190.808410][ T4648] bridge_slave_0: entered allmulticast mode [ 2190.815940][ T4648] bridge_slave_0: entered promiscuous mode [ 2190.825263][ T4648] bridge0: port 2(bridge_slave_1) entered blocking state [ 2190.832596][ T4648] bridge0: port 2(bridge_slave_1) entered disabled state [ 2190.840390][ T4648] bridge_slave_1: entered allmulticast mode [ 2190.848829][ T4648] bridge_slave_1: entered promiscuous mode [ 2191.074216][ T4660] bridge0: port 1(bridge_slave_0) entered blocking state [ 2191.093537][ T4660] bridge0: port 1(bridge_slave_0) entered disabled state [ 2191.114916][ T4660] bridge_slave_0: entered allmulticast mode [ 2191.139486][ T4660] bridge_slave_0: entered promiscuous mode [ 2191.158484][T31719] Bluetooth: hci3: command tx timeout [ 2191.291308][ T4648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2191.342347][ T4660] bridge0: port 2(bridge_slave_1) entered blocking state [ 2191.376338][ T4660] bridge0: port 2(bridge_slave_1) entered disabled state [ 2191.420911][ T4660] bridge_slave_1: entered allmulticast mode [ 2191.450438][ T4660] bridge_slave_1: entered promiscuous mode [ 2191.535867][ T4648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2192.004682][ T4648] team0: Port device team_slave_0 added [ 2192.075630][ T4660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2192.168999][ T4648] team0: Port device team_slave_1 added [ 2192.248590][ T4660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2192.397860][T25950] tipc: Subscription rejected, illegal request [ 2192.419650][ T4648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2192.441298][ T4648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2192.504770][ T4648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2192.549767][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2192.560326][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2192.570991][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2192.575394][ T4660] team0: Port device team_slave_0 added [ 2192.596066][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2192.605237][ T5779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2192.626175][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2192.677382][T31719] Bluetooth: hci2: command tx timeout [ 2192.712610][ T4648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2192.731891][ T4648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2192.760131][ T4648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2192.775798][ T4660] team0: Port device team_slave_1 added [ 2192.870720][ T4660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2192.878336][ T4660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2192.905047][ T4660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2192.943461][T21563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2192.957379][T21563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2192.972149][T21563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2192.980017][T21563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2193.013143][T21563] veth1_macvtap: left promiscuous mode [ 2193.019096][T21563] veth0_macvtap: left promiscuous mode [ 2193.625835][T21563] team0 (unregistering): Port device team_slave_1 removed [ 2193.690409][T21563] team0 (unregistering): Port device team_slave_0 removed [ 2193.750203][T21563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2193.814381][T21563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2194.272145][T21563] bond0 (unregistering): Released all slaves [ 2194.330169][ T4660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2194.352285][ T4660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2194.378935][ T4660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2194.497318][ T4648] hsr_slave_0: entered promiscuous mode [ 2194.504193][ T4648] hsr_slave_1: entered promiscuous mode [ 2194.521864][ T4648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2194.536893][ T4648] Cannot create hsr debugfs directory [ 2194.584473][ T4660] hsr_slave_0: entered promiscuous mode [ 2194.612753][ T4660] hsr_slave_1: entered promiscuous mode [ 2194.628108][ T4660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2194.635784][ T4660] Cannot create hsr debugfs directory [ 2194.677234][T31719] Bluetooth: hci4: command tx timeout [ 2194.757131][T31719] Bluetooth: hci2: command tx timeout [ 2195.233303][T21563] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2195.341884][T21563] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2195.364841][ T4721] chnl_net:caif_netlink_parms(): no params data found [ 2195.479026][T21563] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2195.589833][T21563] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2195.714863][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 2195.723227][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 2195.731202][ T4721] bridge_slave_0: entered allmulticast mode [ 2195.741365][ T4721] bridge_slave_0: entered promiscuous mode [ 2195.749467][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.756592][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.764439][ T4721] bridge_slave_1: entered allmulticast mode [ 2195.771633][ T4721] bridge_slave_1: entered promiscuous mode [ 2195.812968][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2195.825550][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2195.940694][ T4721] team0: Port device team_slave_0 added [ 2195.976705][T21563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2196.000219][ T4721] team0: Port device team_slave_1 added [ 2196.066830][T21563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2196.102472][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2196.113959][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2196.141013][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2196.202987][T21563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2196.221782][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2196.229300][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2196.256211][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2196.317461][T21563] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2196.341965][ T4648] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2196.352944][ T4648] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2196.383681][ T4721] hsr_slave_0: entered promiscuous mode [ 2196.392278][ T4721] hsr_slave_1: entered promiscuous mode [ 2196.399374][ T4721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2196.407583][ T4721] Cannot create hsr debugfs directory [ 2196.413212][ T4648] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2196.425238][ T4648] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2196.757469][T31719] Bluetooth: hci4: command tx timeout [ 2196.994817][ T4648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2197.176914][ T4648] 8021q: adding VLAN 0 to HW filter on device team0 [ 2197.281264][T25950] bridge0: port 1(bridge_slave_0) entered blocking state [ 2197.288694][T25950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2197.301984][T25950] bridge0: port 2(bridge_slave_1) entered blocking state [ 2197.309240][T25950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2197.918193][ T4660] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2198.008593][T21563] gretap0 (unregistering): left allmulticast mode [ 2198.015147][T21563] gretap0 (unregistering): left promiscuous mode [ 2198.024021][T21563] bridge0: port 3(gretap0) entered disabled state [ 2198.065363][ T4660] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2198.142707][ T4660] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2198.154759][ T4660] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2198.446307][ T4648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2198.654289][ T4721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2198.669655][ T4721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2198.721490][ T4721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2198.765349][ T4721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2198.784510][ T4648] veth0_vlan: entered promiscuous mode [ 2198.813903][ T4648] veth1_vlan: entered promiscuous mode [ 2198.826285][T21563] hsr_slave_0: left promiscuous mode [ 2198.832852][T21563] hsr_slave_1: left promiscuous mode [ 2198.838394][T31719] Bluetooth: hci4: command tx timeout [ 2198.844658][T21563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2198.852783][T21563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2198.861067][T21563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2198.869848][T21563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2198.880218][T21563] bridge_slave_1: left allmulticast mode [ 2198.885970][T21563] bridge_slave_1: left promiscuous mode [ 2198.891895][T21563] bridge0: port 2(bridge_slave_1) entered disabled state [ 2198.904381][T21563] bridge_slave_0: left allmulticast mode [ 2198.912431][T21563] bridge_slave_0: left promiscuous mode [ 2198.920414][T21563] bridge0: port 1(bridge_slave_0) entered disabled state [ 2198.936257][T21563] hsr_slave_0: left promiscuous mode [ 2198.943396][T21563] hsr_slave_1: left promiscuous mode [ 2198.949808][T21563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2198.957335][T21563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2198.965136][T21563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2198.974078][T21563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2198.982263][T21563] bridge_slave_1: left allmulticast mode [ 2198.988149][T21563] bridge_slave_1: left promiscuous mode [ 2198.993914][T21563] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.003195][T21563] bridge_slave_0: left allmulticast mode [ 2199.009152][T21563] bridge_slave_0: left promiscuous mode [ 2199.014976][T21563] bridge0: port 1(bridge_slave_0) entered disabled state [ 2199.049531][T21563] veth1_macvtap: left allmulticast mode [ 2199.055313][T21563] veth1_macvtap: left promiscuous mode [ 2199.060933][T21563] veth0_macvtap: left promiscuous mode [ 2199.066516][T21563] veth1_vlan: left promiscuous mode [ 2199.072141][T21563] veth0_vlan: left promiscuous mode [ 2199.082534][T21563] veth1_macvtap: left promiscuous mode [ 2199.089243][T21563] veth0_macvtap: left promiscuous mode [ 2199.094877][T21563] veth1_vlan: left promiscuous mode [ 2199.101643][T21563] veth0_vlan: left promiscuous mode [ 2199.957150][T21563] team0 (unregistering): Port device team_slave_1 removed [ 2200.016906][T21563] team0 (unregistering): Port device team_slave_0 removed [ 2200.071851][T21563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2200.133511][T21563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2200.562152][T21563] team0 (unregistering): Port device bond0 removed [ 2200.603756][T21563] bond0 (unregistering): Released all slaves [ 2200.932168][T31719] Bluetooth: hci4: command tx timeout [ 2201.345582][T21563] team0 (unregistering): Port device team_slave_1 removed [ 2201.404859][T21563] team0 (unregistering): Port device team_slave_0 removed [ 2201.468500][T21563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2201.534763][T21563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2202.046334][T21563] bond0 (unregistering): Released all slaves [ 2202.168743][ T4660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2202.262697][ T4660] 8021q: adding VLAN 0 to HW filter on device team0 [ 2202.322261][ T4648] veth0_macvtap: entered promiscuous mode [ 2202.373922][T25952] bridge0: port 1(bridge_slave_0) entered blocking state [ 2202.381226][T25952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2202.406011][T25942] bridge0: port 2(bridge_slave_1) entered blocking state [ 2202.413236][T25942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2202.465188][ T4648] veth1_macvtap: entered promiscuous mode [ 2202.571973][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2202.586439][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2202.603101][ T4648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2202.652498][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2202.665041][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2202.676577][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2202.690428][ T4648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2202.739067][ T4648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2202.750895][ T4648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2202.760194][ T4648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2202.769855][ T4648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2202.821077][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 2202.893960][T25950] bridge0: port 1(bridge_slave_0) entered blocking state [ 2202.901211][T25950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2202.950081][T25942] bridge0: port 2(bridge_slave_1) entered blocking state [ 2202.957320][T25942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2203.109041][T25944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2203.126814][T25944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2203.240134][T25944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2203.252463][ T4660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2203.266352][T25944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2203.380381][ T4660] veth0_vlan: entered promiscuous mode [ 2203.414437][ T4660] veth1_vlan: entered promiscuous mode [ 2203.527299][ T4660] veth0_macvtap: entered promiscuous mode [ 2203.553156][ T4660] veth1_macvtap: entered promiscuous mode [ 2203.605882][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2203.616879][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2203.627634][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2203.639186][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2203.651410][ T4660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2203.666108][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2203.676065][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2203.688222][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2203.698684][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2203.709544][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2203.717151][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 2203.723032][ T4660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2203.773573][ T4660] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.789077][ T4660] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.803947][ T4660] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.813308][ T4660] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.949368][T25950] tipc: Subscription rejected, illegal request [ 2203.981357][ T4798] netlink: 'syz.3.9704': attribute type 39 has an invalid length. [ 2204.091742][ T4721] veth0_vlan: entered promiscuous mode [ 2204.144588][ T4721] veth1_vlan: entered promiscuous mode [ 2204.159695][T25950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2204.178268][T25950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2204.220826][ T4721] veth0_macvtap: entered promiscuous mode [ 2204.272251][T21563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2204.275738][ T4721] veth1_macvtap: entered promiscuous mode [ 2204.281217][T21563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2204.350464][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.379302][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.407032][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.426059][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.435988][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.446899][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.459392][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2204.483382][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2204.502636][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.515362][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2204.546593][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.561951][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2204.586741][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.640573][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2204.646871][ T4803] delete_channel: no stack [ 2204.732166][ T4721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2204.755485][ T4721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2204.785492][ T4721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2204.801438][ T4721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2205.603234][ T4814] netlink: 'syz.3.9706': attribute type 2 has an invalid length. [ 2205.614233][ T4814] netlink: 'syz.3.9706': attribute type 8 has an invalid length. [ 2205.629804][ T4814] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9706'. [ 2205.825233][ T6678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2205.846666][ T6678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2205.957253][ T6678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2205.965169][ T6678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2206.391522][T21563] tipc: Subscription rejected, illegal request [ 2207.395357][ T4839] delete_channel: no stack [ 2208.771776][ T4859] netlink: 'syz.0.9733': attribute type 29 has an invalid length. [ 2208.818195][ T4859] netlink: 'syz.0.9733': attribute type 29 has an invalid length. [ 2208.850551][ T4862] netlink: 'syz.0.9733': attribute type 29 has an invalid length. [ 2208.907536][ T4859] netlink: 'syz.0.9733': attribute type 29 has an invalid length. [ 2208.938924][ T4859] netlink: 'syz.0.9733': attribute type 29 has an invalid length. [ 2210.260060][T25942] tipc: Subscription rejected, illegal request [ 2210.780025][ T4887] netlink: 'syz.2.9731': attribute type 4 has an invalid length. [ 2210.792788][ T4887] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.9731'. [ 2213.223407][ T4905] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.9743'. [ 2213.292310][ T4905] bridge_slave_1: default FDB implementation only supports local addresses [ 2213.326928][ T4911] netlink: 'syz.3.9738': attribute type 29 has an invalid length. [ 2213.340025][ T4897] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.9743'. [ 2213.371446][ T4897] bridge_slave_1: default FDB implementation only supports local addresses [ 2213.464586][ T4911] netlink: 'syz.3.9738': attribute type 29 has an invalid length. [ 2213.609230][ T4912] netlink: 'syz.3.9738': attribute type 29 has an invalid length. [ 2213.622299][ T4913] netlink: 'syz.3.9738': attribute type 29 has an invalid length. [ 2213.633871][ T4914] netlink: 'syz.3.9738': attribute type 29 has an invalid length. [ 2214.690999][ T4922] syzkaller0: entered promiscuous mode [ 2214.696647][ T4922] syzkaller0: entered allmulticast mode [ 2214.746613][ T4923] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9740'. [ 2214.853227][T25944] tipc: Subscription rejected, illegal request [ 2219.056708][ T4950] netlink: 'syz.3.9749': attribute type 46 has an invalid length. [ 2219.247999][ T4958] netlink: 763 bytes leftover after parsing attributes in process `syz.0.9753'. [ 2219.355537][ T4960] netlink: 'syz.2.9752': attribute type 29 has an invalid length. [ 2219.378389][ T4960] netlink: 'syz.2.9752': attribute type 29 has an invalid length. [ 2219.427425][ T4960] netlink: 'syz.2.9752': attribute type 29 has an invalid length. [ 2219.458471][ T4960] netlink: 'syz.2.9752': attribute type 29 has an invalid length. [ 2219.488803][ T4960] netlink: 'syz.2.9752': attribute type 29 has an invalid length. [ 2220.554893][T25952] tipc: Subscription rejected, illegal request [ 2220.865648][ T4979] netlink: 'syz.1.9759': attribute type 46 has an invalid length. [ 2222.121857][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.128675][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.725754][ T5023] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9769'. [ 2222.789077][ T5023] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2223.242224][ T5033] netlink: 'syz.0.9773': attribute type 46 has an invalid length. [ 2224.431046][ T5061] netlink: 'syz.2.9783': attribute type 46 has an invalid length. [ 2224.843274][T25952] tipc: Subscription rejected, illegal request [ 2225.074546][ T5079] syz.2.9790[5079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2225.074688][ T5079] syz.2.9790[5079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2225.530530][ T5090] netlink: 'syz.0.9792': attribute type 46 has an invalid length. [ 2227.442378][ T5103] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9795'. [ 2227.463201][ T5105] netlink: 'syz.3.9796': attribute type 46 has an invalid length. [ 2230.596845][ T6678] tipc: Subscription rejected, illegal request [ 2232.240352][ T5152] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.9809'. [ 2232.296851][ T5154] netlink: set zone limit has 8 unknown bytes [ 2232.323276][ T5155] netlink: 'syz.3.9810': attribute type 5 has an invalid length. [ 2232.387409][ T5155] netlink: 'syz.3.9810': attribute type 1 has an invalid length. [ 2232.420189][ T5155] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.9810'. [ 2233.757444][ T5183] netlink: 'syz.0.9817': attribute type 23 has an invalid length. [ 2233.841723][ T5185] FAULT_INJECTION: forcing a failure. [ 2233.841723][ T5185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2233.866115][ T5192] FAULT_INJECTION: forcing a failure. [ 2233.866115][ T5192] name failslab, interval 1, probability 0, space 0, times 0 [ 2233.875435][ T5185] CPU: 1 PID: 5185 Comm: syz.1.9818 Not tainted syzkaller #0 [ 2233.886530][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2233.896904][ T5185] Call Trace: [ 2233.900225][ T5185] [ 2233.903193][ T5185] dump_stack_lvl+0x18c/0x250 [ 2233.907933][ T5185] ? show_regs_print_info+0x20/0x20 [ 2233.913179][ T5185] ? load_image+0x420/0x420 [ 2233.917758][ T5185] ? __might_fault+0xaa/0x120 [ 2233.922493][ T5185] ? __lock_acquire+0x7d40/0x7d40 [ 2233.927842][ T5185] should_fail_ex+0x39d/0x4d0 [ 2233.932588][ T5185] _copy_to_iter+0x1ce/0x1120 [ 2233.937311][ T5185] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2233.943325][ T5185] ? lock_chain_count+0x20/0x20 [ 2233.948301][ T5185] ? iov_iter_init+0x1e0/0x1e0 [ 2233.953091][ T5185] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2233.958650][ T5185] ? lockdep_hardirqs_on+0x98/0x150 [ 2233.963957][ T5185] ? page_copy_sane+0x16a/0x270 [ 2233.968829][ T5185] copy_page_to_iter+0xa7/0x150 [ 2233.973800][ T5185] __sk_msg_recvmsg+0x341/0xe60 [ 2233.978684][ T5185] ? _raw_spin_unlock+0x40/0x40 [ 2233.983561][ T5185] unix_bpf_recvmsg+0x5b2/0xde0 [ 2233.988444][ T5185] ? unix_stream_bpf_update_proto+0x2f0/0x2f0 [ 2233.994521][ T5185] ? __lock_acquire+0x1273/0x7d40 [ 2233.999565][ T5185] ? wait_woken+0x180/0x180 [ 2234.004259][ T5185] ? verify_lock_unused+0x140/0x140 [ 2234.009477][ T5185] ? aa_sock_msg_perm+0x94/0x150 [ 2234.014520][ T5185] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 2234.019841][ T5185] ? security_socket_recvmsg+0x89/0xb0 [ 2234.025408][ T5185] ? unix_dgram_recvmsg+0x71/0xd0 [ 2234.030549][ T5185] ? unix_dgram_sendmsg+0x16d0/0x16d0 [ 2234.036303][ T5185] ____sys_recvmsg+0x2ce/0x5e0 [ 2234.041101][ T5185] ? __sys_recvmsg_sock+0x50/0x50 [ 2234.046242][ T5185] ? import_iovec+0x73/0xa0 [ 2234.050766][ T5185] ___sys_recvmsg+0x216/0x590 [ 2234.055462][ T5185] ? __sys_recvmsg+0x2a0/0x2a0 [ 2234.060256][ T5185] ? ksys_write+0x1c4/0x260 [ 2234.064837][ T5185] ? __fget_files+0x43d/0x4b0 [ 2234.069729][ T5185] __x64_sys_recvmsg+0x20c/0x2e0 [ 2234.074874][ T5185] ? ___sys_recvmsg+0x590/0x590 [ 2234.079762][ T5185] ? lockdep_hardirqs_on+0x98/0x150 [ 2234.084992][ T5185] do_syscall_64+0x55/0xa0 [ 2234.089457][ T5185] ? clear_bhb_loop+0x40/0x90 [ 2234.094241][ T5185] ? clear_bhb_loop+0x40/0x90 [ 2234.098938][ T5185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2234.104852][ T5185] RIP: 0033:0x7fd9bfb9c819 [ 2234.109296][ T5185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2234.128924][ T5185] RSP: 002b:00007fd9c09b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2234.137359][ T5185] RAX: ffffffffffffffda RBX: 00007fd9bfe15fa0 RCX: 00007fd9bfb9c819 [ 2234.145344][ T5185] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 2234.153327][ T5185] RBP: 00007fd9c09b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2234.161318][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2234.169479][ T5185] R13: 00007fd9bfe16038 R14: 00007fd9bfe15fa0 R15: 00007fff1e6dedf8 [ 2234.177501][ T5185] [ 2234.217044][ T5192] CPU: 1 PID: 5192 Comm: syz.3.9820 Not tainted syzkaller #0 [ 2234.224697][ T5192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2234.234888][ T5192] Call Trace: [ 2234.238217][ T5192] [ 2234.241187][ T5192] dump_stack_lvl+0x18c/0x250 [ 2234.246232][ T5192] ? show_regs_print_info+0x20/0x20 [ 2234.251729][ T5192] ? load_image+0x420/0x420 [ 2234.256296][ T5192] ? __lock_acquire+0x7d40/0x7d40 [ 2234.261486][ T5192] should_fail_ex+0x39d/0x4d0 [ 2234.266535][ T5192] should_failslab+0x9/0x20 [ 2234.271063][ T5192] slab_pre_alloc_hook+0x59/0x310 [ 2234.276103][ T5192] ? apparmor_sk_alloc_security+0x77/0x100 [ 2234.281940][ T5192] __kmem_cache_alloc_node+0x53/0x250 [ 2234.287368][ T5192] ? apparmor_sk_alloc_security+0x77/0x100 [ 2234.293323][ T5192] kmalloc_trace+0x2a/0xe0 [ 2234.297801][ T5192] apparmor_sk_alloc_security+0x77/0x100 [ 2234.303577][ T5192] security_sk_alloc+0x6e/0xa0 [ 2234.308402][ T5192] sk_prot_alloc+0x101/0x210 [ 2234.313041][ T5192] ? sk_alloc+0x24/0x360 [ 2234.317333][ T5192] sk_alloc+0x3a/0x360 [ 2234.321451][ T5192] xsk_create+0x102/0x660 [ 2234.325843][ T5192] __sock_create+0x4a6/0x940 [ 2234.330534][ T5192] __sys_socketpair+0x236/0x550 [ 2234.335571][ T5192] __x64_sys_socketpair+0x9b/0xb0 [ 2234.340751][ T5192] do_syscall_64+0x55/0xa0 [ 2234.345224][ T5192] ? clear_bhb_loop+0x40/0x90 [ 2234.349968][ T5192] ? clear_bhb_loop+0x40/0x90 [ 2234.354700][ T5192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2234.360734][ T5192] RIP: 0033:0x7f433eb9c819 [ 2234.365195][ T5192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2234.384944][ T5192] RSP: 002b:00007f433fa0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2234.393439][ T5192] RAX: ffffffffffffffda RBX: 00007f433ee16090 RCX: 00007f433eb9c819 [ 2234.401560][ T5192] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 2234.409753][ T5192] RBP: 00007f433fa0c090 R08: 0000000000000000 R09: 0000000000000000 [ 2234.417947][ T5192] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 2234.425969][ T5192] R13: 00007f433ee16128 R14: 00007f433ee16090 R15: 00007ffc9ddaaa28 [ 2234.434097][ T5192] [ 2234.654312][ T5201] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9822'. [ 2235.045041][ T5216] netlink: 'syz.3.9828': attribute type 4 has an invalid length. [ 2238.038079][ T5224] netlink: 'syz.3.9831': attribute type 46 has an invalid length. [ 2238.578645][ T5239] syz.1.9836[5239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2238.578788][ T5239] syz.1.9836[5239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2239.907589][ T5256] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9845'. [ 2239.998858][ T5258] netlink: 'syz.0.9843': attribute type 46 has an invalid length. [ 2242.027627][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9854'. [ 2242.230120][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9858'. [ 2242.461877][ T5305] FAULT_INJECTION: forcing a failure. [ 2242.461877][ T5305] name failslab, interval 1, probability 0, space 0, times 0 [ 2242.527069][ T5305] CPU: 0 PID: 5305 Comm: syz.3.9861 Not tainted syzkaller #0 [ 2242.534622][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2242.544835][ T5305] Call Trace: [ 2242.548155][ T5305] [ 2242.551130][ T5305] dump_stack_lvl+0x18c/0x250 [ 2242.555859][ T5305] ? show_regs_print_info+0x20/0x20 [ 2242.561105][ T5305] ? load_image+0x420/0x420 [ 2242.565716][ T5305] should_fail_ex+0x39d/0x4d0 [ 2242.570447][ T5305] should_failslab+0x9/0x20 [ 2242.575008][ T5305] slab_pre_alloc_hook+0x59/0x310 [ 2242.580091][ T5305] kmem_cache_alloc+0x5a/0x2d0 [ 2242.584916][ T5305] ? __nf_conntrack_alloc+0x99/0x380 [ 2242.590261][ T5305] __nf_conntrack_alloc+0x99/0x380 [ 2242.595617][ T5305] init_conntrack+0x177/0xf10 [ 2242.600342][ T5305] ? early_drop+0x7f0/0x7f0 [ 2242.605065][ T5305] ? nf_conntrack_find_get+0x650/0x650 [ 2242.610570][ T5305] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2242.616086][ T5305] ? __siphash_unaligned+0x22e/0x3a0 [ 2242.621447][ T5305] nf_conntrack_in+0xc06/0x15c0 [ 2242.626381][ T5305] ? nf_ct_pernet+0x270/0x270 [ 2242.631643][ T5305] ? ipt_do_table+0x2c1/0x15e0 [ 2242.636518][ T5305] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 2242.642119][ T5305] ? ip_select_ttl+0xb1/0x330 [ 2242.647188][ T5305] ? ipv4_conntrack_local+0x123/0x200 [ 2242.652646][ T5305] ? ipv4_conntrack_in+0x20/0x20 [ 2242.657636][ T5305] nf_hook_slow+0xbd/0x200 [ 2242.662106][ T5305] ? nf_hook+0x390/0x390 [ 2242.666392][ T5305] nf_hook+0x228/0x390 [ 2242.670514][ T5305] ? nf_hook+0xa2/0x390 [ 2242.674718][ T5305] ? __ip_local_out+0x5f0/0x5f0 [ 2242.679707][ T5305] ? nf_hook+0x390/0x390 [ 2242.684091][ T5305] ? ip_fast_csum+0x1ee/0x2b0 [ 2242.688825][ T5305] __ip_local_out+0x4db/0x5f0 [ 2242.693541][ T5305] ? nf_hook+0x390/0x390 [ 2242.697834][ T5305] ip_send_skb+0x4c/0x1d0 [ 2242.702215][ T5305] raw_sendmsg+0x163e/0x1c00 [ 2242.706876][ T5305] ? compat_raw_ioctl+0x70/0x70 [ 2242.711774][ T5305] ? __lock_acquire+0x1273/0x7d40 [ 2242.716868][ T5305] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 2242.723604][ T5305] ? sock_rps_record_flow+0x19/0x3f0 [ 2242.728945][ T5305] ? inet_sendmsg+0x7c/0x2f0 [ 2242.733590][ T5305] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2242.738927][ T5305] ? security_socket_sendmsg+0x80/0xa0 [ 2242.744430][ T5305] ? inet_send_prepare+0x260/0x260 [ 2242.749614][ T5305] ____sys_sendmsg+0x5ba/0x960 [ 2242.754425][ T5305] ? __lock_acquire+0x7d40/0x7d40 [ 2242.759670][ T5305] ? __asan_memset+0x22/0x40 [ 2242.764303][ T5305] ? __sys_sendmsg_sock+0x30/0x30 [ 2242.769368][ T5305] ? __import_iovec+0x3fa/0x850 [ 2242.774276][ T5305] ? import_iovec+0x73/0xa0 [ 2242.778834][ T5305] ___sys_sendmsg+0x2a6/0x360 [ 2242.783555][ T5305] ? get_pid_task+0x20/0x1e0 [ 2242.788206][ T5305] ? __sys_sendmsg+0x2a0/0x2a0 [ 2242.793041][ T5305] ? __lock_acquire+0x7d40/0x7d40 [ 2242.798226][ T5305] __se_sys_sendmsg+0x1c2/0x2b0 [ 2242.803129][ T5305] ? __x64_sys_sendmsg+0x80/0x80 [ 2242.808133][ T5305] ? lockdep_hardirqs_on+0x98/0x150 [ 2242.813387][ T5305] do_syscall_64+0x55/0xa0 [ 2242.817933][ T5305] ? clear_bhb_loop+0x40/0x90 [ 2242.822651][ T5305] ? clear_bhb_loop+0x40/0x90 [ 2242.827375][ T5305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2242.833318][ T5305] RIP: 0033:0x7f433eb9c819 [ 2242.837773][ T5305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2242.857608][ T5305] RSP: 002b:00007f433fa2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2242.866197][ T5305] RAX: ffffffffffffffda RBX: 00007f433ee15fa0 RCX: 00007f433eb9c819 [ 2242.874325][ T5305] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2242.882344][ T5305] RBP: 00007f433fa2d090 R08: 0000000000000000 R09: 0000000000000000 [ 2242.890536][ T5305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2242.898563][ T5305] R13: 00007f433ee16038 R14: 00007f433ee15fa0 R15: 00007ffc9ddaaa28 [ 2242.906626][ T5305] [ 2245.436886][ T5312] netlink: 'syz.3.9865': attribute type 46 has an invalid length. [ 2245.960219][ T5326] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9867'. [ 2246.395771][ T5337] netlink: 'syz.3.9873': attribute type 10 has an invalid length. [ 2246.881837][ T5346] netlink: 'syz.3.9878': attribute type 46 has an invalid length. [ 2247.498964][ T5355] netlink: 'syz.2.9879': attribute type 10 has an invalid length. [ 2248.056704][ T5355] team0: Port device geneve1 added [ 2248.114143][ T5354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9880'. [ 2251.508113][ T5362] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9881'. [ 2252.677436][ T5381] netlink: 'syz.0.9888': attribute type 10 has an invalid length. [ 2253.637398][T25944] tipc: Subscription rejected, illegal request [ 2254.500568][T25950] tipc: Subscription rejected, illegal request [ 2254.678138][ T5416] netlink: 172 bytes leftover after parsing attributes in process `syz.3.9902'. [ 2254.835529][ T5419] netlink: 'syz.0.9901': attribute type 2 has an invalid length. [ 2254.960130][ T5419] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9901'. [ 2257.171833][T25952] tipc: Subscription rejected, illegal request [ 2258.194133][ T5465] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9915'. [ 2265.381199][ T5484] syzkaller0: entered promiscuous mode [ 2265.397928][ T5484] syzkaller0: entered allmulticast mode [ 2265.422688][T21563] tipc: Subscription rejected, illegal request [ 2272.670864][ T5779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2272.683341][ T5779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2272.693434][ T5779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2272.706768][ T5779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2272.730730][ T5779] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2272.738737][ T5779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2273.408430][ T5514] FAULT_INJECTION: forcing a failure. [ 2273.408430][ T5514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2273.445217][ T5514] CPU: 1 PID: 5514 Comm: syz.3.9927 Not tainted syzkaller #0 [ 2273.452735][ T5514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2273.463028][ T5514] Call Trace: [ 2273.466351][ T5514] [ 2273.469354][ T5514] dump_stack_lvl+0x18c/0x250 [ 2273.474077][ T5514] ? show_regs_print_info+0x20/0x20 [ 2273.479319][ T5514] ? load_image+0x420/0x420 [ 2273.483875][ T5514] ? __might_fault+0xaa/0x120 [ 2273.488607][ T5514] ? __lock_acquire+0x7d40/0x7d40 [ 2273.493880][ T5514] ? __lock_acquire+0x7d40/0x7d40 [ 2273.498966][ T5514] should_fail_ex+0x39d/0x4d0 [ 2273.503752][ T5514] _copy_from_user+0x2f/0xe0 [ 2273.508397][ T5514] perf_copy_attr+0x16a/0x840 [ 2273.513137][ T5514] __se_sys_perf_event_open+0x11b/0x1c50 [ 2273.518824][ T5514] ? __fget_files+0x28/0x4b0 [ 2273.523467][ T5514] ? mutex_unlock+0x10/0x10 [ 2273.528004][ T5514] ? __fget_files+0x43d/0x4b0 [ 2273.532732][ T5514] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 2273.538444][ T5514] ? lock_chain_count+0x20/0x20 [ 2273.543539][ T5514] ? lockdep_hardirqs_on+0x98/0x150 [ 2273.548793][ T5514] ? __x64_sys_perf_event_open+0x20/0xc0 [ 2273.554565][ T5514] do_syscall_64+0x55/0xa0 [ 2273.559112][ T5514] ? clear_bhb_loop+0x40/0x90 [ 2273.563829][ T5514] ? clear_bhb_loop+0x40/0x90 [ 2273.568637][ T5514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2273.574571][ T5514] RIP: 0033:0x7f433eb9c819 [ 2273.579026][ T5514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2273.598949][ T5514] RSP: 002b:00007f433fa2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2273.607514][ T5514] RAX: ffffffffffffffda RBX: 00007f433ee15fa0 RCX: 00007f433eb9c819 [ 2273.615516][ T5514] RDX: ffffffffffffffff RSI: ffffffffffffffff RDI: 0000200000000800 [ 2273.623537][ T5514] RBP: 00007f433fa2d090 R08: 0000000000000000 R09: 0000000000000000 [ 2273.631554][ T5514] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2273.639641][ T5514] R13: 00007f433ee16038 R14: 00007f433ee15fa0 R15: 00007ffc9ddaaa28 [ 2273.647807][ T5514] [ 2274.715171][ T5527] syzkaller0: entered promiscuous mode [ 2274.728231][ T5527] syzkaller0: entered allmulticast mode [ 2274.841862][ T5779] Bluetooth: hci5: command tx timeout [ 2276.918856][ T5779] Bluetooth: hci5: command tx timeout [ 2278.436453][ T5507] chnl_net:caif_netlink_parms(): no params data found [ 2278.504461][ T5507] bridge0: port 1(bridge_slave_0) entered blocking state [ 2278.512118][ T5507] bridge0: port 1(bridge_slave_0) entered disabled state [ 2278.520235][ T5507] bridge_slave_0: entered allmulticast mode [ 2278.527506][ T5507] bridge_slave_0: entered promiscuous mode [ 2278.535623][ T5507] bridge0: port 2(bridge_slave_1) entered blocking state [ 2278.543210][ T5507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.550972][ T5507] bridge_slave_1: entered allmulticast mode [ 2278.559200][ T5507] bridge_slave_1: entered promiscuous mode [ 2278.587262][ T5507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2278.616021][ T5507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2278.666234][T25952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.688938][ T5507] team0: Port device team_slave_0 added [ 2278.700621][ T5507] team0: Port device team_slave_1 added [ 2278.730975][ T5507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2278.738220][ T5507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2278.764449][ T5507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2278.792486][T25952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.805569][ T5507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2278.812885][ T5507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2278.839750][ T5507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2278.879654][T25952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.916222][ T5507] hsr_slave_0: entered promiscuous mode [ 2278.923320][ T5507] hsr_slave_1: entered promiscuous mode [ 2278.946349][T25952] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.997420][ T5779] Bluetooth: hci5: command tx timeout [ 2279.467035][ T5507] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2279.480316][ T5507] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2279.491487][ T5507] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2279.512300][ T5507] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2279.784697][ T5507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2279.821717][ T5507] 8021q: adding VLAN 0 to HW filter on device team0 [ 2279.835593][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 2279.842795][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2279.906635][T25942] bridge0: port 2(bridge_slave_1) entered blocking state [ 2279.913844][T25942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2280.286665][T25952] hsr_slave_0: left promiscuous mode [ 2280.294765][T25952] hsr_slave_1: left promiscuous mode [ 2280.309599][T25952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2280.318545][T25952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2280.333782][T25952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2280.341945][T25952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2280.362587][T25952] bridge_slave_1: left allmulticast mode [ 2280.370051][T25952] bridge_slave_1: left promiscuous mode [ 2280.376117][T25952] bridge0: port 2(bridge_slave_1) entered disabled state [ 2280.386708][T25952] bridge_slave_0: left allmulticast mode [ 2280.418185][T25952] bridge_slave_0: left promiscuous mode [ 2280.429515][T25952] bridge0: port 1(bridge_slave_0) entered disabled state [ 2280.483057][T25952] veth1_macvtap: left promiscuous mode [ 2280.489026][T25952] veth0_macvtap: left promiscuous mode [ 2280.494817][T25952] veth1_vlan: left promiscuous mode [ 2280.501182][T25952] veth0_vlan: left promiscuous mode [ 2281.091249][ T5779] Bluetooth: hci5: command tx timeout [ 2281.383293][T25952] team0 (unregistering): Port device team_slave_1 removed [ 2281.445506][T25952] team0 (unregistering): Port device team_slave_0 removed [ 2281.502033][T25952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2281.556735][T25952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2281.984101][T25952] bond0 (unregistering): Released all slaves [ 2282.158968][ T5507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2282.704474][ T5507] veth0_vlan: entered promiscuous mode [ 2282.724408][ T5507] veth1_vlan: entered promiscuous mode [ 2282.789292][ T5507] veth0_macvtap: entered promiscuous mode [ 2282.805387][ T5507] veth1_macvtap: entered promiscuous mode [ 2282.828915][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2282.841734][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.853014][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2282.871597][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.882970][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2282.893755][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.905777][ T5507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2282.926637][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.946146][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.960240][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.971487][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.984052][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.995149][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.010172][ T5507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2283.050448][ T5507] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.059751][ T5507] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.068652][ T5507] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.080603][ T5507] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.211379][T25950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2283.226642][T25950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2283.261449][T25950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2283.272163][T25950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2283.618523][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.627465][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2306.127286][T31719] Bluetooth: hci3: command 0x0406 tx timeout [ 2316.357413][T31719] Bluetooth: hci4: command 0x0406 tx timeout [ 2345.010233][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.016626][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2398.277140][T31719] Bluetooth: hci5: command 0x0406 tx timeout [ 2406.450161][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.456592][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2426.029813][ T6678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.338442][ T6678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.475656][ T6678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.541712][ T6678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.670708][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2427.681373][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2427.689576][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2427.697153][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2427.722562][ T6678] veth1_macvtap: left promiscuous mode [ 2427.729012][ T6678] veth0_macvtap: left promiscuous mode [ 2427.734719][ T6678] veth1_vlan: left promiscuous mode [ 2428.430724][ T6678] team0 (unregistering): Port device team_slave_1 removed [ 2428.493624][ T6678] team0 (unregistering): Port device team_slave_0 removed [ 2428.544687][ T6678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2428.602095][ T6678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2429.023436][ T6678] bond0 (unregistering): Released all slaves [ 2429.568920][T25944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2429.677692][T25944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2429.782290][T25944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2429.863745][T25944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2430.104426][T25944] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2430.182635][T25944] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2430.260006][T25944] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2430.339317][T25944] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2430.586756][T25944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2430.684067][T25944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2430.753564][T25944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2430.824702][T25944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2433.206179][T25944] hsr_slave_0: left promiscuous mode [ 2433.215533][T25944] hsr_slave_1: left promiscuous mode [ 2433.223045][T25944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2433.240782][T25944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2433.252374][T25944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2433.260485][T25944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2433.269248][T25944] bridge_slave_1: left allmulticast mode [ 2433.275081][T25944] bridge_slave_1: left promiscuous mode [ 2433.282562][T25944] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.292773][T25944] bridge_slave_0: left allmulticast mode [ 2433.298946][T25944] bridge_slave_0: left promiscuous mode [ 2433.304774][T25944] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.322497][T25944] hsr_slave_0: left promiscuous mode [ 2433.329962][T25944] hsr_slave_1: left promiscuous mode [ 2433.336171][T25944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2433.344224][T25944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2433.359031][T25944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2433.366675][T25944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2433.379114][T25944] bridge_slave_1: left allmulticast mode [ 2433.384832][T25944] bridge_slave_1: left promiscuous mode [ 2433.393517][T25944] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.405355][T25944] bridge_slave_0: left allmulticast mode [ 2433.414470][T25944] bridge_slave_0: left promiscuous mode [ 2433.422043][T25944] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.444341][T25944] hsr_slave_0: left promiscuous mode [ 2433.454533][T25944] hsr_slave_1: left promiscuous mode [ 2433.463163][T25944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2433.474821][T25944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2433.485277][T25944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2433.495672][T25944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2433.505651][T25944] bridge_slave_1: left allmulticast mode [ 2433.514242][T25944] bridge_slave_1: left promiscuous mode [ 2433.521915][T25944] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.534568][T25944] bridge_slave_0: left allmulticast mode [ 2433.544188][T25944] bridge_slave_0: left promiscuous mode [ 2433.552914][T25944] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.631386][T25944] veth1_macvtap: left promiscuous mode [ 2433.637217][T25944] veth0_macvtap: left promiscuous mode [ 2433.642826][T25944] veth1_vlan: left promiscuous mode [ 2433.650041][T25944] veth0_vlan: left promiscuous mode [ 2433.658278][T25944] veth1_macvtap: left promiscuous mode [ 2433.663980][T25944] veth0_macvtap: left promiscuous mode [ 2433.669981][T25944] veth1_vlan: left promiscuous mode [ 2433.675331][T25944] veth0_vlan: left promiscuous mode [ 2433.683686][T25944] veth1_macvtap: left promiscuous mode [ 2433.689361][T25944] veth0_macvtap: left promiscuous mode [ 2433.694952][T25944] veth1_vlan: left promiscuous mode [ 2433.700749][T25944] veth0_vlan: left promiscuous mode [ 2434.572116][T25944] team0 (unregistering): Port device team_slave_1 removed [ 2434.632513][T25944] team0 (unregistering): Port device team_slave_0 removed [ 2434.692858][T25944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2434.749237][T25944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2435.194819][T25944] bond0 (unregistering): Released all slaves [ 2435.318847][T25944] team0 (unregistering): Port device geneve1 removed [ 2435.902625][T25944] team0 (unregistering): Port device team_slave_1 removed [ 2435.962893][T25944] team0 (unregistering): Port device team_slave_0 removed [ 2436.024821][T25944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2436.083931][T25944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2436.540134][T25944] bond0 (unregistering): Released all slaves [ 2437.252811][T25944] team0 (unregistering): Port device team_slave_1 removed [ 2437.306694][T25944] team0 (unregistering): Port device team_slave_0 removed [ 2437.363940][T25944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2437.421339][T25944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2437.856171][T25944] bond0 (unregistering): Released all slaves [ 2467.881224][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.887681][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.321071][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.327658][ T1288] ieee802154 phy1 wpan1: encryption failed: -22