last executing test programs: 5.714077342s ago: executing program 3 (id=9381): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x4, &(0x7f0000000b80)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4000001) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x400}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e000000380005ffd25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xb, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="9500009500000000000000186000000200003000000001000008007f770002000200000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.486289978s ago: executing program 1 (id=9385): socket$kcm(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c120000001ec00037153e370a0001803a641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 5.254084074s ago: executing program 3 (id=9386): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000006c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, 0x0, 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000002000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) 4.529966423s ago: executing program 2 (id=9387): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="39000000140081ae10003c0005000183110042702fdf236f1f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582b647d", 0x39}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848340000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4800) (fail_nth: 9) 4.528211383s ago: executing program 3 (id=9388): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x40, 0x40, 0x41}, 0x50) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x10, 0x2, 0x0, 0xff, 0x0, 0xcbf0, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0xffff8880b8709000, 0x1}, 0x0, 0x2, 0xffffffff, 0x0, 0x4, 0xfffffffc, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x0, 0x10}, @initr0, @exit], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x6}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3, 0x0, 0x0, @void, @value=0xff070000, @void, @value=0xff070000}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106400000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b6500ff000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c74"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0xffffffff}, 0x80, 0x0}, 0x40050) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.442542475s ago: executing program 1 (id=9389): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000000008"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 4.441384135s ago: executing program 4 (id=9390): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xb, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3e", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 4.368883917s ago: executing program 0 (id=9391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0xffffffff80000000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x32000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x40000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='(pu&00\t||') r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) recvmsg$kcm(r4, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x10020) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="44c79ea4df4d9683e805e9a6365f44da8bcb04a9ba38151cf43bdc9468ef1a57ee4fe2b389b51aba6b3058671bad7feb20f4d8a70d8f4bd21e0c2631d12f6316376dcc97c3fca8fc90542361712474e4f35a648db4f51d7c2d4e6499dd3ea2dbcb1753538c4fadf679833d71c72e2851c1ad87d657f3a128893354169074ef863b543375b45baa668a5a304df116cb3dace2fa", @ANYRES64=0x0], 0x20) r9 = socket$kcm(0x10, 0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x8084) 3.517757409s ago: executing program 2 (id=9392): bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff5b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1a00000000000000080000000100008004000000", @ANYRES32, @ANYBLOB="b39a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000400000002000000000000005bb0989c25654d42ca8b508a638be48748723860ec85577d3513cac67dd485d59964ba722b2b2cdafab761fd910294944a5fdfc544d3b882282f13a01372a30198ef0cb625cd89d8f9799cacdd6ece02a6f4a1607566c6f200"/116], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x8}, 0x1500, 0x2, 0xfffffffe}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x0, 0x4000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b119e00000000009500850500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) gettid() sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x0, 0x40, 0x6, 0x2000, r4, 0x5, '\x00', 0x0, r1, 0x4, 0x6, 0x4, 0x8}, 0x50) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) openat$cgroup_ro(r5, &(0x7f0000000580)='memory.current\x00', 0x0, 0x0) 3.451939421s ago: executing program 1 (id=9393): r0 = socket$kcm(0xa, 0x1, 0x0) getpid() socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f8, &(0x7f0000000080)) gettid() syz_clone(0x0, 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a40)) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x4000003, @empty}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) (fail_nth: 4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000009000000731133000000000095000700"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.425522141s ago: executing program 4 (id=9394): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x35a, 0xe59}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff07ffd4060000200000006a0200000ee60000bf050000000000003d35f3ff000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000001640)="0c007f00e0ffffff007fb6adc76cec", 0x0, 0x127, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{0x0}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113", 0x68}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe) 3.354245053s ago: executing program 0 (id=9395): r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0xf, 0x8, 0x4, 0x1, 0x0, 0x7, 0x100, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x3, 0x8000000000000001}, 0x12000, 0x67, 0x2, 0x9, 0x41, 0x7, 0xfff, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x35a, 0xe59}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 3.262542776s ago: executing program 3 (id=9396): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000000822"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 3.121317969s ago: executing program 4 (id=9397): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000b80)=r0, 0x4) 2.631533612s ago: executing program 1 (id=9398): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40018000000000061117c00000000001e400000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 2.612441812s ago: executing program 2 (id=9399): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000006c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, 0x0, 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000002000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) 2.611383623s ago: executing program 4 (id=9400): close(0xffffffffffffffff) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x21, &(0x7f0000000200), 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x80) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x15, &(0x7f00000000c0), 0xb9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000400000001000000020000060400000002000000000000000000000000000000005f2e0079d55b73d71c45e348cbed6eaad310a459516f7ce03ad60462bc6ae3a8e4c1c184f60641ef8715af6132572455a1b062e932d8d40a6f2c0041564058ccd9"], &(0x7f00000003c0)=""/144, 0x38, 0x90, 0x1}, 0x20) socket$kcm(0x10, 0x2, 0x0) 2.469912756s ago: executing program 3 (id=9401): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x75040000, 0x0, r1}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x4b, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES16=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x800, 0x67, 0x0, 0x10, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r0, 0x58, &(0x7f00000007c0)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.380329509s ago: executing program 1 (id=9402): perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, 0x0, &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4050003) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32, @ANYBLOB], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$kcm(r2, 0x0, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a00810a1d08007b490d4f1e81f8d804000100ff05142603600e12080005007a01e300a8001600200003400400000003a84942de4fe3aefb8000a007a290457f01e84460dd46302af989b316277ce06bbace8017cbec4cce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025c4679ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e780000000000000000000000000000000064c69672c01ffb2d359e74b84dcb", 0xd8}], 0x1}, 0x8880) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bond0\x00', @link_local}) 2.147881015s ago: executing program 0 (id=9403): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x800000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 1.818912143s ago: executing program 0 (id=9404): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xb, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3e", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 1.753401225s ago: executing program 4 (id=9405): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000000008"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 1.662452427s ago: executing program 2 (id=9406): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18028004fcffffff0000000003000008850000002800000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) 1.661149587s ago: executing program 3 (id=9407): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1400"], 0x5000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_int(r1, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=0x5, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) write$cgroup_pid(r6, &(0x7f00000005c0)=r2, 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) 1.618944318s ago: executing program 0 (id=9408): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x6, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'hsr0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x89a2, &(0x7f0000000000)={'hsr0\x00', @remote}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x85, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000100)={r4}) 1.617710088s ago: executing program 1 (id=9409): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000098"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc084) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890c, &(0x7f0000000000)) 1.368810725s ago: executing program 4 (id=9410): socket$kcm(0xa, 0x1, 0x0) getpid() socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$sock(r2, &(0x7f0000000740)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)="6a110bc6a31e1a177424329af18d3150a3cee2ddc6a38a5d8f77db1964d814f6a840390ac6628ff4ba42715cc96c6ffbb9bdb5", 0x33}, {&(0x7f0000000500)="47548b59740ca5aa246f37206f14841771d37905945f3175d338e5aa18f029d93dcba9a320d5e7c464ed98ca230da173c76e3b4bf75fe92ee422afe68fe3736a17354950dd2263112977a548c8ad65550f421d53d2a95a838055c4f7f74172bd09a25a4ddf3e4d7c7006d8552750b32de2a7de9619c369649b0cce4a036d85f720072c9a14c094a51daa78e7f3f26e5153d4a8a5d5af9de0f5ef83f25e14201e464aaa298615109a4ffe417cf6c82d12caac5e17584eabf8e1c9c3649fe1c074f866a3ffc79e491353de25b81561f6d6787a0a7b997f63b2f08def4c36df2cbae8a8a3d44de843656c26e13700a22e16dc03326b", 0xf4}, {&(0x7f0000000600)="68b1a707402bcbb5a744135a6bb48c5310fb725a82680d4487ef00dcc04531e654b5909c80be8ec3c42d3a5ba2c21eb1867fa9779ac48fc3886eb49f297fed6c8743704bde8f0d9ab8b9eb4f56fa3fea7a14f5a939596807e9a78299b8ae96870b18a3e9173183f94d1a58e2829a22", 0x6f}], 0x3, &(0x7f00000006c0)=[@timestamping={{0x14}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}], 0x48}, 0x8800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080001dda", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000000000000000000000000429636e4", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004000060000000000020000000000000000f6371fa4af374f000006040000"], 0x0, 0x5a, 0x0, 0x0, 0x5fe}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r4, 0x4) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0xd7, &(0x7f0000000080), 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x28, &(0x7f0000000000), 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034008410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x20008840) 1.274140497s ago: executing program 2 (id=9411): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000000822"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 1.273882837s ago: executing program 0 (id=9412): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f00000002c0)}, 0x10) (fail_nth: 3) 0s ago: executing program 2 (id=9413): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa7}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) socket$kcm(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x30827183761d30fe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="950000000059347200020000000000f2dc783154036f83ad467300000000000000000000cd11b423beb76c00b5d6051f0d3bc05c343c2965fd00ca39c1fa4a08b5f7afb17b"], 0x0, 0xf, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00', @random="440000001000"}) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) kernel console output (not intermixed with test programs): tes in process `syz.4.8385'. [ 1709.909811][T30458] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8383'. [ 1710.046608][T30453] netlink: 'syz.3.8383': attribute type 21 has an invalid length. [ 1710.086309][T30453] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8383'. [ 1710.134247][T30453] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1710.258331][T30453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1710.333583][T30464] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8387'. [ 1711.757442][T30496] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1711.785212][T30496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1711.839652][T30496] netlink: 'syz.0.8398': attribute type 10 has an invalid length. [ 1711.963129][T30503] netlink: 'syz.2.8410': attribute type 3 has an invalid length. [ 1712.004179][T30503] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8410'. [ 1712.265779][T30508] netlink: 'syz.1.8401': attribute type 3 has an invalid length. [ 1712.280965][T30508] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8401'. [ 1712.832859][T30518] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8404'. [ 1712.879879][T30518] netlink: 'syz.1.8404': attribute type 1 has an invalid length. [ 1714.507289][T30541] netlink: 'syz.1.8415': attribute type 3 has an invalid length. [ 1714.610897][T30541] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8415'. [ 1716.452533][T30554] netlink: 'syz.4.8414': attribute type 10 has an invalid length. [ 1718.078871][T30586] netlink: 'syz.3.8428': attribute type 3 has an invalid length. [ 1718.096834][T30586] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8428'. [ 1718.394845][T30595] netlink: 'syz.1.8432': attribute type 22 has an invalid length. [ 1718.994092][T30612] netlink: 'syz.2.8439': attribute type 3 has an invalid length. [ 1719.128531][T30612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8439'. [ 1719.442572][T30605] device syzkaller0 entered promiscuous mode [ 1720.031542][T30628] netlink: 'syz.1.8443': attribute type 3 has an invalid length. [ 1720.071232][T30628] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8443'. [ 1721.529516][T30660] netlink: 'syz.4.8454': attribute type 3 has an invalid length. [ 1721.559695][T30660] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8454'. [ 1727.933504][T30646] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8451'. [ 1727.942868][T30647] netlink: 'syz.2.8451': attribute type 21 has an invalid length. [ 1727.951312][T30651] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8451'. [ 1727.961196][T30651] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1728.549411][T30717] netlink: 'syz.0.8473': attribute type 13 has an invalid length. [ 1728.586945][T30717] netlink: 'syz.0.8473': attribute type 14 has an invalid length. [ 1728.594911][T30717] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8473'. [ 1728.654984][T30718] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.8473'. [ 1729.622902][T30737] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8480'. [ 1729.682282][T30734] netlink: 'syz.1.8480': attribute type 21 has an invalid length. [ 1730.066505][T30736] device syzkaller0 entered promiscuous mode [ 1730.113263][T30734] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8480'. [ 1730.135384][T30734] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1730.255095][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.261717][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.745274][T30779] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8498'. [ 1734.755083][T30782] netlink: 'syz.3.8498': attribute type 21 has an invalid length. [ 1734.763682][T30783] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8498'. [ 1734.773472][T30783] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1734.791266][T30783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1737.103376][T30828] device syzkaller0 entered promiscuous mode [ 1737.121541][T30830] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8516'. [ 1737.152959][T30837] netlink: 'syz.3.8516': attribute type 21 has an invalid length. [ 1737.212520][T30839] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8516'. [ 1737.223348][T30839] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1737.246882][T30839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1741.404241][T30879] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8532'. [ 1741.591160][T30884] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8533'. [ 1741.698409][T30884] netlink: 'syz.0.8533': attribute type 21 has an invalid length. [ 1741.724393][T30884] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8533'. [ 1741.740224][T30884] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1741.834571][T30884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1741.977578][T30894] FAULT_INJECTION: forcing a failure. [ 1741.977578][T30894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1742.046899][T30894] CPU: 0 PID: 30894 Comm: syz.1.8537 Not tainted syzkaller #0 [ 1742.054556][T30894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1742.064671][T30894] Call Trace: [ 1742.067990][T30894] [ 1742.070959][T30894] dump_stack_lvl+0x188/0x24e [ 1742.075696][T30894] ? show_regs_print_info+0x12/0x12 [ 1742.080958][T30894] ? load_image+0x410/0x410 [ 1742.085611][T30894] ? __lock_acquire+0x7c40/0x7c40 [ 1742.090706][T30894] ? snprintf+0xe5/0x140 [ 1742.095028][T30894] should_fail_ex+0x390/0x4c0 [ 1742.099770][T30894] _copy_to_user+0x2c/0x130 [ 1742.104602][T30894] simple_read_from_buffer+0xe3/0x150 [ 1742.110127][T30894] proc_fail_nth_read+0x1a6/0x220 [ 1742.115217][T30894] ? proc_fault_inject_write+0x310/0x310 [ 1742.120982][T30894] ? fsnotify_perm+0x248/0x550 [ 1742.125868][T30894] ? proc_fault_inject_write+0x310/0x310 [ 1742.131623][T30894] vfs_read+0x2db/0x960 [ 1742.135909][T30894] ? kernel_read+0x1e0/0x1e0 [ 1742.140628][T30894] ? __fget_files+0x28/0x460 [ 1742.145281][T30894] ? __fget_files+0x3fc/0x460 [ 1742.150026][T30894] ? __fdget_pos+0x2ae/0x360 [ 1742.154662][T30894] ? ksys_read+0x70/0x260 [ 1742.159052][T30894] ksys_read+0x14d/0x260 [ 1742.163356][T30894] ? vfs_write+0x9a0/0x9a0 [ 1742.167822][T30894] ? lockdep_hardirqs_on+0x94/0x140 [ 1742.173062][T30894] do_syscall_64+0x4c/0xa0 [ 1742.177601][T30894] ? clear_bhb_loop+0x60/0xb0 [ 1742.182309][T30894] ? clear_bhb_loop+0x60/0xb0 [ 1742.187064][T30894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1742.193004][T30894] RIP: 0033:0x7f329975e84e [ 1742.197451][T30894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1742.217100][T30894] RSP: 002b:00007f329a5c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1742.225722][T30894] RAX: ffffffffffffffda RBX: 00007f329a5c16c0 RCX: 00007f329975e84e [ 1742.234183][T30894] RDX: 000000000000000f RSI: 00007f329a5c10a0 RDI: 0000000000000005 [ 1742.242271][T30894] RBP: 00007f329a5c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1742.250276][T30894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1742.258293][T30894] R13: 00007f3299a26038 R14: 00007f3299a25fa0 R15: 00007ffdcec96398 [ 1742.266336][T30894] [ 1742.334524][T30896] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.8538'. [ 1742.468475][T30896] netlink: zone id is out of range [ 1742.473764][T30896] netlink: zone id is out of range [ 1742.506982][T30896] netlink: zone id is out of range [ 1742.512501][T30896] netlink: zone id is out of range [ 1742.524281][T30896] netlink: zone id is out of range [ 1742.557037][T30896] netlink: zone id is out of range [ 1742.581489][T30896] netlink: zone id is out of range [ 1742.604102][T30896] netlink: zone id is out of range [ 1742.621122][T30896] netlink: zone id is out of range [ 1743.046913][T30897] netlink: 64967 bytes leftover after parsing attributes in process `syz.2.8538'. [ 1743.092851][T30916] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8545'. [ 1743.443891][T30924] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8548'. [ 1743.493449][T30928] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8549'. [ 1743.607869][T30926] netlink: 'syz.3.8549': attribute type 21 has an invalid length. [ 1743.655929][T30926] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8549'. [ 1743.681695][T30926] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1744.432309][T30949] netlink: 'syz.0.8556': attribute type 2 has an invalid length. [ 1744.456982][T30949] netlink: 'syz.0.8556': attribute type 8 has an invalid length. [ 1744.487398][T30949] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8556'. [ 1744.631315][T30956] netlink: 'syz.3.8559': attribute type 3 has an invalid length. [ 1745.147045][T30969] netlink: 'syz.1.8563': attribute type 2 has an invalid length. [ 1745.183773][T30969] netlink: 'syz.1.8563': attribute type 8 has an invalid length. [ 1745.261769][T30969] netlink: 'syz.1.8563': attribute type 2 has an invalid length. [ 1745.323212][T30969] netlink: 'syz.1.8563': attribute type 8 has an invalid length. [ 1745.501969][T30981] netlink: 'syz.0.8566': attribute type 21 has an invalid length. [ 1745.533134][T30981] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1747.540435][T31016] netlink: 'syz.3.8578': attribute type 27 has an invalid length. [ 1747.577343][T31016] __nla_validate_parse: 7 callbacks suppressed [ 1747.577365][T31016] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.8578'. [ 1751.853932][T31029] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8583'. [ 1751.863803][T31026] netlink: 'syz.2.8583': attribute type 21 has an invalid length. [ 1751.872319][T31031] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8583'. [ 1751.882396][T31031] net_ratelimit: 224 callbacks suppressed [ 1751.882407][T31031] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1751.904380][T31033] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8585'. [ 1753.932370][T31071] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1753.939514][T31071] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1755.565217][T31116] netlink: 'syz.3.8615': attribute type 9 has an invalid length. [ 1755.583551][T31116] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8615'. [ 1755.613477][T31109] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8614'. [ 1755.624473][T31108] netlink: 'syz.1.8614': attribute type 21 has an invalid length. [ 1755.657508][T31114] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8614'. [ 1755.678298][T31114] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1755.729870][T31119] netlink: 'syz.2.8616': attribute type 10 has an invalid length. [ 1755.974460][T31128] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.8619'. [ 1756.690720][T31148] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.8627'. [ 1757.362033][T31165] netlink: 'syz.3.8635': attribute type 29 has an invalid length. [ 1757.417699][T31165] netlink: 'syz.3.8635': attribute type 29 has an invalid length. [ 1757.460187][T31167] netlink: 'syz.3.8635': attribute type 29 has an invalid length. [ 1757.551559][T31165] netlink: 'syz.3.8635': attribute type 29 has an invalid length. [ 1757.660601][T31167] netlink: 'syz.3.8635': attribute type 17 has an invalid length. [ 1757.852729][T31172] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8637'. [ 1758.080138][T31171] netlink: 'syz.1.8637': attribute type 21 has an invalid length. [ 1758.142875][T31171] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8637'. [ 1758.182707][T31171] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1760.314839][T31207] netlink: 'syz.1.8647': attribute type 3 has an invalid length. [ 1760.342961][T31207] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8647'. [ 1761.747237][T31234] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8658'. [ 1761.794408][T31234] netlink: 'syz.3.8658': attribute type 21 has an invalid length. [ 1761.821556][T31234] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8658'. [ 1761.863985][T31234] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1762.008682][T31234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1762.202130][T31250] netlink: 'syz.2.8663': attribute type 3 has an invalid length. [ 1762.210948][T31250] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8663'. [ 1764.952148][ T4273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1764.972619][T31268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1764.994558][T31268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1765.009398][T31268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1765.030506][T31268] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1765.038140][T31268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1765.319351][T31274] FAULT_INJECTION: forcing a failure. [ 1765.319351][T31274] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.350707][T31274] CPU: 0 PID: 31274 Comm: syz.2.8671 Not tainted syzkaller #0 [ 1765.358899][T31274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1765.369088][T31274] Call Trace: [ 1765.372407][T31274] [ 1765.375377][T31274] dump_stack_lvl+0x188/0x24e [ 1765.380111][T31274] ? show_regs_print_info+0x12/0x12 [ 1765.385359][T31274] ? load_image+0x410/0x410 [ 1765.389923][T31274] ? __might_sleep+0xd0/0xd0 [ 1765.394596][T31274] ? __lock_acquire+0x7c40/0x7c40 [ 1765.399713][T31274] should_fail_ex+0x390/0x4c0 [ 1765.404435][T31274] should_failslab+0x5/0x20 [ 1765.409253][T31274] slab_pre_alloc_hook+0x59/0x300 [ 1765.414311][T31274] ? apparmor_sk_alloc_security+0x74/0x100 [ 1765.420151][T31274] __kmem_cache_alloc_node+0x4f/0x270 [ 1765.425673][T31274] ? apparmor_sk_alloc_security+0x74/0x100 [ 1765.431689][T31274] kmalloc_trace+0x26/0xe0 [ 1765.436341][T31274] apparmor_sk_alloc_security+0x74/0x100 [ 1765.442008][T31274] security_sk_alloc+0x6a/0xa0 [ 1765.446842][T31274] sk_prot_alloc+0x101/0x210 [ 1765.451485][T31274] ? sk_alloc+0x20/0x330 [ 1765.456373][T31274] sk_alloc+0x36/0x330 [ 1765.460672][T31274] ? bpf_ctx_init+0x154/0x190 [ 1765.465404][T31274] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1765.470825][T31274] ? lockdep_hardirqs_on+0x94/0x140 [ 1765.476090][T31274] ? cpu_online+0xa0/0xa0 [ 1765.480478][T31274] bpf_prog_test_run+0x31c/0x390 [ 1765.485558][T31274] __sys_bpf+0x62b/0x780 [ 1765.489852][T31274] ? bpf_link_show_fdinfo+0x380/0x380 [ 1765.495270][T31274] ? lock_chain_count+0x20/0x20 [ 1765.500248][T31274] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1765.506447][T31274] __x64_sys_bpf+0x78/0x90 [ 1765.510900][T31274] do_syscall_64+0x4c/0xa0 [ 1765.515349][T31274] ? clear_bhb_loop+0x60/0xb0 [ 1765.520064][T31274] ? clear_bhb_loop+0x60/0xb0 [ 1765.524794][T31274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1765.530742][T31274] RIP: 0033:0x7f9f7b79e019 [ 1765.535448][T31274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1765.555627][T31274] RSP: 002b:00007f9f7c6ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1765.564076][T31274] RAX: ffffffffffffffda RBX: 00007f9f7ba25fa0 RCX: 00007f9f7b79e019 [ 1765.572074][T31274] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1765.580089][T31274] RBP: 00007f9f7c6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1765.588101][T31274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.596109][T31274] R13: 00007f9f7ba26038 R14: 00007f9f7ba25fa0 R15: 00007ffc88f7f6d8 [ 1765.604223][T31274] [ 1766.127526][T31290] netlink: 'syz.1.8677': attribute type 3 has an invalid length. [ 1766.135849][T31290] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8677'. [ 1767.119415][T22280] Bluetooth: hci5: command 0x0409 tx timeout [ 1768.133589][T31266] chnl_net:caif_netlink_parms(): no params data found [ 1768.223700][T31266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.231486][T31266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.241074][T31266] device bridge_slave_0 entered promiscuous mode [ 1768.250794][T31266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.258543][T31266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.267679][T31266] device bridge_slave_1 entered promiscuous mode [ 1768.299364][T31266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.313182][T31266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1768.353069][T31266] team0: Port device team_slave_0 added [ 1768.369936][T31266] team0: Port device team_slave_1 added [ 1768.404081][T31266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1768.412588][T31266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1768.453286][T31266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1768.468418][T31266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1768.475797][T31266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1768.504737][T31266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1768.626149][T31266] device hsr_slave_0 entered promiscuous mode [ 1768.663477][T31266] device hsr_slave_1 entered promiscuous mode [ 1768.678438][T31266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1768.703171][T31266] Cannot create hsr debugfs directory [ 1769.196890][T22280] Bluetooth: hci5: command 0x041b tx timeout [ 1769.502588][T31266] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.733078][T31335] netlink: 'syz.3.8689': attribute type 3 has an invalid length. [ 1769.764382][T31335] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8689'. [ 1769.783812][T31340] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8691'. [ 1769.827228][T31338] netlink: 'syz.2.8691': attribute type 21 has an invalid length. [ 1769.871502][T31342] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8691'. [ 1769.886857][T31342] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1769.971841][T31266] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.082808][T31266] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.291805][T31352] netlink: 'syz.2.8704': attribute type 3 has an invalid length. [ 1770.311587][T31352] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8704'. [ 1770.561950][T31266] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.966476][T31266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1771.024341][ T30] device 0 left promiscuous mode [ 1771.060164][T31266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1771.085694][T31266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1771.137994][T31266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1771.277749][T22280] Bluetooth: hci5: command 0x040f tx timeout [ 1771.737171][T31381] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8705'. [ 1771.770827][T31382] netlink: 'syz.2.8705': attribute type 21 has an invalid length. [ 1771.808640][T31381] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8705'. [ 1771.860583][T31381] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1772.336324][T31388] netlink: 'syz.3.8709': attribute type 3 has an invalid length. [ 1772.383139][T31388] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8709'. [ 1772.603744][T31393] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8711'. [ 1772.632518][T31394] netlink: 'syz.0.8711': attribute type 21 has an invalid length. [ 1772.680899][T31393] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8711'. [ 1772.717709][T31393] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1772.864449][T31393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1773.034967][T31266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1773.232866][T31266] 8021q: adding VLAN 0 to HW filter on device team0 [ 1773.307530][T23627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1773.319099][T23627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1773.356939][T22280] Bluetooth: hci5: command 0x0419 tx timeout [ 1773.779336][T31416] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8717'. [ 1773.823691][T31417] netlink: 'syz.3.8717': attribute type 21 has an invalid length. [ 1773.835037][T31414] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1773.907269][T31414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1773.931769][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1773.945081][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1773.954570][T23621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.961804][T23621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1774.183506][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1774.219340][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1774.286335][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1774.324452][T23621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.331723][T23621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1774.363515][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1774.507386][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1774.532824][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1774.573870][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1774.588015][T31429] netlink: 'syz.3.8722': attribute type 3 has an invalid length. [ 1774.606526][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1775.472820][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1775.498729][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1775.556628][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1775.585687][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1775.615919][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1775.636523][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1775.958508][T31439] netlink: 'syz.3.8728': attribute type 10 has an invalid length. [ 1775.978487][T31439] __nla_validate_parse: 2 callbacks suppressed [ 1775.978543][T31439] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8728'. [ 1776.021579][T31439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1776.045984][T31439] device hsr0 entered promiscuous mode [ 1776.533758][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1776.550380][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1776.617862][ T30] device hsr_slave_0 left promiscuous mode [ 1777.013743][ T30] device hsr_slave_1 left promiscuous mode [ 1777.799825][ T30] device veth1_vlan left promiscuous mode [ 1777.805848][ T30] device veth0_vlan left promiscuous mode [ 1779.133840][ T30] team0 (unregistering): Port device virt_wifi0 removed [ 1779.708854][T31495] FAULT_INJECTION: forcing a failure. [ 1779.708854][T31495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1779.723020][T31495] CPU: 1 PID: 31495 Comm: syz.0.8742 Not tainted syzkaller #0 [ 1779.730556][T31495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1779.740649][T31495] Call Trace: [ 1779.744053][T31495] [ 1779.747012][T31495] dump_stack_lvl+0x188/0x24e [ 1779.751736][T31495] ? show_regs_print_info+0x12/0x12 [ 1779.756977][T31495] ? load_image+0x410/0x410 [ 1779.761522][T31495] ? __lock_acquire+0x7c40/0x7c40 [ 1779.766629][T31495] ? snprintf+0xe5/0x140 [ 1779.770940][T31495] should_fail_ex+0x390/0x4c0 [ 1779.776115][T31495] _copy_to_user+0x2c/0x130 [ 1779.780678][T31495] simple_read_from_buffer+0xe3/0x150 [ 1779.786102][T31495] proc_fail_nth_read+0x1a6/0x220 [ 1779.791186][T31495] ? proc_fault_inject_write+0x310/0x310 [ 1779.796871][T31495] ? fsnotify_perm+0x248/0x550 [ 1779.801704][T31495] ? proc_fault_inject_write+0x310/0x310 [ 1779.807376][T31495] vfs_read+0x2db/0x960 [ 1779.811604][T31495] ? kernel_read+0x1e0/0x1e0 [ 1779.816244][T31495] ? __fget_files+0x28/0x460 [ 1779.820881][T31495] ? __fget_files+0x3fc/0x460 [ 1779.825601][T31495] ? __fdget_pos+0x2ae/0x360 [ 1779.830264][T31495] ? ksys_read+0x70/0x260 [ 1779.834628][T31495] ksys_read+0x14d/0x260 [ 1779.838919][T31495] ? vfs_write+0x9a0/0x9a0 [ 1779.843379][T31495] ? lockdep_hardirqs_on+0x94/0x140 [ 1779.848630][T31495] do_syscall_64+0x4c/0xa0 [ 1779.853086][T31495] ? clear_bhb_loop+0x60/0xb0 [ 1779.857799][T31495] ? clear_bhb_loop+0x60/0xb0 [ 1779.862517][T31495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1779.868443][T31495] RIP: 0033:0x7f2333d5e84e [ 1779.872938][T31495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1779.892590][T31495] RSP: 002b:00007f2334c77fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1779.901044][T31495] RAX: ffffffffffffffda RBX: 00007f2334c786c0 RCX: 00007f2333d5e84e [ 1779.909043][T31495] RDX: 000000000000000f RSI: 00007f2334c780a0 RDI: 000000000000000f [ 1779.917051][T31495] RBP: 00007f2334c78090 R08: 0000000000000000 R09: 0000000000000000 [ 1779.925047][T31495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1779.933042][T31495] R13: 00007f2334026038 R14: 00007f2334025fa0 R15: 00007ffd1d64bd58 [ 1779.941055][T31495] [ 1779.950730][ T30] team0 (unregistering): Port device team_slave_1 removed [ 1779.999215][ T30] team0 (unregistering): Port device team_slave_0 removed [ 1780.388978][T31266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1780.418092][T31483] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8739'. [ 1781.712545][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1781.723740][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1781.799453][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1781.818918][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1781.829907][T31520] FAULT_INJECTION: forcing a failure. [ 1781.829907][T31520] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.857796][T31520] CPU: 1 PID: 31520 Comm: syz.2.8749 Not tainted syzkaller #0 [ 1781.865268][T31266] device veth0_vlan entered promiscuous mode [ 1781.865684][T31520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1781.881836][T31520] Call Trace: [ 1781.885180][T31520] [ 1781.888155][T31520] dump_stack_lvl+0x188/0x24e [ 1781.892923][T31520] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1781.899149][T31520] ? show_regs_print_info+0x12/0x12 [ 1781.904419][T31520] ? load_image+0x410/0x410 [ 1781.909007][T31520] should_fail_ex+0x390/0x4c0 [ 1781.913754][T31520] should_failslab+0x5/0x20 [ 1781.918310][T31520] slab_pre_alloc_hook+0x59/0x300 [ 1781.923489][T31520] kmem_cache_alloc_lru+0x49/0x2e0 [ 1781.928676][T31520] ? __d_alloc+0x2e/0x6e0 [ 1781.933066][T31520] ? atime_needs_update+0x770/0x770 [ 1781.938325][T31520] __d_alloc+0x2e/0x6e0 [ 1781.942531][T31520] ? d_alloc_anon+0x9/0x20 [ 1781.947087][T31520] __ns_get_path+0x3e1/0x650 [ 1781.951748][T31520] ns_get_path+0x50/0x90 [ 1781.956059][T31520] proc_ns_get_link+0x168/0x280 [ 1781.961058][T31520] ? proc_ns_instantiate+0xf0/0xf0 [ 1781.966239][T31520] ? try_to_unlazy+0x33e/0x5c0 [ 1781.970811][T31266] device veth1_vlan entered promiscuous mode [ 1781.977146][T31520] ? bpf_lsm_inode_follow_link+0x5/0x10 [ 1781.982757][T31520] ? security_inode_follow_link+0xb3/0x100 [ 1781.988622][T31520] ? proc_ns_instantiate+0xf0/0xf0 [ 1781.993793][T31520] pick_link+0x6ad/0xe20 [ 1781.998109][T31520] step_into+0xc14/0xee0 [ 1782.002454][T31520] ? pid_revalidate+0x1e/0x250 [ 1782.007292][T31520] ? set_root+0x3a0/0x3a0 [ 1782.011674][T31520] ? pid_revalidate+0x209/0x250 [ 1782.016578][T31520] ? lookup_fast+0x494/0x4c0 [ 1782.021235][T31520] path_openat+0x15dd/0x2f10 [ 1782.025910][T31520] ? do_filp_open+0x420/0x420 [ 1782.030664][T31520] do_filp_open+0x1ee/0x420 [ 1782.035247][T31520] ? vfs_tmpfile+0x470/0x470 [ 1782.039913][T31520] ? _raw_spin_unlock+0x24/0x40 [ 1782.044846][T31520] ? alloc_fd+0x590/0x640 [ 1782.049265][T31520] do_sys_openat2+0x14b/0x4f0 [ 1782.053989][T31520] ? perf_trace_preemptirq_template+0x268/0x320 [ 1782.060288][T31520] ? do_sys_open+0xe0/0xe0 [ 1782.064758][T31520] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1782.070800][T31520] ? lock_chain_count+0x20/0x20 [ 1782.075702][T31520] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1782.081753][T31520] __x64_sys_openat+0x135/0x160 [ 1782.086665][T31520] do_syscall_64+0x4c/0xa0 [ 1782.091143][T31520] ? clear_bhb_loop+0x60/0xb0 [ 1782.095865][T31520] ? clear_bhb_loop+0x60/0xb0 [ 1782.100671][T31520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1782.106600][T31520] RIP: 0033:0x7f9f7b75e84e [ 1782.111048][T31520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1782.130793][T31520] RSP: 002b:00007f9f7c6feec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1782.139248][T31520] RAX: ffffffffffffffda RBX: 00007f9f7c6ff6c0 RCX: 00007f9f7b75e84e [ 1782.147266][T31520] RDX: 0000000000000000 RSI: 00007f9f7c6fef90 RDI: ffffffffffffff9c [ 1782.155273][T31520] RBP: 00007f9f7c6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1782.163292][T31520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1782.171307][T31520] R13: 00007f9f7ba26038 R14: 00007f9f7ba25fa0 R15: 00007ffc88f7f6d8 [ 1782.179355][T31520] [ 1782.210281][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1782.221525][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1782.234697][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1782.279293][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1782.307282][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1782.338617][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1782.382030][T31266] device veth0_macvtap entered promiscuous mode [ 1782.414386][T31266] device veth1_macvtap entered promiscuous mode [ 1782.448809][T23627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1782.468089][T23627] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1782.589119][T31266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1782.648703][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1782.682411][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1782.727886][T31266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1782.752640][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1782.772656][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1782.823246][T31266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.898628][T31266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.938548][T31266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.974577][T31266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.989398][T31531] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.8754'. [ 1783.223712][T31531] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1783.277532][T31531] CPU: 0 PID: 31531 Comm: syz.0.8754 Not tainted syzkaller #0 [ 1783.285092][T31531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1783.295200][T31531] Call Trace: [ 1783.298520][T31531] [ 1783.301507][T31531] dump_stack_lvl+0x188/0x24e [ 1783.306330][T31531] ? show_regs_print_info+0x12/0x12 [ 1783.311589][T31531] ? load_image+0x410/0x410 [ 1783.316168][T31531] sysfs_warn_dup+0x8a/0xa0 [ 1783.320752][T31531] sysfs_do_create_link_sd+0xc0/0x110 [ 1783.326214][T31531] device_add+0x83b/0x1050 [ 1783.330714][T31531] wiphy_register+0x1d8b/0x2aa0 [ 1783.335678][T31531] ? cfg80211_event_work+0x40/0x40 [ 1783.340915][T31531] ? minstrel_ht_alloc+0x894/0xa20 [ 1783.346095][T31531] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1783.352210][T31531] ieee80211_register_hw+0x2d48/0x39f0 [ 1783.357755][T31531] ? ieee80211_register_hw+0xee1/0x39f0 [ 1783.363702][T31531] ? ieee80211_register_hw+0xee1/0x39f0 [ 1783.369296][T31531] ? ieee80211_tasklet_handler+0x20/0x20 [ 1783.374971][T31531] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1783.380922][T31531] ? __debug_object_init+0xed/0x440 [ 1783.386335][T31531] ? memset+0x1e/0x40 [ 1783.390351][T31531] ? __hrtimer_init+0x189/0x270 [ 1783.395241][T31531] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1783.401032][T31531] ? memcpy+0x3c/0x60 [ 1783.405310][T31531] hwsim_new_radio_nl+0xab7/0xc90 [ 1783.410471][T31531] genl_family_rcv_msg_doit+0x22f/0x350 [ 1783.416069][T31531] ? end_current_label_crit_section+0x170/0x170 [ 1783.422389][T31531] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1783.428496][T31531] ? bpf_lsm_capable+0x5/0x10 [ 1783.433204][T31531] ? security_capable+0x85/0xb0 [ 1783.438121][T31531] genl_rcv_msg+0x601/0x790 [ 1783.442660][T31531] ? genl_bind+0x360/0x360 [ 1783.447367][T31531] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1783.453759][T31531] netlink_rcv_skb+0x1ef/0x440 [ 1783.458654][T31531] ? genl_bind+0x360/0x360 [ 1783.463296][T31531] ? netlink_ack+0x1160/0x1160 [ 1783.468110][T31531] ? down_read+0x1a8/0x2d0 [ 1783.472560][T31531] genl_rcv+0x24/0x40 [ 1783.476583][T31531] netlink_unicast+0x7ad/0x920 [ 1783.481914][T31531] netlink_sendmsg+0x8ad/0xbd0 [ 1783.486727][T31531] ? netlink_getsockopt+0x550/0x550 [ 1783.492147][T31531] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1783.497758][T31531] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1783.503158][T31531] ? security_socket_sendmsg+0x7c/0xa0 [ 1783.508682][T31531] ? netlink_getsockopt+0x550/0x550 [ 1783.513917][T31531] ____sys_sendmsg+0x5ed/0x9a0 [ 1783.518726][T31531] ? __sys_sendmsg_sock+0x30/0x30 [ 1783.523781][T31531] ? __import_iovec+0x306/0x510 [ 1783.528723][T31531] ? import_iovec+0x6f/0xa0 [ 1783.533261][T31531] ___sys_sendmsg+0x2a2/0x360 [ 1783.538091][T31531] ? __sys_sendmsg+0x2a0/0x2a0 [ 1783.542933][T31531] ? trace_call_bpf+0xbf/0x6b0 [ 1783.548011][T31531] __se_sys_sendmsg+0x1c3/0x2b0 [ 1783.552988][T31531] ? perf_trace_preemptirq_template+0x268/0x320 [ 1783.559269][T31531] ? __x64_sys_sendmsg+0x80/0x80 [ 1783.564273][T31531] ? lockdep_hardirqs_on+0x94/0x140 [ 1783.569518][T31531] do_syscall_64+0x4c/0xa0 [ 1783.573979][T31531] ? clear_bhb_loop+0x60/0xb0 [ 1783.578701][T31531] ? clear_bhb_loop+0x60/0xb0 [ 1783.583513][T31531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1783.589464][T31531] RIP: 0033:0x7f2333d9e019 [ 1783.594096][T31531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1783.613742][T31531] RSP: 002b:00007f2334c78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1783.622283][T31531] RAX: ffffffffffffffda RBX: 00007f2334025fa0 RCX: 00007f2333d9e019 [ 1783.630287][T31531] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000010 [ 1783.638304][T31531] RBP: 00007f2333e3500c R08: 0000000000000000 R09: 0000000000000000 [ 1783.646327][T31531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1783.654354][T31531] R13: 00007f2334026038 R14: 00007f2334025fa0 R15: 00007ffd1d64bd58 [ 1783.662394][T31531] [ 1783.705490][T31535] netlink: 'syz.2.8755': attribute type 10 has an invalid length. [ 1783.718618][T31535] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8755'. [ 1783.740897][T31535] device hsr0 entered promiscuous mode [ 1783.755771][T31535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1783.957551][T23627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1783.967272][T23627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1783.987099][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1785.111397][T23627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1785.127199][T23627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1785.155868][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1786.555032][T31587] netlink: 'syz.4.8770': attribute type 10 has an invalid length. [ 1786.588032][T31587] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8770'. [ 1786.606458][T31587] device hsr0 entered promiscuous mode [ 1786.619162][T31587] bridge0: port 3(hsr0) entered blocking state [ 1786.639306][T31587] bridge0: port 3(hsr0) entered disabled state [ 1786.695708][T31587] bridge0: port 3(hsr0) entered blocking state [ 1786.703045][T31587] bridge0: port 3(hsr0) entered forwarding state [ 1788.382361][T31616] FAULT_INJECTION: forcing a failure. [ 1788.382361][T31616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.397237][T31616] CPU: 0 PID: 31616 Comm: syz.0.8781 Not tainted syzkaller #0 [ 1788.405123][T31616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1788.415228][T31616] Call Trace: [ 1788.418572][T31616] [ 1788.421546][T31616] dump_stack_lvl+0x188/0x24e [ 1788.426284][T31616] ? show_regs_print_info+0x12/0x12 [ 1788.431536][T31616] ? load_image+0x410/0x410 [ 1788.436088][T31616] ? __might_fault+0xa6/0x120 [ 1788.440819][T31616] should_fail_ex+0x390/0x4c0 [ 1788.445552][T31616] copyin+0x1b/0x120 [ 1788.449507][T31616] _copy_from_iter+0x447/0x1130 [ 1788.454563][T31616] ? copyout_mc+0x110/0x110 [ 1788.459138][T31616] ? __virt_addr_valid+0x188/0x540 [ 1788.464317][T31616] ? __virt_addr_valid+0x188/0x540 [ 1788.469482][T31616] ? __virt_addr_valid+0x467/0x540 [ 1788.474666][T31616] ? __phys_addr_symbol+0x2b/0x70 [ 1788.479732][T31616] ? __check_object_size+0x4f6/0xa70 [ 1788.485172][T31616] netlink_sendmsg+0x755/0xbd0 [ 1788.489986][T31616] ? netlink_getsockopt+0x550/0x550 [ 1788.495257][T31616] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1788.500839][T31616] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1788.506170][T31616] ? security_socket_sendmsg+0x7c/0xa0 [ 1788.511659][T31616] ? netlink_getsockopt+0x550/0x550 [ 1788.516922][T31616] ____sys_sendmsg+0x5ed/0x9a0 [ 1788.521764][T31616] ? __sys_sendmsg_sock+0x30/0x30 [ 1788.526839][T31616] ? __import_iovec+0x306/0x510 [ 1788.531827][T31616] ? import_iovec+0x6f/0xa0 [ 1788.536846][T31616] ___sys_sendmsg+0x2a2/0x360 [ 1788.541697][T31616] ? __sys_sendmsg+0x2a0/0x2a0 [ 1788.546613][T31616] ? __lock_acquire+0x7c40/0x7c40 [ 1788.551824][T31616] __se_sys_sendmsg+0x1c3/0x2b0 [ 1788.556913][T31616] ? __x64_sys_sendmsg+0x80/0x80 [ 1788.561938][T31616] ? lockdep_hardirqs_on+0x94/0x140 [ 1788.567207][T31616] do_syscall_64+0x4c/0xa0 [ 1788.571672][T31616] ? clear_bhb_loop+0x60/0xb0 [ 1788.576398][T31616] ? clear_bhb_loop+0x60/0xb0 [ 1788.581140][T31616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1788.587427][T31616] RIP: 0033:0x7f2333d9e019 [ 1788.591930][T31616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1788.611584][T31616] RSP: 002b:00007f2334c78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1788.620302][T31616] RAX: ffffffffffffffda RBX: 00007f2334025fa0 RCX: 00007f2333d9e019 [ 1788.628305][T31616] RDX: 0000000000008084 RSI: 0000200000000000 RDI: 0000000000000003 [ 1788.636323][T31616] RBP: 00007f2334c78090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.644387][T31616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.652485][T31616] R13: 00007f2334026038 R14: 00007f2334025fa0 R15: 00007ffd1d64bd58 [ 1788.660799][T31616] [ 1788.689699][T31618] netlink: 'syz.4.8782': attribute type 29 has an invalid length. [ 1788.721748][T31618] netlink: 'syz.4.8782': attribute type 29 has an invalid length. [ 1788.737434][T31618] netlink: 'syz.4.8782': attribute type 29 has an invalid length. [ 1789.882026][T31643] netlink: 'syz.1.8789': attribute type 10 has an invalid length. [ 1789.892392][T31643] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8789'. [ 1789.903887][T31643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1789.915627][T31643] device hsr0 entered promiscuous mode [ 1789.949640][T31643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1790.601508][T31652] delete_channel: no stack [ 1791.069586][T31672] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.8801'. [ 1791.166550][T31672] : port 1(ip6gretap0) entered blocking state [ 1791.208038][T31672] : port 1(ip6gretap0) entered disabled state [ 1791.254223][T31672] device ip6gretap0 entered promiscuous mode [ 1791.403095][T31675] device ip6gretap0 left promiscuous mode [ 1791.419799][T31675] : port 1(ip6gretap0) entered disabled state [ 1791.721518][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.727995][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.814702][T31684] mac80211_hwsim hwsim57 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1791.870537][T31684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8805'. [ 1793.529404][T31704] netlink: 'syz.4.8813': attribute type 3 has an invalid length. [ 1793.558737][T31704] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.8813'. [ 1794.340021][T31734] netlink: 'syz.4.8823': attribute type 21 has an invalid length. [ 1794.364558][T31734] netlink: 'syz.4.8823': attribute type 6 has an invalid length. [ 1794.389694][T31734] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8823'. [ 1795.692040][T31750] netlink: 'syz.1.8831': attribute type 21 has an invalid length. [ 1795.711803][T31750] netlink: 'syz.1.8831': attribute type 1 has an invalid length. [ 1795.853116][T31753] netlink: 'syz.3.8832': attribute type 21 has an invalid length. [ 1795.875444][T31753] netlink: 'syz.3.8832': attribute type 1 has an invalid length. [ 1795.919045][T31756] netlink: 'syz.1.8831': attribute type 21 has an invalid length. [ 1796.050878][T31268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1796.061327][T31268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1796.069787][T31268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1796.080580][T31268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1796.089644][T31268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1796.100522][T31268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1796.948885][T23621] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.856251][T31758] chnl_net:caif_netlink_parms(): no params data found [ 1797.919019][T23621] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.065209][T23621] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.158791][T22280] Bluetooth: hci1: command 0x0409 tx timeout [ 1798.318127][T23621] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.404634][T31795] netlink: 'syz.3.8845': attribute type 3 has an invalid length. [ 1798.417100][T31795] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.8845'. [ 1798.455709][T31758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.483824][T31758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.504553][T31758] device bridge_slave_0 entered promiscuous mode [ 1798.521226][T31758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.537418][T31758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.545781][T31758] device bridge_slave_1 entered promiscuous mode [ 1798.652725][T31758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1798.694894][T31809] netlink: 'syz.2.8847': attribute type 1 has an invalid length. [ 1798.765520][T31758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1798.774782][T31809] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.8847'. [ 1799.551265][T31758] team0: Port device team_slave_0 added [ 1799.604703][T31758] team0: Port device team_slave_1 added [ 1799.776209][T31758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1799.828078][T31758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.007131][T31758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1800.072226][T31758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1800.127034][T31758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.237278][T22280] Bluetooth: hci1: command 0x041b tx timeout [ 1800.311233][T31758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1800.583108][T31758] device hsr_slave_0 entered promiscuous mode [ 1800.640178][T31758] device hsr_slave_1 entered promiscuous mode [ 1801.111212][T31847] FAULT_INJECTION: forcing a failure. [ 1801.111212][T31847] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.236815][T31847] CPU: 0 PID: 31847 Comm: syz.4.8857 Not tainted syzkaller #0 [ 1801.244418][T31847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1801.254534][T31847] Call Trace: [ 1801.257859][T31847] [ 1801.260832][T31847] dump_stack_lvl+0x188/0x24e [ 1801.265580][T31847] ? show_regs_print_info+0x12/0x12 [ 1801.271100][T31847] ? load_image+0x410/0x410 [ 1801.275663][T31847] ? verify_lock_unused+0x140/0x140 [ 1801.280947][T31847] should_fail_ex+0x390/0x4c0 [ 1801.285743][T31847] should_failslab+0x5/0x20 [ 1801.290306][T31847] slab_pre_alloc_hook+0x59/0x300 [ 1801.295423][T31847] kmem_cache_alloc+0x56/0x2f0 [ 1801.300253][T31847] ? skb_clone+0x1e7/0x370 [ 1801.304747][T31847] skb_clone+0x1e7/0x370 [ 1801.309053][T31847] __netlink_deliver_tap+0x3e4/0x7e0 [ 1801.314406][T31847] ? netlink_deliver_tap+0x2e/0x1b0 [ 1801.319671][T31847] netlink_deliver_tap+0x19c/0x1b0 [ 1801.324945][T31847] netlink_unicast+0x777/0x920 [ 1801.329784][T31847] netlink_sendmsg+0x8ad/0xbd0 [ 1801.334805][T31847] ? netlink_getsockopt+0x550/0x550 [ 1801.340064][T31847] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1801.345671][T31847] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1801.351024][T31847] ? security_socket_sendmsg+0x7c/0xa0 [ 1801.356665][T31847] ? netlink_getsockopt+0x550/0x550 [ 1801.362230][T31847] ____sys_sendmsg+0x5ed/0x9a0 [ 1801.367083][T31847] ? __sys_sendmsg_sock+0x30/0x30 [ 1801.372167][T31847] ? __import_iovec+0x306/0x510 [ 1801.377114][T31847] ? import_iovec+0x6f/0xa0 [ 1801.381684][T31847] ___sys_sendmsg+0x2a2/0x360 [ 1801.386429][T31847] ? __sys_sendmsg+0x2a0/0x2a0 [ 1801.391361][T31847] ? __lock_acquire+0x7c40/0x7c40 [ 1801.396465][T31847] __se_sys_sendmsg+0x1c3/0x2b0 [ 1801.401386][T31847] ? __x64_sys_sendmsg+0x80/0x80 [ 1801.406660][T31847] ? lockdep_hardirqs_on+0x94/0x140 [ 1801.411950][T31847] do_syscall_64+0x4c/0xa0 [ 1801.416419][T31847] ? clear_bhb_loop+0x60/0xb0 [ 1801.421244][T31847] ? clear_bhb_loop+0x60/0xb0 [ 1801.426085][T31847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1801.432254][T31847] RIP: 0033:0x7f88b2d9e019 [ 1801.436731][T31847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.456584][T31847] RSP: 002b:00007f88b3d42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1801.465090][T31847] RAX: ffffffffffffffda RBX: 00007f88b3025fa0 RCX: 00007f88b2d9e019 [ 1801.473141][T31847] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 1801.481200][T31847] RBP: 00007f88b3d42090 R08: 0000000000000000 R09: 0000000000000000 [ 1801.489261][T31847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1801.497292][T31847] R13: 00007f88b3026038 R14: 00007f88b3025fa0 R15: 00007ffcbe9e7ee8 [ 1801.505692][T31847] [ 1801.807684][T31847] netlink: 'syz.4.8857': attribute type 21 has an invalid length. [ 1802.317904][T31268] Bluetooth: hci1: command 0x040f tx timeout [ 1803.186374][T31870] netlink: 'syz.4.8862': attribute type 21 has an invalid length. [ 1803.207091][T31870] netlink: 'syz.4.8862': attribute type 1 has an invalid length. [ 1804.295191][T31758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1804.363901][T31758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1804.397023][T31268] Bluetooth: hci1: command 0x0419 tx timeout [ 1804.446652][T31758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1804.540538][T31758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1804.554556][T31896] FAULT_INJECTION: forcing a failure. [ 1804.554556][T31896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1804.644538][T31896] CPU: 1 PID: 31896 Comm: syz.1.8869 Not tainted syzkaller #0 [ 1804.652122][T31896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1804.662246][T31896] Call Trace: [ 1804.665595][T31896] [ 1804.668591][T31896] dump_stack_lvl+0x188/0x24e [ 1804.673351][T31896] ? show_regs_print_info+0x12/0x12 [ 1804.678719][T31896] ? load_image+0x410/0x410 [ 1804.683300][T31896] ? __lock_acquire+0x7c40/0x7c40 [ 1804.688427][T31896] ? perf_swevent_event+0x1c6/0x570 [ 1804.693705][T31896] should_fail_ex+0x390/0x4c0 [ 1804.698466][T31896] _copy_from_user+0x2c/0x170 [ 1804.703591][T31896] do_ipv6_setsockopt+0x312/0x3c30 [ 1804.708802][T31896] ? sk_dst_reset+0xa0/0xa0 [ 1804.713698][T31896] ? __lock_acquire+0x138a/0x7c40 [ 1804.718858][T31896] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1804.724649][T31896] ? aa_label_sk_perm+0x4cc/0x660 [ 1804.729747][T31896] ? perf_trace_lock+0x301/0x390 [ 1804.734757][T31896] ? aa_sk_perm+0x950/0x950 [ 1804.739354][T31896] ? __might_sleep+0xd0/0xd0 [ 1804.744015][T31896] ? __fget_files+0x28/0x460 [ 1804.748691][T31896] ? aa_sk_perm+0x81f/0x950 [ 1804.753268][T31896] ? aa_af_perm+0x340/0x340 [ 1804.757829][T31896] ? __fget_files+0x3fc/0x460 [ 1804.762592][T31896] ? aa_sock_opt_perm+0x74/0x100 [ 1804.767801][T31896] ipv6_setsockopt+0x55/0x190 [ 1804.772637][T31896] ? sock_common_recvmsg+0x190/0x190 [ 1804.778001][T31896] __sys_setsockopt+0x2bf/0x3d0 [ 1804.783650][T31896] __x64_sys_setsockopt+0xb1/0xc0 [ 1804.788756][T31896] do_syscall_64+0x4c/0xa0 [ 1804.793242][T31896] ? clear_bhb_loop+0x60/0xb0 [ 1804.798094][T31896] ? clear_bhb_loop+0x60/0xb0 [ 1804.803014][T31896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1804.808985][T31896] RIP: 0033:0x7f329979e019 [ 1804.813930][T31896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1804.833611][T31896] RSP: 002b:00007f329a5c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1804.842209][T31896] RAX: ffffffffffffffda RBX: 00007f3299a25fa0 RCX: 00007f329979e019 [ 1804.850268][T31896] RDX: 0000000000000014 RSI: 0000000000000029 RDI: 0000000000000009 [ 1804.858300][T31896] RBP: 00007f329a5c1090 R08: 0000000000000120 R09: 0000000000000000 [ 1804.866341][T31896] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1804.874472][T31896] R13: 00007f3299a26038 R14: 00007f3299a25fa0 R15: 00007ffdcec96398 [ 1804.882641][T31896] [ 1805.393580][T31920] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1805.562148][T23621] device hsr_slave_0 left promiscuous mode [ 1805.583242][T23621] device hsr_slave_1 left promiscuous mode [ 1805.652024][T23621] device veth0_macvtap left promiscuous mode [ 1805.667354][T23621] device veth1_vlan left promiscuous mode [ 1805.698129][T23621] device veth0_vlan left promiscuous mode [ 1805.874073][T31922] netlink: 'syz.1.8875': attribute type 3 has an invalid length. [ 1805.927399][T31922] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.8875'. [ 1806.832329][T23621] device macvlan0 left promiscuous mode [ 1806.862195][T23621] team0 (unregistering): Port device macvlan0 removed [ 1807.119424][T23621] device virt_wifi0 left promiscuous mode [ 1807.139153][T23621] team0 (unregistering): Port device virt_wifi0 removed [ 1810.638305][T23621] device team_slave_1 left promiscuous mode [ 1810.646611][T23621] team0 (unregistering): Port device team_slave_1 removed [ 1810.727576][T23621] device team_slave_0 left promiscuous mode [ 1810.739500][T23621] team0 (unregistering): Port device team_slave_0 removed [ 1811.319952][T31758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1811.375038][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1811.399445][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1811.460617][T31758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1811.489446][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1811.512765][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1811.548295][T23631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.555593][T23631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1811.599397][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1811.658054][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1811.697679][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1811.717796][T23631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.725007][T23631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1811.762806][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1811.788103][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1811.823476][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1811.838367][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1811.953261][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1811.995846][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1812.038053][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1812.077458][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1812.117636][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1812.169715][T31758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1812.175181][T31973] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1812.207274][T31758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1812.344448][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1812.376570][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1813.940214][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1813.962017][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1814.003216][T31758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1814.126059][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1814.162066][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1814.229932][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1814.248342][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1814.281857][T31758] device veth0_vlan entered promiscuous mode [ 1814.320733][T32012] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8901'. [ 1814.357240][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1814.369986][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1814.404298][T31758] device veth1_vlan entered promiscuous mode [ 1814.507881][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1814.608129][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1814.634089][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1814.672244][T31758] device veth0_macvtap entered promiscuous mode [ 1814.721708][T31758] device veth1_macvtap entered promiscuous mode [ 1814.818302][T31758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1814.855561][T31758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.898703][T31758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1814.911168][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1814.948962][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1814.990465][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1815.033033][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1815.083115][T31758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1815.116715][T31758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.153419][T31758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1815.199121][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1815.219275][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1815.264641][T31758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.306760][T31758] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.315553][T31758] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.370836][T31758] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.580104][T23629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.604718][T23629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1815.627062][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1815.676887][T23629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.684799][T23629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1815.723262][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1815.897776][T32037] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8917'. [ 1815.945031][T32037] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8917'. [ 1815.973448][T32042] netlink: 'syz.0.8829': attribute type 29 has an invalid length. [ 1815.982482][T32041] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8917'. [ 1816.016384][T32042] netlink: 'syz.0.8829': attribute type 29 has an invalid length. [ 1816.077299][T32047] netlink: 'syz.0.8829': attribute type 29 has an invalid length. [ 1816.358218][T32052] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1816.501952][T32051] netlink: 'syz.3.8908': attribute type 21 has an invalid length. [ 1816.539289][T32051] netlink: 'syz.3.8908': attribute type 1 has an invalid length. [ 1817.226932][T32065] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.8912'. [ 1817.364578][T32065] netlink: 'syz.3.8912': attribute type 29 has an invalid length. [ 1817.489986][T32065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8912'. [ 1817.971579][T32065] netlink: 'syz.3.8912': attribute type 29 has an invalid length. [ 1817.987277][T32065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8912'. [ 1818.231633][T32084] IPv6: Can't replace route, no match found [ 1818.424148][T32096] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1818.430746][T32096] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1821.211314][T32124] netlink: 'syz.1.8931': attribute type 10 has an invalid length. [ 1821.231998][T32124] virt_wifi0: mtu greater than device maximum [ 1821.687443][T32148] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.8939'. [ 1821.761043][T32148] netlink: 'syz.4.8939': attribute type 29 has an invalid length. [ 1821.807069][T32148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8939'. [ 1822.429306][T32148] netlink: 'syz.4.8939': attribute type 29 has an invalid length. [ 1822.437468][T32148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8939'. [ 1826.675037][T32183] device syzkaller0 entered promiscuous mode [ 1828.970372][T32224] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.8958'. [ 1828.982441][T32224] netlink: 'syz.0.8958': attribute type 29 has an invalid length. [ 1828.995237][T32224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8958'. [ 1830.571362][T32200] device syzkaller0 entered promiscuous mode [ 1830.587853][T32224] netlink: 'syz.0.8958': attribute type 29 has an invalid length. [ 1830.596144][T32224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8958'. [ 1834.758758][T32256] netlink: 'syz.0.8970': attribute type 30 has an invalid length. [ 1834.769057][T32265] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8970'. [ 1835.005064][T32287] netlink: 8964 bytes leftover after parsing attributes in process `syz.2.8980'. [ 1835.234682][T32293] FAULT_INJECTION: forcing a failure. [ 1835.234682][T32293] name failslab, interval 1, probability 0, space 0, times 0 [ 1835.291659][T32293] CPU: 1 PID: 32293 Comm: syz.4.8983 Not tainted syzkaller #0 [ 1835.299359][T32293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1835.309560][T32293] Call Trace: [ 1835.312879][T32293] [ 1835.315848][T32293] dump_stack_lvl+0x188/0x24e [ 1835.320615][T32293] ? debug_objects_fill_pool+0x87/0x780 [ 1835.326218][T32293] ? show_regs_print_info+0x12/0x12 [ 1835.331481][T32293] ? load_image+0x410/0x410 [ 1835.336133][T32293] ? verify_lock_unused+0x140/0x140 [ 1835.341591][T32293] should_fail_ex+0x390/0x4c0 [ 1835.346348][T32293] should_failslab+0x5/0x20 [ 1835.350919][T32293] slab_pre_alloc_hook+0x59/0x300 [ 1835.356287][T32293] ? sctp_inet6addr_event+0x354/0x700 [ 1835.361717][T32293] __kmem_cache_alloc_node+0x4f/0x270 [ 1835.367165][T32293] ? sctp_inet6addr_event+0x354/0x700 [ 1835.372596][T32293] kmalloc_trace+0x26/0xe0 [ 1835.377077][T32293] sctp_inet6addr_event+0x354/0x700 [ 1835.382327][T32293] ? ieee80211_ifa6_changed+0xcd/0x400 [ 1835.387859][T32293] ? inet6addr_event+0x9c/0xc0 [ 1835.392752][T32293] ? ipvlan_addr6_event+0xf1/0x270 [ 1835.397911][T32293] ? masq_inet6_event+0xf0/0x130 [ 1835.402910][T32293] atomic_notifier_call_chain+0x17a/0x2b0 [ 1835.408687][T32293] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1835.414545][T32293] ipv6_add_addr+0xcd2/0xfc0 [ 1835.419189][T32293] ? ipv6_count_addresses+0x190/0x190 [ 1835.424621][T32293] ? __lock_acquire+0x7c40/0x7c40 [ 1835.429703][T32293] inet6_addr_add+0x43e/0x9c0 [ 1835.434454][T32293] addrconf_add_ifaddr+0x156/0x1b0 [ 1835.439634][T32293] ? addrconf_set_dstaddr+0x320/0x320 [ 1835.445246][T32293] ? __lock_acquire+0x7c40/0x7c40 [ 1835.450585][T32293] ? slab_free_freelist_hook+0x133/0x1b0 [ 1835.456304][T32293] inet6_ioctl+0x16b/0x280 [ 1835.460789][T32293] ? __kmem_cache_free+0xb6/0x200 [ 1835.465886][T32293] ? inet6_getname+0x670/0x670 [ 1835.470745][T32293] ? tomoyo_path_number_perm+0x205/0x650 [ 1835.476442][T32293] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1835.482149][T32293] ? tomoyo_path_number_perm+0x205/0x650 [ 1835.487971][T32293] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1835.493497][T32293] sock_do_ioctl+0xfb/0x320 [ 1835.498071][T32293] ? sock_show_fdinfo+0xb0/0xb0 [ 1835.503014][T32293] sock_ioctl+0x48a/0x700 [ 1835.507416][T32293] ? sock_poll+0x420/0x420 [ 1835.512111][T32293] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1835.517391][T32293] ? security_file_ioctl+0x7c/0xa0 [ 1835.522568][T32293] ? sock_poll+0x420/0x420 [ 1835.527311][T32293] __se_sys_ioctl+0xfa/0x170 [ 1835.531982][T32293] do_syscall_64+0x4c/0xa0 [ 1835.536467][T32293] ? clear_bhb_loop+0x60/0xb0 [ 1835.541218][T32293] ? clear_bhb_loop+0x60/0xb0 [ 1835.545979][T32293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1835.552054][T32293] RIP: 0033:0x7f88b2d9e019 [ 1835.557091][T32293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1835.577726][T32293] RSP: 002b:00007f88b3d42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1835.586285][T32293] RAX: ffffffffffffffda RBX: 00007f88b3025fa0 RCX: 00007f88b2d9e019 [ 1835.594665][T32293] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000042 [ 1835.602720][T32293] RBP: 00007f88b3d42090 R08: 0000000000000000 R09: 0000000000000000 [ 1835.610751][T32293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1835.618804][T32293] R13: 00007f88b3026038 R14: 00007f88b3025fa0 R15: 00007ffcbe9e7ee8 [ 1835.626966][T32293] [ 1836.285000][T32309] device syzkaller0 entered promiscuous mode [ 1840.854205][T32322] netlink: 'syz.3.8993': attribute type 30 has an invalid length. [ 1840.862850][T32328] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8993'. [ 1840.886879][T32357] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1840.896449][T32359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8999'. [ 1843.445728][T32390] device syzkaller0 entered promiscuous mode [ 1847.264921][T32419] netlink: 'syz.0.9020': attribute type 21 has an invalid length. [ 1847.273871][T32424] netlink: 'syz.0.9020': attribute type 10 has an invalid length. [ 1847.300278][T32424] team0: Port device virt_wifi0 added [ 1848.769823][T32468] device syzkaller0 entered promiscuous mode [ 1851.551909][T32475] netlink: 'syz.2.9039': attribute type 21 has an invalid length. [ 1851.560259][T32479] netlink: 'syz.2.9039': attribute type 10 has an invalid length. [ 1852.725579][T32508] device syzkaller0 entered promiscuous mode [ 1853.126627][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.133166][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.216482][T32548] FAULT_INJECTION: forcing a failure. [ 1853.216482][T32548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1853.240464][T32548] CPU: 0 PID: 32548 Comm: syz.2.9063 Not tainted syzkaller #0 [ 1853.248027][T32548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1853.258310][T32548] Call Trace: [ 1853.261733][T32548] [ 1853.264758][T32548] dump_stack_lvl+0x188/0x24e [ 1853.269498][T32548] ? show_regs_print_info+0x12/0x12 [ 1853.274818][T32548] ? load_image+0x410/0x410 [ 1853.279381][T32548] ? __lock_acquire+0x7c40/0x7c40 [ 1853.285081][T32548] ? snprintf+0xe5/0x140 [ 1853.289386][T32548] should_fail_ex+0x390/0x4c0 [ 1853.294135][T32548] _copy_to_user+0x2c/0x130 [ 1853.298691][T32548] simple_read_from_buffer+0xe3/0x150 [ 1853.304125][T32548] proc_fail_nth_read+0x1a6/0x220 [ 1853.309207][T32548] ? proc_fault_inject_write+0x310/0x310 [ 1853.314894][T32548] ? fsnotify_perm+0x248/0x550 [ 1853.319708][T32548] ? proc_fault_inject_write+0x310/0x310 [ 1853.325398][T32548] vfs_read+0x2db/0x960 [ 1853.329621][T32548] ? kernel_read+0x1e0/0x1e0 [ 1853.334268][T32548] ? __fget_files+0x28/0x460 [ 1853.338914][T32548] ? __fget_files+0x3fc/0x460 [ 1853.343665][T32548] ? __fdget_pos+0x2ae/0x360 [ 1853.348337][T32548] ? ksys_read+0x70/0x260 [ 1853.352730][T32548] ksys_read+0x14d/0x260 [ 1853.357036][T32548] ? vfs_write+0x9a0/0x9a0 [ 1853.361512][T32548] ? lockdep_hardirqs_on+0x94/0x140 [ 1853.366774][T32548] do_syscall_64+0x4c/0xa0 [ 1853.371264][T32548] ? clear_bhb_loop+0x60/0xb0 [ 1853.376037][T32548] ? clear_bhb_loop+0x60/0xb0 [ 1853.380954][T32548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1853.386915][T32548] RIP: 0033:0x7f9f7b75e84e [ 1853.391378][T32548] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1853.411031][T32548] RSP: 002b:00007f9f7c6fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1853.419487][T32548] RAX: ffffffffffffffda RBX: 00007f9f7c6ff6c0 RCX: 00007f9f7b75e84e [ 1853.427517][T32548] RDX: 000000000000000f RSI: 00007f9f7c6ff0a0 RDI: 0000000000000005 [ 1853.435527][T32548] RBP: 00007f9f7c6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1853.443537][T32548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1853.451542][T32548] R13: 00007f9f7ba26038 R14: 00007f9f7ba25fa0 R15: 00007ffc88f7f6d8 [ 1853.459568][T32548] [ 1853.524941][T32542] netlink: 'syz.4.9057': attribute type 3 has an invalid length. [ 1853.547454][T32542] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.9057'. [ 1858.411602][T32574] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9071'. [ 1858.420983][T32574] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 1859.187246][T32546] netlink: 'syz.1.9061': attribute type 21 has an invalid length. [ 1859.201034][T32551] netlink: 'syz.1.9061': attribute type 10 has an invalid length. [ 1859.209009][T32551] virt_wifi0: mtu greater than device maximum [ 1859.215200][T32559] netlink: 'syz.2.9067': attribute type 46 has an invalid length. [ 1859.785028][T32585] netlink: 8964 bytes leftover after parsing attributes in process `syz.0.9073'. [ 1862.744623][T32619] device syzkaller0 entered promiscuous mode [ 1862.757658][T32625] netlink: 'syz.3.9085': attribute type 10 has an invalid length. [ 1862.765651][T32625] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9085'. [ 1866.755422][T32638] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9090'. [ 1866.998579][T32659] netlink: 8964 bytes leftover after parsing attributes in process `syz.2.9096'. [ 1869.453814][T32692] device syzkaller0 entered promiscuous mode [ 1869.492721][T32698] netlink: 8964 bytes leftover after parsing attributes in process `syz.0.9110'. [ 1873.932771][T22280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1873.945076][T22280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1873.962821][T22280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1873.988473][ T4273] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1873.996593][ T4273] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1874.005268][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1875.248400][T23507] bond0: (slave syz_tun): Releasing backup interface [ 1875.597625][T23627] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.088314][T31268] Bluetooth: hci2: command 0x0409 tx timeout [ 1878.166821][T31268] Bluetooth: hci2: command 0x041b tx timeout [ 1879.122095][T32766] netlink: 8964 bytes leftover after parsing attributes in process `syz.2.9134'. [ 1879.161661][T23627] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.294178][T23627] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.460094][T23627] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.972704][T32738] chnl_net:caif_netlink_parms(): no params data found [ 1880.237141][T31268] Bluetooth: hci2: command 0x040f tx timeout [ 1881.674486][T32738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1881.682634][T32738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.693320][T32738] device bridge_slave_0 entered promiscuous mode [ 1881.705012][T32738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1881.713109][T32738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1881.722912][T32738] device bridge_slave_1 entered promiscuous mode [ 1882.053175][T32738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1882.231475][T32738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1882.316858][T31268] Bluetooth: hci2: command 0x0419 tx timeout [ 1882.926503][T32738] team0: Port device team_slave_0 added [ 1883.581097][T32738] team0: Port device team_slave_1 added [ 1884.654341][T32738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1884.795573][T32738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1885.233831][T32738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1885.388219][T32738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1885.395310][T32738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1885.564425][T32738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1886.007908][ T360] netlink: 8964 bytes leftover after parsing attributes in process `syz.0.9148'. [ 1886.130035][T32738] device hsr_slave_0 entered promiscuous mode [ 1886.207904][T32738] device hsr_slave_1 entered promiscuous mode [ 1886.224556][T32738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1886.251403][T32738] Cannot create hsr debugfs directory [ 1887.075241][ T388] netlink: 'syz.4.9156': attribute type 4 has an invalid length. [ 1887.118431][ T388] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9156'. [ 1887.855192][T23627] device hsr_slave_0 left promiscuous mode [ 1887.952105][T23627] device veth1_macvtap left promiscuous mode [ 1887.978527][T23627] device veth0_macvtap left promiscuous mode [ 1887.984763][T23627] device veth1_vlan left promiscuous mode [ 1888.050141][T23627] device veth0_vlan left promiscuous mode [ 1888.479039][T23627] device geneve1 left promiscuous mode [ 1888.511658][T23627] team0 (unregistering): Port device geneve1 removed [ 1889.335725][ T427] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9168'. [ 1889.529072][T23627] device team_slave_1 left promiscuous mode [ 1889.550046][T23627] team0 (unregistering): Port device team_slave_1 removed [ 1889.684958][T23627] device team_slave_0 left promiscuous mode [ 1889.717216][T23627] team0 (unregistering): Port device team_slave_0 removed [ 1889.801698][T23627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1889.859803][T23627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1889.939517][T23627] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1890.324739][T23627] bond0 (unregistering): Released all slaves [ 1890.464586][ T413] netlink: 8964 bytes leftover after parsing attributes in process `syz.0.9163'. [ 1890.936020][ T447] FAULT_INJECTION: forcing a failure. [ 1890.936020][ T447] name failslab, interval 1, probability 0, space 0, times 0 [ 1890.998613][T32738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1891.024709][ T447] CPU: 1 PID: 447 Comm: syz.4.9175 Not tainted syzkaller #0 [ 1891.032082][ T447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1891.042213][ T447] Call Trace: [ 1891.045532][ T447] [ 1891.048506][ T447] dump_stack_lvl+0x188/0x24e [ 1891.053272][ T447] ? show_regs_print_info+0x12/0x12 [ 1891.058535][ T447] ? load_image+0x410/0x410 [ 1891.063088][ T447] ? __might_sleep+0xd0/0xd0 [ 1891.067719][ T447] ? __lock_acquire+0x7c40/0x7c40 [ 1891.072809][ T447] should_fail_ex+0x390/0x4c0 [ 1891.077546][ T447] should_failslab+0x5/0x20 [ 1891.082098][ T447] slab_pre_alloc_hook+0x59/0x300 [ 1891.087178][ T447] kmem_cache_alloc_lru+0x49/0x2e0 [ 1891.092337][ T447] ? proc_alloc_inode+0x26/0xb0 [ 1891.097249][ T447] proc_alloc_inode+0x26/0xb0 [ 1891.101987][ T447] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 1891.108375][ T447] new_inode_pseudo+0x5f/0x1c0 [ 1891.113192][ T447] new_inode+0x25/0x1d0 [ 1891.117405][ T447] proc_pid_make_inode+0x20/0x1a0 [ 1891.122499][ T447] proc_pident_instantiate+0x69/0x2a0 [ 1891.127936][ T447] proc_pident_lookup+0x1b8/0x260 [ 1891.133036][ T447] __lookup_slow+0x29d/0x3f0 [ 1891.137684][ T447] ? lookup_one_len+0x2d0/0x2d0 [ 1891.142603][ T447] ? down_read+0x1a8/0x2d0 [ 1891.147073][ T447] lookup_slow+0x53/0x70 [ 1891.151366][ T447] link_path_walk+0x976/0xea0 [ 1891.156112][ T447] ? handle_lookup_down+0x130/0x130 [ 1891.161372][ T447] path_openat+0x285/0x2f10 [ 1891.165944][ T447] ? verify_lock_unused+0x140/0x140 [ 1891.171209][ T447] ? do_sys_openat2+0xdd/0x4f0 [ 1891.176034][ T447] ? do_filp_open+0x420/0x420 [ 1891.180780][ T447] do_filp_open+0x1ee/0x420 [ 1891.185335][ T447] ? vfs_tmpfile+0x470/0x470 [ 1891.189996][ T447] ? noop_direct_IO+0x10/0x10 [ 1891.194731][ T447] ? _raw_spin_unlock+0x24/0x40 [ 1891.199629][ T447] ? alloc_fd+0x590/0x640 [ 1891.204025][ T447] do_sys_openat2+0x14b/0x4f0 [ 1891.208766][ T447] ? do_sys_open+0xe0/0xe0 [ 1891.213246][ T447] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1891.219292][ T447] ? srcu_init_notifier_head+0x90/0x90 [ 1891.224805][ T447] ? lock_chain_count+0x20/0x20 [ 1891.229716][ T447] __x64_sys_openat+0x135/0x160 [ 1891.234644][ T447] do_syscall_64+0x4c/0xa0 [ 1891.239116][ T447] ? clear_bhb_loop+0x60/0xb0 [ 1891.243843][ T447] ? clear_bhb_loop+0x60/0xb0 [ 1891.248578][ T447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1891.254525][ T447] RIP: 0033:0x7f88b2d5e84e [ 1891.258992][ T447] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1891.278652][ T447] RSP: 002b:00007f88b3d41ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1891.287119][ T447] RAX: ffffffffffffffda RBX: 00007f88b3d426c0 RCX: 00007f88b2d5e84e [ 1891.295129][ T447] RDX: 0000000000000002 RSI: 00007f88b3d41f90 RDI: ffffffffffffff9c [ 1891.303137][ T447] RBP: 00007f88b3d42090 R08: 0000000000000000 R09: 0000000000000000 [ 1891.311147][ T447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.319163][ T447] R13: 00007f88b3026038 R14: 00007f88b3025fa0 R15: 00007ffcbe9e7ee8 [ 1891.327178][ T447] [ 1891.352490][ T4273] Bluetooth: hci5: command 0x0406 tx timeout [ 1891.751837][ T443] device syzkaller0 entered promiscuous mode [ 1891.784654][T32738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1894.536739][T32738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1894.546512][T32738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1894.561280][ T465] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1894.578913][ T465] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1894.619549][ T465] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1895.169161][T32738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1895.259453][T23627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1895.290769][T23627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1895.323925][T32738] 8021q: adding VLAN 0 to HW filter on device team0 [ 1895.335498][ T505] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.9187'. [ 1895.366350][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1895.380007][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1895.399646][T23629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1895.406903][T23629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1895.451301][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1895.464882][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1895.476192][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1895.486684][T23629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1895.493855][T23629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1895.503974][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1895.533934][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1895.574485][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1895.619093][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1895.703615][T32738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1895.732432][T32738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1895.797017][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1895.805237][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1895.839886][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1895.850167][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1895.908294][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1895.957965][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1896.019025][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1896.059865][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1896.788410][ T547] netlink: 'syz.4.9195': attribute type 10 has an invalid length. [ 1897.308870][ T541] device syzkaller0 entered promiscuous mode [ 1897.333410][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1897.341779][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1897.358306][T32738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1897.394848][T32592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1897.406591][T32592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1903.246010][ T603] netlink: 'syz.1.9216': attribute type 16 has an invalid length. [ 1903.254598][ T603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9216'. [ 1903.675152][T32738] device veth0_vlan entered promiscuous mode [ 1903.682868][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1903.691739][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1903.727066][T32738] device veth1_vlan entered promiscuous mode [ 1903.747142][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1903.755226][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1903.843816][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1903.868207][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1903.891006][T32738] device veth0_macvtap entered promiscuous mode [ 1903.922516][T32738] device veth1_macvtap entered promiscuous mode [ 1904.037853][T32738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1904.055763][T32738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.066173][T32738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1904.106777][T32738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.127680][T32738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1904.141569][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1904.153607][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1904.166496][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1904.187990][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1904.248044][T32738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1904.267825][T32738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.331824][T32738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1904.365658][T32738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.430340][T32738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1904.461106][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1904.494405][T23631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1904.539359][T32738] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.570400][T32738] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.620658][T32738] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.651389][T32738] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.153372][T23631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.231844][T23631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.315860][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1905.378541][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.408891][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.427907][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1906.100349][ T646] FAULT_INJECTION: forcing a failure. [ 1906.100349][ T646] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.180631][ T646] CPU: 0 PID: 646 Comm: syz.1.9231 Not tainted syzkaller #0 [ 1906.188048][ T646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1906.198210][ T646] Call Trace: [ 1906.201561][ T646] [ 1906.204550][ T646] dump_stack_lvl+0x188/0x24e [ 1906.209324][ T646] ? show_regs_print_info+0x12/0x12 [ 1906.214638][ T646] ? load_image+0x410/0x410 [ 1906.219228][ T646] ? __might_sleep+0xd0/0xd0 [ 1906.223898][ T646] ? __lock_acquire+0x7c40/0x7c40 [ 1906.229035][ T646] should_fail_ex+0x390/0x4c0 [ 1906.233823][ T646] should_failslab+0x5/0x20 [ 1906.238391][ T646] slab_pre_alloc_hook+0x59/0x300 [ 1906.243496][ T646] ? kvmalloc_node+0x6c/0x180 [ 1906.248271][ T646] __kmem_cache_alloc_node+0x4f/0x270 [ 1906.253770][ T646] ? kvmalloc_node+0x6c/0x180 [ 1906.258524][ T646] __kmalloc_node+0xa2/0x240 [ 1906.263204][ T646] kvmalloc_node+0x6c/0x180 [ 1906.267793][ T646] alloc_netdev_mqs+0x7dd/0xf10 [ 1906.272733][ T646] ? ip6gre_tunnel_locate+0x5d0/0x5d0 [ 1906.278197][ T646] ip6gre_tunnel_locate+0x1ce/0x5d0 [ 1906.283485][ T646] ? ip6gre_tnl_change+0x910/0x910 [ 1906.288673][ T646] ? ip6gre_tnl_parm_from_user+0x30c/0x520 [ 1906.294561][ T646] ? memcpy+0x3c/0x60 [ 1906.298622][ T646] ? ip6gre_tnl_parm_from_user+0x30c/0x520 [ 1906.304512][ T646] ip6gre_tunnel_siocdevprivate+0x5bc/0x730 [ 1906.310514][ T646] ? ip6gre_tunnel_init+0x140/0x140 [ 1906.315872][ T646] ? trace_contention_end+0x5f/0x170 [ 1906.321254][ T646] ? full_name_hash+0x8e/0xe0 [ 1906.326040][ T646] dev_ifsioc+0xa4a/0xd50 [ 1906.330463][ T646] ? dev_ioctl+0xe80/0xe80 [ 1906.334963][ T646] ? __lock_acquire+0x7c40/0x7c40 [ 1906.340070][ T646] ? full_name_hash+0x8e/0xe0 [ 1906.344827][ T646] ? dev_load+0x1d/0x1e0 [ 1906.349152][ T646] ? dev_load+0x1d/0x1e0 [ 1906.353647][ T646] dev_ioctl+0x5f8/0xe80 [ 1906.357968][ T646] ? get_user_ifreq+0xc7/0x170 [ 1906.362840][ T646] sock_ioctl+0x679/0x700 [ 1906.367264][ T646] ? sock_poll+0x420/0x420 [ 1906.371785][ T646] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1906.377555][ T646] ? security_file_ioctl+0x7c/0xa0 [ 1906.382740][ T646] ? sock_poll+0x420/0x420 [ 1906.387316][ T646] __se_sys_ioctl+0xfa/0x170 [ 1906.391991][ T646] do_syscall_64+0x4c/0xa0 [ 1906.396477][ T646] ? clear_bhb_loop+0x60/0xb0 [ 1906.401230][ T646] ? clear_bhb_loop+0x60/0xb0 [ 1906.406013][ T646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1906.411983][ T646] RIP: 0033:0x7f329979e019 [ 1906.416461][ T646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1906.436151][ T646] RSP: 002b:00007f329a5c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1906.444642][ T646] RAX: ffffffffffffffda RBX: 00007f3299a25fa0 RCX: 00007f329979e019 [ 1906.452675][ T646] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 1906.460734][ T646] RBP: 00007f329a5c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.468786][ T646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1906.476847][ T646] R13: 00007f3299a26038 R14: 00007f3299a25fa0 R15: 00007ffdcec96398 [ 1906.484987][ T646] [ 1906.683050][ T650] FAULT_INJECTION: forcing a failure. [ 1906.683050][ T650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1906.780842][ T650] CPU: 0 PID: 650 Comm: syz.1.9232 Not tainted syzkaller #0 [ 1906.788245][ T650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1906.798387][ T650] Call Trace: [ 1906.801718][ T650] [ 1906.804702][ T650] dump_stack_lvl+0x188/0x24e [ 1906.809451][ T650] ? show_regs_print_info+0x12/0x12 [ 1906.814730][ T650] ? load_image+0x410/0x410 [ 1906.819328][ T650] ? __lock_acquire+0x7c40/0x7c40 [ 1906.824438][ T650] should_fail_ex+0x390/0x4c0 [ 1906.829197][ T650] _copy_from_user+0x2c/0x170 [ 1906.833937][ T650] map_update_elem+0x473/0x6a0 [ 1906.838829][ T650] __sys_bpf+0x4ec/0x780 [ 1906.843149][ T650] ? bpf_link_show_fdinfo+0x380/0x380 [ 1906.848626][ T650] ? lock_chain_count+0x20/0x20 [ 1906.853567][ T650] __x64_sys_bpf+0x78/0x90 [ 1906.858059][ T650] do_syscall_64+0x4c/0xa0 [ 1906.862553][ T650] ? clear_bhb_loop+0x60/0xb0 [ 1906.867297][ T650] ? clear_bhb_loop+0x60/0xb0 [ 1906.872049][ T650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1906.878010][ T650] RIP: 0033:0x7f329979e019 [ 1906.882474][ T650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1906.902135][ T650] RSP: 002b:00007f329a5c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1906.910615][ T650] RAX: ffffffffffffffda RBX: 00007f3299a25fa0 RCX: 00007f329979e019 [ 1906.918644][ T650] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000002 [ 1906.926756][ T650] RBP: 00007f329a5c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.934787][ T650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1906.942889][ T650] R13: 00007f3299a26038 R14: 00007f3299a25fa0 R15: 00007ffdcec96398 [ 1906.950940][ T650] [ 1908.203293][ T4273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1908.213125][ T4273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1908.224528][ T4273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1908.233380][ T4273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1908.267242][ T4273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1908.274621][ T4273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1908.331227][T23621] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1908.483895][T23621] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1908.644643][T23621] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1908.761133][ T688] netlink: 'syz.3.9245': attribute type 29 has an invalid length. [ 1908.772797][ T685] netlink: 'syz.1.9246': attribute type 10 has an invalid length. [ 1909.541238][ T684] FAULT_INJECTION: forcing a failure. [ 1909.541238][ T684] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1909.591175][ T684] CPU: 1 PID: 684 Comm: syz.3.9245 Not tainted syzkaller #0 [ 1909.598584][ T684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1909.608750][ T684] Call Trace: [ 1909.612102][ T684] [ 1909.615113][ T684] dump_stack_lvl+0x188/0x24e [ 1909.619898][ T684] ? show_regs_print_info+0x12/0x12 [ 1909.625196][ T684] ? load_image+0x410/0x410 [ 1909.629772][ T684] ? mark_lock+0x94/0x320 [ 1909.634197][ T684] ? migrate_enable+0x148/0x220 [ 1909.639149][ T684] ? trace_call_bpf+0xbf/0x6b0 [ 1909.644002][ T684] ? trace_call_bpf+0xbf/0x6b0 [ 1909.648889][ T684] should_fail_ex+0x390/0x4c0 [ 1909.653662][ T684] get_futex_key+0x1de/0x1000 [ 1909.658452][ T684] ? futex_setup_timer+0xc0/0xc0 [ 1909.663529][ T684] futex_wake+0x123/0x4f0 [ 1909.667955][ T684] ? futex_wake_mark+0x150/0x150 [ 1909.673114][ T684] do_futex+0x2e2/0x320 [ 1909.677370][ T684] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1909.683358][ T684] ? __might_fault+0xc2/0x120 [ 1909.688122][ T684] mm_release+0x20a/0x330 [ 1909.692531][ T684] ? exit_robust_list+0x2ce/0x2f0 [ 1909.697636][ T684] ? exit_mm_release+0x30/0x30 [ 1909.702473][ T684] ? lockdep_hardirqs_on+0x94/0x140 [ 1909.707809][ T684] exit_mm+0xa0/0x350 [ 1909.711887][ T684] ? do_exit+0x2570/0x2570 [ 1909.716386][ T684] ? taskstats_exit+0x355/0x9e0 [ 1909.721348][ T684] do_exit+0x958/0x2570 [ 1909.725630][ T684] ? put_task_struct+0x80/0x80 [ 1909.730493][ T684] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1909.736546][ T684] ? _raw_spin_lock_irq+0x86/0xf0 [ 1909.741649][ T684] ? lock_chain_count+0x20/0x20 [ 1909.746671][ T684] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1909.751784][ T684] do_group_exit+0x229/0x2e0 [ 1909.756447][ T684] ? lockdep_hardirqs_on+0x94/0x140 [ 1909.761726][ T684] get_signal+0x1259/0x1340 [ 1909.766428][ T684] arch_do_signal_or_restart+0xc4/0x1310 [ 1909.772183][ T684] ? __fget_files+0x3fc/0x460 [ 1909.776958][ T684] ? get_sigframe_size+0x10/0x10 [ 1909.781987][ T684] ? fput+0x150/0x1a0 [ 1909.786103][ T684] ? exit_to_user_mode_loop+0x3b/0x110 [ 1909.791674][ T684] exit_to_user_mode_loop+0x70/0x110 [ 1909.797044][ T684] exit_to_user_mode_prepare+0xee/0x180 [ 1909.802678][ T684] syscall_exit_to_user_mode+0x16/0x40 [ 1909.808209][ T684] do_syscall_64+0x58/0xa0 [ 1909.812701][ T684] ? clear_bhb_loop+0x60/0xb0 [ 1909.817457][ T684] ? clear_bhb_loop+0x60/0xb0 [ 1909.822220][ T684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1909.828187][ T684] RIP: 0033:0x7f5f3499e019 [ 1909.832663][ T684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1909.852344][ T684] RSP: 002b:00007f5f35880028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1909.860924][ T684] RAX: fffffffffffffe00 RBX: 00007f5f34c25fa0 RCX: 00007f5f3499e019 [ 1909.868961][ T684] RDX: 0000000000002000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1909.877012][ T684] RBP: 00007f5f35880090 R08: 0000000000000000 R09: 0000000000000000 [ 1909.885048][ T684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1909.893082][ T684] R13: 00007f5f34c26038 R14: 00007f5f34c25fa0 R15: 00007ffd1e9bc808 [ 1909.901179][ T684] [ 1909.950974][T23621] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1910.001562][ T688] netlink: 'syz.3.9245': attribute type 29 has an invalid length. [ 1910.014908][ T692] netlink: 'syz.4.9248': attribute type 10 has an invalid length. [ 1910.069267][ T692] bridge0: port 3(hsr0) entered disabled state [ 1910.124493][ T692] device hsr0 left promiscuous mode [ 1910.146238][ T692] bridge0: port 3(hsr0) entered disabled state [ 1910.180315][ T692] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1910.316966][ T4273] Bluetooth: hci3: command 0x0409 tx timeout [ 1910.611253][ T675] chnl_net:caif_netlink_parms(): no params data found [ 1911.266337][ T675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1911.285253][ T675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.406199][ T675] device bridge_slave_0 entered promiscuous mode [ 1911.459420][ T675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1911.487466][ T675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1911.527070][ T675] device bridge_slave_1 entered promiscuous mode [ 1911.803122][ T675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1911.923775][ T675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1912.170560][ T675] team0: Port device team_slave_0 added [ 1912.313660][ T675] team0: Port device team_slave_1 added [ 1912.396875][ T4273] Bluetooth: hci3: command 0x041b tx timeout [ 1912.537146][ T675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1912.573950][ T675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1912.612154][ T675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1912.627480][ T675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1912.634681][ T675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1912.720729][ T675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1912.840769][ T771] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.9268'. [ 1913.082703][ T675] device hsr_slave_0 entered promiscuous mode [ 1913.122509][ T675] device hsr_slave_1 entered promiscuous mode [ 1913.169662][ T675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1913.230451][ T675] Cannot create hsr debugfs directory [ 1913.278513][ T784] netlink: 'syz.1.9273': attribute type 39 has an invalid length. [ 1913.582833][ T784] device hsr_slave_1 left promiscuous mode [ 1914.316506][ T788] netlink: 'syz.0.9274': attribute type 3 has an invalid length. [ 1914.374053][ T788] netlink: 42732 bytes leftover after parsing attributes in process `syz.0.9274'. [ 1914.476887][ T4273] Bluetooth: hci3: command 0x040f tx timeout [ 1914.563535][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.569961][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.160017][T23621] device hsr_slave_0 left promiscuous mode [ 1915.169912][T23621] device hsr_slave_1 left promiscuous mode [ 1915.225377][T23621] device veth1_macvtap left promiscuous mode [ 1915.266838][T23621] device veth0_macvtap left promiscuous mode [ 1915.272997][T23621] device veth1_vlan left promiscuous mode [ 1915.306800][T23621] device veth0_vlan left promiscuous mode [ 1915.958327][T23621] device geneve1 left promiscuous mode [ 1916.001359][T23621] team0 (unregistering): Port device geneve1 removed [ 1916.556809][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 1916.817115][ T849] netlink: 'syz.1.9291': attribute type 3 has an invalid length. [ 1916.836736][ T849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9291'. [ 1916.930613][T23621] team0 (unregistering): Port device macvlan0 removed [ 1917.421667][T23621] device virt_wifi0 left promiscuous mode [ 1917.456015][T23621] team0 (unregistering): Port device virt_wifi0 removed [ 1918.303280][T23621] device team_slave_1 left promiscuous mode [ 1918.348045][T23621] team0 (unregistering): Port device team_slave_1 removed [ 1918.579737][T23621] device team_slave_0 left promiscuous mode [ 1918.595909][T23621] team0 (unregistering): Port device team_slave_0 removed [ 1918.764802][ T879] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.9304'. [ 1918.797610][ T879] netlink: zone id is out of range [ 1918.802864][ T879] netlink: zone id is out of range [ 1918.808848][ T879] netlink: zone id is out of range [ 1918.814237][ T879] netlink: zone id is out of range [ 1918.849328][ T879] netlink: zone id is out of range [ 1918.854631][ T879] netlink: zone id is out of range [ 1918.872883][ T879] netlink: zone id is out of range [ 1918.896823][ T879] netlink: zone id is out of range [ 1918.902166][ T879] netlink: zone id is out of range [ 1918.916913][ T879] netlink: zone id is out of range [ 1919.352872][ T886] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.9306'. [ 1919.619761][ T805] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1919.633355][ T805] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1919.664544][ T805] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1921.132397][ T675] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1921.182238][ T675] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1921.236892][ T675] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1921.278739][ T675] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1921.324085][ T939] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.9316'. [ 1921.690722][ T675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1921.755881][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1921.763423][T31268] Bluetooth: hci1: command 0x0406 tx timeout [ 1921.778603][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1921.800852][ T675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1921.829871][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1921.849928][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1921.875544][T23637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1921.882803][T23637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1921.933169][ T956] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.9321'. [ 1921.968561][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1921.991278][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1922.008269][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1922.028425][T23637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.035615][T23637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1922.059829][T23637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1922.119357][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1922.153649][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1922.240993][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1922.273776][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1922.343532][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1922.390528][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1922.458467][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1922.494943][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1922.550605][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1922.575649][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1922.653313][ T675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1924.223114][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1924.245154][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1924.284613][ T675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1924.493374][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1924.522711][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1924.742530][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1924.773714][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1924.826268][ T675] device veth0_vlan entered promiscuous mode [ 1924.842859][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1924.881341][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1924.933957][ T675] device veth1_vlan entered promiscuous mode [ 1925.075345][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1925.099653][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1925.131440][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1925.193849][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1925.256448][ T675] device veth0_macvtap entered promiscuous mode [ 1925.315674][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1925.341366][ T675] device veth1_macvtap entered promiscuous mode [ 1925.455111][ T675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1925.536897][ T675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.611902][ T675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1925.668893][ T675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.747183][ T675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1925.819005][ T675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.886397][ T675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1925.925556][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1925.945600][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1925.996027][ T675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1926.047161][ T675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1926.086757][ T675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1926.135457][ T675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1926.172161][ T675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1926.217306][ T675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1926.292471][ T675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1926.359390][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1926.375334][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1926.439757][ T675] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.473680][ T675] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.530561][ T675] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.570250][ T675] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.956989][T23621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1927.017283][T23621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1927.087985][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1927.165400][T23623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1927.226677][T23623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1927.400599][ T1050] device syzkaller0 entered promiscuous mode [ 1933.545025][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1933.610854][ T1058] netlink: 'syz.4.9342': attribute type 10 has an invalid length. [ 1933.627415][ T1058] device syz_tun entered promiscuous mode [ 1933.680591][ T1058] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1933.696130][ T1077] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9346'. [ 1933.706174][ T1081] netlink: 'syz.1.9347': attribute type 21 has an invalid length. [ 1933.729003][ T1081] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.9347'. [ 1934.515642][ T1120] netlink: 'syz.1.9355': attribute type 21 has an invalid length. [ 1934.581240][ T1120] netlink: 'syz.1.9355': attribute type 5 has an invalid length. [ 1935.013918][ T1133] netlink: 'syz.3.9354': attribute type 3 has an invalid length. [ 1935.108464][ T1133] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9354'. [ 1935.311570][ T1139] device syzkaller0 entered promiscuous mode [ 1935.406831][ T1148] netlink: 8964 bytes leftover after parsing attributes in process `syz.0.9359'. [ 1938.263878][ T1158] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1938.273957][ T1165] netlink: 'syz.3.9362': attribute type 10 has an invalid length. [ 1938.286971][ T1158] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1938.306045][ T1165] device syz_tun entered promiscuous mode [ 1938.335986][ T1158] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1938.615187][ T1165] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1938.763771][ T1192] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9367'. [ 1938.829864][ T1192] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9367'. [ 1940.775363][ T1231] netlink: 'syz.4.9382': attribute type 10 has an invalid length. [ 1940.792832][ T1231] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9382'. [ 1940.827672][ T1231] device ipvlan1 entered promiscuous mode [ 1940.931878][ T1241] netlink: 22 bytes leftover after parsing attributes in process `syz.1.9385'. [ 1941.020547][ T1231] bridge0: port 3(ipvlan1) entered blocking state [ 1941.058979][ T1231] bridge0: port 3(ipvlan1) entered disabled state [ 1941.159567][ T1231] net_ratelimit: 3544 callbacks suppressed [ 1941.159608][ T1231] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1941.322947][ T1245] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9386'. [ 1941.842642][ T1247] netlink: 'syz.2.9387': attribute type 10 has an invalid length. [ 1941.875835][ T1247] FAULT_INJECTION: forcing a failure. [ 1941.875835][ T1247] name failslab, interval 1, probability 0, space 0, times 0 [ 1941.944454][ T1247] CPU: 1 PID: 1247 Comm: syz.2.9387 Not tainted syzkaller #0 [ 1941.951946][ T1247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1941.962064][ T1247] Call Trace: [ 1941.965400][ T1247] [ 1941.968391][ T1247] dump_stack_lvl+0x188/0x24e [ 1941.973154][ T1247] ? show_regs_print_info+0x12/0x12 [ 1941.978433][ T1247] ? load_image+0x410/0x410 [ 1941.983031][ T1247] should_fail_ex+0x390/0x4c0 [ 1941.987795][ T1247] should_failslab+0x5/0x20 [ 1941.992358][ T1247] slab_pre_alloc_hook+0x59/0x300 [ 1941.997476][ T1247] ? br_netlink_fini+0x30/0x30 [ 1942.002667][ T1247] kmem_cache_alloc_node+0x5a/0x310 [ 1942.007940][ T1247] ? if_nlmsg_size+0x659/0x960 [ 1942.012820][ T1247] ? __alloc_skb+0xf9/0x7d0 [ 1942.017410][ T1247] __alloc_skb+0xf9/0x7d0 [ 1942.021823][ T1247] rtmsg_ifinfo_build_skb+0x80/0x190 [ 1942.027314][ T1247] rtmsg_ifinfo+0xc4/0x200 [ 1942.031821][ T1247] __dev_notify_flags+0xef/0x310 [ 1942.036838][ T1247] ? __dev_change_flags+0x6a0/0x6a0 [ 1942.042091][ T1247] ? __dev_change_flags+0x4ce/0x6a0 [ 1942.047445][ T1247] ? printk_sprint+0x460/0x460 [ 1942.052277][ T1247] ? dev_get_flags+0x1c0/0x1c0 [ 1942.057122][ T1247] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1942.063091][ T1247] ? _raw_spin_unlock+0x40/0x40 [ 1942.068001][ T1247] dev_change_flags+0xda/0x1a0 [ 1942.072883][ T1247] do_setlink+0xbc7/0x29c0 [ 1942.077387][ T1247] ? load_image+0x410/0x410 [ 1942.081969][ T1247] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1942.088216][ T1247] ? __nla_validate_parse+0x1f67/0x2970 [ 1942.093884][ T1247] ? __nla_validate+0x50/0x50 [ 1942.098717][ T1247] ? validate_linkmsg+0x3db/0x4c0 [ 1942.103848][ T1247] rtnl_newlink+0x16e4/0x1f90 [ 1942.108723][ T1247] ? rtnl_newlink+0x521/0x1f90 [ 1942.113580][ T1247] ? rtnl_setlink+0x510/0x510 [ 1942.118325][ T1247] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1942.124544][ T1247] ? rcu_is_watching+0x11/0xa0 [ 1942.129371][ T1247] ? trace_contention_end+0x5f/0x170 [ 1942.134748][ T1247] ? __mutex_lock+0x1ab/0xae0 [ 1942.139539][ T1247] ? rcu_read_unlock+0x8c/0xa0 [ 1942.144405][ T1247] ? rtnl_setlink+0x510/0x510 [ 1942.149139][ T1247] rtnetlink_rcv_msg+0x863/0xfb0 [ 1942.154173][ T1247] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1942.159357][ T1247] ? rtnetlink_bind+0x80/0x80 [ 1942.164119][ T1247] ? __local_bh_enable_ip+0x136/0x1c0 [ 1942.169531][ T1247] ? lockdep_hardirqs_on+0x94/0x140 [ 1942.174785][ T1247] ? __local_bh_enable_ip+0x136/0x1c0 [ 1942.180311][ T1247] ? _local_bh_enable+0xa0/0xa0 [ 1942.185227][ T1247] ? __dev_queue_xmit+0x281/0x3810 [ 1942.190392][ T1247] ? __dev_queue_xmit+0x281/0x3810 [ 1942.195567][ T1247] ? __dev_queue_xmit+0x1d84/0x3810 [ 1942.200844][ T1247] ? __dev_queue_xmit+0x281/0x3810 [ 1942.206128][ T1247] ? ref_tracker_free+0x682/0x830 [ 1942.211217][ T1247] ? refcount_inc+0x70/0x70 [ 1942.215773][ T1247] ? memcpy+0x3c/0x60 [ 1942.219818][ T1247] ? __copy_skb_header+0x3ba/0x4f0 [ 1942.224998][ T1247] ? __skb_clone+0x446/0x6c0 [ 1942.229665][ T1247] netlink_rcv_skb+0x1ef/0x440 [ 1942.234497][ T1247] ? rtnetlink_bind+0x80/0x80 [ 1942.239241][ T1247] ? netlink_ack+0x1160/0x1160 [ 1942.244091][ T1247] ? netlink_deliver_tap+0x2e/0x1b0 [ 1942.249366][ T1247] netlink_unicast+0x7ad/0x920 [ 1942.254215][ T1247] netlink_sendmsg+0x8ad/0xbd0 [ 1942.259068][ T1247] ? netlink_getsockopt+0x550/0x550 [ 1942.264360][ T1247] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1942.270072][ T1247] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1942.275425][ T1247] ? security_socket_sendmsg+0x7c/0xa0 [ 1942.280942][ T1247] ? netlink_getsockopt+0x550/0x550 [ 1942.286213][ T1247] ____sys_sendmsg+0x5ed/0x9a0 [ 1942.291059][ T1247] ? __sys_sendmsg_sock+0x30/0x30 [ 1942.296144][ T1247] ? __import_iovec+0x306/0x510 [ 1942.301068][ T1247] ? import_iovec+0x6f/0xa0 [ 1942.305658][ T1247] ___sys_sendmsg+0x2a2/0x360 [ 1942.310413][ T1247] ? __sys_sendmsg+0x2a0/0x2a0 [ 1942.315302][ T1247] ? __lock_acquire+0x7c40/0x7c40 [ 1942.320438][ T1247] __se_sys_sendmsg+0x1c3/0x2b0 [ 1942.325358][ T1247] ? __x64_sys_sendmsg+0x80/0x80 [ 1942.330403][ T1247] ? lockdep_hardirqs_on+0x94/0x140 [ 1942.335686][ T1247] do_syscall_64+0x4c/0xa0 [ 1942.340163][ T1247] ? clear_bhb_loop+0x60/0xb0 [ 1942.344899][ T1247] ? clear_bhb_loop+0x60/0xb0 [ 1942.349633][ T1247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1942.355586][ T1247] RIP: 0033:0x7f254259e019 [ 1942.360059][ T1247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1942.379735][ T1247] RSP: 002b:00007f2543488028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1942.388224][ T1247] RAX: ffffffffffffffda RBX: 00007f2542825fa0 RCX: 00007f254259e019 [ 1942.396246][ T1247] RDX: 0000000000004800 RSI: 0000200000000600 RDI: 0000000000000003 [ 1942.404268][ T1247] RBP: 00007f2543488090 R08: 0000000000000000 R09: 0000000000000000 [ 1942.412287][ T1247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1942.420310][ T1247] R13: 00007f2542826038 R14: 00007f2542825fa0 R15: 00007ffee655f788 [ 1942.428367][ T1247] [ 1942.497616][ T1247] team0: Port device virt_wifi0 added [ 1943.028144][ T1264] FAULT_INJECTION: forcing a failure. [ 1943.028144][ T1264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1943.095296][ T1264] CPU: 1 PID: 1264 Comm: syz.1.9393 Not tainted syzkaller #0 [ 1943.102953][ T1264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1943.113140][ T1264] Call Trace: [ 1943.116449][ T1264] [ 1943.119465][ T1264] dump_stack_lvl+0x188/0x24e [ 1943.124192][ T1264] ? show_regs_print_info+0x12/0x12 [ 1943.129443][ T1264] ? load_image+0x410/0x410 [ 1943.133989][ T1264] ? __lock_acquire+0x7c40/0x7c40 [ 1943.139059][ T1264] ? snprintf+0xe5/0x140 [ 1943.143338][ T1264] should_fail_ex+0x390/0x4c0 [ 1943.148068][ T1264] _copy_to_user+0x2c/0x130 [ 1943.152642][ T1264] simple_read_from_buffer+0xe3/0x150 [ 1943.158055][ T1264] proc_fail_nth_read+0x1a6/0x220 [ 1943.163120][ T1264] ? proc_fault_inject_write+0x310/0x310 [ 1943.168879][ T1264] ? fsnotify_perm+0x248/0x550 [ 1943.173675][ T1264] ? proc_fault_inject_write+0x310/0x310 [ 1943.179381][ T1264] vfs_read+0x2db/0x960 [ 1943.183593][ T1264] ? kernel_read+0x1e0/0x1e0 [ 1943.188267][ T1264] ? __fget_files+0x28/0x460 [ 1943.192898][ T1264] ? __fget_files+0x3fc/0x460 [ 1943.197639][ T1264] ? __fdget_pos+0x2ae/0x360 [ 1943.202271][ T1264] ? ksys_read+0x70/0x260 [ 1943.206659][ T1264] ksys_read+0x14d/0x260 [ 1943.210985][ T1264] ? vfs_write+0x9a0/0x9a0 [ 1943.215452][ T1264] ? lockdep_hardirqs_on+0x94/0x140 [ 1943.220687][ T1264] do_syscall_64+0x4c/0xa0 [ 1943.225167][ T1264] ? clear_bhb_loop+0x60/0xb0 [ 1943.229884][ T1264] ? clear_bhb_loop+0x60/0xb0 [ 1943.234600][ T1264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1943.240542][ T1264] RIP: 0033:0x7f329975e84e [ 1943.245599][ T1264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1943.265246][ T1264] RSP: 002b:00007f329a5c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1943.273706][ T1264] RAX: ffffffffffffffda RBX: 00007f329a5c16c0 RCX: 00007f329975e84e [ 1943.281723][ T1264] RDX: 000000000000000f RSI: 00007f329a5c10a0 RDI: 0000000000000008 [ 1943.289750][ T1264] RBP: 00007f329a5c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1943.297760][ T1264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1943.305762][ T1264] R13: 00007f3299a26038 R14: 00007f3299a25fa0 R15: 00007ffdcec96398 [ 1943.313798][ T1264] [ 1943.890991][ T1281] netlink: 'syz.3.9401': attribute type 10 has an invalid length. [ 1943.951655][ T1281] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9401'. [ 1944.007462][ T1281] device ipvlan1 entered promiscuous mode [ 1944.130598][ T1281] bridge0: port 3(ipvlan1) entered blocking state [ 1944.162578][ T1281] bridge0: port 3(ipvlan1) entered disabled state [ 1944.301961][ T1281] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1944.363613][ T1290] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9399'. [ 1945.233620][ T1316] FAULT_INJECTION: forcing a failure. [ 1945.233620][ T1316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1945.414284][ T1316] CPU: 0 PID: 1316 Comm: syz.0.9412 Not tainted syzkaller #0 [ 1945.421766][ T1316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1945.431923][ T1316] Call Trace: [ 1945.435292][ T1316] [ 1945.438281][ T1316] dump_stack_lvl+0x188/0x24e [ 1945.443073][ T1316] ? show_regs_print_info+0x12/0x12 [ 1945.448349][ T1316] ? load_image+0x410/0x410 [ 1945.452933][ T1316] ? __lock_acquire+0x7c40/0x7c40 [ 1945.458037][ T1316] should_fail_ex+0x390/0x4c0 [ 1945.462788][ T1316] _copy_to_user+0x2c/0x130 [ 1945.467360][ T1316] btf_get_info_by_fd+0x1c9/0x5a0 [ 1945.472674][ T1316] ? btf_get_by_fd+0x160/0x160 [ 1945.477607][ T1316] ? __fdget+0x17c/0x200 [ 1945.481927][ T1316] bpf_obj_get_info_by_fd+0xc3b/0x2f70 [ 1945.487503][ T1316] ? __lock_acquire+0x7c40/0x7c40 [ 1945.492633][ T1316] ? verify_lock_unused+0x140/0x140 [ 1945.497927][ T1316] ? bpf_map_get_fd_by_id+0x330/0x330 [ 1945.503386][ T1316] ? get_pid_task+0x1c/0x1e0 [ 1945.508072][ T1316] ? __might_fault+0xa6/0x120 [ 1945.512814][ T1316] ? __lock_acquire+0x7c40/0x7c40 [ 1945.517941][ T1316] ? __might_fault+0xa6/0x120 [ 1945.522677][ T1316] ? __might_fault+0xc2/0x120 [ 1945.527415][ T1316] ? __might_fault+0xa6/0x120 [ 1945.532164][ T1316] ? bpf_lsm_bpf+0x5/0x10 [ 1945.536573][ T1316] ? security_bpf+0x7a/0xa0 [ 1945.541150][ T1316] __sys_bpf+0x505/0x780 [ 1945.545471][ T1316] ? bpf_link_show_fdinfo+0x380/0x380 [ 1945.551029][ T1316] ? lock_chain_count+0x20/0x20 [ 1945.555956][ T1316] __x64_sys_bpf+0x78/0x90 [ 1945.560786][ T1316] do_syscall_64+0x4c/0xa0 [ 1945.565273][ T1316] ? clear_bhb_loop+0x60/0xb0 [ 1945.570017][ T1316] ? clear_bhb_loop+0x60/0xb0 [ 1945.574768][ T1316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1945.580731][ T1316] RIP: 0033:0x7fb97119e019 [ 1945.585196][ T1316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1945.604898][ T1316] RSP: 002b:00007fb972105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1945.613445][ T1316] RAX: ffffffffffffffda RBX: 00007fb971425fa0 RCX: 00007fb97119e019 [ 1945.621515][ T1316] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 1945.629538][ T1316] RBP: 00007fb972105090 R08: 0000000000000000 R09: 0000000000000000 [ 1945.637571][ T1316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1945.645593][ T1316] R13: 00007fb971426038 R14: 00007fb971425fa0 R15: 00007ffcc1df33e8 [ 1945.653638][ T1316] [ 1945.687470][ T1314] netlink: 'syz.4.9410': attribute type 10 has an invalid length. [ 1962.419345][ T1340] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1962.429921][ T1340] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1963.597178][T22280] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1964.497202][ T1340] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1964.504258][ T4273] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1964.510803][T31268] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1965.720267][T31268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1965.739196][ T1344] Bluetooth: hci8: Opcode 0x0c03 failed: -4 [ 1965.768758][T31268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1965.798436][T31268] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1965.826832][T22280] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1965.834401][T31268] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1965.855820][ T1343] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1965.901099][ T1340] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1965.912349][T22280] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1965.920417][ T1340] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1965.931381][ T1343] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1965.939800][T22280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1965.948475][ T1340] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1965.957995][ T1343] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1965.965417][ T1343] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1965.975573][T22280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1965.983016][ T1340] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1965.991099][T22280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1965.999273][ T1340] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1966.006844][ T1343] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1966.014561][T22280] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1966.036066][ T1340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1966.043380][ T1343] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1966.058824][ T1343] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1966.068438][ T1343] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1966.107689][ T1343] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1968.097143][ T1347] Bluetooth: hci9: command 0x0409 tx timeout [ 1968.197051][ T1347] Bluetooth: hci6: command 0x0409 tx timeout [ 1968.203746][ T1347] Bluetooth: hci7: command 0x0409 tx timeout [ 1968.210293][ T1343] Bluetooth: hci4: command 0x0409 tx timeout [ 1970.197130][ T1347] Bluetooth: hci9: command 0x041b tx timeout [ 1970.247240][ T1347] Bluetooth: hci7: command 0x041b tx timeout [ 1970.255689][ T1347] Bluetooth: hci4: command 0x041b tx timeout [ 1970.262550][ T1343] Bluetooth: hci6: command 0x041b tx timeout [ 1972.197229][T21407] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2636 jiffies s: 173137 root: 0x1/. [ 1972.217953][T21407] rcu: blocking rcu_node structures (internal RCU debug): [ 1972.225182][T21407] Sending NMI from CPU 1 to CPUs 0: [ 1972.230498][ C0] NMI backtrace for cpu 0 [ 1972.230508][ C0] CPU: 0 PID: 1307 Comm: syz.1.9409 Not tainted syzkaller #0 [ 1972.230526][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1972.230536][ C0] RIP: 0010:ct_irq_enter_irqson+0x9c/0x170 [ 1972.230561][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 4c 8b 7c 24 20 42 c6 44 33 04 f8 fa 4c 89 fe 48 81 e6 00 02 00 00 31 ff e8 04 b7 d7 ff <49> 81 e7 00 02 00 00 75 0c e8 16 b3 d7 ff e8 f1 ae 85 08 eb 14 e8 [ 1972.230576][ C0] RSP: 0018:ffffc90000007940 EFLAGS: 00000046 [ 1972.230591][ C0] RAX: ffffffff81aa7afc RBX: 1ffff92000000f28 RCX: ffff888024549e00 [ 1972.230604][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1972.230615][ C0] RBP: ffffc900000079e8 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 1972.230628][ C0] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: dffffc0000000000 [ 1972.230641][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000046 [ 1972.230652][ C0] FS: 00007f329a5c16c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1972.230668][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1972.230679][ C0] CR2: 000000110c35664f CR3: 0000000065ce2000 CR4: 00000000003506f0 [ 1972.230695][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1972.230706][ C0] DR3: 0000200000000080 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1972.230718][ C0] Call Trace: [ 1972.230725][ C0] [ 1972.230733][ C0] ? __jump_label_update+0x3c0/0x3c0 [ 1972.230753][ C0] ? __irq_exit_rcu+0x147/0x230 [ 1972.230770][ C0] ? irq_exit_rcu+0x20/0x20 [ 1972.230788][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 1972.230812][ C0] trace_irq_enable_rcuidle+0x9f/0x140 [ 1972.230839][ C0] trace_hardirqs_on+0x24/0x40 [ 1972.230861][ C0] asm_sysvec_irq_work+0x16/0x20 [ 1972.230883][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1972.230902][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 a2 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1972.230916][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206 [ 1972.230929][ C0] RAX: 0bfd14e1dab08500 RBX: 1ffff92000000f64 RCX: 0bfd14e1dab08500 [ 1972.230942][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 1972.230954][ C0] RBP: ffffc90000007bd0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 1972.230967][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000246 [ 1972.230979][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 1972.231003][ C0] ? kmem_cache_free+0x70/0x2a0 [ 1972.231024][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1972.231049][ C0] __rcu_read_unlock+0x78/0xd0 [ 1972.231065][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1972.231090][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1972.231109][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 1972.231136][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1972.231164][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1972.231189][ C0] ? hw_scan_work+0xf00/0xf00 [ 1972.231226][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1972.231251][ C0] hrtimer_run_softirq+0x173/0x290 [ 1972.231274][ C0] handle_softirqs+0x291/0x910 [ 1972.231295][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1972.231314][ C0] ? do_softirq+0x210/0x210 [ 1972.231328][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1972.231353][ C0] __irq_exit_rcu+0x13b/0x230 [ 1972.231370][ C0] ? irq_exit_rcu+0x20/0x20 [ 1972.231393][ C0] irq_exit_rcu+0x5/0x20 [ 1972.231407][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1972.231426][ C0] [ 1972.231431][ C0] [ 1972.231437][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1972.231460][ C0] RIP: 0010:stack_trace_consume_entry+0x0/0x270 [ 1972.231483][ C0] Code: 00 00 42 c7 44 33 08 00 00 00 00 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 78 75 09 48 8d 65 f0 5b 41 5e 5d c3 e8 a1 3f bf 08 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00 00 00 00 fc [ 1972.231498][ C0] RSP: 0018:ffffc90003467920 EFLAGS: 00000286 [ 1972.231511][ C0] RAX: ffffffff897607cc RBX: ffffc900034679e0 RCX: 0000000000000000 [ 1972.231523][ C0] RDX: ffffc90003467901 RSI: ffffffff897607cc RDI: ffffc900034679e0 [ 1972.231536][ C0] RBP: ffffc900034679b0 R08: ffffc90003467cf0 R09: ffffc90003467978 [ 1972.231549][ C0] R10: dffffc0000000000 R11: fffff5200068cf31 R12: ffff888024549e00 [ 1972.231562][ C0] R13: dffffc0000000000 R14: ffffffff8170d890 R15: ffffc90003467928 [ 1972.231575][ C0] ? stack_trace_save+0xf0/0xf0 [ 1972.231598][ C0] ? sctp_endpoint_new+0x43c/0xa00 [ 1972.231624][ C0] ? sctp_endpoint_new+0x43c/0xa00 [ 1972.231651][ C0] arch_stack_walk+0x100/0x140 [ 1972.231675][ C0] ? sctp_endpoint_new+0x43c/0xa00 [ 1972.231701][ C0] stack_trace_save+0xa6/0xf0 [ 1972.231725][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 1972.231746][ C0] ? crng_make_state+0x618/0xb00 [ 1972.231771][ C0] kasan_set_track+0x4b/0x70 [ 1972.231794][ C0] ? kasan_set_track+0x4b/0x70 [ 1972.231815][ C0] ? __kasan_kmalloc+0x8e/0xa0 [ 1972.231837][ C0] ? sctp_auth_shkey_create+0x77/0x190 [ 1972.231891][ C0] __kasan_kmalloc+0x8e/0xa0 [ 1972.231916][ C0] sctp_auth_shkey_create+0x77/0x190 [ 1972.231942][ C0] sctp_endpoint_new+0x43c/0xa00 [ 1972.231971][ C0] sctp_init_sock+0x95b/0x11c0 [ 1972.231997][ C0] sctp_v6_init_sock+0x12/0x60 [ 1972.232022][ C0] inet6_create+0xdb3/0x11b0 [ 1972.232052][ C0] __sock_create+0x49a/0x940 [ 1972.232081][ C0] __sys_socket+0xc4/0x190 [ 1972.232107][ C0] __x64_sys_socket+0x76/0x80 [ 1972.232130][ C0] do_syscall_64+0x4c/0xa0 [ 1972.232152][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1972.232174][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1972.232197][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1972.232224][ C0] RIP: 0033:0x7f329979e019 [ 1972.232238][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1972.232251][ C0] RSP: 002b:00007f329a5c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1972.232267][ C0] RAX: ffffffffffffffda RBX: 00007f3299a25fa0 RCX: 00007f329979e019 [ 1972.232279][ C0] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 1972.232295][ C0] RBP: 00007f329983500c R08: 0000000000000000 R09: 0000000000000000 [ 1972.232306][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1972.232316][ C0] R13: 00007f3299a26038 R14: 00007f3299a25fa0 R15: 00007ffdcec96398 [ 1972.232339][ C0] [ 1972.256938][ T1347] Bluetooth: hci9: command 0x040f tx timeout [ 1972.872120][ T1343] Bluetooth: hci4: command 0x040f tx timeout [ 1972.881722][T22280] Bluetooth: hci6: command 0x040f tx timeout [ 1972.888415][ T1340] Bluetooth: hci7: command 0x040f tx timeout [ 1974.987424][ T1347] Bluetooth: hci9: command 0x0419 tx timeout [ 1974.993535][ T1347] Bluetooth: hci6: command 0x0419 tx timeout [ 1974.999866][ T1340] Bluetooth: hci4: command 0x0419 tx timeout [ 1975.005968][ T1340] Bluetooth: hci7: command 0x0419 tx timeout [ 1976.040277][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.046725][ T1278] ieee802154 phy1 wpan1: encryption failed: -22