last executing test programs: 5.47940996s ago: executing program 4 (id=3649): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit={0x95, 0x0, 0x0, 0xf000000}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.75961573s ago: executing program 4 (id=3653): ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000280)=0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000400000002000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x202c, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'vcan0\x00', @random="5b9f45ff6cf9"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05d", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0xa, 0x2, 0x88) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0xd, &(0x7f0000000000)=r8, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4156, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x105e39, 0x0, 0xfffffffe, 0x6, 0x5, 0x2, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000)) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}, 0x8000) r10 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000080)="f5ebf3903496", &(0x7f0000000180)=""/2}, 0x20) 4.169945797s ago: executing program 4 (id=3659): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x38}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.943864513s ago: executing program 4 (id=3668): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602019900000e000a000f000000028000091294", 0x2e}], 0x1}, 0x10) 2.811990534s ago: executing program 1 (id=3670): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000400)=""/198, 0x28, 0xc6, 0x1, 0x1000}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], &(0x7f0000000a80)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x20, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, 0x40}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001c00)={r6, r5, 0x0, 0x2, 0xfffffffffffffffe}, 0x17) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001840)="795d928d00002000000000000000af0a193d63e2e5cf76854045cf4cbccf27272bd4763cf049752d6c7c741b555ccfc1fdd27a04de3f7f38c88e63d93b3ec61e42f95142606c", 0x46}, {&(0x7f0000001a40)="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", 0x159}, {&(0x7f0000001740)="1dad0f5701806a9ac4af8398e843d82ddd94c0cc35af1c06b0c3202660c93fc7026279d59b24bd0767e691ab42b61f1b8e637543870279390f62dc43479144468981682127c051466352922e4732110a17fcab27150be7dc28954b6ed37045570c9da4f0fa3c3b02c8b096d1870bda9292d80a03bbeffa33069841711e2b9b40a8ab121fb7d8b7928019ccd451fac1dbb6cf4174a01f4279abf540fea1f533bf1a6a643e73bd4857a1e68d2de9c628a8900f9c9c919e153a19e0dafdee5c8fc7a24000be0b48a52fd96627a0d02c9a241ad7da9ce0d8706b6c34f178204d0411c2928ad734c14b009ad657271edc05a4c35a48081e72428a", 0xf8}, {&(0x7f0000001240)}, {&(0x7f0000001040)="24e348a7a412a5930bb11a515e4537010a6a0276b03ef823ca14ceee4a25fd0b9adede44d21bda0ba0e24c9f66389f3f071252a9976aa2448b61f3ba34345fba09dbf41f61c74037f9c42363936aae3603260da470c8ac509b9466a93ead3404a73551c277c4f778c819412ad10f73a0", 0x70}, {0x0}, {&(0x7f00000014c0)="ae77bddedd79873cd413a19aae0feba5d8f5dc3cf0c981896abe1b713139ea444077e8bb5fe86b973699f08e0158af79788b", 0x32}, {&(0x7f0000001140)="ff11e444190714493ca58ffe8eeee38f2e42e6e5254425050137360f8b157bc628fb03fa8e48b917b4d93d86fc1aa495644d299b44a809e23a8e11db735a4cb1f4b9a0abe6511c1b150743743203d36fb7b51965fb28a35725a2cdcf7768b09a12cfb20d1a1b3be59315914a00bfd62220fef5afa1a968b6cc68ab2d37f54f81dfda7fd0c31fdb777cae78c75d3f03483e5c4393", 0x94}], 0x8, &(0x7f0000001c40)=[@rights={{0x20, 0x1, 0x1, [r5, r4, r3, r4]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0, 0x9f0e2c22f045c305}, 0x20004004) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="62ddcb6409660200000068eed78bb8b3b5fc1dd9c59e401cf3", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4000, r10}, 0x18) recvmsg$kcm(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/194, 0xc2}], 0x1}, 0x40000101) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) r11 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000ac0), 0x2, 0x0) 2.535741728s ago: executing program 2 (id=3672): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0xa888, 0x9}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafed88a839ffffffffe1053742e0e4650058f700000088641100114408000300b8bf4a31accb", 0x3e}, {&(0x7f0000002500)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f118703445f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362e401d3", 0xee}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000880)="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", 0x191}, {&(0x7f0000002400)="e20650bb69f596a001a9396df3e895da88d97ebd178d47b9119f9232ea20b1637429669dc4d0c0cf864240df51aff34230940425976a91424886f7569ab0a0ed75f495341eee79791236e5437400cf79a8e84ed65e993f6897444bb5d86d94215b781ae9918681a67968825e9f5fed8e3cf996d276f78c75101b6e188cc3b29c44b07b85c76fe40f20727d081a440ce84ced2c1d50c6879b422b03412a20f6d2d4b9226a87c0fe4de731da5c6a6edb4972a2f3e7966db1e8ff048f5b61600611bbbc0905a9a9c23fa6db92243e178f7793e83e82ead265afe54086", 0xdb}, {&(0x7f0000001400)="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", 0xbed}], 0x6}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003b80)={0xffffffffffffffff, 0x58, &(0x7f0000003b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000003c80)={&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000003a40)=[{&(0x7f0000000240)="68af8cf152980dc2d44c914edb6bed0032683e425adef5d24c5813d868fe730c9d60bb6f009651bdb853dbf55a87f770642d92fdc963dcb31a065a4a04564a4ab57c241172f741b00611376b17e5df1a56700c5b900eb20cd63159732e2936686ba745ef713403b23c7dc20e59db963cbe4f4a348f1a40d182ebf62d8a4fc1bf08272627037c", 0x86}, {&(0x7f0000002600)="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", 0x1000}, {0x0}, {&(0x7f0000003600)="ce74baeed3aecf7a038a95e426dfdc87b748efb593c9d6f65e9d6253271a52b745b322492757265875cf8212cbb0b64cb3913ce8afd86b38099ab2af84bfefe6e8887c6a14bf0b6ec7e2f9ccaebf10bb31da1bf60c2222525f4ce4e3d4951144da7d0d0ccb1a198ea75a932727bc9ad6215a0a795d855e783d", 0x79}, {&(0x7f0000003680)="0007c0dfbce586a7cd38139c1f2d6b18ed128249098f15a1aeea7118345e6bc06f40c3db993b380b3fa9b5da6e3c3398632c73000cafb4b39c8449ecc8b691772b79ed0392c2c02c54b5a23458dbdfd5a27ceb09f724d0e01e8ba4ded367c03215604318a1189e74eb7130", 0x6b}, {&(0x7f0000003700)="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", 0xfe}, {&(0x7f0000003800)="f28b8adc55f8d318950c9b0dce2f987dff34e5583794b4cf4c164969002aac1d4581784d9b955a3fea516423c283fdcf416a9907c4557a3025610456bd07da242b6dc73f8095de9da64b715f6476a18ac2f809718cf1596952565ed68a24f98991639dccb02ffd9b54eec7d7a625431a240bedb0633cbeef337c8ff776edebc6a920b9bb02fa759326b35373dd3af109dfcfade1e38c8936570efbc04abf94624dbcf2c048bc60ee6c284e5e269002afb970f4c5ef0e710fccba38331ca7235a2374645c5811c5d08e71db9e8b8435b930580d08118697347abfb03446b6092da582b41469375365cbfb50b1c888fa6bce52f84c3d6c3c454de81e9f1463", 0xfe}, {&(0x7f0000003900)="489b2439c82e44b78abc1e9a87c2ce6e324f66759130de573fc1767c0b6230e02ca8e664e649676bd1603632b7bb2449be6e7bdf5e5686949ff3997c9e63d371be56a2ffe9255b4eb005e32925c80c3a8cb1dfe098335388177c9d3c62230d6589526dba7afe9d20648c42fea5a8b76b316491d21de868057984809a85ac55ab1cb990", 0x83}, {&(0x7f00000039c0)="d5ed884e307c734fec28a10cab1c0a9f3d75121f73b264d22bc63594dc7b49b1719e7935dbecdfda9f3a85e9cba767735a9ca3d67724", 0x36}, {&(0x7f0000003a00)="ebf005bcc9f06e3ed0492e9b89fe2a643758c016e236a5af4d0bf0782d413cea", 0x20}], 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000140000000000000000000000010000000600000000000000110000000000000000000000011eeb8289294a1f73862e5054be0000000800000000000000140000000000000000000000020000000100010000000000140000000000000000000000010000000400000000000000100000000000000000000000070000001400000000000000000000000200000006000000000000006958f09e40"], 0xa8}, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x1b, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x800}, @generic={0xe, 0x6, 0x6, 0x7, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0xbc}, @map_val={0x18, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='syzkaller\x00', 0x4, 0xbd, &(0x7f0000000a80)=""/189, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x4, 0x0, 0x80, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000021c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x80, 0x0}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x1e6, 0x7, 0x1b}]}) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d80000001e0081064e81f782db44b9040002080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x24000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x604800, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102302, 0x2, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xe, 0xb4, 0x2ac7b3b7, 0x10002, 0x1, 0xab19, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0xf}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00082025000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b", 0xcc}, {&(0x7f0000000340)="7a4d715200d20892c51b08536cef11235dd523328b0d6638a8", 0x19}], 0x2}, 0x20000010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$kcm(0x21, 0x2, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=r5], 0x50) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x300, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) 2.513404478s ago: executing program 4 (id=3673): ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"]) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000a40)={0x0, 0x2, [@link_local, @remote]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="6204270000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af2155", 0x31}], 0x1}, 0x4008001) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) 2.418774099s ago: executing program 3 (id=3674): socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x2, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x16, 0x0, 0x0, 0xfffffff9}]}) 2.050616204s ago: executing program 2 (id=3677): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}, 0x50) 1.713481798s ago: executing program 1 (id=3678): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x38}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.042686726s ago: executing program 1 (id=3679): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x2, 0x0, 0x0, 0x5}, {0x1, 0x4, 0xfffffffc}], 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x2, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x88, 0x64, &(0x7f00000009c0)=r2, 0x4) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001a80)={r2, &(0x7f0000000a00)="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", &(0x7f0000001a00)=""/98}, 0x20) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x4, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x37) 1.042503076s ago: executing program 2 (id=3680): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x2, 0x0, 0x0, 0x5}, {0x1, 0x4, 0xfffffffc}], 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x2, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x88, 0x64, &(0x7f00000009c0)=r2, 0x4) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001a80)={r2, &(0x7f0000000a00)="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", &(0x7f0000001a00)=""/98}, 0x20) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x4, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x37) 1.042401796s ago: executing program 3 (id=3681): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903", 0x11}, {&(0x7f0000000440)="e166186d6cb0b5b1d6ffadb2be01b82402ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d625837900000000004616524a332c303f32cfdc3c8086d46d48a1d79cd875a9d2c0f1982c81243d593f36f955810ceb1cde2bb7134344012556b0fbf32121c68ce706a33636b35a089b17c0a6f5cc5a3115ce1f894acb323dd0554accb100f9fb14e0b522b876568345fdb0c5b85f3fd67be37ce83f399f1571f2b8f302ff583c", 0xaa}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a1bc001200020014260c600e12100015007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a7ce4ce1b14d6d930dfe1dbd322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1caee81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef0e9703920723f9a941", 0xcf}], 0x1}, 0x24000000) 1.012007647s ago: executing program 0 (id=3682): socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) 873.233749ms ago: executing program 4 (id=3683): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xb0, 0x3, 0xf8, 0xff, 0x0, 0x5, 0x10010, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x3}, 0x300, 0xf, 0x5c5, 0x8, 0x9, 0xd1ee, 0x20e, 0x0, 0x6, 0x0, 0x40}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0xfa, 0x0, 0xc, 0x4, 0x0, 0x6, 0x14000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x4000, 0xb, 0x6, 0x8, 0xd, 0x10001, 0xc607, 0x0, 0x1, 0x0, 0xcd}, r0, 0x10, r1, 0x8) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100000000, 0x8001, 0x3c9c34909985c9e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x718, 0x80000000000000c8, 0x7fff, 0x7, 0x80000000, 0xffffffff, 0x2, 0x0, 0x800000, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f8021f0000440002000800d30461bc24eeb556a705251e61821498fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd001b780000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x19) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "09ff9708ea6e1900000000"}]}}}], 0x40}, 0x20002880) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x7, 0x0) socket$kcm(0x2, 0x3, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r10 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400a000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x8010) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x291, @loopback, 0x7}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000480)="f4a8ed2467bf50198580000000000000dc8b850f2384663599232ed2670af86f315861c1d412ccfe", 0x28}], 0x1}, 0x48090) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1001}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8009}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910209875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 736.76918ms ago: executing program 3 (id=3684): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602019900000e000a000f000000028000091294", 0x2e}], 0x1}, 0x10) 735.48454ms ago: executing program 0 (id=3694): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="8ab800003f0a0000000000000600000000000000fef1e345a13879f799e59a4101de004e32c1df8bab73630ca57b670a574d6fb7374b322028a1c2e61854bd3dd681365fb25d7cd922b415a408c67ebea9f66d11e2936f03e59af6839e8da000d00f68e69aa3de9090a961421100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x18, 0xffffffffffffffff, 0x0, 0x30, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x26) 704.884351ms ago: executing program 2 (id=3685): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000eace20de2f02fb4c99ce962c38a1cec2189f49bee2efe8a4270420ce2e8140546745cd403c72d282737b3c4f269bdc883a5bba3187f28b2bba2c638369a5ab5aa424e03ec9f53ea940756903395d059bc4a85582de928b34c31737a93ebfbb59fde2b2aebaec11446d89a351448f78063f3fe4bdad72614ae9179ae3be4b30920e8f1a00"/164, @ANYRES32, @ANYRES32=0x0], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000180)=r5, 0x4) write$cgroup_pressure(r5, &(0x7f0000000240)={'full', 0x20, 0x9, 0x20, 0xfffffffffffffff8}, 0x2f) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000004308000018110000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="0000000000000000184100000300000000000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @cgroup_sockopt=0x16, r3, 0x8, &(0x7f0000000800)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x4, &(0x7f0000000840)=[r10, r4, r10, r4, r10], &(0x7f0000000880)=[{0x4, 0x3, 0x8}, {0x3, 0x4, 0xe, 0xc}, {0x5, 0x3, 0x9, 0xa}, {0x3, 0x4, 0x1, 0x8}], 0x10, 0x6c}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000980)=@o_path={&(0x7f0000000200)='./file0\x00', r11, 0x4000, r0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001680)={'team0\x00', 0x200}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x22, 0x2, 0x21) setsockopt$sock_attach_bpf(r12, 0x6, 0x16, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r8], 0x0, 0x51, 0x0, 0x0, 0x2}, 0x28) 669.601521ms ago: executing program 1 (id=3686): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f00000002c0)=@isdn={0x22, 0x2, 0x0, 0xbb}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="68000000000000008800000003000000b0aeddd6c0af4c6e0bb44607bf84de436e62504bd3938cd6a443b61113deffe3472c8a8e0aa651433c220654da12b4788e507c49b4bbc68d9b2be94b1c97ab248c956c9c5ae9e87d3b11e748a7d3461fb7000000000000009a1f33c0ae925ac71e8a314b80b884ab478de59c46f1d68d1d8bd484364c81603eba295d9df6a19cc87634ec972430c8c88955566b0fc2fcd280e6dc87fa51d4e5d24004e9"], 0x68}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000", @ANYBLOB='\x00'/15, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000000000003, 0x8404, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f0000000280), 0x8}, 0x810c, 0x0, 0xc4b, 0x9, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x202, 0x40020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x100009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x908, 0x6, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x1, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(r4, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 520.427813ms ago: executing program 0 (id=3687): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080012100000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x1013, &(0x7f0000000a40)=""/4115, 0x0, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x21) 408.250994ms ago: executing program 0 (id=3688): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 401.259245ms ago: executing program 3 (id=3689): r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0xc0}, 0x0) 322.024475ms ago: executing program 2 (id=3690): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x407}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 205.999887ms ago: executing program 1 (id=3691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000cc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ed000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 205.381927ms ago: executing program 3 (id=3692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000080)="3275973bb0023f54907f75fa982a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 177.487647ms ago: executing program 0 (id=3693): socketpair$unix(0x1, 0x7ac1160475133061, 0x0, 0x0) 97.572498ms ago: executing program 2 (id=3695): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'veth0_to_bond\x00', 0x3003}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.94198ms ago: executing program 3 (id=3696): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000003c40)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x6, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="8b7f0000", 0x4}, {0x0}], 0x2}, 0x0) 1.83056ms ago: executing program 1 (id=3697): r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007"], 0xc0}, 0x0) 0s ago: executing program 0 (id=3698): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x1000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.1.2725'. [ 503.656045][T12376] delete_channel: no stack [ 504.307747][T12399] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2733'. [ 505.059156][T12411] netlink: 'syz.4.2739': attribute type 16 has an invalid length. [ 505.070559][T12409] delete_channel: no stack [ 505.107020][T12411] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2739'. [ 505.174829][T12410] delete_channel: no stack [ 505.876561][T12441] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2749'. [ 506.366267][T12456] netlink: 'syz.2.2755': attribute type 16 has an invalid length. [ 506.397145][T12456] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2755'. [ 506.414265][T12457] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2753'. [ 506.450665][T12455] delete_channel: no stack [ 507.148922][T12472] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.2761'. [ 507.196766][T12472] netlink: 'syz.2.2761': attribute type 21 has an invalid length. [ 507.216882][T12472] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2761'. [ 508.217211][T12492] netlink: 'syz.2.2768': attribute type 16 has an invalid length. [ 508.272351][T12492] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2768'. [ 508.437514][T12491] delete_channel: no stack [ 508.922338][T12510] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2777'. [ 510.196765][T12536] netlink: 'syz.0.2785': attribute type 16 has an invalid length. [ 510.206719][T12526] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.2779'. [ 510.223672][T12536] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2785'. [ 510.280278][T12535] delete_channel: no stack [ 510.312066][T12531] netlink: 'syz.1.2779': attribute type 21 has an invalid length. [ 510.320067][T12531] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2779'. [ 510.672469][T12549] netlink: 'syz.4.2790': attribute type 39 has an invalid length. [ 511.172298][T12554] netlink: 'syz.4.2790': attribute type 11 has an invalid length. [ 511.672388][T12562] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2791'. [ 512.327013][T12577] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2796'. [ 512.462579][T12576] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2796'. [ 512.496835][T12580] netlink: 'syz.4.2799': attribute type 16 has an invalid length. [ 512.509731][T12580] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2799'. [ 512.591301][T12579] delete_channel: no stack [ 512.860162][T12589] netlink: 'syz.4.2803': attribute type 4 has an invalid length. [ 512.906740][T12592] netlink: 'syz.3.2802': attribute type 6 has an invalid length. [ 512.936266][T12592] netlink: 'syz.3.2802': attribute type 30 has an invalid length. [ 512.973876][T12592] netlink: 'syz.3.2802': attribute type 49 has an invalid length. [ 513.130006][T12595] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2808'. [ 513.170506][T12595] tc_dump_action: action bad kind [ 513.234360][T12595] netlink: 'syz.4.2808': attribute type 39 has an invalid length. [ 513.297321][T12601] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2805'. [ 514.069800][T12621] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2813'. [ 514.113283][T12619] delete_channel: no stack [ 514.553667][T12635] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2818'. [ 515.212970][T12646] validate_nla: 2 callbacks suppressed [ 515.212990][T12646] netlink: 'syz.0.2823': attribute type 1 has an invalid length. [ 515.320456][T12646] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2823'. [ 515.865538][T12655] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2825'. [ 516.534523][T12659] netlink: 'syz.0.2828': attribute type 16 has an invalid length. [ 516.609146][T12659] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2828'. [ 516.862657][T12658] delete_channel: no stack [ 518.755396][T12703] netlink: 'syz.0.2843': attribute type 16 has an invalid length. [ 518.776353][T12703] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2843'. [ 518.870682][T12701] delete_channel: no stack [ 518.957846][T12704] netlink: 'syz.2.2842': attribute type 4 has an invalid length. [ 519.037921][T12704] netlink: 155792 bytes leftover after parsing attributes in process `syz.2.2842'. [ 520.109604][T12731] netlink: 'syz.2.2852': attribute type 10 has an invalid length. [ 520.353659][T12737] netlink: 'syz.0.2855': attribute type 16 has an invalid length. [ 520.412189][T12737] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2855'. [ 520.470295][T12736] delete_channel: no stack [ 520.480207][T12743] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2856'. [ 520.861208][T12752] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2860'. [ 524.465535][T12785] netlink: 'syz.3.2872': attribute type 4 has an invalid length. [ 524.523682][T12794] netlink: 'syz.2.2876': attribute type 2 has an invalid length. [ 524.551956][T12794] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2876'. [ 524.563033][T12785] netlink: 155792 bytes leftover after parsing attributes in process `syz.3.2872'. [ 524.736745][T12799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 524.747526][T12799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 524.756229][T12799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 524.778033][T12799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 524.787082][T12799] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 524.794762][T12799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 525.150900][ T4443] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.327925][ T4443] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.605099][ T4443] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.697038][T12808] netlink: 'syz.2.2881': attribute type 1 has an invalid length. [ 525.717376][T12808] netlink: 'syz.2.2881': attribute type 4 has an invalid length. [ 525.738020][T12808] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2881'. [ 525.798528][ T4443] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.147727][T12797] chnl_net:caif_netlink_parms(): no params data found [ 526.556068][T12834] netlink: 'syz.3.2887': attribute type 10 has an invalid length. [ 526.776426][T12797] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.791832][T12797] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.800290][T12797] device bridge_slave_0 entered promiscuous mode [ 526.871806][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 526.901940][T12797] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.909173][T12797] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.949617][T12797] device bridge_slave_1 entered promiscuous mode [ 527.224646][T12797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.384396][T12852] netlink: 'syz.1.2890': attribute type 4 has an invalid length. [ 527.403976][T12852] netlink: 155792 bytes leftover after parsing attributes in process `syz.1.2890'. [ 527.415670][T12797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.630126][T12797] team0: Port device team_slave_0 added [ 527.993567][T12797] team0: Port device team_slave_1 added [ 528.141419][T12797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.155846][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.219427][T12797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.251455][T12883] netlink: 'syz.1.2901': attribute type 16 has an invalid length. [ 528.272710][T12883] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2901'. [ 528.657580][T12797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.669502][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.747807][T12797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.951720][ T4287] Bluetooth: hci5: command 0x041b tx timeout [ 529.274516][T12899] netlink: 'syz.2.2904': attribute type 10 has an invalid length. [ 529.487379][T12797] device hsr_slave_0 entered promiscuous mode [ 529.530669][T12797] device hsr_slave_1 entered promiscuous mode [ 529.551756][T12797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.563085][T12797] Cannot create hsr debugfs directory [ 530.057437][ T4443] device hsr_slave_0 left promiscuous mode [ 530.098928][ T4443] device hsr_slave_1 left promiscuous mode [ 530.143933][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.151520][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.236906][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.260822][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.311635][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.349046][ T4443] device bridge_slave_0 left promiscuous mode [ 530.355591][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.469613][ T4443] device veth1_macvtap left promiscuous mode [ 530.493986][ T4443] device veth0_macvtap left promiscuous mode [ 530.500168][ T4443] device veth1_vlan left promiscuous mode [ 530.516765][T12936] FAULT_INJECTION: forcing a failure. [ 530.516765][T12936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.538366][T12936] CPU: 0 PID: 12936 Comm: syz.3.2916 Not tainted syzkaller #0 [ 530.545908][T12936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.556003][T12936] Call Trace: [ 530.559422][T12936] [ 530.562386][T12936] dump_stack_lvl+0x188/0x24e [ 530.567210][T12936] ? show_regs_print_info+0x12/0x12 [ 530.572494][T12936] ? load_image+0x400/0x400 [ 530.577051][T12936] ? __lock_acquire+0x7d10/0x7d10 [ 530.582129][T12936] ? snprintf+0xe5/0x140 [ 530.586419][T12936] should_fail_ex+0x399/0x4d0 [ 530.591151][T12936] _copy_to_user+0x2c/0x130 [ 530.595716][T12936] simple_read_from_buffer+0xe3/0x150 [ 530.601133][T12936] proc_fail_nth_read+0x1a6/0x220 [ 530.606206][T12936] ? proc_fault_inject_write+0x310/0x310 [ 530.611899][T12936] ? fsnotify_perm+0x248/0x550 [ 530.616726][T12936] ? proc_fault_inject_write+0x310/0x310 [ 530.622403][T12936] vfs_read+0x2de/0xa00 [ 530.626620][T12936] ? kernel_read+0x1e0/0x1e0 [ 530.631287][T12936] ? __fget_files+0x28/0x4b0 [ 530.635935][T12936] ? __fget_files+0x28/0x4b0 [ 530.640590][T12936] ? __fget_files+0x43d/0x4b0 [ 530.645328][T12936] ? __fdget_pos+0x2ae/0x360 [ 530.649967][T12936] ? ksys_read+0x71/0x250 [ 530.654440][T12936] ksys_read+0x14c/0x250 [ 530.658845][T12936] ? vfs_write+0xa30/0xa30 [ 530.663326][T12936] ? lockdep_hardirqs_on+0x94/0x140 [ 530.668587][T12936] do_syscall_64+0x4c/0xa0 [ 530.673065][T12936] ? clear_bhb_loop+0x60/0xb0 [ 530.677791][T12936] ? clear_bhb_loop+0x60/0xb0 [ 530.682519][T12936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.688463][T12936] RIP: 0033:0x7fed4d75d60e [ 530.692924][T12936] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 530.712584][T12936] RSP: 002b:00007fed4e657fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.721066][T12936] RAX: ffffffffffffffda RBX: 00007fed4e6586c0 RCX: 00007fed4d75d60e [ 530.729090][T12936] RDX: 000000000000000f RSI: 00007fed4e6580a0 RDI: 0000000000000006 [ 530.737133][T12936] RBP: 00007fed4e658090 R08: 0000000000000000 R09: 0000000000000000 [ 530.745148][T12936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.753169][T12936] R13: 00007fed4da16218 R14: 00007fed4da16180 R15: 00007ffc494c0fa8 [ 530.761203][T12936] [ 531.031846][T12799] Bluetooth: hci5: command 0x040f tx timeout [ 531.577656][T12950] netlink: 'syz.2.2923': attribute type 3 has an invalid length. [ 531.600340][T12950] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2923'. [ 532.172944][ T4443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.259677][ T4443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.832055][ T4443] bond0 (unregistering): Released all slaves [ 533.111802][T12799] Bluetooth: hci5: command 0x0419 tx timeout [ 533.600378][T12976] netlink: 'syz.3.2933': attribute type 16 has an invalid length. [ 533.639967][T12976] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2933'. [ 533.758244][T12975] delete_channel: no stack [ 534.034028][T12797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 534.066064][T12797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 534.174518][T12797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 534.211560][T12797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 534.547509][T12797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.611972][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 534.648448][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 534.677301][T12797] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.708959][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 534.727743][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 534.758758][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.765975][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.810856][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 534.829390][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 534.849507][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 534.867143][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.874368][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.907492][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 534.938006][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 534.948953][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 534.966795][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 534.993261][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 535.003824][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 535.021865][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 535.035623][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 535.050029][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 535.071602][T12797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 535.088291][T12797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 535.105713][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 535.117773][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 536.189030][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 536.206143][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 536.238230][T12797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.252621][T13055] netlink: 'syz.3.2957': attribute type 10 has an invalid length. [ 536.261942][T13053] netlink: 'syz.0.2954': attribute type 10 has an invalid length. [ 536.302093][T13053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2954'. [ 536.333494][T13053] device team0 entered promiscuous mode [ 536.361933][T13053] device team_slave_1 entered promiscuous mode [ 536.407314][T13053] device bridge0 entered promiscuous mode [ 536.522527][T13053] bridge0: port 3(team0) entered blocking state [ 536.585217][T13053] bridge0: port 3(team0) entered disabled state [ 536.593037][T13068] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2961'. [ 536.718509][T13053] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 537.407800][T13090] netlink: 'syz.0.2966': attribute type 10 has an invalid length. [ 537.524559][T13095] netlink: 'syz.0.2966': attribute type 6 has an invalid length. [ 537.699031][T13099] delete_channel: no stack [ 537.794544][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 537.822772][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 537.974120][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 537.992875][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 538.030860][T12797] device veth0_vlan entered promiscuous mode [ 538.060721][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 538.079017][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 538.107961][T12797] device veth1_vlan entered promiscuous mode [ 538.346673][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 538.439011][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 538.449570][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 538.485052][T12797] device veth0_macvtap entered promiscuous mode [ 538.567719][T12797] device veth1_macvtap entered promiscuous mode [ 538.719924][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.748637][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.758967][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.789992][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.818894][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.835627][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.849076][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.880619][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.903288][T12797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.933159][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 538.957527][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 539.003692][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 539.053580][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 539.102783][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.146632][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.174644][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.209120][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.239692][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.269984][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.302347][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.333579][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.355973][T12797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.445632][T13144] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2980'. [ 539.453425][T13142] netlink: 'syz.0.2979': attribute type 4 has an invalid length. [ 539.466766][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 539.486785][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 539.494255][T13142] netlink: 155792 bytes leftover after parsing attributes in process `syz.0.2979'. [ 539.537279][T12797] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.567058][T12797] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.593934][T12797] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.643558][T12797] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.900896][ T4431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.946901][ T4431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.999903][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 540.064349][ T4431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.088164][ T4431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.136456][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 540.555915][T13173] netlink: 'syz.4.2870': attribute type 10 has an invalid length. [ 541.012613][T13183] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2992'. [ 541.184409][T13184] netlink: 'syz.3.2994': attribute type 4 has an invalid length. [ 541.205824][T13184] netlink: 155792 bytes leftover after parsing attributes in process `syz.3.2994'. [ 541.841410][T13201] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2998'. [ 542.213638][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 542.232841][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 542.240683][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 542.251791][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 542.262375][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 542.270818][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 542.446833][ T4438] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.781918][ T4438] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.273598][ T4438] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.342643][T13218] netlink: 'syz.3.3003': attribute type 10 has an invalid length. [ 543.654207][ T4438] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.825294][T13231] netlink: 'syz.4.3004': attribute type 7 has an invalid length. [ 544.092422][T13207] chnl_net:caif_netlink_parms(): no params data found [ 544.236548][T13247] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3010'. [ 544.312330][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 544.466358][T13251] netlink: 'syz.4.3009': attribute type 4 has an invalid length. [ 544.514925][T13251] netlink: 155792 bytes leftover after parsing attributes in process `syz.4.3009'. [ 544.714653][ T4438] device ip6gretap0 left promiscuous mode [ 544.730518][ T4438] : port 1(ip6gretap0) entered disabled state [ 545.000004][T13207] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.010847][T13207] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.037658][T13207] device bridge_slave_0 entered promiscuous mode [ 545.212171][T13207] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.219344][T13207] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.255199][T13207] device bridge_slave_1 entered promiscuous mode [ 545.470862][T13207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.658622][T13207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.707150][T13281] netlink: 'syz.3.3016': attribute type 21 has an invalid length. [ 545.729921][T13281] netlink: 'syz.3.3016': attribute type 6 has an invalid length. [ 545.759834][T13281] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3016'. [ 545.953569][T13288] netlink: 'syz.0.3017': attribute type 10 has an invalid length. [ 546.380201][T13207] team0: Port device team_slave_0 added [ 546.392076][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 546.414324][T13207] team0: Port device team_slave_1 added [ 546.935966][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3024'. [ 546.991294][T13207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.021670][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.101855][T13207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.289715][T13207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.307168][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.361823][T13207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.373670][T13309] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3025'. [ 547.393598][T13311] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3027'. [ 547.777215][T13207] device hsr_slave_0 entered promiscuous mode [ 547.851089][T13207] device hsr_slave_1 entered promiscuous mode [ 547.881203][T13207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.906120][T13207] Cannot create hsr debugfs directory [ 547.957061][T13332] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3032'. [ 547.967072][ T4438] device hsr_slave_0 left promiscuous mode [ 547.982354][ T4438] device hsr_slave_1 left promiscuous mode [ 548.004436][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.063676][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.096927][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.146092][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.291431][T13345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3033'. [ 548.472330][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 549.694453][ T4438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.020477][ T4438] bond0 (unregistering): Released all slaves [ 550.071194][T13345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3033'. [ 550.088165][T13354] netlink: 'syz.0.3036': attribute type 4 has an invalid length. [ 550.443769][T13368] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3039'. [ 550.547388][T13372] netlink: 'syz.1.3041': attribute type 39 has an invalid length. [ 550.561946][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 551.552973][T13207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 551.579791][T13207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 551.659696][T13207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 551.712909][T13207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 551.798922][T13396] netlink: 'syz.0.3047': attribute type 16 has an invalid length. [ 551.825231][T13396] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3047'. [ 551.839335][T13398] sctp: [Deprecated]: syz.3.3048 (pid 13398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.839335][T13398] Use struct sctp_sack_info instead [ 551.918858][T13396] netlink: 'syz.0.3047': attribute type 10 has an invalid length. [ 552.016897][T13395] delete_channel: no stack [ 552.043399][T13207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.086843][T13207] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.152437][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 552.178323][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 552.197822][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 552.217429][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 552.268160][ T4469] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.275389][ T4469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.332349][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 552.357153][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 552.393276][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 552.426382][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.433647][ T4443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.479442][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 552.510229][T13405] netlink: 'syz.1.3049': attribute type 39 has an invalid length. [ 552.568772][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 552.590348][T13412] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3052'. [ 552.637412][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 552.688453][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 552.734904][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 552.778655][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 552.818879][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 552.857104][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 552.872907][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 552.895863][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 552.915152][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 552.967462][T13207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 553.153013][T13430] netlink: 'syz.3.3057': attribute type 4 has an invalid length. [ 553.183474][T13430] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3057'. [ 553.651183][T13438] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3059'. [ 553.957417][T13438] device syzkaller0 entered promiscuous mode [ 554.034403][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.058393][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.510902][T13454] netlink: 'syz.4.3062': attribute type 16 has an invalid length. [ 554.528661][T13454] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3062'. [ 555.253677][T13453] delete_channel: no stack [ 555.398809][T13477] netlink: 'syz.0.3068': attribute type 4 has an invalid length. [ 555.416851][T13477] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3068'. [ 557.102846][T13207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.111321][T13454] netlink: 'syz.4.3062': attribute type 10 has an invalid length. [ 557.128949][T13454] team0: Port device macvlan0 added [ 557.138785][T13482] netlink: 'syz.1.3069': attribute type 27 has an invalid length. [ 557.171746][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 557.190816][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 557.315361][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 557.329167][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 557.390841][T13207] device veth0_vlan entered promiscuous mode [ 557.406155][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 557.433134][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 557.467683][T13207] device veth1_vlan entered promiscuous mode [ 557.550248][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 557.569622][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 557.642094][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 557.689004][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 557.724267][T13207] device veth0_macvtap entered promiscuous mode [ 557.750826][T13502] netlink: 'syz.3.3074': attribute type 5 has an invalid length. [ 557.769703][T13502] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3074'. [ 557.816707][T13207] device veth1_macvtap entered promiscuous mode [ 557.935715][T13207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.990041][T13207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.028465][T13207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.056529][T13207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.101295][T13207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.144030][T13207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.188639][T13207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.223975][T13207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.270872][T13207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.304736][T13507] netlink: 'syz.4.3076': attribute type 39 has an invalid length. [ 558.361228][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 558.373424][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 558.443364][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 558.493616][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 558.555856][T13207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.621949][T13207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.668456][T13207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.699698][T13207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.724014][T13522] netlink: 'syz.3.3079': attribute type 4 has an invalid length. [ 558.743233][T13522] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3079'. [ 558.751375][T13207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.802018][T13207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.827869][T13207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.855422][T13207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.897863][T13207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.927175][T13517] netlink: 'syz.1.3078': attribute type 4 has an invalid length. [ 558.951839][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 558.974441][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 559.026882][T13207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.066964][T13207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.147490][T13207] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.176800][T13207] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.270175][T13532] netlink: 'syz.3.3082': attribute type 16 has an invalid length. [ 559.311783][T13532] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3082'. [ 559.360761][T13536] netlink: 'syz.3.3082': attribute type 10 has an invalid length. [ 559.494322][T13531] delete_channel: no stack [ 559.516774][ T4469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.543058][ T4469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.555407][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 559.610479][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.620094][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.647662][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 559.843092][T13542] netlink: 'syz.0.3085': attribute type 6 has an invalid length. [ 559.851136][T13542] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3085'. [ 561.245102][T13577] netlink: 'syz.4.3093': attribute type 4 has an invalid length. [ 561.299602][T13577] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3093'. [ 561.395612][T13581] netlink: 'syz.0.3095': attribute type 16 has an invalid length. [ 561.432094][T13581] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3095'. [ 561.619690][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 561.638148][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 561.657308][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 561.668312][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 561.687475][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 561.702565][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 562.073422][T13580] delete_channel: no stack [ 562.609946][T13600] FAULT_INJECTION: forcing a failure. [ 562.609946][T13600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.623410][T13600] CPU: 0 PID: 13600 Comm: syz.4.3099 Not tainted syzkaller #0 [ 562.630958][T13600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 562.641057][T13600] Call Trace: [ 562.644347][T13600] [ 562.647305][T13600] dump_stack_lvl+0x188/0x24e [ 562.652019][T13600] ? show_regs_print_info+0x12/0x12 [ 562.657268][T13600] ? load_image+0x400/0x400 [ 562.661793][T13600] ? __lock_acquire+0x7d10/0x7d10 [ 562.666851][T13600] ? snprintf+0xe5/0x140 [ 562.671098][T13600] should_fail_ex+0x399/0x4d0 [ 562.675785][T13600] _copy_to_user+0x2c/0x130 [ 562.680303][T13600] simple_read_from_buffer+0xe3/0x150 [ 562.685687][T13600] proc_fail_nth_read+0x1a6/0x220 [ 562.690736][T13600] ? proc_fault_inject_write+0x310/0x310 [ 562.696419][T13600] ? fsnotify_perm+0x248/0x550 [ 562.701236][T13600] ? proc_fault_inject_write+0x310/0x310 [ 562.706891][T13600] vfs_read+0x2de/0xa00 [ 562.711085][T13600] ? kernel_read+0x1e0/0x1e0 [ 562.715710][T13600] ? __fget_files+0x28/0x4b0 [ 562.720340][T13600] ? __fget_files+0x28/0x4b0 [ 562.724980][T13600] ? __fget_files+0x43d/0x4b0 [ 562.729702][T13600] ? __fdget_pos+0x2ae/0x360 [ 562.734324][T13600] ? ksys_read+0x71/0x250 [ 562.738689][T13600] ksys_read+0x14c/0x250 [ 562.742963][T13600] ? vfs_write+0xa30/0xa30 [ 562.747417][T13600] ? lockdep_hardirqs_on+0x94/0x140 [ 562.752648][T13600] do_syscall_64+0x4c/0xa0 [ 562.757100][T13600] ? clear_bhb_loop+0x60/0xb0 [ 562.761801][T13600] ? clear_bhb_loop+0x60/0xb0 [ 562.766513][T13600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.772452][T13600] RIP: 0033:0x7efcaf15d60e [ 562.776891][T13600] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 562.796522][T13600] RSP: 002b:00007efcb0031fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 562.804967][T13600] RAX: ffffffffffffffda RBX: 00007efcb00326c0 RCX: 00007efcaf15d60e [ 562.812978][T13600] RDX: 000000000000000f RSI: 00007efcb00320a0 RDI: 0000000000000005 [ 562.820969][T13600] RBP: 00007efcb0032090 R08: 0000000000000000 R09: 0000000000000000 [ 562.829051][T13600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.837045][T13600] R13: 00007efcaf416038 R14: 00007efcaf415fa0 R15: 00007fff4a9f45c8 [ 562.845052][T13600] [ 562.964969][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.971334][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.216766][T13605] netlink: 'syz.4.3101': attribute type 3 has an invalid length. [ 563.230016][T13605] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.3101'. [ 563.766194][T12799] Bluetooth: hci0: command 0x0409 tx timeout [ 564.189852][T13581] netlink: 'syz.0.3095': attribute type 10 has an invalid length. [ 564.198257][T13587] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3096'. [ 564.489914][T12560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.687337][T12560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.911113][T12560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.973486][T13628] netlink: 'syz.0.3108': attribute type 39 has an invalid length. [ 565.134227][T12560] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.516824][T12560] device 0 left promiscuous mode [ 565.687735][T13588] chnl_net:caif_netlink_parms(): no params data found [ 565.806175][T13652] netlink: 'syz.0.3112': attribute type 21 has an invalid length. [ 565.831924][T12799] Bluetooth: hci0: command 0x041b tx timeout [ 565.853101][T13652] netlink: 'syz.0.3112': attribute type 6 has an invalid length. [ 565.900457][T13652] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3112'. [ 565.919459][T13658] netlink: 'syz.3.3114': attribute type 16 has an invalid length. [ 565.932587][T13658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3114'. [ 566.168451][T13655] netlink: 'syz.4.3113': attribute type 27 has an invalid length. [ 566.223006][T13658] netlink: 'syz.3.3114': attribute type 10 has an invalid length. [ 566.287803][T13656] delete_channel: no stack [ 566.450995][T13588] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.478705][T13588] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.513060][T13588] device bridge_slave_0 entered promiscuous mode [ 566.527672][T13677] netlink: 'syz.4.3118': attribute type 28 has an invalid length. [ 566.550470][T13677] netlink: 'syz.4.3118': attribute type 29 has an invalid length. [ 566.573668][T13677] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3118'. [ 566.609294][T13588] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.622062][T13588] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.630488][T13588] device bridge_slave_1 entered promiscuous mode [ 566.818843][T13588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.920752][T13588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.047580][T13686] netlink: 'syz.4.3121': attribute type 39 has an invalid length. [ 567.100951][T13588] team0: Port device team_slave_0 added [ 567.199673][T13588] team0: Port device team_slave_1 added [ 567.467299][T13588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.495721][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.585099][T13588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.632213][T13588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.639312][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.730900][T13588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.828671][T13712] netlink: 'syz.4.3127': attribute type 10 has an invalid length. [ 567.912066][T12799] Bluetooth: hci0: command 0x040f tx timeout [ 567.929432][T13714] netlink: 'syz.3.3129': attribute type 4 has an invalid length. [ 567.948561][T13714] netlink: 155792 bytes leftover after parsing attributes in process `syz.3.3129'. [ 568.126296][T13588] device hsr_slave_0 entered promiscuous mode [ 568.170439][T13588] device hsr_slave_1 entered promiscuous mode [ 568.204524][T13588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.219837][T13588] Cannot create hsr debugfs directory [ 568.326949][T13725] netlink: 'syz.2.3130': attribute type 16 has an invalid length. [ 568.391271][T13725] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3130'. [ 568.454956][T13729] netlink: 'syz.2.3130': attribute type 10 has an invalid length. [ 568.596081][T13729] team0: Port device macvlan0 added [ 568.643965][T13736] netlink: 'syz.4.3133': attribute type 16 has an invalid length. [ 568.670305][T13723] delete_channel: no stack [ 568.676690][T13736] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3133'. [ 569.291861][T12560] device hsr_slave_0 left promiscuous mode [ 569.331770][T12560] device hsr_slave_1 left promiscuous mode [ 569.441954][T12560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.453723][T12560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.506094][T12560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.521647][T12560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.544170][T12560] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.559396][T12560] device bridge_slave_0 left promiscuous mode [ 569.590882][T12560] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.997405][T12799] Bluetooth: hci0: command 0x0419 tx timeout [ 572.609043][T12560] device veth0_macvtap left promiscuous mode [ 572.623095][T12560] device veth1_vlan left promiscuous mode [ 572.924874][T13770] netlink: 'syz.0.3142': attribute type 4 has an invalid length. [ 572.944357][T13770] netlink: 155792 bytes leftover after parsing attributes in process `syz.0.3142'. [ 573.120403][T12560] team0 (unregistering): Port device macvlan0 removed [ 573.158193][T13773] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3143'. [ 573.455850][T12560] team0 (unregistering): Port device team_slave_1 removed [ 573.825206][T12560] team0 (unregistering): Port device bridge0 removed [ 573.935618][T13762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3140'. [ 573.946008][T13766] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 573.960413][T13767] netlink: 'syz.4.3141': attribute type 5 has an invalid length. [ 573.971356][T13773] netlink: 'syz.0.3143': attribute type 4 has an invalid length. [ 573.992748][T13766] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 574.014130][T13766] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 574.505622][T13783] netlink: 'syz.4.3146': attribute type 16 has an invalid length. [ 574.570669][T13783] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3146'. [ 574.586260][T13787] netlink: 'syz.2.3147': attribute type 39 has an invalid length. [ 574.631188][T13791] netlink: 'syz.4.3146': attribute type 10 has an invalid length. [ 574.708873][T13782] delete_channel: no stack [ 574.825043][T13796] netlink: 'syz.0.3149': attribute type 4 has an invalid length. [ 574.864333][T13796] netlink: 155792 bytes leftover after parsing attributes in process `syz.0.3149'. [ 575.196632][T13588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 575.259789][T13807] netlink: 'syz.4.3151': attribute type 10 has an invalid length. [ 575.287282][T13807] netlink: 65019 bytes leftover after parsing attributes in process `syz.4.3151'. [ 575.328225][T13588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 575.363838][T13588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 575.408072][T13588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 575.470801][T13812] netlink: 'syz.0.3152': attribute type 4 has an invalid length. [ 575.512291][T13812] netlink: 155792 bytes leftover after parsing attributes in process `syz.0.3152'. [ 575.712155][T13588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.770641][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 575.813515][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 575.844209][T13588] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.929574][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 575.947148][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 575.963074][ T4469] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.970285][ T4469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.982271][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 576.002332][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 576.015758][ T4469] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.022957][ T4469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.078976][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 576.134145][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 576.193299][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 576.267624][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 576.292203][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 576.339148][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 576.403147][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 576.442395][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 576.472890][T13840] FAULT_INJECTION: forcing a failure. [ 576.472890][T13840] name failslab, interval 1, probability 0, space 0, times 0 [ 576.495167][T13588] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 576.517851][T13840] CPU: 0 PID: 13840 Comm: syz.3.3159 Not tainted syzkaller #0 [ 576.525393][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.535502][T13840] Call Trace: [ 576.538816][T13840] [ 576.541788][T13840] dump_stack_lvl+0x188/0x24e [ 576.546706][T13840] ? show_regs_print_info+0x12/0x12 [ 576.551959][T13840] ? load_image+0x400/0x400 [ 576.556516][T13840] ? __might_sleep+0xd0/0xd0 [ 576.561243][T13840] ? __lock_acquire+0x7d10/0x7d10 [ 576.566309][T13840] should_fail_ex+0x399/0x4d0 [ 576.571015][T13840] should_failslab+0x5/0x20 [ 576.575549][T13840] slab_pre_alloc_hook+0x59/0x310 [ 576.580599][T13840] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 576.586351][T13840] __kmem_cache_alloc_node+0x4f/0x260 [ 576.591772][T13840] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 576.597617][T13840] __kmalloc+0xa0/0x240 [ 576.601814][T13840] tomoyo_realpath_from_path+0xdf/0x5d0 [ 576.607401][T13840] ? tomoyo_path_number_perm+0x205/0x650 [ 576.613065][T13840] tomoyo_path_number_perm+0x22f/0x650 [ 576.618564][T13840] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 576.624052][T13840] ? ksys_write+0x1c0/0x250 [ 576.628597][T13840] ? common_file_perm+0x171/0x1c0 [ 576.633668][T13840] ? __fget_files+0x28/0x4b0 [ 576.638283][T13840] ? __fget_files+0x28/0x4b0 [ 576.642911][T13840] security_file_ioctl+0x6c/0xa0 [ 576.647880][T13840] __se_sys_ioctl+0x48/0x170 [ 576.652499][T13840] do_syscall_64+0x4c/0xa0 [ 576.656946][T13840] ? clear_bhb_loop+0x60/0xb0 [ 576.661662][T13840] ? clear_bhb_loop+0x60/0xb0 [ 576.666476][T13840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.672396][T13840] RIP: 0033:0x7fed4d79cdd9 [ 576.676840][T13840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.696466][T13840] RSP: 002b:00007fed4e69a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.704904][T13840] RAX: ffffffffffffffda RBX: 00007fed4da15fa0 RCX: 00007fed4d79cdd9 [ 576.712896][T13840] RDX: 0000200000000900 RSI: 00000000000089f0 RDI: 0000000000000004 [ 576.720888][T13840] RBP: 00007fed4e69a090 R08: 0000000000000000 R09: 0000000000000000 [ 576.728901][T13840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.736912][T13840] R13: 00007fed4da16038 R14: 00007fed4da15fa0 R15: 00007ffc494c0fa8 [ 576.744925][T13840] [ 576.801659][T13588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 576.833162][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 576.842276][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 576.879433][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 576.904891][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 576.932541][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 577.284846][T13853] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3161'. [ 577.300265][T13840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 577.459062][T13860] netlink: 'syz.4.3163': attribute type 3 has an invalid length. [ 577.509720][T13860] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3163'. [ 577.635451][T13856] netlink: 155792 bytes leftover after parsing attributes in process `syz.2.3162'. [ 578.018446][T13876] validate_nla: 2 callbacks suppressed [ 578.018485][T13876] netlink: 'syz.4.3166': attribute type 4 has an invalid length. [ 578.033784][T13878] __nla_validate_parse: 1 callbacks suppressed [ 578.033801][T13878] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3167'. [ 578.074348][T13876] netlink: 155792 bytes leftover after parsing attributes in process `syz.4.3166'. [ 578.096644][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 578.123726][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 578.186105][T13588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.436266][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 578.477739][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 578.716991][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 578.749671][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 578.798708][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 578.873466][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 578.907082][T13588] device veth0_vlan entered promiscuous mode [ 578.923120][T13895] netlink: 'syz.0.3171': attribute type 17 has an invalid length. [ 578.931030][T13895] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3171'. [ 579.015840][T13895] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 579.097537][T13895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.164247][T13901] netlink: 'syz.0.3171': attribute type 21 has an invalid length. [ 579.237436][T13588] device veth1_vlan entered promiscuous mode [ 579.405317][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 579.434338][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 579.489218][T13588] device veth0_macvtap entered promiscuous mode [ 579.553739][T13588] device veth1_macvtap entered promiscuous mode [ 579.635704][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.689233][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.739645][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.779016][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.816365][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.842841][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.867161][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.908918][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.949499][T13588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.959614][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 579.975093][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 580.013874][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 580.048261][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 580.069997][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.097892][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.125679][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.171691][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.206276][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.230115][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.261957][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.290756][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.327588][T13588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.351893][T13924] netlink: 'syz.2.3177': attribute type 10 has an invalid length. [ 580.359988][T13924] netlink: 65019 bytes leftover after parsing attributes in process `syz.2.3177'. [ 580.428147][T13927] netlink: 'syz.0.3178': attribute type 4 has an invalid length. [ 580.444937][T13927] netlink: 155792 bytes leftover after parsing attributes in process `syz.0.3178'. [ 580.473766][T13930] netlink: 'syz.4.3179': attribute type 10 has an invalid length. [ 580.495175][T13588] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.519741][T13588] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.529005][T13588] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.540234][T13588] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.557430][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 580.571289][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 580.760264][ T4457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.768786][ T4457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.881886][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 580.968384][T13941] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3184'. [ 581.714481][T13941] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.722108][T13941] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.807959][ T4469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.844210][ T4469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.887351][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 582.002514][T13951] delete_channel: no stack [ 582.693841][T13968] netlink: 'syz.1.3193': attribute type 4 has an invalid length. [ 582.753636][T13968] netlink: 155792 bytes leftover after parsing attributes in process `syz.1.3193'. [ 583.287970][T12799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 583.297433][T12799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 583.305700][T12799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 583.313932][T12799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 583.322118][T12799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 583.330289][T12799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 583.373205][T12560] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.518006][T12560] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.680451][T12560] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.809482][T12560] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.021804][T13989] sctp: [Deprecated]: syz.4.3200 (pid 13989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 584.021804][T13989] Use struct sctp_sack_info instead [ 584.219417][T12560] device 0 left promiscuous mode [ 584.371277][T13981] chnl_net:caif_netlink_parms(): no params data found [ 584.944775][T14020] netlink: 'syz.2.3206': attribute type 4 has an invalid length. [ 584.989947][T14020] netlink: 155792 bytes leftover after parsing attributes in process `syz.2.3206'. [ 585.014881][T13981] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.041317][T13981] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.081344][T13981] device bridge_slave_0 entered promiscuous mode [ 585.229099][T13981] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.239221][T13981] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.271242][T13981] device bridge_slave_1 entered promiscuous mode [ 585.352034][T12799] Bluetooth: hci2: command 0x0409 tx timeout [ 585.526943][T14038] netlink: 'syz.2.3209': attribute type 4 has an invalid length. [ 585.556624][T14038] netlink: 155792 bytes leftover after parsing attributes in process `syz.2.3209'. [ 585.648175][T13981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.785934][T13981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.093076][T13981] team0: Port device team_slave_0 added [ 586.180742][T13981] team0: Port device team_slave_1 added [ 586.422500][T14049] netlink: 'syz.2.3211': attribute type 21 has an invalid length. [ 586.441295][T13981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.472258][T13981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.577013][T13981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.700411][T13981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.724336][T13981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.852437][T13981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.188413][T14067] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3216'. [ 587.442116][T12799] Bluetooth: hci2: command 0x041b tx timeout [ 587.482479][T13981] device hsr_slave_0 entered promiscuous mode [ 587.537938][T13981] device hsr_slave_1 entered promiscuous mode [ 587.565086][T13981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.580291][T13981] Cannot create hsr debugfs directory [ 587.684603][T12560] device hsr_slave_0 left promiscuous mode [ 587.711009][T12560] device hsr_slave_1 left promiscuous mode [ 587.738215][T12560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.766301][T12560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.812528][T12560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.840073][T12560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.871974][T12560] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.894066][T12560] device bridge_slave_0 left promiscuous mode [ 587.921898][T12560] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.984482][T12560] device veth1_vlan left promiscuous mode [ 588.000633][T12560] device veth0_vlan left promiscuous mode [ 588.720352][T12560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.759049][T12560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.993391][T12560] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 589.002997][T12560] bond0 (unregistering): Released all slaves [ 589.119109][T14079] netlink: 'syz.2.3218': attribute type 10 has an invalid length. [ 589.180846][T14079] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 589.195574][T14084] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3219'. [ 589.492859][T14094] netlink: 'syz.2.3222': attribute type 7 has an invalid length. [ 589.511903][T12799] Bluetooth: hci2: command 0x040f tx timeout [ 589.633120][T14095] netlink: 'syz.1.3221': attribute type 4 has an invalid length. [ 589.673165][T14095] netlink: 155792 bytes leftover after parsing attributes in process `syz.1.3221'. [ 589.888354][T14104] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3224'. [ 590.044902][T14109] netlink: 'syz.0.3226': attribute type 4 has an invalid length. [ 590.073963][T14109] netlink: 155792 bytes leftover after parsing attributes in process `syz.0.3226'. [ 590.834292][T13981] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 590.905522][T13981] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 590.954075][T13981] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 590.977666][T13981] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 591.245861][T13981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.296756][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 591.331983][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 591.371264][T13981] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.392495][T14141] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3233'. [ 591.428387][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 591.452294][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 591.481664][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.488844][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.559406][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 591.601954][T12799] Bluetooth: hci2: command 0x0419 tx timeout [ 591.651121][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 591.682334][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.689543][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.706380][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 591.716192][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 591.729948][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 591.790394][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 591.830878][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 591.858104][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 591.875359][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 591.995871][T13981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 592.041521][T13981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.077713][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 592.122853][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 592.149695][T14155] netlink: 'syz.1.3238': attribute type 4 has an invalid length. [ 592.169952][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 592.184556][T14155] netlink: 155792 bytes leftover after parsing attributes in process `syz.1.3238'. [ 592.203325][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 592.225209][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 592.263008][T14153] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3237'. [ 592.308442][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 592.565668][T14167] netlink: 'syz.2.3241': attribute type 11 has an invalid length. [ 592.581556][T14161] netlink: 'syz.4.3240': attribute type 4 has an invalid length. [ 592.615344][T14167] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3241'. [ 592.679196][T14161] netlink: 155792 bytes leftover after parsing attributes in process `syz.4.3240'. [ 592.754132][T14173] netlink: 'syz.0.3243': attribute type 4 has an invalid length. [ 592.993414][T14177] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3245'. [ 593.085990][T14177] openvswitch: netlink: Flow key attr not present in new flow. [ 593.158301][T14179] netlink: 'syz.2.3244': attribute type 16 has an invalid length. [ 593.196360][T14179] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3244'. [ 593.233876][T14185] netlink: 'syz.2.3244': attribute type 10 has an invalid length. [ 593.384534][T14189] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3246'. [ 593.403850][T14178] delete_channel: no stack [ 593.425472][T14187] netlink: 'syz.4.3247': attribute type 21 has an invalid length. [ 593.442745][T14187] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.3247'. [ 593.466315][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 593.501994][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 593.541849][T14187] netlink: 'syz.4.3247': attribute type 21 has an invalid length. [ 593.552769][T14187] netlink: 'syz.4.3247': attribute type 21 has an invalid length. [ 593.600789][T13981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.032092][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 594.044476][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 594.120373][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 594.150126][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 594.201166][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 594.276898][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 594.343805][T13981] device veth0_vlan entered promiscuous mode [ 594.373439][T13981] device veth1_vlan entered promiscuous mode [ 594.492108][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 594.514842][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 594.555445][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 594.586271][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 594.633336][T13981] device veth0_macvtap entered promiscuous mode [ 594.663272][T13981] device veth1_macvtap entered promiscuous mode [ 594.698090][T13981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.709130][T13981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.727959][T13981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.758174][T13981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.799844][T13981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.836804][T13981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.863245][T13981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.879581][T13981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.903890][T13981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.912457][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 594.946362][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 594.974487][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 595.000111][T13981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.035584][T13981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.051731][T13981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.066924][T13981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.087160][T13981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.109322][T13981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.130825][T13981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.165314][T13981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.207387][T13981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.240248][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 595.269575][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 595.307374][T13981] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.336594][T13981] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.373351][T13981] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.396667][T13981] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.617113][T14238] __nla_validate_parse: 62 callbacks suppressed [ 595.617131][T14238] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3257'. [ 595.647329][T14237] validate_nla: 27 callbacks suppressed [ 595.647448][T14237] netlink: 'syz.1.3258': attribute type 16 has an invalid length. [ 595.686724][T14237] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3258'. [ 595.721878][T14240] netlink: 'syz.1.3258': attribute type 10 has an invalid length. [ 595.813155][T14240] team0: Port device macvlan0 added [ 595.833039][ T4443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.849456][ T4443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.866322][T14235] delete_channel: no stack [ 595.932828][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 596.042201][ T4443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.060551][ T4443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.198271][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 597.715064][T12560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.886826][T14287] netlink: 'syz.1.3270': attribute type 16 has an invalid length. [ 597.898747][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 597.908801][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 597.921803][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 597.933585][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 597.941323][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 597.949538][T14287] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3270'. [ 597.960919][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 598.023916][T12560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.070583][T14287] netlink: 'syz.1.3270': attribute type 10 has an invalid length. [ 598.261292][T14286] delete_channel: no stack [ 598.313382][T12560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.497152][T14305] syz.3.3275[14305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 598.497275][T14305] syz.3.3275[14305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 598.526414][T12560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.982230][T14317] netlink: 'syz.1.3277': attribute type 27 has an invalid length. [ 599.155442][T14320] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3278'. [ 599.279415][T14288] chnl_net:caif_netlink_parms(): no params data found [ 599.567501][T14288] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.601244][T14288] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.653191][T14288] device bridge_slave_0 entered promiscuous mode [ 599.836187][T14288] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.851794][T14288] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.886907][T14288] device bridge_slave_1 entered promiscuous mode [ 599.921406][T14341] netlink: 'syz.1.3281': attribute type 5 has an invalid length. [ 599.961085][T14341] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3281'. [ 599.991725][T12799] Bluetooth: hci3: command 0x0409 tx timeout [ 600.255089][T14288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.336453][T14357] netlink: 'syz.1.3286': attribute type 16 has an invalid length. [ 600.362103][T14357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3286'. [ 600.473511][T14288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.500750][T14357] netlink: 'syz.1.3286': attribute type 10 has an invalid length. [ 600.551960][T14356] delete_channel: no stack [ 600.710335][T14288] team0: Port device team_slave_0 added [ 600.824112][T14288] team0: Port device team_slave_1 added [ 600.962922][T14288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.969958][T14288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.017103][T14377] netlink: 'syz.4.3290': attribute type 4 has an invalid length. [ 601.065789][T14377] netlink: 155792 bytes leftover after parsing attributes in process `syz.4.3290'. [ 601.073867][T14288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.137176][T14288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.160474][T14288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.241658][T14288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.532099][T14288] device hsr_slave_0 entered promiscuous mode [ 601.546340][T14288] device hsr_slave_1 entered promiscuous mode [ 601.587625][T14288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.611658][T14288] Cannot create hsr debugfs directory [ 601.776920][T14409] netlink: 'syz.2.3298': attribute type 16 has an invalid length. [ 601.813555][T14409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3298'. [ 601.966194][T14413] netlink: 'syz.2.3298': attribute type 10 has an invalid length. [ 601.985978][T14408] delete_channel: no stack [ 602.074825][T12799] Bluetooth: hci3: command 0x041b tx timeout [ 602.309912][T12560] device hsr_slave_0 left promiscuous mode [ 602.333145][T12560] device hsr_slave_1 left promiscuous mode [ 602.365060][T12560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.396746][T12560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.440395][T12560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.497563][T12560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.538964][T12560] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.585525][T12560] device bridge_slave_0 left promiscuous mode [ 602.606421][T12560] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.474442][T12560] device veth1_macvtap left promiscuous mode [ 603.483032][T14428] delete_channel: no stack [ 603.489227][T12560] device veth0_macvtap left promiscuous mode [ 603.739862][T14443] netlink: 'syz.3.3304': attribute type 4 has an invalid length. [ 603.758167][T14443] netlink: 155792 bytes leftover after parsing attributes in process `syz.3.3304'. [ 604.151797][T12799] Bluetooth: hci3: command 0x040f tx timeout [ 604.813318][T12560] device team_slave_1 left promiscuous mode [ 604.838552][T12560] team0 (unregistering): Port device team_slave_1 removed [ 604.987903][T12560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.228317][T12560] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 605.298298][T12560] device bridge0 left promiscuous mode [ 605.305470][T12560] team0 (unregistering): Port device bridge0 removed [ 605.337156][T12560] bond0 (unregistering): Released all slaves [ 606.051436][T14471] netlink: 'syz.2.3310': attribute type 16 has an invalid length. [ 606.061474][T14471] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3310'. [ 606.162710][T14471] netlink: 'syz.2.3310': attribute type 10 has an invalid length. [ 606.186083][T14470] delete_channel: no stack [ 606.231704][T12799] Bluetooth: hci3: command 0x0419 tx timeout [ 608.349484][T14504] netlink: 'syz.3.3315': attribute type 4 has an invalid length. [ 608.372350][T14504] netlink: 155792 bytes leftover after parsing attributes in process `syz.3.3315'. [ 609.876637][T14501] netlink: 'syz.2.3323': attribute type 21 has an invalid length. [ 609.886320][T14501] netlink: 'syz.2.3323': attribute type 6 has an invalid length. [ 609.894613][T14501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3323'. [ 610.014034][T14288] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 610.051816][T14288] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 610.102241][T14288] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 610.159778][T14288] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 610.482609][T14288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.534378][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 610.590604][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 610.635761][T14288] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.671299][T14529] netlink: 'syz.4.3322': attribute type 16 has an invalid length. [ 610.690175][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 610.703001][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 610.733332][T14529] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3322'. [ 610.743558][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.750691][ T4431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.802908][T14531] netlink: 'syz.4.3322': attribute type 10 has an invalid length. [ 610.833887][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 610.855576][T14528] delete_channel: no stack [ 610.863916][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 610.900628][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.944167][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.951429][ T4431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.010445][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 611.088747][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 611.157691][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 611.195791][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 611.244137][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 611.291318][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 611.308908][T14541] netlink: 'syz.4.3326': attribute type 4 has an invalid length. [ 611.335383][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 611.356906][T14541] netlink: 155792 bytes leftover after parsing attributes in process `syz.4.3326'. [ 611.376020][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 611.410445][T14288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 611.449682][T14288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 611.481859][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 611.504189][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 611.531334][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 612.627563][T14565] netlink: 'syz.1.3331': attribute type 21 has an invalid length. [ 612.642324][T14565] netlink: 'syz.1.3331': attribute type 6 has an invalid length. [ 612.675777][T14565] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3331'. [ 612.809478][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 612.820478][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 612.913331][T14288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.049744][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 613.059568][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 613.128229][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 613.147381][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 613.186969][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 613.198873][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 613.218029][T14288] device veth0_vlan entered promiscuous mode [ 613.254913][T14288] device veth1_vlan entered promiscuous mode [ 613.316702][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 613.346688][T14583] netlink: 'syz.4.3335': attribute type 16 has an invalid length. [ 613.365955][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 613.382568][T14583] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3335'. [ 613.397266][T14288] device veth0_macvtap entered promiscuous mode [ 613.421439][T14288] device veth1_macvtap entered promiscuous mode [ 613.450476][T14583] netlink: 'syz.4.3335': attribute type 10 has an invalid length. [ 613.482236][T14582] delete_channel: no stack [ 613.495891][T14288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.524122][T14288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.544093][T14288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.596620][T14288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.623827][T14288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.638328][T14288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.661679][T14288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.715422][T14288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.744194][T14589] netlink: 'syz.4.3337': attribute type 4 has an invalid length. [ 613.757209][T14288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.821255][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 613.833512][T14589] netlink: 155792 bytes leftover after parsing attributes in process `syz.4.3337'. [ 613.845021][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 613.875421][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 613.905332][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 613.960234][T14288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.999337][T14288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.047259][T14288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.084358][T14288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.110364][T14288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.138227][T14288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.166094][T14288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.199206][T14288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.242662][T14288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.306816][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 614.323911][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 614.367883][T14288] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.392197][T14288] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.435683][T14288] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.461596][T14288] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.561600][T14610] netlink: 'syz.3.3345': attribute type 21 has an invalid length. [ 617.569564][T14610] netlink: 'syz.3.3345': attribute type 6 has an invalid length. [ 617.641987][T14610] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3345'. [ 617.815130][ T4457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.838432][ T4457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.889313][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 617.981276][T14620] netlink: 'syz.4.3347': attribute type 16 has an invalid length. [ 618.024318][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.034845][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.043875][T14620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3347'. [ 618.079870][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 618.129755][T14619] delete_channel: no stack [ 618.174680][T14624] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3349'. [ 618.321599][T14624] netlink: 'syz.3.3349': attribute type 4 has an invalid length. [ 618.671749][T14633] netlink: 'syz.4.3351': attribute type 5 has an invalid length. [ 618.850405][T14636] netlink: 'syz.0.3353': attribute type 4 has an invalid length. [ 618.876358][T14636] netlink: 155792 bytes leftover after parsing attributes in process `syz.0.3353'. [ 620.031270][T14654] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3358'. [ 620.363392][T14673] netlink: 'syz.3.3365': attribute type 3 has an invalid length. [ 620.371363][T14673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3365'. [ 620.407850][T14670] netlink: 'syz.0.3362': attribute type 16 has an invalid length. [ 620.438305][T14670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3362'. [ 620.502402][T14670] netlink: 'syz.0.3362': attribute type 10 has an invalid length. [ 620.673289][T14670] team0: Port device macvlan0 added [ 620.697968][T14667] delete_channel: no stack [ 621.137196][T14685] netlink: 'syz.0.3368': attribute type 4 has an invalid length. [ 621.162064][T14685] netlink: 155792 bytes leftover after parsing attributes in process `syz.0.3368'. [ 622.469112][T14704] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3377'. [ 622.544261][T14706] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3378'. [ 622.572479][T14706] validate_nla: 2 callbacks suppressed [ 622.572524][T14706] netlink: 'syz.3.3378': attribute type 10 has an invalid length. [ 622.787346][T14706] team0: Port device macvlan0 added [ 622.845948][T14705] delete_channel: no stack [ 623.322420][T14722] netlink: 'syz.3.3383': attribute type 4 has an invalid length. [ 623.348959][T14722] netlink: 155792 bytes leftover after parsing attributes in process `syz.3.3383'. [ 624.396691][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.403132][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.747231][T14746] netlink: 'syz.0.3391': attribute type 10 has an invalid length. [ 624.896459][T14749] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3392'. [ 624.906024][T14749] ksmbd: Unknown IPC event: 10, ignore. [ 625.121452][T14755] netlink: 'syz.2.3394': attribute type 16 has an invalid length. [ 625.169319][T14755] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3394'. [ 625.249194][T14759] netlink: 'syz.2.3394': attribute type 10 has an invalid length. [ 625.347665][T14754] delete_channel: no stack [ 625.544387][T14765] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3397'. [ 625.909762][T14773] netlink: 'syz.1.3398': attribute type 4 has an invalid length. [ 625.955941][T14773] netlink: 155792 bytes leftover after parsing attributes in process `syz.1.3398'. [ 626.411661][T14777] team0: Port device team_slave_0 removed [ 626.491203][T14776] delete_channel: no stack [ 627.882598][T14811] netlink: 'syz.2.3412': attribute type 4 has an invalid length. [ 627.890658][T14811] netlink: 155792 bytes leftover after parsing attributes in process `syz.2.3412'. [ 627.970009][T14816] netlink: 'syz.0.3414': attribute type 10 has an invalid length. [ 627.990675][T14816] netlink: 'syz.0.3414': attribute type 6 has an invalid length. [ 628.064899][T14813] netlink: 'syz.3.3413': attribute type 16 has an invalid length. [ 628.091896][T14813] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3413'. [ 628.153576][T14818] netlink: 'syz.3.3413': attribute type 10 has an invalid length. [ 628.306087][T14812] delete_channel: no stack [ 628.843085][T14829] netlink: 'syz.3.3418': attribute type 16 has an invalid length. [ 628.869365][T14829] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3418'. [ 628.884620][T14832] netlink: 'syz.3.3418': attribute type 10 has an invalid length. [ 628.956996][T14828] delete_channel: no stack [ 630.319185][T14853] netlink: 'syz.0.3426': attribute type 16 has an invalid length. [ 630.357789][T14853] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3426'. [ 630.385172][T14853] netlink: 'syz.0.3426': attribute type 10 has an invalid length. [ 630.449915][T14858] netlink: 'syz.3.3427': attribute type 4 has an invalid length. [ 630.476384][T14858] netlink: 155792 bytes leftover after parsing attributes in process `syz.3.3427'. [ 630.554733][T14852] delete_channel: no stack [ 631.529600][T14885] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3434'. [ 631.862274][T14890] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3436'. [ 632.239027][T14883] delete_channel: no stack [ 632.364531][T14892] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3437'. [ 632.579129][T14900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3441'. [ 632.645106][T14897] delete_channel: no stack [ 632.893517][T14909] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 632.975280][T14911] validate_nla: 7 callbacks suppressed [ 632.975301][T14911] netlink: 'syz.2.3444': attribute type 4 has an invalid length. [ 633.063456][T14911] netlink: 155792 bytes leftover after parsing attributes in process `syz.2.3444'. [ 633.647098][T14927] netlink: 'syz.4.3446': attribute type 7 has an invalid length. [ 634.941009][T14945] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3453'. [ 636.430168][T14961] netlink: 'syz.3.3457': attribute type 4 has an invalid length. [ 636.472438][T14961] netlink: 155792 bytes leftover after parsing attributes in process `syz.3.3457'. [ 637.199279][T14980] netlink: 'syz.1.3473': attribute type 21 has an invalid length. [ 637.264999][T14980] netlink: 'syz.1.3473': attribute type 1 has an invalid length. [ 637.289893][T14983] netlink: 'syz.1.3473': attribute type 29 has an invalid length. [ 637.451008][T14985] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3464'. [ 638.317621][T15001] netlink: 'syz.0.3469': attribute type 16 has an invalid length. [ 638.416116][T15001] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3469'. [ 638.459229][T14999] netlink: 'syz.0.3469': attribute type 10 has an invalid length. [ 638.484212][T14998] delete_channel: no stack [ 638.979934][T15016] netlink: 'syz.2.3475': attribute type 4 has an invalid length. [ 638.996197][T15016] netlink: 155792 bytes leftover after parsing attributes in process `syz.2.3475'. [ 639.087424][T15020] netlink: 'syz.3.3476': attribute type 13 has an invalid length. [ 639.163096][T15020] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3476'. [ 639.322001][T15020] erspan0: refused to change device tx_queue_len [ 639.357480][T15030] netlink: 'syz.2.3478': attribute type 10 has an invalid length. [ 639.665643][T15025] netlink: 'syz.4.3477': attribute type 21 has an invalid length. [ 639.691303][T15025] netlink: 'syz.4.3477': attribute type 1 has an invalid length. [ 639.718061][T15032] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3479'. [ 639.771663][T15034] netlink: 'syz.4.3477': attribute type 29 has an invalid length. [ 640.708403][T15046] netlink: 'syz.3.3483': attribute type 16 has an invalid length. [ 640.778838][T15046] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3483'. [ 640.815727][T15048] netlink: 'syz.3.3483': attribute type 10 has an invalid length. [ 640.962167][T15044] delete_channel: no stack [ 641.815815][T15065] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.3489'. [ 641.983759][T15065] netlink: zone id is out of range [ 642.014946][T15065] netlink: zone id is out of range [ 642.066890][T15065] netlink: zone id is out of range [ 642.154747][T15065] netlink: zone id is out of range [ 642.181886][T15065] netlink: zone id is out of range [ 642.231974][T15065] netlink: zone id is out of range [ 642.338621][T15065] netlink: get zone limit has 8 unknown bytes [ 642.387881][T15079] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3495'. [ 642.509927][T15083] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3494'. [ 643.037368][T15091] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3498'. [ 643.691384][T15086] delete_channel: no stack [ 644.377129][T15117] validate_nla: 2 callbacks suppressed [ 644.377149][T15117] netlink: 'syz.3.3506': attribute type 4 has an invalid length. [ 644.482074][T15117] netlink: 155792 bytes leftover after parsing attributes in process `syz.3.3506'. [ 645.924770][T15140] netlink: 'syz.3.3517': attribute type 16 has an invalid length. [ 645.961861][T15140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3517'. [ 645.982781][T15141] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3516'. [ 646.023817][T15140] netlink: 'syz.3.3517': attribute type 10 has an invalid length. [ 646.055285][T15139] delete_channel: no stack [ 646.609941][T15161] netlink: 'syz.1.3522': attribute type 16 has an invalid length. [ 646.621337][T15161] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3522'. [ 646.820484][T15169] FAULT_INJECTION: forcing a failure. [ 646.820484][T15169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.835032][T15169] CPU: 0 PID: 15169 Comm: syz.0.3525 Not tainted syzkaller #0 [ 646.842704][T15169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 646.852796][T15169] Call Trace: [ 646.856099][T15169] [ 646.859062][T15169] dump_stack_lvl+0x188/0x24e [ 646.863799][T15169] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 646.870001][T15169] ? show_regs_print_info+0x12/0x12 [ 646.875233][T15169] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 646.881433][T15169] should_fail_ex+0x399/0x4d0 [ 646.886144][T15169] strncpy_from_user+0x32/0x350 [ 646.891070][T15169] bpf_prog_load+0x1f3/0x1560 [ 646.895781][T15169] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 646.901807][T15169] ? lock_chain_count+0x20/0x20 [ 646.906696][T15169] ? map_freeze+0x390/0x390 [ 646.911235][T15169] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 646.917420][T15169] ? lockdep_hardirqs_on+0x94/0x140 [ 646.922660][T15169] ? security_bpf+0x55/0xa0 [ 646.927206][T15169] ? bpf_lsm_bpf+0x5/0x10 [ 646.931572][T15169] ? security_bpf+0x7a/0xa0 [ 646.936100][T15169] __sys_bpf+0x5b8/0x780 [ 646.940372][T15169] ? bpf_link_show_fdinfo+0x380/0x380 [ 646.945817][T15169] ? lock_chain_count+0x20/0x20 [ 646.950710][T15169] __x64_sys_bpf+0x78/0x90 [ 646.955158][T15169] do_syscall_64+0x4c/0xa0 [ 646.959609][T15169] ? clear_bhb_loop+0x60/0xb0 [ 646.964320][T15169] ? clear_bhb_loop+0x60/0xb0 [ 646.969031][T15169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.975039][T15169] RIP: 0033:0x7fc052b9cdd9 [ 646.979478][T15169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.999275][T15169] RSP: 002b:00007fc053aa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 647.007753][T15169] RAX: ffffffffffffffda RBX: 00007fc052e15fa0 RCX: 00007fc052b9cdd9 [ 647.015775][T15169] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 647.023792][T15169] RBP: 00007fc053aa2090 R08: 0000000000000000 R09: 0000000000000000 [ 647.031782][T15169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.039878][T15169] R13: 00007fc052e16038 R14: 00007fc052e15fa0 R15: 00007fff15117588 [ 647.047898][T15169] [ 647.063297][T15159] netlink: 'syz.2.3521': attribute type 21 has an invalid length. [ 647.071972][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 647.102206][T15159] netlink: 'syz.2.3521': attribute type 6 has an invalid length. [ 647.150610][T15159] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3521'. [ 647.517791][T15178] netlink: 'syz.3.3527': attribute type 4 has an invalid length. [ 647.538922][T15178] netlink: 155792 bytes leftover after parsing attributes in process `syz.3.3527'. [ 647.667176][T15186] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3530'. [ 648.135886][T15190] netlink: 'syz.1.3532': attribute type 16 has an invalid length. [ 648.149522][T15190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3532'. [ 648.167284][T15190] netlink: 'syz.1.3532': attribute type 10 has an invalid length. [ 648.322300][T15188] delete_channel: no stack [ 648.553441][T15197] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3535'. [ 648.673224][T15202] netlink: 'syz.3.3537': attribute type 10 has an invalid length. [ 650.893277][T15238] netlink: 'syz.1.3546': attribute type 16 has an invalid length. [ 650.931321][T15238] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3546'. [ 650.978951][T15238] netlink: 'syz.1.3546': attribute type 10 has an invalid length. [ 650.991959][T15240] netlink: 'syz.2.3547': attribute type 4 has an invalid length. [ 651.013520][T15240] netlink: 155792 bytes leftover after parsing attributes in process `syz.2.3547'. [ 651.046010][T15237] delete_channel: no stack [ 651.382017][T15251] FAULT_INJECTION: forcing a failure. [ 651.382017][T15251] name failslab, interval 1, probability 0, space 0, times 0 [ 651.405411][T15251] CPU: 0 PID: 15251 Comm: syz.1.3552 Not tainted syzkaller #0 [ 651.412957][T15251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 651.423077][T15251] Call Trace: [ 651.426400][T15251] [ 651.429368][T15251] dump_stack_lvl+0x188/0x24e [ 651.434103][T15251] ? show_regs_print_info+0x12/0x12 [ 651.439349][T15251] ? load_image+0x400/0x400 [ 651.443889][T15251] ? __might_sleep+0xd0/0xd0 [ 651.448507][T15251] ? __lock_acquire+0x7d10/0x7d10 [ 651.453627][T15251] should_fail_ex+0x399/0x4d0 [ 651.458345][T15251] should_failslab+0x5/0x20 [ 651.462880][T15251] slab_pre_alloc_hook+0x59/0x310 [ 651.467945][T15251] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 651.473538][T15251] __kmem_cache_alloc_node+0x4f/0x260 [ 651.478941][T15251] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 651.484520][T15251] __kmalloc+0xa0/0x240 [ 651.488719][T15251] bpf_prog_test_run_skb+0x234/0x12a0 [ 651.494168][T15251] ? __fget_files+0x28/0x4b0 [ 651.498810][T15251] ? __fget_files+0x28/0x4b0 [ 651.503440][T15251] ? __fget_files+0x43d/0x4b0 [ 651.508170][T15251] ? cpu_online+0xa0/0xa0 [ 651.512539][T15251] bpf_prog_test_run+0x31e/0x390 [ 651.517573][T15251] __sys_bpf+0x62b/0x780 [ 651.521869][T15251] ? bpf_link_show_fdinfo+0x380/0x380 [ 651.527317][T15251] ? lock_chain_count+0x20/0x20 [ 651.532217][T15251] __x64_sys_bpf+0x78/0x90 [ 651.536681][T15251] do_syscall_64+0x4c/0xa0 [ 651.541143][T15251] ? clear_bhb_loop+0x60/0xb0 [ 651.545945][T15251] ? clear_bhb_loop+0x60/0xb0 [ 651.550657][T15251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 651.556584][T15251] RIP: 0033:0x7f42dd59cdd9 [ 651.561127][T15251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.580768][T15251] RSP: 002b:00007f42de47f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 651.589207][T15251] RAX: ffffffffffffffda RBX: 00007f42dd815fa0 RCX: 00007f42dd59cdd9 [ 651.597291][T15251] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 651.605291][T15251] RBP: 00007f42de47f090 R08: 0000000000000000 R09: 0000000000000000 [ 651.613291][T15251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.621375][T15251] R13: 00007f42dd816038 R14: 00007f42dd815fa0 R15: 00007fff0544eae8 [ 651.629388][T15251] [ 652.200582][T15265] netlink: 'syz.1.3558': attribute type 16 has an invalid length. [ 652.263202][T15265] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3558'. [ 652.429417][T15276] netlink: 'syz.3.3562': attribute type 16 has an invalid length. [ 652.448352][T15276] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3562'. [ 652.535730][T15280] netlink: 'syz.4.3563': attribute type 4 has an invalid length. [ 652.559129][T15280] netlink: 155792 bytes leftover after parsing attributes in process `syz.4.3563'. [ 652.864138][T15264] delete_channel: no stack [ 652.961868][T15265] netlink: 'syz.1.3558': attribute type 10 has an invalid length. [ 652.981559][T15276] netlink: 'syz.3.3562': attribute type 10 has an invalid length. [ 652.997078][T15275] delete_channel: no stack [ 654.336524][T15318] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3574'. [ 656.336933][T15318] netlink: 'syz.1.3574': attribute type 4 has an invalid length. [ 656.788998][T15326] netlink: 'syz.2.3577': attribute type 16 has an invalid length. [ 656.820371][T15326] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3577'. [ 656.856946][T15326] netlink: 'syz.2.3577': attribute type 10 has an invalid length. [ 656.947691][T15325] delete_channel: no stack [ 657.079474][T15337] netlink: 'syz.4.3576': attribute type 4 has an invalid length. [ 657.130153][T15337] netlink: 155792 bytes leftover after parsing attributes in process `syz.4.3576'. [ 657.301828][T15338] netlink: 'syz.0.3578': attribute type 16 has an invalid length. [ 657.360966][T15338] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3578'. [ 657.568487][T15335] delete_channel: no stack [ 657.781092][T15343] netlink: 'syz.1.3580': attribute type 5 has an invalid length. [ 658.123762][T15357] netlink: 'syz.1.3587': attribute type 21 has an invalid length. [ 658.149153][T15357] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3587'. [ 658.378191][T15361] netlink: 'syz.1.3587': attribute type 1 has an invalid length. [ 658.423756][T15361] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.3587'. [ 658.467575][T15369] netlink: 'syz.3.3592': attribute type 16 has an invalid length. [ 658.496867][T15369] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3592'. [ 658.562222][T15373] netlink: 'syz.3.3592': attribute type 10 has an invalid length. [ 658.607285][T15372] netlink: 155792 bytes leftover after parsing attributes in process `syz.4.3593'. [ 658.634860][T15368] delete_channel: no stack [ 659.441199][T15397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3600'. [ 659.630630][T15406] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3604'. [ 659.665635][T15405] delete_channel: no stack [ 659.875648][T15410] netlink: 155792 bytes leftover after parsing attributes in process `syz.2.3607'. [ 660.487068][T15420] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3610'. [ 660.758210][T15422] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.849914][T15422] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.889332][T15422] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 661.228031][T15440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3616'. [ 661.286440][T15437] delete_channel: no stack [ 661.411700][T15444] validate_nla: 9 callbacks suppressed [ 661.411740][T15444] netlink: 'syz.4.3618': attribute type 4 has an invalid length. [ 661.802995][T15451] team0: Port device team_slave_0 removed [ 661.834717][T15450] delete_channel: no stack [ 662.615572][T15468] netlink: 'syz.2.3627': attribute type 10 has an invalid length. [ 662.679582][T15469] netlink: 'syz.2.3627': attribute type 6 has an invalid length. [ 662.775721][T15472] netlink: 'syz.1.3629': attribute type 16 has an invalid length. [ 662.794737][T15472] __nla_validate_parse: 1 callbacks suppressed [ 662.794777][T15472] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3629'. [ 662.843736][T15477] netlink: 'syz.1.3629': attribute type 10 has an invalid length. [ 662.915108][T15471] delete_channel: no stack [ 663.073316][T15481] netlink: 'syz.3.3632': attribute type 4 has an invalid length. [ 663.112552][T15481] netlink: 155792 bytes leftover after parsing attributes in process `syz.3.3632'. [ 663.130034][T15486] netlink: 'syz.0.3633': attribute type 46 has an invalid length. [ 663.473946][T15490] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3634'. [ 663.498416][T15489] delete_channel: no stack [ 663.793654][T15499] sctp: [Deprecated]: syz.2.3637 (pid 15499) Use of int in max_burst socket option deprecated. [ 663.793654][T15499] Use struct sctp_assoc_value instead [ 663.821002][T15501] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3638'. [ 663.872896][T15502] bridge0: port 3(team0) entered blocking state [ 663.914150][T15502] bridge0: port 3(team0) entered disabled state [ 664.010973][T15502] device team0 entered promiscuous mode [ 664.034119][T15502] device team_slave_0 entered promiscuous mode [ 664.043370][T15502] device team_slave_1 entered promiscuous mode [ 664.050979][T15502] device macvlan0 entered promiscuous mode [ 664.069096][T15502] bridge0: port 3(team0) entered blocking state [ 664.076673][T15502] bridge0: port 3(team0) entered forwarding state [ 664.103795][T15504] netlink: 'syz.0.3640': attribute type 10 has an invalid length. [ 664.156502][T15504] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 664.370389][T15515] netlink: 'syz.2.3644': attribute type 16 has an invalid length. [ 664.398012][T15515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3644'. [ 664.428325][T15515] netlink: 'syz.2.3644': attribute type 10 has an invalid length. [ 664.520981][T15519] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3645'. [ 664.964176][T15513] delete_channel: no stack [ 665.172699][T15526] FAULT_INJECTION: forcing a failure. [ 665.172699][T15526] name failslab, interval 1, probability 0, space 0, times 0 [ 665.187165][T15526] CPU: 1 PID: 15526 Comm: syz.3.3648 Not tainted syzkaller #0 [ 665.194703][T15526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 665.204810][T15526] Call Trace: [ 665.208129][T15526] [ 665.211096][T15526] dump_stack_lvl+0x188/0x24e [ 665.215839][T15526] ? show_regs_print_info+0x12/0x12 [ 665.221100][T15526] ? load_image+0x400/0x400 [ 665.225666][T15526] ? __might_sleep+0xd0/0xd0 [ 665.230299][T15526] ? __lock_acquire+0x7d10/0x7d10 [ 665.235383][T15526] should_fail_ex+0x399/0x4d0 [ 665.240105][T15526] should_failslab+0x5/0x20 [ 665.244650][T15526] slab_pre_alloc_hook+0x59/0x310 [ 665.249728][T15526] ? __get_vm_area_node+0x122/0x330 [ 665.254971][T15526] ? __get_vm_area_node+0x122/0x330 [ 665.260222][T15526] __kmem_cache_alloc_node+0x4f/0x260 [ 665.265645][T15526] ? __get_vm_area_node+0x122/0x330 [ 665.270901][T15526] kmalloc_node_trace+0x22/0xe0 [ 665.275809][T15526] __get_vm_area_node+0x122/0x330 [ 665.280877][T15526] ? __local_bh_enable_ip+0x136/0x1c0 [ 665.286303][T15526] __vmalloc_node_range+0x357/0x13b0 [ 665.291643][T15526] ? netlink_sendmsg+0x5ec/0xbd0 [ 665.296658][T15526] ? netlink_insert+0x1034/0x13c0 [ 665.301750][T15526] ? free_vm_area+0x50/0x50 [ 665.306311][T15526] ? netlink_sendmsg+0x5ec/0xbd0 [ 665.311309][T15526] vmalloc+0x75/0x80 [ 665.315253][T15526] ? netlink_sendmsg+0x5ec/0xbd0 [ 665.320258][T15526] netlink_sendmsg+0x5ec/0xbd0 [ 665.325089][T15526] ? lockdep_hardirqs_on+0x94/0x140 [ 665.330343][T15526] ? netlink_getsockopt+0x550/0x550 [ 665.335623][T15526] ? netlink_getsockopt+0x550/0x550 [ 665.340880][T15526] ____sys_sendmsg+0x5be/0x970 [ 665.345714][T15526] ? __sys_sendmsg_sock+0x30/0x30 [ 665.350809][T15526] ? __import_iovec+0x315/0x500 [ 665.355713][T15526] ? import_iovec+0x6f/0xa0 [ 665.360270][T15526] ___sys_sendmsg+0x2a2/0x360 [ 665.365019][T15526] ? __sys_sendmsg+0x290/0x290 [ 665.369857][T15526] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 665.376093][T15526] __se_sys_sendmsg+0x1bb/0x2a0 [ 665.381102][T15526] ? __x64_sys_sendmsg+0x80/0x80 [ 665.386123][T15526] ? lockdep_hardirqs_on+0x94/0x140 [ 665.391379][T15526] do_syscall_64+0x4c/0xa0 [ 665.395854][T15526] ? clear_bhb_loop+0x60/0xb0 [ 665.400597][T15526] ? clear_bhb_loop+0x60/0xb0 [ 665.405338][T15526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 665.411283][T15526] RIP: 0033:0x7fb5a4b9cdd9 [ 665.415747][T15526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.435435][T15526] RSP: 002b:00007fb5a59c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.443900][T15526] RAX: ffffffffffffffda RBX: 00007fb5a4e15fa0 RCX: 00007fb5a4b9cdd9 [ 665.451929][T15526] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 665.459957][T15526] RBP: 00007fb5a59c5090 R08: 0000000000000000 R09: 0000000000000000 [ 665.467987][T15526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.476002][T15526] R13: 00007fb5a4e16038 R14: 00007fb5a4e15fa0 R15: 00007fff43bdfea8 [ 665.484044][T15526] [ 665.550916][T15526] syz.3.3648: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 665.606898][T15526] CPU: 1 PID: 15526 Comm: syz.3.3648 Not tainted syzkaller #0 [ 665.614459][T15526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 665.624565][T15526] Call Trace: [ 665.627884][T15526] [ 665.627879][T15533] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3651'. [ 665.630841][T15526] dump_stack_lvl+0x188/0x24e [ 665.630882][T15526] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 665.630910][T15526] ? show_regs_print_info+0x12/0x12 [ 665.630944][T15526] ? load_image+0x400/0x400 [ 665.630975][T15526] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 665.667329][T15526] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 665.673866][T15526] warn_alloc+0x242/0x330 [ 665.678251][T15526] ? __get_vm_area_node+0x122/0x330 [ 665.683477][T15526] ? zone_watermark_ok_safe+0x270/0x270 [ 665.689054][T15526] ? rcu_is_watching+0x11/0xa0 [ 665.693855][T15526] ? __get_vm_area_node+0x318/0x330 [ 665.699077][T15526] ? __local_bh_enable_ip+0x136/0x1c0 [ 665.704482][T15526] __vmalloc_node_range+0x37c/0x13b0 [ 665.709813][T15526] ? netlink_insert+0x1034/0x13c0 [ 665.714881][T15526] ? free_vm_area+0x50/0x50 [ 665.719429][T15526] ? netlink_sendmsg+0x5ec/0xbd0 [ 665.724403][T15526] vmalloc+0x75/0x80 [ 665.728322][T15526] ? netlink_sendmsg+0x5ec/0xbd0 [ 665.733294][T15526] netlink_sendmsg+0x5ec/0xbd0 [ 665.738090][T15526] ? lockdep_hardirqs_on+0x94/0x140 [ 665.743314][T15526] ? netlink_getsockopt+0x550/0x550 [ 665.748548][T15526] ? netlink_getsockopt+0x550/0x550 [ 665.753778][T15526] ____sys_sendmsg+0x5be/0x970 [ 665.758581][T15526] ? __sys_sendmsg_sock+0x30/0x30 [ 665.763642][T15526] ? __import_iovec+0x315/0x500 [ 665.768519][T15526] ? import_iovec+0x6f/0xa0 [ 665.773048][T15526] ___sys_sendmsg+0x2a2/0x360 [ 665.777762][T15526] ? __sys_sendmsg+0x290/0x290 [ 665.782590][T15526] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 665.788800][T15526] __se_sys_sendmsg+0x1bb/0x2a0 [ 665.793694][T15526] ? __x64_sys_sendmsg+0x80/0x80 [ 665.798680][T15526] ? lockdep_hardirqs_on+0x94/0x140 [ 665.803904][T15526] do_syscall_64+0x4c/0xa0 [ 665.808352][T15526] ? clear_bhb_loop+0x60/0xb0 [ 665.813238][T15526] ? clear_bhb_loop+0x60/0xb0 [ 665.817951][T15526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 665.823870][T15526] RIP: 0033:0x7fb5a4b9cdd9 [ 665.828306][T15526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.847930][T15526] RSP: 002b:00007fb5a59c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.856364][T15526] RAX: ffffffffffffffda RBX: 00007fb5a4e15fa0 RCX: 00007fb5a4b9cdd9 [ 665.864359][T15526] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 665.872357][T15526] RBP: 00007fb5a59c5090 R08: 0000000000000000 R09: 0000000000000000 [ 665.880353][T15526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.888429][T15526] R13: 00007fb5a4e16038 R14: 00007fb5a4e15fa0 R15: 00007fff43bdfea8 [ 665.896433][T15526] [ 666.059608][T15537] device vcan0 entered promiscuous mode [ 666.086224][T15537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 666.131848][T15537] sctp: [Deprecated]: syz.4.3653 (pid 15537) Use of int in maxseg socket option. [ 666.131848][T15537] Use struct sctp_assoc_value instead [ 666.190760][T15526] Mem-Info: [ 666.205989][T15526] active_anon:6946 inactive_anon:0 isolated_anon:0 [ 666.205989][T15526] active_file:25438 inactive_file:40187 isolated_file:0 [ 666.205989][T15526] unevictable:768 dirty:314 writeback:0 [ 666.205989][T15526] slab_reclaimable:21108 slab_unreclaimable:95118 [ 666.205989][T15526] mapped:29838 shmem:1361 pagetables:618 [ 666.205989][T15526] sec_pagetables:0 bounce:0 [ 666.205989][T15526] kernel_misc_reclaimable:0 [ 666.205989][T15526] free:1316350 free_pcp:5360 free_cma:0 [ 666.261579][T15546] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3654'. [ 666.317941][T15526] Node 0 active_anon:27884kB inactive_anon:0kB active_file:101752kB inactive_file:160544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119352kB dirty:1256kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10088kB pagetables:2572kB sec_pagetables:0kB all_unreclaimable? no [ 666.370170][T15526] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 666.427274][T15549] validate_nla: 1 callbacks suppressed [ 666.427314][T15549] netlink: 'syz.2.3657': attribute type 16 has an invalid length. [ 666.439839][T15526] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 666.477409][T15549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3657'. [ 666.497643][T15526] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 666.505774][T15550] netlink: 'syz.2.3657': attribute type 10 has an invalid length. [ 666.547757][T15526] Node 0 DMA32 free:1350092kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:27684kB inactive_anon:0kB active_file:101752kB inactive_file:160544kB unevictable:1536kB writepending:1256kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:4820kB local_pcp:1876kB free_cma:0kB [ 666.603392][T15548] delete_channel: no stack [ 666.626105][T15526] lowmem_reserve[]: 0 0 1 1 1 [ 666.630923][T15526] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 666.667941][T15526] lowmem_reserve[]: 0 0 0 0 0 [ 666.672868][T15526] Node 1 Normal free:3898600kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17536kB local_pcp:7904kB free_cma:0kB [ 666.711424][T15526] lowmem_reserve[]: 0 0 0 0 0 [ 666.745102][T15526] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 666.790560][T15526] Node 0 DMA32: 1501*4kB (ME) 2299*8kB (UME) 1604*16kB (UME) 1173*32kB (UME) 644*64kB (UME) 200*128kB (UME) 152*256kB (UM) 56*512kB (UM) 39*1024kB (UM) 19*2048kB (UM) 256*4096kB (UM) = 1349420kB [ 666.868191][T15526] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 666.910964][T15526] Node 1 Normal: 248*4kB (UME) 51*8kB (UME) 29*16kB (UME) 35*32kB (UME) 19*64kB (UME) 9*128kB (UE) 4*256kB (UM) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898600kB [ 666.985470][T15558] netlink: 'syz.2.3661': attribute type 4 has an invalid length. [ 666.996314][T15558] netlink: 155792 bytes leftover after parsing attributes in process `syz.2.3661'. [ 667.010682][T15526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.037567][T15526] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 667.071323][T15526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.087038][T15526] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 667.096797][T15526] 66988 total pagecache pages [ 667.108465][T15526] 0 pages in swap cache [ 667.113147][T15526] Free swap = 124996kB [ 667.117523][T15526] Total swap = 124996kB [ 667.128342][T15526] 2097051 pages RAM [ 667.132596][T15526] 0 pages HighMem/MovableOnly [ 667.138071][T15526] 415209 pages reserved [ 667.150419][T15526] 0 pages cma reserved [ 667.433282][T12799] Bluetooth: hci1: command 0x0406 tx timeout [ 667.646383][T15562] netlink: 'syz.1.3662': attribute type 4 has an invalid length. [ 667.850618][T15576] netlink: 'syz.4.3668': attribute type 10 has an invalid length. [ 667.962331][T15576] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 668.064712][T15581] netlink: 'syz.0.3671': attribute type 16 has an invalid length. [ 668.074683][T15580] __nla_validate_parse: 1 callbacks suppressed [ 668.074731][T15580] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3669'. [ 668.111837][T15581] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3671'. [ 668.130096][T15586] netlink: 'syz.0.3671': attribute type 10 has an invalid length. [ 668.179964][T15578] delete_channel: no stack [ 668.234169][T15589] netlink: 'syz.2.3672': attribute type 9 has an invalid length. [ 668.719458][T15597] netlink: 'syz.3.3674': attribute type 4 has an invalid length. [ 668.760685][T15597] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3674'. [ 668.790225][T15600] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3676'. [ 668.862810][T15595] delete_channel: no stack [ 669.742677][T15607] netlink: 'syz.2.3680': attribute type 4 has an invalid length. [ 669.767853][T15607] netlink: 155792 bytes leftover after parsing attributes in process `syz.2.3680'. [ 669.853965][T15610] netlink: 155792 bytes leftover after parsing attributes in process `syz.1.3679'. [ 670.144890][T15622] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 670.185105][T15624] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3685'. [ 670.249151][T15623] delete_channel: no stack [ 670.727868][T15644] [ 670.730663][T15644] ============================= [ 670.735658][T15644] WARNING: suspicious RCU usage [ 670.740587][T15644] syzkaller #0 Not tainted [ 670.745073][T15644] ----------------------------- [ 670.749963][T15644] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 670.758569][T15644] [ 670.758569][T15644] other info that might help us debug this: [ 670.758569][T15644] [ 670.768885][T15644] [ 670.768885][T15644] rcu_scheduler_active = 2, debug_locks = 1 [ 670.777083][T15644] 1 lock held by syz.2.3695/15644: [ 670.782311][T15644] #0: ffffffff8cb2d760 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 670.792746][T15644] [ 670.792746][T15644] stack backtrace: [ 670.798711][T15644] CPU: 1 PID: 15644 Comm: syz.2.3695 Not tainted syzkaller #0 [ 670.806213][T15644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 670.816310][T15644] Call Trace: [ 670.819635][T15644] [ 670.822601][T15644] dump_stack_lvl+0x188/0x24e [ 670.827339][T15644] ? show_regs_print_info+0x12/0x12 [ 670.832591][T15644] ? load_image+0x400/0x400 [ 670.837158][T15644] lockdep_rcu_suspicious+0x1dd/0x300 [ 670.842592][T15644] get_callchain_entry+0x2a5/0x3b0 [ 670.847762][T15644] get_perf_callchain+0xc4/0x490 [ 670.852765][T15644] ? put_callchain_entry+0xb0/0xb0 [ 670.857929][T15644] ? perf_trace_lock+0xf8/0x390 [ 670.862840][T15644] __bpf_get_stack+0x2de/0x520 [ 670.867645][T15644] ? stack_map_get_build_id_offset+0x970/0x970 [ 670.873834][T15644] ? __cant_sleep+0x220/0x220 [ 670.878538][T15644] ? bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 670.884203][T15644] bpf_get_stack_raw_tp+0x189/0x1c0 [ 670.889443][T15644] bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 670.894932][T15644] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 670.900340][T15644] bpf_prog_test_run_syscall+0x313/0x4a0 [ 670.906007][T15644] ? sock_gen_cookie+0x60/0x60 [ 670.910824][T15644] ? sock_gen_cookie+0x60/0x60 [ 670.915627][T15644] bpf_prog_test_run+0x31e/0x390 [ 670.920605][T15644] __sys_bpf+0x62b/0x780 [ 670.924890][T15644] ? bpf_link_show_fdinfo+0x380/0x380 [ 670.930319][T15644] ? lock_chain_count+0x20/0x20 [ 670.935214][T15644] __x64_sys_bpf+0x78/0x90 [ 670.939668][T15644] do_syscall_64+0x4c/0xa0 [ 670.944128][T15644] ? clear_bhb_loop+0x60/0xb0 [ 670.948855][T15644] ? clear_bhb_loop+0x60/0xb0 [ 670.953592][T15644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 670.959541][T15644] RIP: 0033:0x7f15e4b9cdd9 [ 670.963981][T15644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.983621][T15644] RSP: 002b:00007f15e5a98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 670.992072][T15644] RAX: ffffffffffffffda RBX: 00007f15e4e15fa0 RCX: 00007f15e4b9cdd9 [ 671.000074][T15644] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 671.008073][T15644] RBP: 00007f15e4c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 671.016065][T15644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.024062][T15644] R13: 00007f15e4e16038 R14: 00007f15e4e15fa0 R15: 00007ffc96bbc548 [ 671.032072][T15644]