last executing test programs: 4.300399922s ago: executing program 4 (id=4652): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa06a6, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x650, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0xf8b, 0x12, 0x0, 0x5, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x0, 0x0, 0x1}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffff00000000000006000000185b0000060000000000009b000000009500000000000000c95f00000900020000000000000000003840000004000000000000000000000018130000", @ANYRES32=r1, @ANYBLOB="0000000000000000185100000300000000000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x4e, &(0x7f00000002c0)=""/78, 0x41100, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r2], 0x0, 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) socket$kcm(0x10, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003800)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d000000000000000002000000000000000000000a0200"], &(0x7f0000003740)=""/138, 0x3a, 0x8a, 0x1}, 0x28) close(r6) r7 = syz_clone(0x1200, &(0x7f0000000c80)="1a70bf79f64940e17630c0247261dfa9ae2cef0f6ef84575a34c966b2b80446e20aeeb0e6fedd9b3180f2452a0566d345cfd54af498c239dd5c21f4687dabda6d33a82ffe7c48be97f2ebc693b0bdeee78b86356830b4ad3c250c61ace3a5d5e2f3ba0b2ba4d7bac8cf4afca0b1ac68c3d4e09a870901a436a671faf1527d38496a4c4b8d82495303e86d7fde1b5a58a4cc6", 0x92, &(0x7f0000000d40), &(0x7f0000000dc0), &(0x7f0000000e00)="708b4276155b3444d5a3842e7e41fc98d73ea94ea7afc4e09157470d45a9678c4de129be6d70e488490a484e20681a14a9c0b5edf1467298fd2d2ce370e0b70d9554592f899918a24a6221a4ba") perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0xbf, 0x6, 0x6, 0x9, 0x0, 0x9, 0x40000, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000940), 0x6}, 0x180, 0x0, 0x27e94198, 0x6, 0x7, 0x9, 0x8, 0x0, 0x4, 0x0, 0x9}, r7, 0xb, r5, 0x9) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000b00000008000000020000843f49000009000000020000009100000001000000040000ca01000000005f3f5f615f2e005f5f"], &(0x7f0000000680)=""/180, 0x47, 0xb4, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000230895b803000000000000000000000000000080005af0b51cccefb62a4cb4cad0026bdce19e2dca9b532ec42638ac5fca90db498103a05e9112eec9f1e2c89d1bdf1e7cce754c5c8bf1c381b9b5f6e274817b0e28ef5ce1f7014f31638ecc1ca3da5e4fecfe577a165e30e17234f524f521cfc63fdba9a4e838ffeca5d78bce80b4ea80"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03298600040000", @ANYRES32=r9, @ANYBLOB="991300"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="01000000010000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000)="fb1302346b81687dc6c1f216b2fdeb7231c106", 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 3.767902729s ago: executing program 2 (id=4657): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000940), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x9) 3.74810296s ago: executing program 0 (id=4658): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000003000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000006ff82b1b0000000000000000001385f5afa3d4ab1421000501e8ac6e516f816b0a632a7b1b4879f6211022d3be48bedebf49bb2a2ac21b5929ae5a4179f84d0693e615f27b9e4582bfaf518db986361bd7aaa97bad3cd2b91794fdc1e6344e1693ac71c8f55ff05eb182d2c9c416e907b7155d60ff733e020eb419919a1f35eecd11e25e2e8a5fea881db748a6151e6ee951c4a0256ef5282fa29798140e0ed5abbd00134b8350e6f93f89f3063510542e1ce6a6d8a6d7627da87a01a6210c505bc3a5dfa7"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x200000000}, 0x101000, 0xa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r1) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000b80)={r0, &(0x7f0000000a80), &(0x7f0000000b00)=""/124}, 0x20) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x4}, 0x7603, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x0, 0x61, 0x9, 0x0, 0x6, 0x86e47, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, @perf_config_ext={0xc, 0x806}, 0x2040, 0x3, 0x0, 0x3, 0x9, 0x5, 0xe, 0x0, 0x4, 0x0, 0x3ffffffffffffffc}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 3.641682013s ago: executing program 3 (id=4660): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES8, @ANYRESHEX=0x0, @ANYRES16], 0x0, 0x26, 0x0, 0x0, 0x1}, 0x28) socket$kcm(0x11, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000fb00000000000000", @ANYRES32, @ANYBLOB="0100000000000300bfe3a0b4c9db900300", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="04000000000000000200"/28], 0x50) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="a34f22c830400000", @ANYRES32=r3, @ANYBLOB="b99cdd073583b51535a541d370c18fbc5742891ded03fbbfb641ebb1689be3b4609b03a76c57fe9e51b3f500645eee12c9071d8968bfaa4199b558a73ed7708a7ce4db2388d27d7fa317b6dc031476dad33049039682f21865b1f1f1fba63a5211023a6099b78a70b79f0826beb3004676d8d1941544c1f4a590604be701d90e67e9129da73600", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180095008100a95e7ff1000000000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x94) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000008000000f00000008786000000000100", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB], 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async) recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x0, 0x28}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x0, 0x1}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r10}, &(0x7f0000000840), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711095000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$inet(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)}, {&(0x7f0000000900)="bd738071d2db4bebabaaaea0f2b82ff91116ae77a55fcb9c0ff686011630fdcd20d3237ab4b759ad2778badd62e005f1ab8ffd163e8bc3f1e7f85cbcecae493591f22aec6d3c", 0x46}], 0x2, &(0x7f0000000c40)=[@ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x64, 0x2, [{0x0, 0x2}, {0x6, 0x5, "c451e9"}, {0x7, 0xc, "a974f4f64be24e04c3fd"}, {0x2, 0xe, "103a38d986fbf3da5ae7dd19"}, {0x2, 0xb, "c5f60d520f5c316b64"}, {0x1, 0x6, "77184c83"}, {0x2, 0x10, "2bd0e49843fd6acffbdc0be1bd01"}, {0x7, 0x12, "350b036e71ef3408f91f43a1443e4c5d"}, {0x6, 0x6, "3219157e"}, {0x1, 0x4, "d5f7"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@noop, @end, @generic={0x89, 0x5, "db5ac4"}, @lsrr={0x83, 0x1b, 0x67, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010100]}, @ssrr={0x89, 0x7, 0x4a, [@dev={0xac, 0x14, 0x14, 0xc}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010102}}}], 0x120}, 0x40040040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0) 3.612089174s ago: executing program 4 (id=4661): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x7, 0x18}, 0xc) socket$kcm(0xf, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffed4, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) socket$kcm(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000002380)='GPL\x00', 0x5, 0x252, &(0x7f00000023c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd4}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x11, 0x200000000000002, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a42, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r6, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x40880) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f017afd1bd", 0x33fe0}], 0x1}, 0x0) 2.929566776s ago: executing program 3 (id=4662): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000030c0)=""/4061, 0xfdd}, {&(0x7f00000019c0)=""/71, 0x47}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/128, 0x80}, {0x0}, {&(0x7f0000000340)=""/17, 0x11}], 0x6}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40002020) 2.79041198s ago: executing program 0 (id=4663): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00'], 0x10) 2.663359375s ago: executing program 1 (id=4664): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000000c0), 0x12) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00', @ANYRES32], 0x50) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x4003, 0xffffff00}}, 0x10, 0x0}, 0x4040005) 2.649029955s ago: executing program 2 (id=4665): perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000680)="a81c8c"}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000009c0)="d80000001e0081064e81f782db44b9040002080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97", 0xd7}], 0x1}, 0x24000000) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x80000000000000c8, 0x7fff, 0x0, 0xa45, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_clone(0x2000, &(0x7f0000000ac0)="15806e63e01d0e32c76d1af9a4156acb7a62bba4b2ba6825f3e160b731d699334a1931e04a176033233ceb90b1e606e29bc178b377875c9a3c7f604f24dd11ee2ab2882ebcdbcc537ccc9de4c135702752638182ccb97ea1a617b2be84e7ebbe6be25642214a202a8f21d0fc5945a325db7dcf5b02d48c8100eda4d9416f41dd0bb413f50ff73476d06ecf474e0711baa87805a13e5fd3254bdeb9bec531f839f161bc79fe295d4f068364438dba51539ea2f83ed6c3b6e065662b3bff0565c7e4aa9f06603847de37255f6ab16a0c", 0xcf, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)="9870fcb8cf85b0d909e7a34640d94a38ccb196dd7ec8ea589725600ea245ce7ced2804374f28fa07cbde4d2491d6096bc361c7c2e09bd879429f5203af8bdfde6a1ac8799bcdf214b7c80074dce502ed1407dfeb071c647df3a926a915bb97a34b5f9c833dcb1542d3ab344b399384a3fc5c16b34105bb034cf7") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0), 0x0}, 0x20) write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4) 2.587097007s ago: executing program 3 (id=4666): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x10, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f0000000280)="7d3ed2ea1f2f230c0784b2ce65c9e34b1100201a03df46a4853ed1b3", 0x1c}], 0x2}, 0x2400c0c8) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) (async) bpf$MAP_CREATE(0x1400000000000000, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10e022, 0xac5d, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001000000000f7ff4dfd6b0d89000400000000af8f"], 0x50) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220003"], 0xfdef) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d030000002f6e35400c000200001ec00037153e370a00018025640000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 2.442463322s ago: executing program 4 (id=4667): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4, 0xce0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 2.442128082s ago: executing program 0 (id=4668): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00"], 0xcfa4) 2.424358692s ago: executing program 1 (id=4669): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0x4044454) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4, 0xce0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) (fail_nth: 9) 2.305105466s ago: executing program 3 (id=4670): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x3, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc00, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={r4}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a69, 0x5}, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) openat$cgroup_ro(r5, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, 0x1}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="2e00000011008b88040f80ee59ac990413080048250000005e2980421803001825800000000f0000ea7f2e0c0012", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r1, @ANYBLOB="01dfffffffffffff7f0000c85e90883e88f8bc76389898e6af3a0100", @ANYRES32=r7, @ANYRES32, @ANYBLOB="05000000050000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.283003977s ago: executing program 2 (id=4671): r0 = socket$kcm(0x21, 0x2, 0xa) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="000000000080"}) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000049009125745c7388641f9c0e0a"], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0x4044454) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4, 0xce0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000100"/24], 0x18}, 0xfc00) 2.265901738s ago: executing program 4 (id=4672): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x40002}}, 0x80, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0xf0, 0x4, 0x0, &(0x7f0000000900)="e02742e8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4cf6dd15, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000090000000000000000000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1b00000000000000000000190080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8e16cb239da51e7f218eff00", @ANYRES32, @ANYBLOB="2000000000000000950000000000000045"], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 2.238833458s ago: executing program 0 (id=4673): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000003000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000006ff82b1b0000000000000000001385f5afa3d4ab1421000501e8ac6e516f816b0a632a7b1b4879f6211022d3be48bedebf49bb2a2ac21b5929ae5a4179f84d0693e615f27b9e4582bfaf518db986361bd7aaa97bad3cd2b91794fdc1e6344e1693ac71c8f55ff05eb182d2c9c416e907b7155d60ff733e020eb419919a1f35eecd11e25e2e8a5fea881db748a6151e6ee951c4a0256ef5282fa29798140e0ed5abbd00134b8350e6f93f89f3063510542e1ce6a6d8a6d7627da87a01a6210c505bc3a5dfa7"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x200000000}, 0x101000, 0xa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r1) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000b80)={r0, &(0x7f0000000a80), &(0x7f0000000b00)=""/124}, 0x20) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x4}, 0x7603, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x0, 0x61, 0x9, 0x0, 0x6, 0x86e47, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, @perf_config_ext={0xc, 0x806}, 0x2040, 0x3, 0x0, 0x3, 0x9, 0x5, 0xe, 0x0, 0x4, 0x0, 0x3ffffffffffffffc}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.690474606s ago: executing program 2 (id=4674): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014000000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/198, 0xc6}, {&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f00000003c0)=""/71, 0x47}, {&(0x7f0000000440)=""/93, 0x5d}], 0x5, &(0x7f0000000540)=""/35, 0x23}, 0x20000103) 1.690230806s ago: executing program 1 (id=4675): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0x4044454) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4, 0xce0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18, 0x300}, 0xfc00) 1.58389785s ago: executing program 1 (id=4676): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000030c0)=""/4061, 0xfdd}, {&(0x7f00000019c0)=""/71, 0x47}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000340)=""/17, 0x11}], 0x5}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40002020) 1.501237812s ago: executing program 4 (id=4677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e000000040000000400000006"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r0, &(0x7f00000002c0)="95aa7852ea6601a5c9c72998217ced9f984fef0e20517c15a47a3aaf12979d92569896a8777da2fcaf0b09324dfd729ed53b40b8fa59457629debbacf60135434fba29a836fa57011dc76e8989baf86057bd07f12127e398f644d41e3a7f7499d3e00cc9634928826a8d50a5cfa32c768726f48255b6c597d00b48638738a693d8a98e7a6b40bfdfe5c24b275d4229304de521efc6cc2964720b88c84caa1320f380", &(0x7f00000004c0)=""/87}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x8, 0x11, 0xf, 0x0, 0x875, 0x480, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x2, 0xffb}, 0xc400, 0x1, 0xdab8, 0x1, 0x2, 0x7f, 0x3fd1, 0x0, 0x83, 0x0, 0x4}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_clone(0x10010000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)="8ed9c9ec8bcc") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC=r5], 0xfdef) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3, 0x5, 0xa4, 0x0, 0x0, 0x7, 0x41464, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x3fa, 0x7}, 0x8, 0x3, 0x1, 0x3, 0x399, 0x33d, 0x6, 0x0, 0x3, 0x0, 0xecb3}, r5, 0x9, r2, 0x8) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="1c00000033000b1229ae3f7f03b261130124fc60100c03400841000000", 0x1d}], 0x1}, 0x800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) 1.413879855s ago: executing program 2 (id=4678): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80, 0x800000}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/net\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.412805255s ago: executing program 0 (id=4679): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000000c0), 0x12) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00', @ANYRES32], 0x50) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x4003, 0xffffff00}}, 0x10, 0x0}, 0x4040005) 1.358538857s ago: executing program 3 (id=4680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00'], 0x10) 1.358081217s ago: executing program 4 (id=4681): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x28002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0xffff, 0x0, 0x10000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)}, 0x4080) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) socket$kcm(0x11, 0x3, 0x0) 1.289141949s ago: executing program 1 (id=4682): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4, 0xce0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 1.071749906s ago: executing program 3 (id=4683): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00"], 0xcfa4) 1.039435027s ago: executing program 0 (id=4684): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x40002, 0x101d0}}, 0x80, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0xf0, 0x4, 0x0, &(0x7f0000000900)="e02742e8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 319.3956ms ago: executing program 1 (id=4685): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000940), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="03267ed8cf3cc47582361cf314af5147bd4ea29ad96f31ed9fd9cafbc6d2d470a0e77f4d14bbff085f58b5db41065f416b775205a337850c2f15355f2260c15a6f04de61fea6abf9dc7cf3a728189c4c5d404c243ffc4dd751d5fccf6ae7a4d0f9f87189053278e98526d1288ca817c0c3717ff38682293805dbd404c347163d64b3628950edaedb977e88f5c8298faf0851a396f865e4f5273994c8976d72b00398ff01e7945fb33974e65c555d8958b601000a02f9a9117ff6f3edca50a21106ee66a37331104ede3fff876e3ee473dc6500fe2972b8967077acd32a9d891ed993f95a2e30a12746afe757313d"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:* r<'], 0x9) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open$cgroup(&(0x7f0000003140)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 1 [ 567.575566][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 567.583762][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 567.606358][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 567.614040][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 567.624585][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 567.823376][T14803] netlink: 'syz.2.3026': attribute type 9 has an invalid length. [ 567.856142][T14803] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.3026'. [ 568.001210][ T7170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.029224][T14790] netlink: 'syz.4.3023': attribute type 25 has an invalid length. [ 568.040801][T14790] netlink: 'syz.4.3023': attribute type 25 has an invalid length. [ 568.132673][T14796] device syzkaller0 entered promiscuous mode [ 568.178522][ T7170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.224389][T14808] netlink: 'syz.0.3027': attribute type 1 has an invalid length. [ 568.235569][T14808] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3027'. [ 569.727765][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 570.594058][ T7170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.612950][T14823] bridge_slave_0: mtu less than device minimum [ 570.620890][T14841] netlink: 'syz.2.3041': attribute type 4 has an invalid length. [ 570.687343][ T7170] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.025703][T14787] chnl_net:caif_netlink_parms(): no params data found [ 571.210890][T14850] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3046'. [ 571.228429][ T7170] device 0 left promiscuous mode [ 571.494109][ T7170] tipc: Left network mode [ 571.502919][T14787] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.552638][T14787] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.596823][T14787] device bridge_slave_0 entered promiscuous mode [ 571.785851][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 571.805883][T14787] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.813067][T14787] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.870326][T14787] device bridge_slave_1 entered promiscuous mode [ 572.148321][T14787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.192910][T14787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.284577][T14888] netlink: 'syz.2.3054': attribute type 1 has an invalid length. [ 572.333962][T14888] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3054'. [ 572.517662][T14787] team0: Port device team_slave_0 added [ 572.560495][T14787] team0: Port device team_slave_1 added [ 572.700138][T14787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.729046][T14787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.830570][T14787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.842987][T14787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.855576][T14787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.885714][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 573.895670][T14787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.194931][T14933] device syzkaller0 entered promiscuous mode [ 575.480172][T14942] sctp: [Deprecated]: syz.4.3072 (pid 14942) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.480172][T14942] Use struct sctp_sack_info instead [ 575.752757][T14787] device hsr_slave_0 entered promiscuous mode [ 575.769407][T14787] device hsr_slave_1 entered promiscuous mode [ 575.784712][T14787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.802246][T14787] Cannot create hsr debugfs directory [ 575.945852][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 579.327759][T14974] netlink: 'syz.1.3085': attribute type 10 has an invalid length. [ 579.342786][T14974] device wlan1 left promiscuous mode [ 579.393026][T14980] netlink: 'syz.0.3086': attribute type 10 has an invalid length. [ 582.290708][ T7170] device bridge_slave_1 left promiscuous mode [ 582.348235][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.447482][ T7170] device bridge_slave_0 left promiscuous mode [ 582.453823][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.900746][ T7170] device veth1_macvtap left promiscuous mode [ 582.923100][ T7170] device veth0_macvtap left promiscuous mode [ 587.041663][ T7170] team0 (unregistering): Port device team_slave_1 removed [ 587.084086][ T7170] team0 (unregistering): Port device team_slave_0 removed [ 587.383570][ T7170] team0 (unregistering): Port device bridge0 removed [ 587.747085][T14787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 587.796294][T14787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 587.813364][T15069] netlink: 'syz.4.3106': attribute type 9 has an invalid length. [ 587.829615][T14787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 587.843886][T15069] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.3106'. [ 587.857255][T14787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 588.081878][T14787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.137955][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 588.156449][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 588.210703][T14787] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.270931][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 588.307245][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 588.386257][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.393467][ T7190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.439819][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 588.459363][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 588.495279][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 588.517735][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.524948][ T7190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.619969][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 588.647542][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 588.743698][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 588.803788][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 588.897796][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 588.948932][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 589.013385][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 589.064882][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 589.113396][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 589.168449][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 589.212977][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 589.289386][T14787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 589.682254][T15111] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3119'. [ 590.379292][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 590.399254][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 590.441090][T14787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.453368][T15132] netlink: 'syz.1.3124': attribute type 9 has an invalid length. [ 590.501987][T15132] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.3124'. [ 590.518884][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 590.529084][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 590.618246][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 590.635065][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 590.692798][T14787] device veth0_vlan entered promiscuous mode [ 590.735605][T14787] device veth1_vlan entered promiscuous mode [ 590.756084][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 590.781789][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 590.814346][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 591.386410][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 591.396403][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 591.523169][T14787] device veth0_macvtap entered promiscuous mode [ 591.535205][T14787] device veth1_macvtap entered promiscuous mode [ 591.567939][T14787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.588972][T14787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.654877][T14787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.706878][T14787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.792316][T14787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.849431][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 591.866477][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 591.908309][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 591.944964][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 591.992106][T14787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.031112][T14787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.079227][T14787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.135188][T14787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.197952][T14787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.234064][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 592.264091][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 592.337779][T14787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.374960][T14787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.435499][T14787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.539800][T14787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.770730][ T7178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.790304][ T7178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.817573][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 592.871410][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.884430][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.912177][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 593.967561][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 594.004156][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 594.019763][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 594.035938][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 594.044484][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 594.052735][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 594.243354][T15203] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3141'. [ 595.607016][T15227] netlink: 'syz.1.3150': attribute type 25 has an invalid length. [ 595.615293][T15227] netlink: 'syz.1.3150': attribute type 25 has an invalid length. [ 595.744156][ T7170] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.785099][T15193] chnl_net:caif_netlink_parms(): no params data found [ 595.989175][ T7170] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.105731][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 596.212917][ T7170] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.960708][T15239] device syzkaller0 entered promiscuous mode [ 598.185743][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 598.942002][T15261] netlink: 'syz.2.3161': attribute type 10 has an invalid length. [ 599.498518][T15308] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.3171'. [ 599.776166][T15314] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3174'. [ 600.265539][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 602.348275][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 602.498896][ T7170] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.511953][T15312] netlink: 'syz.4.3174': attribute type 4 has an invalid length. [ 602.521957][T15313] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3174'. [ 602.726445][T15193] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.733812][T15193] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.754746][T15193] device bridge_slave_0 entered promiscuous mode [ 602.815219][T15193] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.831231][T15193] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.862180][T15193] device bridge_slave_1 entered promiscuous mode [ 603.089749][T15193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.143207][T15193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.284517][T15193] team0: Port device team_slave_0 added [ 603.324060][T15193] team0: Port device team_slave_1 added [ 603.471147][T15193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.501523][T15193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.576176][T15193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.604912][T15193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.622645][T15193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.683284][T15193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.705179][T15358] bridge0: port 4(team0) entered disabled state [ 605.732051][T15358] bridge0: port 3(hsr0) entered disabled state [ 605.776182][T15358] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.807138][T15358] device bridge_slave_0 left promiscuous mode [ 605.813425][T15358] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.088240][T15365] device syzkaller0 entered promiscuous mode [ 606.324727][T15193] device hsr_slave_0 entered promiscuous mode [ 606.417425][T15193] device hsr_slave_1 entered promiscuous mode [ 606.424979][T15193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.432796][T15193] Cannot create hsr debugfs directory [ 608.830879][T15384] netlink: 'syz.1.3203': attribute type 41 has an invalid length. [ 609.494713][T15414] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3200'. [ 609.522056][T15415] netlink: 'syz.3.3199': attribute type 10 has an invalid length. [ 609.535692][T15415] netlink: 13070 bytes leftover after parsing attributes in process `syz.3.3199'. [ 610.417194][T15442] netlink: 'syz.4.3209': attribute type 41 has an invalid length. [ 610.808903][T15459] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3214'. [ 611.066939][T15450] device syzkaller0 entered promiscuous mode [ 613.333062][T15482] device bridge_slave_1 left promiscuous mode [ 613.341960][T15482] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.351387][T15482] device bridge_slave_0 left promiscuous mode [ 613.358085][T15482] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.809340][T15193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 614.064875][T15193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 614.169043][T15500] device syzkaller0 entered promiscuous mode [ 614.181203][T15193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 616.860833][T15193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 616.994082][T15530] device syzkaller0 entered promiscuous mode [ 619.509538][T15554] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3241'. [ 619.553302][ T7170] device hsr_slave_0 left promiscuous mode [ 619.570418][ T7170] device hsr_slave_1 left promiscuous mode [ 619.591873][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.656712][ T7170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.675842][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.683327][ T7170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.710993][ T7170] device bridge_slave_1 left promiscuous mode [ 619.746159][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.776399][ T7170] device bridge_slave_0 left promiscuous mode [ 619.782691][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.817346][T15594] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3244'. [ 619.874018][ T7170] device veth0_macvtap left promiscuous mode [ 619.895554][ T7170] device veth1_vlan left promiscuous mode [ 619.902403][ T7170] device veth0_vlan left promiscuous mode [ 622.685562][T15605] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3248'. [ 622.700914][T15605] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 622.979379][T15193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.049045][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 623.073902][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 623.101650][T15193] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.142167][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 623.194733][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 623.219129][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.226385][ T7152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.267001][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.290331][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.303750][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.321691][ T7162] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.328972][ T7162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.351175][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 623.370812][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 623.393550][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 623.413922][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 623.433122][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 623.462073][T15667] netlink: 'syz.1.3264': attribute type 20 has an invalid length. [ 623.481000][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 623.504440][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 623.535232][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 623.550807][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 623.571776][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.583173][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 623.598986][T15193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 624.207963][T15681] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3268'. [ 624.248933][T15681] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 624.267598][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.273948][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.304827][T15685] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3271'. [ 624.327996][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 624.340145][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 624.367842][T15193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.446394][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 624.458512][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 624.531091][T15689] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.575126][T15193] device veth0_vlan entered promiscuous mode [ 624.583582][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 624.601407][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 624.618888][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 624.631654][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 624.642000][T15689] ÿÿÿÿÿÿ: renamed from bridge_slave_0 [ 624.661597][T15193] device veth1_vlan entered promiscuous mode [ 624.752593][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 624.789785][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 624.859255][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 624.886341][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 624.939888][T15193] device veth0_macvtap entered promiscuous mode [ 624.964708][T15193] device veth1_macvtap entered promiscuous mode [ 625.078950][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.114507][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.160973][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.224676][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.271096][T15193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.305674][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 625.332290][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 625.360638][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 625.393456][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 625.439830][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.476282][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.514865][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.555621][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.587377][T15193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.600750][T15193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.618239][T15193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.634625][T15193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.649231][T15193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.669191][T15720] netlink: 'syz.1.3285': attribute type 3 has an invalid length. [ 625.682722][T15715] netlink: 'syz.4.3284': attribute type 21 has an invalid length. [ 625.716989][T15715] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3284'. [ 625.729610][T15720] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3285'. [ 625.745681][T15715] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3284'. [ 625.782552][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 625.793154][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 626.037689][ T7162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.063029][ T7162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.090600][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 626.226230][ T7162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.255811][ T7162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.263769][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 626.331059][T15742] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3294'. [ 626.341205][T15742] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 626.769298][T15757] netlink: 'syz.3.3301': attribute type 3 has an invalid length. [ 626.802421][T15757] netlink: 179964 bytes leftover after parsing attributes in process `syz.3.3301'. [ 627.264930][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 627.278487][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 627.290452][T13349] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 627.308761][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 627.317122][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 627.328180][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 627.759538][T15770] netlink: 'syz.2.3306': attribute type 9 has an invalid length. [ 627.775748][T15770] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.3306'. [ 627.828853][ T7152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.848967][T15767] netlink: 'syz.1.3305': attribute type 10 has an invalid length. [ 628.053412][T15760] chnl_net:caif_netlink_parms(): no params data found [ 628.224380][ T7152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.550134][ T7152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.635272][T15781] netlink: 'syz.2.3311': attribute type 10 has an invalid length. [ 628.646958][T15781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.696526][T15781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.739661][T15781] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 629.112296][ T7152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.173697][T15790] ÿÿÿÿÿÿ: renamed from bridge_slave_0 [ 629.211343][T15760] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.250374][T15760] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.260459][T15760] device bridge_slave_0 entered promiscuous mode [ 629.298002][T15760] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.305322][T15760] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.313936][T15760] device bridge_slave_1 entered promiscuous mode [ 629.340006][T15760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.389031][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 629.444910][T15760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.621533][T15760] team0: Port device team_slave_0 added [ 629.674014][T15760] team0: Port device team_slave_1 added [ 629.819450][T15760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.860612][T15760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.001558][T15760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.318510][T15760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.335477][T15760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.530205][T15760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.146666][T15760] device hsr_slave_0 entered promiscuous mode [ 631.299802][T15760] device hsr_slave_1 entered promiscuous mode [ 631.577657][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 631.810105][ T7152] device 0 left promiscuous mode [ 632.168153][ T7152] device 0 left promiscuous mode [ 633.231034][ T7152] tipc: Left network mode [ 633.675701][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 634.326333][T15838] sctp: [Deprecated]: syz.3.3325 (pid 15838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.326333][T15838] Use struct sctp_sack_info instead [ 635.705532][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 636.703217][T15862] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.3330'. [ 636.965307][T15862] netlink: 'syz.1.3330': attribute type 10 has an invalid length. [ 638.142134][T15879] netlink: 'syz.3.3337': attribute type 10 has an invalid length. [ 638.231705][T15879] team0: Device veth1_vlan failed to register rx_handler [ 638.733442][T15894] netlink: 'syz.0.3341': attribute type 10 has an invalid length. [ 638.767308][T15894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.911703][T15894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.107710][T15894] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 639.518582][T15760] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 639.556994][T15760] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 639.676661][T15760] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 639.744878][T15760] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 640.246023][ T7152] device hsr_slave_0 left promiscuous mode [ 640.294700][ T7152] device hsr_slave_1 left promiscuous mode [ 641.108574][ T7152] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 641.803488][ T7152] device team_slave_1 left promiscuous mode [ 641.813676][ T7152] team0 (unregistering): Port device team_slave_1 removed [ 641.863293][ T7152] device team_slave_0 left promiscuous mode [ 641.874783][ T7152] team0 (unregistering): Port device team_slave_0 removed [ 641.916662][ T7152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.150913][ T7152] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 642.206806][ T7152] bond0 (unregistering): Released all slaves [ 642.313112][T15942] device syzkaller0 entered promiscuous mode [ 645.304669][T15975] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 645.460650][T15760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.494831][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 645.510508][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 645.531458][T15760] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.591549][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 645.638278][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 645.647934][ T7150] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.655036][ T7150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.663233][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 645.697061][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 645.709014][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 645.717953][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.725050][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.733522][T15984] netlink: 'syz.3.3367': attribute type 10 has an invalid length. [ 645.741663][T15984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.754473][T15984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.769696][T15984] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 645.779366][T15986] netlink: 'syz.0.3369': attribute type 33 has an invalid length. [ 645.791210][T15986] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3369'. [ 645.823316][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 645.833887][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 645.850067][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 645.871470][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 645.880610][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 645.920952][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 645.940345][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 645.988306][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 645.997233][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.025697][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 646.055021][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.068602][T15760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 646.949171][T16014] netlink: 'syz.3.3380': attribute type 29 has an invalid length. [ 647.051123][T16014] netlink: 'syz.3.3380': attribute type 29 has an invalid length. [ 647.127477][T16015] netlink: 'syz.3.3380': attribute type 29 has an invalid length. [ 647.492106][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 647.545848][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 647.558432][T15760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.657986][T16028] netlink: 'syz.1.3382': attribute type 10 has an invalid length. [ 647.795692][ T7170] wlan1: Trigger new scan to find an IBSS to join [ 649.388344][T16058] netlink: 'syz.1.3392': attribute type 29 has an invalid length. [ 649.445474][T16058] netlink: 'syz.1.3392': attribute type 29 has an invalid length. [ 649.473171][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 649.487190][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 649.550690][T15760] device veth0_vlan entered promiscuous mode [ 649.618114][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 649.643640][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 649.684843][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 649.729788][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 649.783728][T16063] device syzkaller0 entered promiscuous mode [ 649.804714][T15760] device veth1_vlan entered promiscuous mode [ 650.827994][T16080] netlink: 'syz.1.3398': attribute type 29 has an invalid length. [ 651.797236][ T7170] wlan1: Trigger new scan to find an IBSS to join [ 653.488312][T16076] netlink: 'syz.2.3397': attribute type 10 has an invalid length. [ 653.503744][T16080] netlink: 'syz.1.3398': attribute type 29 has an invalid length. [ 653.544136][T16093] netlink: 'syz.0.3402': attribute type 10 has an invalid length. [ 653.575766][T16093] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3402'. [ 653.584805][T16093] device hsr0 entered promiscuous mode [ 653.595745][T16093] bridge0: port 3(hsr0) entered blocking state [ 653.608125][T16093] bridge0: port 3(hsr0) entered disabled state [ 653.632275][T16093] bridge0: port 3(hsr0) entered blocking state [ 653.638691][T16093] bridge0: port 3(hsr0) entered forwarding state [ 653.671646][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 653.688548][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 653.707432][T16095] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3403'. [ 653.735067][T15760] device veth0_macvtap entered promiscuous mode [ 653.777693][T15760] device veth1_macvtap entered promiscuous mode [ 653.786003][ T7170] wlan1: Creating new IBSS network, BSSID 7a:f9:96:60:6b:18 [ 653.811145][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 653.830885][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 653.865182][T15760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.896984][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 653.908361][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 653.944873][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.967777][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.977918][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.995060][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.009884][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.021033][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.037830][T15760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.050792][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 654.063461][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 654.078807][T15760] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.097993][T15760] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.120093][T15760] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.130864][T15760] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.464728][T16119] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3415'. [ 654.476615][T16114] device syzkaller0 entered promiscuous mode [ 654.495331][T16119] openvswitch: netlink: Flow key attr not present in new flow. [ 654.515895][ T7152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.523802][ T7152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.606410][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 657.097782][ T7150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.145730][ T7150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.153392][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 657.493251][T16158] device wlan1 entered promiscuous mode [ 657.515128][T16160] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 657.938514][T16170] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3435'. [ 658.692048][T16170] team0: Port device team_slave_0 removed [ 658.811405][T16173] netlink: 'syz.2.3435': attribute type 10 has an invalid length. [ 658.839367][T16173] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3435'. [ 658.863562][T16173] device dummy0 entered promiscuous mode [ 658.882284][T16173] bridge0: port 3(dummy0) entered blocking state [ 658.909379][T16173] bridge0: port 3(dummy0) entered disabled state [ 658.940695][T16173] bridge0: port 3(dummy0) entered blocking state [ 658.947239][T16173] bridge0: port 3(dummy0) entered forwarding state [ 658.988172][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 659.030517][T16175] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3437'. [ 659.076925][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 659.086873][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 659.096238][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 659.104239][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 659.131470][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 659.140971][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 659.443022][T16189] device syzkaller0 entered promiscuous mode [ 659.743315][T16203] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3446'. [ 659.787158][ T7190] wlan1: Trigger new scan to find an IBSS to join [ 661.237053][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 661.682258][T16200] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 661.736832][T16200] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 661.796724][T16200] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 662.017436][T16217] netlink: 'syz.2.3452': attribute type 10 has an invalid length. [ 662.054697][T16217] team0: Device vxcan1 is of different type [ 662.310057][ T7170] device 0 left promiscuous mode [ 662.351457][T16213] netlink: 'syz.3.3450': attribute type 10 has an invalid length. [ 662.464008][T16213] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.486673][T16213] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.494791][T16213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.571950][T16213] team0: Port device bridge0 added [ 662.631481][ T7170] tipc: Left network mode [ 662.662787][T16185] chnl_net:caif_netlink_parms(): no params data found [ 663.281817][T16255] pimreg: tun_chr_ioctl cmd 1074025681 [ 663.302778][T16185] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.310422][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 663.341799][T16185] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.375659][T16185] device bridge_slave_0 entered promiscuous mode [ 663.787358][ T7162] wlan1: Trigger new scan to find an IBSS to join [ 663.818404][T16185] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.830640][T16185] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.839663][T16185] device bridge_slave_1 entered promiscuous mode [ 664.162637][T16185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.209390][T16185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.627402][T16185] team0: Port device team_slave_0 added [ 664.809831][T16283] device syzkaller0 entered promiscuous mode [ 664.983018][T16185] team0: Port device team_slave_1 added [ 665.176426][T16284] netlink: 'syz.2.3468': attribute type 13 has an invalid length. [ 665.184439][T16284] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3468'. [ 665.405552][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 665.789045][ T7162] wlan1: Creating new IBSS network, BSSID 72:dc:1f:6a:07:a1 [ 667.475497][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 667.656075][T16185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.656351][T16303] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 667.663172][T16185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.698931][T16303] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 667.715454][T16303] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 667.756073][T16185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.787999][T16299] netlink: 'syz.2.3475': attribute type 10 has an invalid length. [ 667.811688][T16299] bridge0: port 3(dummy0) entered disabled state [ 667.818270][T16299] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.825761][T16299] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.874860][T16299] bridge0: port 3(dummy0) entered blocking state [ 667.881586][T16299] bridge0: port 3(dummy0) entered forwarding state [ 667.890216][T16299] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.897394][T16299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.905341][T16299] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.912576][T16299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.957466][T16299] team0: Port device bridge0 added [ 668.039909][T16185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.061109][T16185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.131532][T16185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.355273][T16185] device hsr_slave_0 entered promiscuous mode [ 668.383462][T16185] device hsr_slave_1 entered promiscuous mode [ 668.402460][T16185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 668.452077][T16185] Cannot create hsr debugfs directory [ 668.563759][T16331] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.3487'. [ 668.622874][T16331] openvswitch: netlink: Message has 48126 unknown bytes. [ 668.760390][T16339] netlink: 'syz.3.3489': attribute type 29 has an invalid length. [ 669.120970][T16339] netlink: 'syz.3.3489': attribute type 29 has an invalid length. [ 669.208616][T16338] netlink: 'syz.3.3489': attribute type 29 has an invalid length. [ 669.402397][T16335] device syzkaller0 entered promiscuous mode [ 672.769975][T16384] netlink: 'syz.3.3499': attribute type 3 has an invalid length. [ 672.792363][T16384] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3499'. [ 673.788480][T16379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.800797][T16379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.128177][T16405] netlink: 'syz.4.3504': attribute type 10 has an invalid length. [ 674.145813][T16405] netlink: 'syz.4.3504': attribute type 16 has an invalid length. [ 674.165097][T16405] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3504'. [ 674.430686][T16397] device syzkaller0 entered promiscuous mode [ 674.874368][T16426] netlink: 'syz.0.3511': attribute type 3 has an invalid length. [ 674.883101][T16426] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3511'. [ 675.580879][T16443] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3515'. [ 677.244828][T16428] device batadv0 entered promiscuous mode [ 677.547485][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 677.550281][T16185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 677.571919][T16185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 677.779195][T16185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 678.580069][T16466] À: port 1(vlan0) entered blocking state [ 678.587475][T16466] À: port 1(vlan0) entered disabled state [ 678.596070][T16466] device vlan0 entered promiscuous mode [ 678.614044][T16185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 678.901787][T16185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.929997][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 678.956889][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 678.976956][T16185] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.991058][T16498] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3538'. [ 679.013383][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 679.050245][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 679.070908][ T7164] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.078104][ T7164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.151925][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 679.201001][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 679.251288][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 679.268224][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.275470][ T7164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.302660][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 679.322678][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 679.356180][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 679.366693][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 679.429738][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 679.474462][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 679.568532][T16185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 679.685490][T16185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 679.738500][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 679.761658][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 679.833439][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 679.926183][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 679.975937][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 680.005793][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 680.139390][T16533] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3550'. [ 680.341086][T16535] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3551'. [ 680.365930][T16535] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 680.438335][T16535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 680.478467][T16544] netlink: 'syz.0.3553': attribute type 10 has an invalid length. [ 680.555169][T16544] team0: Device nlmon0 is of different type [ 681.594039][T16570] netlink: 'syz.2.3558': attribute type 10 has an invalid length. [ 681.761270][T16570] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 681.855513][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 681.892421][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 681.969870][T16185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.123908][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 682.134412][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 682.190710][T16581] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3563'. [ 682.225975][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 682.244846][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 682.296197][T16578] bond0: (slave wlan1): Error: Slave device does not support XDP [ 682.324761][T16185] device veth0_vlan entered promiscuous mode [ 682.407399][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 682.446928][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 682.490781][T16185] device veth1_vlan entered promiscuous mode [ 682.612713][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 682.677645][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 682.713166][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 682.740181][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 682.768428][T16185] device veth0_macvtap entered promiscuous mode [ 682.789782][T16185] device veth1_macvtap entered promiscuous mode [ 682.868762][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 682.907387][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 682.970788][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.996207][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.026537][T16185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.047203][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 683.058066][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 683.102607][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.125883][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.185359][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.255389][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.257826][T16616] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3573'. [ 683.265270][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.365352][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.425445][T16185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.475630][T16619] device wlan1 entered promiscuous mode [ 683.612383][T16185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.685709][T16185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.694572][T16185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.794934][T16185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.839991][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 683.894280][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 684.077898][T16626] netlink: 'syz.3.3578': attribute type 10 has an invalid length. [ 684.101247][T16626] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3578'. [ 684.203139][T16626] batman_adv: batadv0: Adding interface: vlan1 [ 684.228886][T16626] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.314652][T16626] batman_adv: batadv0: Interface activated: vlan1 [ 684.398215][T16604] netlink: 'syz.4.3568': attribute type 20 has an invalid length. [ 684.499930][ T7150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.538775][ T7150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.627284][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 684.679885][ T7178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.710350][ T7178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.764897][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 684.805436][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3582'. [ 684.817755][T16651] netlink: 198388 bytes leftover after parsing attributes in process `syz.3.3583'. [ 684.826371][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3582'. [ 684.865288][T16647] netlink: 33 bytes leftover after parsing attributes in process `syz.2.3582'. [ 684.925525][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3582'. [ 684.966660][T16647] netlink: 33 bytes leftover after parsing attributes in process `syz.2.3582'. [ 685.050812][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3582'. [ 685.109800][T16647] netlink: 33 bytes leftover after parsing attributes in process `syz.2.3582'. [ 685.717257][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.723658][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.109388][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3603'. [ 688.419057][T16755] netlink: 'syz.2.3613': attribute type 10 has an invalid length. [ 689.365006][T16773] netlink: 'syz.3.3617': attribute type 10 has an invalid length. [ 689.629498][T16773] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 689.756319][T16778] __nla_validate_parse: 6 callbacks suppressed [ 689.756357][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3619'. [ 689.819320][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3619'. [ 689.854135][T16778] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3619'. [ 689.910047][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3619'. [ 689.962368][T16778] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3619'. [ 690.024502][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3619'. [ 690.037980][T16778] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3619'. [ 690.519275][T16787] device syzkaller0 entered promiscuous mode [ 691.520694][T16825] netlink: 'syz.4.3631': attribute type 3 has an invalid length. [ 691.546150][T16825] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3631'. [ 692.916350][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 693.656334][T16810] netlink: 'syz.3.3627': attribute type 10 has an invalid length. [ 694.472733][T16853] netlink: 'syz.1.3642': attribute type 29 has an invalid length. [ 694.533227][T16853] netlink: 'syz.1.3642': attribute type 29 has an invalid length. [ 694.594393][T16859] netlink: 'syz.1.3642': attribute type 29 has an invalid length. [ 694.742639][T16853] netlink: 'syz.1.3642': attribute type 29 has an invalid length. [ 694.830724][T16857] netlink: 'syz.1.3642': attribute type 29 has an invalid length. [ 695.359899][T16870] device syzkaller0 entered promiscuous mode [ 696.101114][T16894] netlink: 'syz.4.3657': attribute type 29 has an invalid length. [ 696.923204][T16909] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3663'. [ 698.415160][T16894] netlink: 'syz.4.3657': attribute type 29 has an invalid length. [ 698.621656][T16919] netlink: 'syz.1.3667': attribute type 9 has an invalid length. [ 698.627256][T16920] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.3669'. [ 698.658443][T16919] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.3667'. [ 699.008621][T16934] hsr0: VLAN not yet supported [ 699.183376][T16940] netlink: 'syz.0.3677': attribute type 29 has an invalid length. [ 699.235812][T16940] netlink: 'syz.0.3677': attribute type 29 has an invalid length. [ 699.309240][T16945] netlink: 'syz.3.3676': attribute type 10 has an invalid length. [ 699.350434][T16940] netlink: 'syz.0.3677': attribute type 29 has an invalid length. [ 699.382894][T16940] netlink: 'syz.0.3677': attribute type 29 has an invalid length. [ 699.433604][T16940] netlink: 'syz.0.3677': attribute type 29 has an invalid length. [ 699.764120][T16954] device syzkaller0 entered promiscuous mode [ 701.504903][T17004] netlink: 'syz.3.3704': attribute type 4 has an invalid length. [ 701.533811][T17004] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3704'. [ 704.169509][T17027] netlink: 'syz.3.3712': attribute type 10 has an invalid length. [ 704.177545][T17027] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3712'. [ 704.186774][T17027] device dummy0 entered promiscuous mode [ 704.193163][T17027] bridge0: port 3(dummy0) entered blocking state [ 704.200222][T17027] bridge0: port 3(dummy0) entered disabled state [ 704.212867][T17027] bridge0: port 3(dummy0) entered blocking state [ 704.219449][T17027] bridge0: port 3(dummy0) entered listening state [ 704.480051][T17051] device batadv0 entered promiscuous mode [ 704.659864][T17062] netlink: 'syz.4.3725': attribute type 10 has an invalid length. [ 705.291516][T17072] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3729'. [ 707.691062][T17153] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3762'. [ 707.763611][T17153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 707.843811][T17152] device batadv0 entered promiscuous mode [ 708.300507][T17169] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3767'. [ 708.559169][T17181] netlink: 'syz.0.3774': attribute type 29 has an invalid length. [ 708.585798][T17181] netlink: 'syz.0.3774': attribute type 29 has an invalid length. [ 708.610687][T17184] netlink: 'syz.0.3774': attribute type 29 has an invalid length. [ 709.142714][T17196] netlink: 'syz.3.3780': attribute type 10 has an invalid length. [ 712.474251][T17196] team0 (unregistering): Port device team_slave_0 removed [ 712.564693][T17196] team0 (unregistering): Port device team_slave_1 removed [ 712.612712][T17196] bridge0: port 3(dummy0) entered disabled state [ 712.619371][T17196] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.672392][T17196] team0 (unregistering): Port device bridge0 removed [ 713.549505][T17242] netlink: 'syz.3.3798': attribute type 10 has an invalid length. [ 713.558520][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.0.2 [ 713.575726][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.1.2 [ 713.598952][T17242] device syz_tun entered promiscuous mode [ 713.726303][T17242] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 714.129009][T17255] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3803'. [ 714.522927][T17260] device syzkaller0 entered promiscuous mode [ 718.314107][T17296] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3816'. [ 718.324104][T17302] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3817'. [ 718.341660][T17302] bridge_slave_1: default FDB implementation only supports local addresses [ 718.506069][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 719.639476][T17331] netlink: 'syz.3.3827': attribute type 10 has an invalid length. [ 719.990367][T17334] netlink: 'syz.1.3829': attribute type 3 has an invalid length. [ 720.086418][T17334] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3829'. [ 721.632175][T17368] netlink: 'syz.4.3842': attribute type 10 has an invalid length. [ 721.646502][T17368] device syz_tun entered promiscuous mode [ 721.757319][T17368] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 724.075461][T17425] netlink: 'syz.0.3864': attribute type 10 has an invalid length. [ 724.094319][T17432] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3868'. [ 724.636649][T17459] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3879'. [ 724.652212][T17459] device batadv_slave_1 entered promiscuous mode [ 729.185464][T17612] netlink: 'syz.2.3953': attribute type 29 has an invalid length. [ 729.210135][T17612] netlink: 'syz.2.3953': attribute type 29 has an invalid length. [ 729.219637][T17613] sctp: [Deprecated]: syz.0.3952 (pid 17613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 729.219637][T17613] Use struct sctp_sack_info instead [ 729.252022][T17614] netlink: 'syz.2.3953': attribute type 29 has an invalid length. [ 729.316250][T17612] netlink: 'syz.2.3953': attribute type 29 has an invalid length. [ 729.350096][T17612] netlink: 'syz.2.3953': attribute type 29 has an invalid length. [ 730.488856][T17651] netlink: 'syz.1.3967': attribute type 29 has an invalid length. [ 730.560837][T17651] netlink: 'syz.1.3967': attribute type 29 has an invalid length. [ 730.607518][T17653] netlink: 'syz.1.3967': attribute type 29 has an invalid length. [ 730.640894][T17651] netlink: 'syz.1.3967': attribute type 29 has an invalid length. [ 731.197957][T17661] device veth0_vlan left promiscuous mode [ 731.204540][T17661] device veth0_vlan entered promiscuous mode [ 732.273711][T17690] netlink: 'syz.1.3980': attribute type 29 has an invalid length. [ 732.485900][T17697] icmp: detected local route for 172.20.20.18 during ICMP sending, src 172.30.0.2 [ 734.003263][T17739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4000'. [ 734.062356][T17739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4000'. [ 734.566850][T17745] validate_nla: 6 callbacks suppressed [ 734.566915][T17745] netlink: 'syz.3.4003': attribute type 10 has an invalid length. [ 734.919925][T17763] netlink: 'syz.2.4012': attribute type 10 has an invalid length. [ 735.301351][T17774] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4017'. [ 735.416229][T17784] netlink: 'syz.1.4017': attribute type 12 has an invalid length. [ 735.430787][T17784] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4017'. [ 736.477407][T17784] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.485090][T17784] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.322936][T17816] netlink: 'syz.1.4029': attribute type 10 has an invalid length. [ 737.890437][T17843] device syzkaller0 entered promiscuous mode [ 740.100080][T17848] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4043'. [ 740.115760][T17852] netlink: 'syz.4.4043': attribute type 12 has an invalid length. [ 740.123718][T17852] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4043'. [ 740.422642][T17859] device syzkaller0 entered promiscuous mode [ 740.442105][T17863] netlink: 'syz.3.4047': attribute type 10 has an invalid length. [ 743.100954][T17914] netlink: 'syz.2.4067': attribute type 10 has an invalid length. [ 743.460391][T17925] device syzkaller0 entered promiscuous mode [ 747.168873][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.175271][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.740352][T17943] netlink: 'syz.4.4078': attribute type 10 has an invalid length. [ 750.492837][T18021] netlink: 'syz.2.4111': attribute type 10 has an invalid length. [ 750.532723][T18021] device syz_tun entered promiscuous mode [ 750.594190][T18021] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 751.209344][T18027] device syzkaller0 entered promiscuous mode [ 754.345590][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 757.216665][T18132] FAULT_INJECTION: forcing a failure. [ 757.216665][T18132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.255385][T18132] CPU: 1 PID: 18132 Comm: syz.4.4153 Not tainted syzkaller #0 [ 757.263013][T18132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 757.273096][T18132] Call Trace: [ 757.276481][T18132] [ 757.279424][T18132] dump_stack_lvl+0x188/0x24e [ 757.284124][T18132] ? show_regs_print_info+0x12/0x12 [ 757.289328][T18132] ? load_image+0x400/0x400 [ 757.293847][T18132] ? __lock_acquire+0x7d10/0x7d10 [ 757.298889][T18132] should_fail_ex+0x399/0x4d0 [ 757.303577][T18132] _copy_from_user+0x2c/0x170 [ 757.308304][T18132] ___sys_sendmsg+0x1c3/0x360 [ 757.313114][T18132] ? __sys_sendmsg+0x290/0x290 [ 757.318105][T18132] ? __lock_acquire+0x7d10/0x7d10 [ 757.323180][T18132] __se_sys_sendmsg+0x1bb/0x2a0 [ 757.328057][T18132] ? __x64_sys_sendmsg+0x80/0x80 [ 757.333015][T18132] ? lockdep_hardirqs_on+0x94/0x140 [ 757.338232][T18132] do_syscall_64+0x4c/0xa0 [ 757.342751][T18132] ? clear_bhb_loop+0x60/0xb0 [ 757.347445][T18132] ? clear_bhb_loop+0x60/0xb0 [ 757.352138][T18132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.358041][T18132] RIP: 0033:0x7f9d7ff9ce59 [ 757.362466][T18132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.382078][T18132] RSP: 002b:00007f9d80e25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.390520][T18132] RAX: ffffffffffffffda RBX: 00007f9d80215fa0 RCX: 00007f9d7ff9ce59 [ 757.398590][T18132] RDX: 000000002000c810 RSI: 0000200000000040 RDI: 0000000000000003 [ 757.406577][T18132] RBP: 00007f9d80e25090 R08: 0000000000000000 R09: 0000000000000000 [ 757.414759][T18132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.422741][T18132] R13: 00007f9d80216038 R14: 00007f9d80215fa0 R15: 00007ffedf6c36b8 [ 757.430736][T18132] [ 758.049623][T18155] device syzkaller0 entered promiscuous mode [ 758.063975][T18162] FAULT_INJECTION: forcing a failure. [ 758.063975][T18162] name failslab, interval 1, probability 0, space 0, times 0 [ 758.095531][T18162] CPU: 1 PID: 18162 Comm: syz.3.4166 Not tainted syzkaller #0 [ 758.103067][T18162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 758.113149][T18162] Call Trace: [ 758.116452][T18162] [ 758.119436][T18162] dump_stack_lvl+0x188/0x24e [ 758.124174][T18162] ? show_regs_print_info+0x12/0x12 [ 758.129415][T18162] ? load_image+0x400/0x400 [ 758.133966][T18162] ? __might_sleep+0xd0/0xd0 [ 758.138607][T18162] ? __lock_acquire+0x7d10/0x7d10 [ 758.143706][T18162] should_fail_ex+0x399/0x4d0 [ 758.148430][T18162] should_failslab+0x5/0x20 [ 758.152968][T18162] slab_pre_alloc_hook+0x59/0x310 [ 758.158044][T18162] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 758.163830][T18162] __kmem_cache_alloc_node+0x4f/0x260 [ 758.169259][T18162] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 758.175035][T18162] __kmalloc+0xa0/0x240 [ 758.179247][T18162] tomoyo_realpath_from_path+0xdf/0x5d0 [ 758.184845][T18162] ? tomoyo_path_number_perm+0x205/0x650 [ 758.190520][T18162] tomoyo_path_number_perm+0x22f/0x650 [ 758.196024][T18162] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 758.201529][T18162] ? ksys_write+0x1c0/0x250 [ 758.206081][T18162] ? common_file_perm+0x171/0x1c0 [ 758.211186][T18162] ? __fget_files+0x28/0x4b0 [ 758.215835][T18162] ? __fget_files+0x28/0x4b0 [ 758.220473][T18162] security_file_ioctl+0x6c/0xa0 [ 758.225451][T18162] __se_sys_ioctl+0x48/0x170 [ 758.230080][T18162] do_syscall_64+0x4c/0xa0 [ 758.234523][T18162] ? clear_bhb_loop+0x60/0xb0 [ 758.239243][T18162] ? clear_bhb_loop+0x60/0xb0 [ 758.243956][T18162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.249974][T18162] RIP: 0033:0x7f86bf59ce59 [ 758.254426][T18162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.274088][T18162] RSP: 002b:00007f86c0411028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 758.282566][T18162] RAX: ffffffffffffffda RBX: 00007f86bf816090 RCX: 00007f86bf59ce59 [ 758.290573][T18162] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004 [ 758.298564][T18162] RBP: 00007f86c0411090 R08: 0000000000000000 R09: 0000000000000000 [ 758.306543][T18162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.314531][T18162] R13: 00007f86bf816128 R14: 00007f86bf816090 R15: 00007fffd0bb7618 [ 758.322534][T18162] [ 758.348774][T18162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 759.223486][T18176] FAULT_INJECTION: forcing a failure. [ 759.223486][T18176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.242869][T18176] CPU: 1 PID: 18176 Comm: syz.4.4172 Not tainted syzkaller #0 [ 759.250405][T18176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 759.260587][T18176] Call Trace: [ 759.263885][T18176] [ 759.266825][T18176] dump_stack_lvl+0x188/0x24e [ 759.271522][T18176] ? show_regs_print_info+0x12/0x12 [ 759.276731][T18176] ? load_image+0x400/0x400 [ 759.281260][T18176] ? __lock_acquire+0x7d10/0x7d10 [ 759.286310][T18176] should_fail_ex+0x399/0x4d0 [ 759.291000][T18176] _copy_from_user+0x2c/0x170 [ 759.295701][T18176] __sys_bpf+0x2ea/0x780 [ 759.299959][T18176] ? bpf_link_show_fdinfo+0x380/0x380 [ 759.305357][T18176] ? lock_chain_count+0x20/0x20 [ 759.310317][T18176] __x64_sys_bpf+0x78/0x90 [ 759.314750][T18176] do_syscall_64+0x4c/0xa0 [ 759.319173][T18176] ? clear_bhb_loop+0x60/0xb0 [ 759.323885][T18176] ? clear_bhb_loop+0x60/0xb0 [ 759.328578][T18176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.334485][T18176] RIP: 0033:0x7f9d7ff9ce59 [ 759.338911][T18176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.358524][T18176] RSP: 002b:00007f9d80e25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 759.366947][T18176] RAX: ffffffffffffffda RBX: 00007f9d80215fa0 RCX: 00007f9d7ff9ce59 [ 759.374924][T18176] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 759.382899][T18176] RBP: 00007f9d80e25090 R08: 0000000000000000 R09: 0000000000000000 [ 759.390876][T18176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.398853][T18176] R13: 00007f9d80216038 R14: 00007f9d80215fa0 R15: 00007ffedf6c36b8 [ 759.406843][T18176] [ 761.711647][T18163] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.4165'. [ 762.384117][T18231] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4193'. [ 762.843406][T18239] device syzkaller0 entered promiscuous mode [ 764.620181][T18277] netlink: 'syz.4.4209': attribute type 29 has an invalid length. [ 764.836980][T18283] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4207'. [ 764.878505][T18283] netlink: zone id is out of range [ 764.883811][T18283] netlink: zone id is out of range [ 764.919966][T18283] netlink: zone id is out of range [ 764.932821][T18283] netlink: zone id is out of range [ 764.946063][T18283] netlink: zone id is out of range [ 764.959753][T18283] netlink: zone id is out of range [ 764.973287][T18283] netlink: zone id is out of range [ 764.987716][T18283] netlink: zone id is out of range [ 765.004272][T18283] netlink: zone id is out of range [ 765.018781][T18283] netlink: zone id is out of range [ 767.498917][T18297] netlink: 'syz.3.4214': attribute type 29 has an invalid length. [ 768.968231][T18277] netlink: 'syz.4.4209': attribute type 29 has an invalid length. [ 768.976920][T18297] netlink: 'syz.3.4214': attribute type 29 has an invalid length. [ 769.813324][T18327] device syzkaller0 entered promiscuous mode [ 769.861098][T18334] syz.2.4228[18334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 769.861331][T18334] syz.2.4228[18334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 770.202156][T18338] netlink: 'syz.0.4229': attribute type 29 has an invalid length. [ 773.890205][T18334] netlink: 'syz.2.4228': attribute type 10 has an invalid length. [ 773.903537][T18334] team0: Device vxcan0 is of different type [ 773.913413][T18338] netlink: 'syz.0.4229': attribute type 29 has an invalid length. [ 775.404120][T18416] device syzkaller0 entered promiscuous mode [ 776.775381][T18435] netlink: 'syz.1.4261': attribute type 29 has an invalid length. [ 778.553271][T18451] netlink: 'syz.3.4267': attribute type 29 has an invalid length. [ 778.608147][T18453] netlink: 'syz.3.4267': attribute type 6 has an invalid length. [ 778.619785][T18453] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4267'. [ 778.632734][T18453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4267'. [ 780.459097][T18435] netlink: 'syz.1.4261': attribute type 29 has an invalid length. [ 780.469381][T18452] netlink: 'syz.4.4266': attribute type 10 has an invalid length. [ 780.490624][T18452] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4266'. [ 780.515487][T18452] device hsr0 entered promiscuous mode [ 780.521269][T18452] bridge0: port 3(hsr0) entered blocking state [ 780.555450][T18452] bridge0: port 3(hsr0) entered disabled state [ 780.578613][T18452] bridge0: port 3(hsr0) entered blocking state [ 780.584953][T18452] bridge0: port 3(hsr0) entered forwarding state [ 780.612886][T18451] netlink: 'syz.3.4267': attribute type 29 has an invalid length. [ 781.180089][T18483] FAULT_INJECTION: forcing a failure. [ 781.180089][T18483] name failslab, interval 1, probability 0, space 0, times 0 [ 781.197124][T18483] CPU: 1 PID: 18483 Comm: syz.1.4276 Not tainted syzkaller #0 [ 781.204649][T18483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 781.214734][T18483] Call Trace: [ 781.218024][T18483] [ 781.220967][T18483] dump_stack_lvl+0x188/0x24e [ 781.225665][T18483] ? show_regs_print_info+0x12/0x12 [ 781.230871][T18483] ? load_image+0x400/0x400 [ 781.235389][T18483] ? __might_sleep+0xd0/0xd0 [ 781.239985][T18483] ? __lock_acquire+0x7d10/0x7d10 [ 781.245023][T18483] should_fail_ex+0x399/0x4d0 [ 781.249714][T18483] should_failslab+0x5/0x20 [ 781.254226][T18483] slab_pre_alloc_hook+0x59/0x310 [ 781.259445][T18483] ? apparmor_sk_alloc_security+0x74/0x100 [ 781.265271][T18483] __kmem_cache_alloc_node+0x4f/0x260 [ 781.270662][T18483] ? apparmor_sk_alloc_security+0x74/0x100 [ 781.276483][T18483] kmalloc_trace+0x26/0xe0 [ 781.280922][T18483] apparmor_sk_alloc_security+0x74/0x100 [ 781.286564][T18483] security_sk_alloc+0x6a/0xa0 [ 781.291338][T18483] sk_prot_alloc+0x101/0x210 [ 781.296469][T18483] ? sk_alloc+0x20/0x340 [ 781.300745][T18483] sk_alloc+0x36/0x340 [ 781.304825][T18483] ? bpf_ctx_init+0x163/0x1a0 [ 781.309611][T18483] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 781.315171][T18483] bpf_prog_test_run_skb+0x35e/0x12a0 [ 781.320594][T18483] ? __fget_files+0x28/0x4b0 [ 781.325225][T18483] ? __fget_files+0x43d/0x4b0 [ 781.329960][T18483] ? cpu_online+0xa0/0xa0 [ 781.334411][T18483] bpf_prog_test_run+0x31e/0x390 [ 781.339375][T18483] __sys_bpf+0x62b/0x780 [ 781.343645][T18483] ? bpf_link_show_fdinfo+0x380/0x380 [ 781.349042][T18483] ? lock_chain_count+0x20/0x20 [ 781.353923][T18483] __x64_sys_bpf+0x78/0x90 [ 781.358375][T18483] do_syscall_64+0x4c/0xa0 [ 781.362891][T18483] ? clear_bhb_loop+0x60/0xb0 [ 781.367586][T18483] ? clear_bhb_loop+0x60/0xb0 [ 781.372276][T18483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 781.378185][T18483] RIP: 0033:0x7fe256b9ce59 [ 781.382617][T18483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.402844][T18483] RSP: 002b:00007fe257b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 781.411286][T18483] RAX: ffffffffffffffda RBX: 00007fe256e15fa0 RCX: 00007fe256b9ce59 [ 781.419288][T18483] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 781.427283][T18483] RBP: 00007fe257b03090 R08: 0000000000000000 R09: 0000000000000000 [ 781.435270][T18483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.443256][T18483] R13: 00007fe256e16038 R14: 00007fe256e15fa0 R15: 00007fffb4c48918 [ 781.451257][T18483] [ 781.592873][T18490] netlink: 'syz.2.4278': attribute type 29 has an invalid length. [ 781.632766][T18490] netlink: 'syz.2.4278': attribute type 29 has an invalid length. [ 781.657560][T18491] netlink: 'syz.2.4278': attribute type 29 has an invalid length. [ 781.696341][T18490] netlink: 'syz.2.4278': attribute type 29 has an invalid length. [ 782.671739][T18497] device syzkaller0 entered promiscuous mode [ 782.788098][T18496] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4280'. [ 782.830240][T18496] net_ratelimit: 265 callbacks suppressed [ 782.830259][T18496] netlink: zone id is out of range [ 782.871930][T18496] netlink: zone id is out of range [ 782.898617][T18496] netlink: zone id is out of range [ 782.903822][T18496] netlink: zone id is out of range [ 782.956762][T18496] netlink: zone id is out of range [ 782.962155][T18496] netlink: zone id is out of range [ 783.055481][T18496] netlink: zone id is out of range [ 783.060679][T18496] netlink: zone id is out of range [ 783.175358][T18496] netlink: zone id is out of range [ 783.180564][T18496] netlink: zone id is out of range [ 784.733346][T18527] validate_nla: 1 callbacks suppressed [ 784.733365][T18527] netlink: 'syz.4.4290': attribute type 29 has an invalid length. [ 785.065670][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 786.405513][T18527] netlink: 'syz.4.4290': attribute type 29 has an invalid length. [ 786.980576][T18538] device syzkaller0 entered promiscuous mode [ 788.060785][T18560] netlink: 'syz.2.4301': attribute type 29 has an invalid length. [ 788.765891][T18575] netlink: 'syz.3.4304': attribute type 29 has an invalid length. [ 790.757929][T18559] netlink: 'syz.0.4302': attribute type 10 has an invalid length. [ 790.780430][T18560] netlink: 'syz.2.4301': attribute type 29 has an invalid length. [ 790.798707][T18575] netlink: 'syz.3.4304': attribute type 29 has an invalid length. [ 790.984473][T18571] device syzkaller0 entered promiscuous mode [ 791.107202][T18581] FAULT_INJECTION: forcing a failure. [ 791.107202][T18581] name failslab, interval 1, probability 0, space 0, times 0 [ 791.170779][T18581] CPU: 1 PID: 18581 Comm: syz.0.4305 Not tainted syzkaller #0 [ 791.178329][T18581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 791.188602][T18581] Call Trace: [ 791.191914][T18581] [ 791.194879][T18581] dump_stack_lvl+0x188/0x24e [ 791.199595][T18581] ? show_regs_print_info+0x12/0x12 [ 791.204834][T18581] ? load_image+0x400/0x400 [ 791.209386][T18581] ? __lock_acquire+0x7d10/0x7d10 [ 791.214468][T18581] should_fail_ex+0x399/0x4d0 [ 791.219189][T18581] should_failslab+0x5/0x20 [ 791.223725][T18581] slab_pre_alloc_hook+0x59/0x310 [ 791.228785][T18581] ? verify_lock_unused+0x140/0x140 [ 791.234025][T18581] ? bpf_test_init+0x9f/0x140 [ 791.238745][T18581] __kmem_cache_alloc_node+0x4f/0x260 [ 791.244164][T18581] ? bpf_test_init+0x9f/0x140 [ 791.248887][T18581] __kmalloc+0xa0/0x240 [ 791.253086][T18581] bpf_test_init+0x9f/0x140 [ 791.257645][T18581] bpf_prog_test_run_xdp+0x484/0xf10 [ 791.263128][T18581] ? dev_put+0x80/0x80 [ 791.267241][T18581] ? dev_put+0x80/0x80 [ 791.271418][T18581] bpf_prog_test_run+0x31e/0x390 [ 791.276378][T18581] __sys_bpf+0x62b/0x780 [ 791.280641][T18581] ? bpf_link_show_fdinfo+0x380/0x380 [ 791.286050][T18581] ? lock_chain_count+0x20/0x20 [ 791.290919][T18581] __x64_sys_bpf+0x78/0x90 [ 791.295349][T18581] do_syscall_64+0x4c/0xa0 [ 791.299772][T18581] ? clear_bhb_loop+0x60/0xb0 [ 791.304549][T18581] ? clear_bhb_loop+0x60/0xb0 [ 791.309241][T18581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.315156][T18581] RIP: 0033:0x7fd6ffb9ce59 [ 791.319592][T18581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.339298][T18581] RSP: 002b:00007fd6fddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 791.347729][T18581] RAX: ffffffffffffffda RBX: 00007fd6ffe15fa0 RCX: 00007fd6ffb9ce59 [ 791.355716][T18581] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 791.363698][T18581] RBP: 00007fd6fddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 791.371677][T18581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.379657][T18581] R13: 00007fd6ffe16038 R14: 00007fd6ffe15fa0 R15: 00007ffec0eeb438 [ 791.387735][T18581] [ 794.918002][T18667] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4334'. [ 795.234834][T18669] netlink: 'syz.0.4332': attribute type 27 has an invalid length. [ 795.264981][T18669] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4332'. [ 796.164557][T18680] device syzkaller0 entered promiscuous mode [ 799.988015][T18727] FAULT_INJECTION: forcing a failure. [ 799.988015][T18727] name failslab, interval 1, probability 0, space 0, times 0 [ 800.005108][T18727] CPU: 0 PID: 18727 Comm: syz.4.4351 Not tainted syzkaller #0 [ 800.012635][T18727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 800.022739][T18727] Call Trace: [ 800.026139][T18727] [ 800.029103][T18727] dump_stack_lvl+0x188/0x24e [ 800.033821][T18727] ? show_regs_print_info+0x12/0x12 [ 800.039060][T18727] ? load_image+0x400/0x400 [ 800.043623][T18727] ? __might_sleep+0xd0/0xd0 [ 800.048262][T18727] ? __lock_acquire+0x7d10/0x7d10 [ 800.053342][T18727] should_fail_ex+0x399/0x4d0 [ 800.058053][T18727] should_failslab+0x5/0x20 [ 800.062569][T18727] slab_pre_alloc_hook+0x59/0x310 [ 800.067610][T18727] ? kvmalloc_node+0x6c/0x180 [ 800.072308][T18727] __kmem_cache_alloc_node+0x4f/0x260 [ 800.077698][T18727] ? kvmalloc_node+0x6c/0x180 [ 800.082397][T18727] __kmalloc_node+0xa0/0x240 [ 800.087012][T18727] kvmalloc_node+0x6c/0x180 [ 800.091532][T18727] bpf_test_run_xdp_live+0x209/0x1a90 [ 800.096924][T18727] ? 0xffffffffa0004440 [ 800.101088][T18727] ? text_poke_copy+0x79/0x90 [ 800.105798][T18727] ? 0xffffffffa0004440 [ 800.109987][T18727] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 800.115910][T18727] ? 0xffffffffa0004440 [ 800.120097][T18727] ? xdp_convert_md_to_buff+0x330/0x330 [ 800.125696][T18727] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 800.131967][T18727] ? bpf_test_init+0x119/0x140 [ 800.136759][T18727] ? xdp_convert_md_to_buff+0x5b/0x330 [ 800.142238][T18727] bpf_prog_test_run_xdp+0x736/0xf10 [ 800.147552][T18727] ? dev_put+0x80/0x80 [ 800.151644][T18727] ? dev_put+0x80/0x80 [ 800.155730][T18727] bpf_prog_test_run+0x31e/0x390 [ 800.160802][T18727] __sys_bpf+0x62b/0x780 [ 800.165163][T18727] ? bpf_link_show_fdinfo+0x380/0x380 [ 800.170577][T18727] ? lock_chain_count+0x20/0x20 [ 800.175451][T18727] __x64_sys_bpf+0x78/0x90 [ 800.179882][T18727] do_syscall_64+0x4c/0xa0 [ 800.184316][T18727] ? clear_bhb_loop+0x60/0xb0 [ 800.189010][T18727] ? clear_bhb_loop+0x60/0xb0 [ 800.193704][T18727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 800.199610][T18727] RIP: 0033:0x7f9d7ff9ce59 [ 800.204034][T18727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.223654][T18727] RSP: 002b:00007f9d80e25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 800.232078][T18727] RAX: ffffffffffffffda RBX: 00007f9d80215fa0 RCX: 00007f9d7ff9ce59 [ 800.240057][T18727] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 800.248040][T18727] RBP: 00007f9d80e25090 R08: 0000000000000000 R09: 0000000000000000 [ 800.256111][T18727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.264088][T18727] R13: 00007f9d80216038 R14: 00007f9d80215fa0 R15: 00007ffedf6c36b8 [ 800.272080][T18727] [ 801.141354][T18709] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4345'. [ 801.694838][T18721] delete_channel: no stack [ 802.269231][T18762] device syzkaller0 entered promiscuous mode [ 805.439902][T18808] netlink: 'syz.4.4381': attribute type 2 has an invalid length. [ 805.465603][T18808] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.4381'. [ 805.490092][T18808] netlink: 'syz.4.4381': attribute type 29 has an invalid length. [ 805.504663][T18808] netlink: 'syz.4.4381': attribute type 29 has an invalid length. [ 805.514038][T18808] netlink: 'syz.4.4381': attribute type 29 has an invalid length. [ 805.561296][T18808] netlink: 'syz.4.4381': attribute type 29 has an invalid length. [ 805.605818][T18808] netlink: 'syz.4.4381': attribute type 29 has an invalid length. [ 807.323749][T18852] device syzkaller0 entered promiscuous mode [ 807.649405][T18872] netlink: 'syz.3.4401': attribute type 29 has an invalid length. [ 807.855569][T18882] FAULT_INJECTION: forcing a failure. [ 807.855569][T18882] name failslab, interval 1, probability 0, space 0, times 0 [ 807.910451][T18882] CPU: 1 PID: 18882 Comm: syz.1.4404 Not tainted syzkaller #0 [ 807.917998][T18882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 807.928088][T18882] Call Trace: [ 807.931382][T18882] [ 807.934323][T18882] dump_stack_lvl+0x188/0x24e [ 807.939015][T18882] ? show_regs_print_info+0x12/0x12 [ 807.944309][T18882] ? load_image+0x400/0x400 [ 807.948837][T18882] ? __might_sleep+0xd0/0xd0 [ 807.953523][T18882] ? __lock_acquire+0x7d10/0x7d10 [ 807.958569][T18882] should_fail_ex+0x399/0x4d0 [ 807.963346][T18882] should_failslab+0x5/0x20 [ 807.967858][T18882] slab_pre_alloc_hook+0x59/0x310 [ 807.972895][T18882] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 807.978194][T18882] __kmem_cache_alloc_node+0x4f/0x260 [ 807.983576][T18882] ? memset+0x1e/0x40 [ 807.987573][T18882] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 807.992869][T18882] kmalloc_trace+0x26/0xe0 [ 807.997301][T18882] __xdp_reg_mem_model+0x1e0/0x5c0 [ 808.002433][T18882] ? kvmalloc_node+0x6c/0x180 [ 808.007131][T18882] ? kvmalloc_node+0x6c/0x180 [ 808.011823][T18882] ? xdp_reg_mem_model+0x30/0x30 [ 808.016783][T18882] xdp_reg_mem_model+0x1e/0x30 [ 808.021570][T18882] bpf_test_run_xdp_live+0x299/0x1a90 [ 808.026958][T18882] ? 0xffffffffa0004440 [ 808.031126][T18882] ? text_poke_copy+0x79/0x90 [ 808.035844][T18882] ? 0xffffffffa0004440 [ 808.040027][T18882] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 808.045963][T18882] ? 0xffffffffa0004440 [ 808.050143][T18882] ? xdp_convert_md_to_buff+0x330/0x330 [ 808.055755][T18882] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 808.062028][T18882] ? bpf_test_init+0x119/0x140 [ 808.066808][T18882] ? xdp_convert_md_to_buff+0x5b/0x330 [ 808.072282][T18882] bpf_prog_test_run_xdp+0x736/0xf10 [ 808.077595][T18882] ? dev_put+0x80/0x80 [ 808.081684][T18882] ? dev_put+0x80/0x80 [ 808.085765][T18882] bpf_prog_test_run+0x31e/0x390 [ 808.090718][T18882] __sys_bpf+0x62b/0x780 [ 808.094976][T18882] ? bpf_link_show_fdinfo+0x380/0x380 [ 808.100376][T18882] ? lock_chain_count+0x20/0x20 [ 808.105360][T18882] __x64_sys_bpf+0x78/0x90 [ 808.109873][T18882] do_syscall_64+0x4c/0xa0 [ 808.114326][T18882] ? clear_bhb_loop+0x60/0xb0 [ 808.119037][T18882] ? clear_bhb_loop+0x60/0xb0 [ 808.123736][T18882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 808.129730][T18882] RIP: 0033:0x7fe256b9ce59 [ 808.134177][T18882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.153882][T18882] RSP: 002b:00007fe257b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 808.162307][T18882] RAX: ffffffffffffffda RBX: 00007fe256e15fa0 RCX: 00007fe256b9ce59 [ 808.170291][T18882] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 808.178278][T18882] RBP: 00007fe257b03090 R08: 0000000000000000 R09: 0000000000000000 [ 808.186256][T18882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.194285][T18882] R13: 00007fe256e16038 R14: 00007fe256e15fa0 R15: 00007fffb4c48918 [ 808.202279][T18882] [ 808.592809][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.603054][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.668043][T18895] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4407'. [ 808.678880][T18895] net_ratelimit: 265 callbacks suppressed [ 808.678899][T18895] netlink: zone id is out of range [ 808.690457][T18895] netlink: zone id is out of range [ 808.719668][T18895] netlink: del zone limit has 4 unknown bytes [ 810.521900][T18872] netlink: 'syz.3.4401': attribute type 29 has an invalid length. [ 810.530163][T18888] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4405'. [ 810.767125][T18920] FAULT_INJECTION: forcing a failure. [ 810.767125][T18920] name failslab, interval 1, probability 0, space 0, times 0 [ 810.780194][T18920] CPU: 0 PID: 18920 Comm: syz.1.4416 Not tainted syzkaller #0 [ 810.787691][T18920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 810.797863][T18920] Call Trace: [ 810.801140][T18920] [ 810.804073][T18920] dump_stack_lvl+0x188/0x24e [ 810.808775][T18920] ? show_regs_print_info+0x12/0x12 [ 810.814197][T18920] ? load_image+0x400/0x400 [ 810.818761][T18920] should_fail_ex+0x399/0x4d0 [ 810.823476][T18920] should_failslab+0x5/0x20 [ 810.828006][T18920] slab_pre_alloc_hook+0x59/0x310 [ 810.833061][T18920] ? ida_alloc_range+0x5e1/0x860 [ 810.838025][T18920] __kmem_cache_alloc_node+0x4f/0x260 [ 810.843688][T18920] ? ida_alloc_range+0x5e1/0x860 [ 810.848659][T18920] kmalloc_trace+0x26/0xe0 [ 810.853108][T18920] ida_alloc_range+0x5e1/0x860 [ 810.857907][T18920] ? __xdp_reg_mem_model+0x1f8/0x5c0 [ 810.863220][T18920] ? idr_replace+0x1a0/0x1a0 [ 810.867859][T18920] __xdp_reg_mem_model+0x214/0x5c0 [ 810.872999][T18920] ? kvmalloc_node+0x6c/0x180 [ 810.877708][T18920] ? xdp_reg_mem_model+0x30/0x30 [ 810.882684][T18920] xdp_reg_mem_model+0x1e/0x30 [ 810.887484][T18920] bpf_test_run_xdp_live+0x299/0x1a90 [ 810.892894][T18920] ? 0xffffffffa0004440 [ 810.897074][T18920] ? text_poke_copy+0x79/0x90 [ 810.901786][T18920] ? 0xffffffffa0004440 [ 810.905960][T18920] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 810.911884][T18920] ? 0xffffffffa0004440 [ 810.916063][T18920] ? xdp_convert_md_to_buff+0x330/0x330 [ 810.921670][T18920] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 810.927948][T18920] ? bpf_test_init+0x119/0x140 [ 810.932736][T18920] ? xdp_convert_md_to_buff+0x5b/0x330 [ 810.938226][T18920] bpf_prog_test_run_xdp+0x736/0xf10 [ 810.943561][T18920] ? dev_put+0x80/0x80 [ 810.947674][T18920] ? dev_put+0x80/0x80 [ 810.951775][T18920] bpf_prog_test_run+0x31e/0x390 [ 810.956749][T18920] __sys_bpf+0x62b/0x780 [ 810.961028][T18920] ? bpf_link_show_fdinfo+0x380/0x380 [ 810.966444][T18920] ? lock_chain_count+0x20/0x20 [ 810.971335][T18920] __x64_sys_bpf+0x78/0x90 [ 810.975872][T18920] do_syscall_64+0x4c/0xa0 [ 810.980314][T18920] ? clear_bhb_loop+0x60/0xb0 [ 810.985015][T18920] ? clear_bhb_loop+0x60/0xb0 [ 810.989724][T18920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 810.995647][T18920] RIP: 0033:0x7fe256b9ce59 [ 811.000086][T18920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.019717][T18920] RSP: 002b:00007fe257b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 811.028161][T18920] RAX: ffffffffffffffda RBX: 00007fe256e15fa0 RCX: 00007fe256b9ce59 [ 811.036159][T18920] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 811.044149][T18920] RBP: 00007fe257b03090 R08: 0000000000000000 R09: 0000000000000000 [ 811.052156][T18920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.060168][T18920] R13: 00007fe256e16038 R14: 00007fe256e15fa0 R15: 00007fffb4c48918 [ 811.068185][T18920] [ 811.992386][T18953] netlink: 'syz.0.4425': attribute type 29 has an invalid length. [ 812.020196][T18950] device syzkaller0 entered promiscuous mode [ 812.027685][T18953] netlink: 'syz.0.4425': attribute type 29 has an invalid length. [ 812.037553][T18953] netlink: 'syz.0.4425': attribute type 29 has an invalid length. [ 812.046666][T18953] netlink: 'syz.0.4425': attribute type 29 has an invalid length. [ 815.734590][T18953] netlink: 'syz.0.4425': attribute type 29 has an invalid length. [ 816.255524][T19003] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4440'. [ 816.323364][T19008] netlink: 'syz.4.4442': attribute type 29 has an invalid length. [ 816.340197][T19008] netlink: 'syz.4.4442': attribute type 29 has an invalid length. [ 816.378199][T19008] netlink: 'syz.4.4442': attribute type 29 has an invalid length. [ 816.407085][T19008] netlink: 'syz.4.4442': attribute type 29 has an invalid length. [ 816.631708][T19018] netlink: 'syz.2.4441': attribute type 29 has an invalid length. [ 816.709006][T19018] netlink: 'syz.2.4441': attribute type 29 has an invalid length. [ 816.736502][T19026] netlink: 'syz.0.4447': attribute type 29 has an invalid length. [ 816.816700][T19026] netlink: 'syz.0.4447': attribute type 29 has an invalid length. [ 816.840290][T19025] netlink: 'syz.2.4441': attribute type 29 has an invalid length. [ 817.751340][T19038] device syzkaller0 entered promiscuous mode [ 818.260107][T19056] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4455'. [ 820.654000][T19066] FAULT_INJECTION: forcing a failure. [ 820.654000][T19066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.685993][T19066] CPU: 0 PID: 19066 Comm: syz.4.4459 Not tainted syzkaller #0 [ 820.693527][T19066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 820.703619][T19066] Call Trace: [ 820.706926][T19066] [ 820.709876][T19066] dump_stack_lvl+0x188/0x24e [ 820.714616][T19066] ? show_regs_print_info+0x12/0x12 [ 820.719828][T19066] ? load_image+0x400/0x400 [ 820.724354][T19066] ? __lock_acquire+0x7d10/0x7d10 [ 820.729401][T19066] should_fail_ex+0x399/0x4d0 [ 820.734091][T19066] _copy_to_user+0x2c/0x130 [ 820.738607][T19066] bpf_test_finish+0x266/0x600 [ 820.743392][T19066] ? convert_skb_to___skb+0x420/0x420 [ 820.748786][T19066] ? bpf_test_init+0x119/0x140 [ 820.753568][T19066] bpf_prog_test_run_xdp+0x80a/0xf10 [ 820.758878][T19066] ? dev_put+0x80/0x80 [ 820.762967][T19066] ? dev_put+0x80/0x80 [ 820.767046][T19066] bpf_prog_test_run+0x31e/0x390 [ 820.772089][T19066] __sys_bpf+0x62b/0x780 [ 820.776345][T19066] ? bpf_link_show_fdinfo+0x380/0x380 [ 820.781740][T19066] ? lock_chain_count+0x20/0x20 [ 820.786610][T19066] __x64_sys_bpf+0x78/0x90 [ 820.791046][T19066] do_syscall_64+0x4c/0xa0 [ 820.795481][T19066] ? clear_bhb_loop+0x60/0xb0 [ 820.800173][T19066] ? clear_bhb_loop+0x60/0xb0 [ 820.804868][T19066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 820.810777][T19066] RIP: 0033:0x7f9d7ff9ce59 [ 820.815214][T19066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.834833][T19066] RSP: 002b:00007f9d80e25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 820.843275][T19066] RAX: ffffffffffffffda RBX: 00007f9d80215fa0 RCX: 00007f9d7ff9ce59 [ 820.851367][T19066] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 820.859359][T19066] RBP: 00007f9d80e25090 R08: 0000000000000000 R09: 0000000000000000 [ 820.867348][T19066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 820.875330][T19066] R13: 00007f9d80216038 R14: 00007f9d80215fa0 R15: 00007ffedf6c36b8 [ 820.883326][T19066] [ 821.019584][T19071] device syzkaller0 entered promiscuous mode [ 821.100072][T19064] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4457'. [ 821.141567][T19068] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4457'. [ 821.194717][T19068] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 821.360377][T19085] validate_nla: 19 callbacks suppressed [ 821.360398][T19085] netlink: 'syz.1.4460': attribute type 29 has an invalid length. [ 823.802318][T19085] netlink: 'syz.1.4460': attribute type 29 has an invalid length. [ 824.232380][T19129] FAULT_INJECTION: forcing a failure. [ 824.232380][T19129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.271776][T19129] CPU: 1 PID: 19129 Comm: syz.1.4477 Not tainted syzkaller #0 [ 824.279309][T19129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 824.286983][T19130] netlink: 'syz.0.4474': attribute type 3 has an invalid length. [ 824.289375][T19129] Call Trace: [ 824.289387][T19129] [ 824.289396][T19129] dump_stack_lvl+0x188/0x24e [ 824.289427][T19129] ? show_regs_print_info+0x12/0x12 [ 824.289447][T19129] ? load_image+0x400/0x400 [ 824.289475][T19129] ? __lock_acquire+0x7d10/0x7d10 [ 824.289517][T19129] should_fail_ex+0x399/0x4d0 [ 824.289543][T19129] _copy_to_user+0x2c/0x130 [ 824.289570][T19129] bpf_test_finish+0x4a2/0x600 [ 824.289604][T19129] ? convert_skb_to___skb+0x420/0x420 [ 824.289635][T19129] ? bpf_test_init+0x119/0x140 [ 824.310284][T19130] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.4474'. [ 824.313489][T19129] bpf_prog_test_run_xdp+0x80a/0xf10 [ 824.313549][T19129] ? dev_put+0x80/0x80 [ 824.313586][T19129] ? dev_put+0x80/0x80 [ 824.313610][T19129] bpf_prog_test_run+0x31e/0x390 [ 824.313641][T19129] __sys_bpf+0x62b/0x780 [ 824.313668][T19129] ? bpf_link_show_fdinfo+0x380/0x380 [ 824.313710][T19129] ? lock_chain_count+0x20/0x20 [ 824.313744][T19129] __x64_sys_bpf+0x78/0x90 [ 824.313771][T19129] do_syscall_64+0x4c/0xa0 [ 824.313788][T19129] ? clear_bhb_loop+0x60/0xb0 [ 824.313814][T19129] ? clear_bhb_loop+0x60/0xb0 [ 824.407666][T19129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.413670][T19129] RIP: 0033:0x7fe256b9ce59 [ 824.418093][T19129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.437800][T19129] RSP: 002b:00007fe257b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 824.448062][T19129] RAX: ffffffffffffffda RBX: 00007fe256e15fa0 RCX: 00007fe256b9ce59 [ 824.456132][T19129] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 824.464113][T19129] RBP: 00007fe257b03090 R08: 0000000000000000 R09: 0000000000000000 [ 824.472092][T19129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 824.480070][T19129] R13: 00007fe256e16038 R14: 00007fe256e15fa0 R15: 00007fffb4c48918 [ 824.488065][T19129] [ 824.698479][T19143] netlink: 'syz.3.4480': attribute type 29 has an invalid length. [ 824.736688][T19143] netlink: 'syz.3.4480': attribute type 29 has an invalid length. [ 825.138968][T19162] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.4486'. [ 825.243631][T19162] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 828.126604][T19171] device syzkaller0 entered promiscuous mode [ 828.358921][T19185] netlink: 'syz.0.4490': attribute type 29 has an invalid length. [ 831.476457][T19185] netlink: 'syz.0.4490': attribute type 29 has an invalid length. [ 832.151763][T19246] netlink: 'syz.2.4515': attribute type 21 has an invalid length. [ 832.219868][T19246] netlink: 'syz.2.4515': attribute type 3 has an invalid length. [ 832.233592][T19246] netlink: 'syz.2.4515': attribute type 16 has an invalid length. [ 832.249497][T19246] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4515'. [ 832.284047][T19253] device syzkaller0 entered promiscuous mode [ 832.582325][T19264] netlink: 'syz.1.4521': attribute type 29 has an invalid length. [ 832.607312][T19264] netlink: 'syz.1.4521': attribute type 29 has an invalid length. [ 832.625642][T19264] netlink: 'syz.1.4521': attribute type 29 has an invalid length. [ 832.654521][T19264] netlink: 'syz.1.4521': attribute type 29 has an invalid length. [ 832.716063][T19269] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.4523'. [ 832.776028][T19271] netlink: 'syz.1.4521': attribute type 29 has an invalid length. [ 833.314990][T19285] device syzkaller0 entered promiscuous mode [ 834.011634][T19301] delete_channel: no stack [ 834.656615][T19318] netlink: 'syz.1.4539': attribute type 29 has an invalid length. [ 835.278474][T19336] netlink: 'syz.0.4545': attribute type 3 has an invalid length. [ 835.291061][T19336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4545'. [ 837.033404][T19317] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4539'. [ 837.043941][T19318] netlink: 'syz.1.4539': attribute type 29 has an invalid length. [ 837.252471][T19342] netlink: 'syz.4.4547': attribute type 1 has an invalid length. [ 837.296227][T19342] netlink: 'syz.4.4547': attribute type 4 has an invalid length. [ 837.314980][T19342] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4547'. [ 837.573488][T19360] netlink: 'syz.0.4554': attribute type 10 has an invalid length. [ 837.588405][T19360] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4554'. [ 837.630891][T19360] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.4554'. [ 837.657648][T19360] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 838.020142][T19372] device syzkaller0 entered promiscuous mode [ 838.056508][T19367] netlink: 'syz.2.4555': attribute type 2 has an invalid length. [ 838.067777][T19367] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4555'. [ 838.519717][T19384] netlink: 'syz.4.4559': attribute type 29 has an invalid length. [ 838.873410][T19376] delete_channel: no stack [ 839.055568][T19392] netlink: 'syz.0.4563': attribute type 2 has an invalid length. [ 839.065211][T19392] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4563'. [ 843.552268][T19384] netlink: 'syz.4.4559': attribute type 29 has an invalid length. [ 843.808206][T19416] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4570'. [ 843.875648][T19416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 844.022391][T19416] netlink: 'syz.3.4570': attribute type 49 has an invalid length. [ 844.044901][T19429] FAULT_INJECTION: forcing a failure. [ 844.044901][T19429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.063544][T19416] netlink: 'syz.3.4570': attribute type 49 has an invalid length. [ 844.068339][T19429] CPU: 0 PID: 19429 Comm: syz.4.4575 Not tainted syzkaller #0 [ 844.079052][T19429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 844.089140][T19429] Call Trace: [ 844.092453][T19429] [ 844.095407][T19429] dump_stack_lvl+0x188/0x24e [ 844.100126][T19429] ? show_regs_print_info+0x12/0x12 [ 844.105363][T19429] ? load_image+0x400/0x400 [ 844.109919][T19429] ? __lock_acquire+0x7d10/0x7d10 [ 844.114993][T19429] should_fail_ex+0x399/0x4d0 [ 844.119887][T19429] _copy_from_user+0x2c/0x170 [ 844.124614][T19429] __copy_msghdr+0x3b7/0x580 [ 844.129240][T19429] ___sys_sendmsg+0x210/0x360 [ 844.133952][T19429] ? __sys_sendmsg+0x290/0x290 [ 844.138779][T19429] ? __lock_acquire+0x7d10/0x7d10 [ 844.143880][T19429] __se_sys_sendmsg+0x1bb/0x2a0 [ 844.148778][T19429] ? __x64_sys_sendmsg+0x80/0x80 [ 844.153767][T19429] ? lockdep_hardirqs_on+0x94/0x140 [ 844.159007][T19429] do_syscall_64+0x4c/0xa0 [ 844.163462][T19429] ? clear_bhb_loop+0x60/0xb0 [ 844.168182][T19429] ? clear_bhb_loop+0x60/0xb0 [ 844.172920][T19429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.178853][T19429] RIP: 0033:0x7f9d7ff9ce59 [ 844.183293][T19429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.196280][T19433] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4571'. [ 844.202923][T19429] RSP: 002b:00007f9d80e25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.220424][T19429] RAX: ffffffffffffffda RBX: 00007f9d80215fa0 RCX: 00007f9d7ff9ce59 [ 844.228437][T19429] RDX: 000000000000fc00 RSI: 0000200000000080 RDI: 0000000000000004 [ 844.236450][T19429] RBP: 00007f9d80e25090 R08: 0000000000000000 R09: 0000000000000000 [ 844.244457][T19429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.252466][T19429] R13: 00007f9d80216038 R14: 00007f9d80215fa0 R15: 00007ffedf6c36b8 [ 844.260497][T19429] [ 844.607773][T19440] device syzkaller0 entered promiscuous mode [ 846.896174][T19459] netlink: 'syz.3.4584': attribute type 29 has an invalid length. [ 847.568726][T19452] device syzkaller0 entered promiscuous mode [ 847.621547][T19458] netlink: 'syz.3.4584': attribute type 10 has an invalid length. [ 847.645151][T19458] batman_adv: batadv0: Adding interface: netdevsim0 [ 847.666867][T19458] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.701410][T19458] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 847.714054][T19459] netlink: 'syz.3.4584': attribute type 29 has an invalid length. [ 847.973936][T19468] netlink: 'syz.4.4587': attribute type 2 has an invalid length. [ 847.991707][T19468] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4587'. [ 849.260352][T19485] FAULT_INJECTION: forcing a failure. [ 849.260352][T19485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.273698][T19485] CPU: 1 PID: 19485 Comm: syz.3.4594 Not tainted syzkaller #0 [ 849.281212][T19485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 849.291309][T19485] Call Trace: [ 849.294601][T19485] [ 849.297545][T19485] dump_stack_lvl+0x188/0x24e [ 849.302268][T19485] ? show_regs_print_info+0x12/0x12 [ 849.307479][T19485] ? load_image+0x400/0x400 [ 849.312002][T19485] ? __lock_acquire+0x7d10/0x7d10 [ 849.317052][T19485] should_fail_ex+0x399/0x4d0 [ 849.321745][T19485] _copy_from_user+0x2c/0x170 [ 849.326448][T19485] ____sys_sendmsg+0x30a/0x970 [ 849.331227][T19485] ? __sys_sendmsg_sock+0x30/0x30 [ 849.336270][T19485] ? __import_iovec+0x315/0x500 [ 849.341137][T19485] ? import_iovec+0x6f/0xa0 [ 849.345681][T19485] ___sys_sendmsg+0x2a2/0x360 [ 849.350384][T19485] ? __sys_sendmsg+0x290/0x290 [ 849.355271][T19485] ? __lock_acquire+0x7d10/0x7d10 [ 849.360329][T19485] __se_sys_sendmsg+0x1bb/0x2a0 [ 849.365192][T19485] ? __x64_sys_sendmsg+0x80/0x80 [ 849.370150][T19485] ? lockdep_hardirqs_on+0x94/0x140 [ 849.375371][T19485] do_syscall_64+0x4c/0xa0 [ 849.379802][T19485] ? clear_bhb_loop+0x60/0xb0 [ 849.384493][T19485] ? clear_bhb_loop+0x60/0xb0 [ 849.389191][T19485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 849.395098][T19485] RIP: 0033:0x7f86bf59ce59 [ 849.399526][T19485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.419229][T19485] RSP: 002b:00007f86c0432028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.427661][T19485] RAX: ffffffffffffffda RBX: 00007f86bf815fa0 RCX: 00007f86bf59ce59 [ 849.435641][T19485] RDX: 000000000000fc00 RSI: 0000200000000080 RDI: 0000000000000004 [ 849.443622][T19485] RBP: 00007f86c0432090 R08: 0000000000000000 R09: 0000000000000000 [ 849.451604][T19485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.459930][T19485] R13: 00007f86bf816038 R14: 00007f86bf815fa0 R15: 00007fffd0bb7618 [ 849.467929][T19485] [ 851.889433][T19511] FAULT_INJECTION: forcing a failure. [ 851.889433][T19511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.933668][T19511] CPU: 1 PID: 19511 Comm: syz.1.4603 Not tainted syzkaller #0 [ 851.941643][T19511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 851.951738][T19511] Call Trace: [ 851.955047][T19511] [ 851.958014][T19511] dump_stack_lvl+0x188/0x24e [ 851.962735][T19511] ? show_regs_print_info+0x12/0x12 [ 851.967973][T19511] ? load_image+0x400/0x400 [ 851.972523][T19511] ? __lock_acquire+0x7d10/0x7d10 [ 851.977595][T19511] ? snprintf+0xe5/0x140 [ 851.981865][T19511] should_fail_ex+0x399/0x4d0 [ 851.986559][T19511] _copy_to_user+0x2c/0x130 [ 851.991108][T19511] simple_read_from_buffer+0xe3/0x150 [ 851.996498][T19511] proc_fail_nth_read+0x1a6/0x220 [ 852.001534][T19511] ? proc_fault_inject_write+0x310/0x310 [ 852.007189][T19511] ? fsnotify_perm+0x248/0x550 [ 852.011968][T19511] ? proc_fault_inject_write+0x310/0x310 [ 852.017608][T19511] vfs_read+0x2de/0xa00 [ 852.021781][T19511] ? kernel_read+0x1e0/0x1e0 [ 852.026384][T19511] ? __fget_files+0x28/0x4b0 [ 852.030986][T19511] ? __fget_files+0x28/0x4b0 [ 852.035590][T19511] ? __fget_files+0x43d/0x4b0 [ 852.040289][T19511] ? __fdget_pos+0x2ae/0x360 [ 852.044898][T19511] ? ksys_read+0x71/0x250 [ 852.049273][T19511] ksys_read+0x14c/0x250 [ 852.053535][T19511] ? vfs_write+0xa30/0xa30 [ 852.057973][T19511] ? syscall_enter_from_user_mode+0x2a/0x80 [ 852.063968][T19511] do_syscall_64+0x4c/0xa0 [ 852.068393][T19511] ? clear_bhb_loop+0x60/0xb0 [ 852.073184][T19511] ? clear_bhb_loop+0x60/0xb0 [ 852.077964][T19511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.083871][T19511] RIP: 0033:0x7fe256b5d68e [ 852.088298][T19511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 852.107914][T19511] RSP: 002b:00007fe257ae1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 852.116364][T19511] RAX: ffffffffffffffda RBX: 00007fe257ae26c0 RCX: 00007fe256b5d68e [ 852.124359][T19511] RDX: 000000000000000f RSI: 00007fe257ae20a0 RDI: 0000000000000007 [ 852.132368][T19511] RBP: 00007fe257ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 852.140449][T19511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.148450][T19511] R13: 00007fe256e16128 R14: 00007fe256e16090 R15: 00007fffb4c48918 [ 852.156459][T19511] [ 853.050261][T19529] device syzkaller0 entered promiscuous mode [ 853.327900][ T4288] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 853.482941][T19555] netlink: 'syz.4.4618': attribute type 29 has an invalid length. [ 853.743297][T19562] FAULT_INJECTION: forcing a failure. [ 853.743297][T19562] name failslab, interval 1, probability 0, space 0, times 0 [ 853.757691][T19562] CPU: 1 PID: 19562 Comm: syz.0.4622 Not tainted syzkaller #0 [ 853.765211][T19562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 853.775303][T19562] Call Trace: [ 853.778612][T19562] [ 853.781571][T19562] dump_stack_lvl+0x188/0x24e [ 853.786288][T19562] ? show_regs_print_info+0x12/0x12 [ 853.791511][T19562] ? load_image+0x400/0x400 [ 853.796057][T19562] ? __lock_acquire+0x7d10/0x7d10 [ 853.801123][T19562] should_fail_ex+0x399/0x4d0 [ 853.805841][T19562] should_failslab+0x5/0x20 [ 853.810368][T19562] slab_pre_alloc_hook+0x59/0x310 [ 853.815414][T19562] ? rxrpc_alloc_call+0x2d4/0xbf0 [ 853.820463][T19562] __kmem_cache_alloc_node+0x4f/0x260 [ 853.825858][T19562] ? rxrpc_alloc_call+0x2d4/0xbf0 [ 853.830897][T19562] kmalloc_trace+0x26/0xe0 [ 853.835357][T19562] rxrpc_alloc_call+0x2d4/0xbf0 [ 853.840242][T19562] rxrpc_new_client_call+0xf3/0xd30 [ 853.845479][T19562] ? rxrpc_do_sendmsg+0xab9/0x10c0 [ 853.850625][T19562] ? do_raw_read_unlock+0x39/0x70 [ 853.855690][T19562] rxrpc_do_sendmsg+0xab9/0x10c0 [ 853.860669][T19562] ? rxrpc_process_local_events+0xa50/0xa50 [ 853.866611][T19562] ? rxrpc_look_up_server_security+0x530/0x530 [ 853.872799][T19562] ? __local_bh_enable_ip+0x136/0x1c0 [ 853.878229][T19562] ? rxrpc_sendmsg+0x467/0x890 [ 853.883039][T19562] ? rxrpc_getsockopt+0x150/0x150 [ 853.888096][T19562] ____sys_sendmsg+0x5be/0x970 [ 853.892988][T19562] ? __sys_sendmsg_sock+0x30/0x30 [ 853.898046][T19562] ? __import_iovec+0x315/0x500 [ 853.902937][T19562] ? import_iovec+0x6f/0xa0 [ 853.907569][T19562] ___sys_sendmsg+0x2a2/0x360 [ 853.912286][T19562] ? __sys_sendmsg+0x290/0x290 [ 853.917110][T19562] ? __lock_acquire+0x7d10/0x7d10 [ 853.922208][T19562] __se_sys_sendmsg+0x1bb/0x2a0 [ 853.927094][T19562] ? __x64_sys_sendmsg+0x80/0x80 [ 853.932061][T19562] ? lockdep_hardirqs_on+0x94/0x140 [ 853.937368][T19562] do_syscall_64+0x4c/0xa0 [ 853.941812][T19562] ? clear_bhb_loop+0x60/0xb0 [ 853.946612][T19562] ? clear_bhb_loop+0x60/0xb0 [ 853.951341][T19562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 853.957271][T19562] RIP: 0033:0x7fd6ffb9ce59 [ 853.961717][T19562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.981354][T19562] RSP: 002b:00007fd6fddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.989812][T19562] RAX: ffffffffffffffda RBX: 00007fd6ffe15fa0 RCX: 00007fd6ffb9ce59 [ 853.997815][T19562] RDX: 000000000000fc00 RSI: 0000200000000080 RDI: 0000000000000004 [ 854.005815][T19562] RBP: 00007fd6fddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 854.013821][T19562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.021825][T19562] R13: 00007fd6ffe16038 R14: 00007fd6ffe15fa0 R15: 00007ffec0eeb438 [ 854.029856][T19562] [ 856.523717][T19551] netlink: 'syz.4.4618': attribute type 15 has an invalid length. [ 856.533071][T19551] netlink: 'syz.4.4618': attribute type 7 has an invalid length. [ 856.541296][T19551] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4618'. [ 856.550743][T19555] netlink: 'syz.4.4618': attribute type 29 has an invalid length. [ 856.569105][T19565] device syzkaller0 entered promiscuous mode [ 856.581569][T19577] netlink: 'syz.1.4624': attribute type 21 has an invalid length. [ 856.713430][T19601] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4632'. [ 856.755688][T19601] netlink: zone id is out of range [ 856.764356][T19601] netlink: zone id is out of range [ 856.805506][T19601] netlink: zone id is out of range [ 856.810697][T19601] netlink: zone id is out of range [ 856.830426][T19606] netlink: 'syz.1.4634': attribute type 29 has an invalid length. [ 856.860163][T19606] netlink: 'syz.1.4634': attribute type 29 has an invalid length. [ 856.881733][T19601] netlink: zone id is out of range [ 856.883796][T19608] netlink: 'syz.1.4634': attribute type 29 has an invalid length. [ 856.901280][T19601] netlink: zone id is out of range [ 856.911575][T19606] netlink: 'syz.1.4634': attribute type 29 has an invalid length. [ 856.922640][T19601] netlink: zone id is out of range [ 856.928656][T19606] netlink: 'syz.1.4634': attribute type 29 has an invalid length. [ 856.936952][T19601] netlink: zone id is out of range [ 856.945159][T19601] netlink: zone id is out of range [ 856.960236][T19601] netlink: zone id is out of range [ 858.539414][T19657] team0 (unregistering): Port device team_slave_0 removed [ 858.592225][T19657] team0 (unregistering): Port device team_slave_1 removed [ 859.170983][T19685] netlink: 76436 bytes leftover after parsing attributes in process `syz.4.4661'. [ 859.734077][T19688] validate_nla: 7 callbacks suppressed [ 859.734094][T19688] netlink: 'syz.3.4662': attribute type 29 has an invalid length. [ 859.805851][T19688] netlink: 'syz.3.4662': attribute type 29 has an invalid length. [ 859.815056][T19688] netlink: 'syz.3.4662': attribute type 29 has an invalid length. [ 859.823797][T19688] netlink: 'syz.3.4662': attribute type 29 has an invalid length. [ 859.832467][T19688] netlink: 'syz.3.4662': attribute type 29 has an invalid length. [ 860.175008][T19707] FAULT_INJECTION: forcing a failure. [ 860.175008][T19707] name failslab, interval 1, probability 0, space 0, times 0 [ 860.260342][T19707] CPU: 1 PID: 19707 Comm: syz.1.4669 Not tainted syzkaller #0 [ 860.267886][T19707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 860.277975][T19707] Call Trace: [ 860.281287][T19707] [ 860.284256][T19707] dump_stack_lvl+0x188/0x24e [ 860.288974][T19707] ? show_regs_print_info+0x12/0x12 [ 860.294205][T19707] ? load_image+0x400/0x400 [ 860.298927][T19707] ? __might_sleep+0xd0/0xd0 [ 860.303355][T19709] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 860.303538][T19707] ? __lock_acquire+0x7d10/0x7d10 [ 860.303600][T19707] ? __kasan_kmalloc+0x8e/0xa0 [ 860.322489][T19707] should_fail_ex+0x399/0x4d0 [ 860.327212][T19707] should_failslab+0x5/0x20 [ 860.331749][T19707] slab_pre_alloc_hook+0x59/0x310 [ 860.336805][T19707] ? rxrpc_maybe_add_conn+0x2ca/0x1100 [ 860.342280][T19707] ? rxrpc_alloc_connection+0x73/0x420 [ 860.347847][T19707] __kmem_cache_alloc_node+0x4f/0x260 [ 860.353240][T19707] ? __lock_acquire+0x7d10/0x7d10 [ 860.358287][T19707] ? rxrpc_alloc_connection+0x73/0x420 [ 860.363759][T19707] kmalloc_trace+0x26/0xe0 [ 860.368198][T19707] rxrpc_alloc_connection+0x73/0x420 [ 860.373499][T19707] rxrpc_maybe_add_conn+0x30b/0x1100 [ 860.378794][T19707] ? lockdep_hardirqs_on+0x94/0x140 [ 860.384005][T19707] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 860.389916][T19707] ? _raw_spin_unlock+0x40/0x40 [ 860.394787][T19707] rxrpc_connect_call+0xd7d/0x1550 [ 860.400010][T19707] ? rxrpc_put_bundle+0xb0/0xb0 [ 860.404879][T19707] ? do_task_dead+0xd0/0xd0 [ 860.409435][T19707] ? _local_bh_enable+0xa0/0xa0 [ 860.414305][T19707] rxrpc_new_client_call+0x85f/0xd30 [ 860.419605][T19707] ? rxrpc_do_sendmsg+0xab9/0x10c0 [ 860.424753][T19707] rxrpc_do_sendmsg+0xab9/0x10c0 [ 860.429704][T19707] ? rxrpc_process_local_events+0xa50/0xa50 [ 860.435617][T19707] ? rxrpc_look_up_server_security+0x530/0x530 [ 860.441788][T19707] ? __local_bh_enable_ip+0x136/0x1c0 [ 860.447188][T19707] ? rxrpc_sendmsg+0x467/0x890 [ 860.451970][T19707] ? rxrpc_getsockopt+0x150/0x150 [ 860.457107][T19707] ____sys_sendmsg+0x5be/0x970 [ 860.461888][T19707] ? __sys_sendmsg_sock+0x30/0x30 [ 860.466923][T19707] ? __import_iovec+0x315/0x500 [ 860.471786][T19707] ? import_iovec+0x6f/0xa0 [ 860.476300][T19707] ___sys_sendmsg+0x2a2/0x360 [ 860.480991][T19707] ? __sys_sendmsg+0x290/0x290 [ 860.485776][T19707] ? __lock_acquire+0x7d10/0x7d10 [ 860.490834][T19707] __se_sys_sendmsg+0x1bb/0x2a0 [ 860.495691][T19707] ? __x64_sys_sendmsg+0x80/0x80 [ 860.500649][T19707] ? lockdep_hardirqs_on+0x94/0x140 [ 860.505859][T19707] do_syscall_64+0x4c/0xa0 [ 860.510279][T19707] ? clear_bhb_loop+0x60/0xb0 [ 860.514965][T19707] ? clear_bhb_loop+0x60/0xb0 [ 860.519655][T19707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 860.525559][T19707] RIP: 0033:0x7fe256b9ce59 [ 860.529980][T19707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.549593][T19707] RSP: 002b:00007fe257b03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.558020][T19707] RAX: ffffffffffffffda RBX: 00007fe256e15fa0 RCX: 00007fe256b9ce59 [ 860.566000][T19707] RDX: 000000000000fc00 RSI: 0000200000000080 RDI: 0000000000000004 [ 860.573975][T19707] RBP: 00007fe257b03090 R08: 0000000000000000 R09: 0000000000000000 [ 860.581951][T19707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.589926][T19707] R13: 00007fe256e16038 R14: 00007fe256e15fa0 R15: 00007fffb4c48918 [ 860.597921][T19707] [ 860.633533][T19712] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4670'. [ 860.637547][T19715] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.4671'. [ 860.935075][T19722] netlink: 'syz.2.4674': attribute type 21 has an invalid length. [ 861.008711][T19725] netlink: 'syz.1.4676': attribute type 29 has an invalid length. [ 861.035938][T19725] netlink: 'syz.1.4676': attribute type 29 has an invalid length. [ 861.053263][T19725] netlink: 'syz.1.4676': attribute type 29 has an invalid length. [ 861.074041][T19725] netlink: 'syz.1.4676': attribute type 29 has an invalid length. [ 862.197746][T19743] device syzkaller0 entered promiscuous mode [ 862.846090][ T7170] wlan1: Trigger new scan to find an IBSS to join [ 870.051652][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.058110][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 888.595777][ T4262] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P19733 1-.... } 2641 jiffies s: 103109 root: 0x2/T [ 888.630064][ T4262] rcu: blocking rcu_node structures (internal RCU debug): [ 888.645057][ T4262] Sending NMI from CPU 0 to CPUs 1: [ 888.650552][ C1] NMI backtrace for cpu 1 [ 888.650564][ C1] CPU: 1 PID: 19747 Comm: syz.0.4684 Not tainted syzkaller #0 [ 888.650581][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 888.650589][ C1] RIP: 0010:strlen+0x25/0x60 [ 888.650614][ C1] Code: da 0f 1f 40 00 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 888.650627][ C1] RSP: 0018:ffffc900001e0138 EFLAGS: 00000802 [ 888.650641][ C1] RAX: 1ffffffff151a62c RBX: ffffffff8a8d3163 RCX: dffffc0000000000 [ 888.650652][ C1] RDX: ffffffff818c312f RSI: ffffffff8cb2dde0 RDI: ffffffff8a8d3160 [ 888.650663][ C1] RBP: ffffc900001e0250 R08: ffffffff8e200c2f R09: 1ffffffff1c40185 [ 888.650673][ C1] R10: dffffc0000000000 R11: fffffbfff1c40186 R12: dffffc0000000000 [ 888.650684][ C1] R13: 1ffff9200003c034 R14: dffffc0000000000 R15: 0000000000000002 [ 888.650695][ C1] FS: 00007fd6fddf66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 888.650708][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 888.650718][ C1] CR2: 00007fd6ffbea540 CR3: 000000002807c000 CR4: 00000000003506e0 [ 888.650734][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000008d24 [ 888.650744][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 888.650753][ C1] Call Trace: [ 888.650759][ C1] [ 888.650766][ C1] perf_trace_lock+0xd1/0x390 [ 888.650788][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 888.650807][ C1] ? arch_irq_work_raise+0x82/0xd0 [ 888.650829][ C1] lock_release+0x8ad/0x920 [ 888.650850][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 888.650872][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 888.650891][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 888.650912][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 888.650932][ C1] trace_call_bpf+0x5ca/0x6b0 [ 888.650951][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 888.650973][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 888.650995][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 888.651008][ C1] ? sched_clock_cpu+0x6e/0x260 [ 888.651028][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 888.651052][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 888.651074][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 888.651094][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 888.651115][ C1] ? __irq_exit_rcu+0x147/0x230 [ 888.651129][ C1] ? irq_exit_rcu+0x20/0x20 [ 888.651145][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 888.651164][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 888.651185][ C1] trace_hardirqs_on+0x24/0x40 [ 888.651210][ C1] asm_sysvec_irq_work+0x16/0x20 [ 888.651228][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 888.651243][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 82 22 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 888.651255][ C1] RSP: 0018:ffffc900001e06a0 EFLAGS: 00000206 [ 888.651266][ C1] RAX: 4fa0007b074fe500 RBX: 1ffff9200003c0dc RCX: 4fa0007b074fe500 [ 888.651278][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1b60 [ 888.651288][ C1] RBP: ffffc900001e07a0 R08: ffffffff90afd357 R09: 1ffffffff215fa6a [ 888.651298][ C1] R10: dffffc0000000000 R11: fffffbfff215fa6b R12: 0000000000000246 [ 888.651307][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 888.651333][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 888.651349][ C1] ? nf_hook+0x390/0x390 [ 888.651369][ C1] __rcu_read_unlock+0x78/0xd0 [ 888.651385][ C1] ndisc_send_skb+0xd9d/0x14e0 [ 888.651407][ C1] ? ndisc_send_skb+0x1fa/0x14e0 [ 888.651431][ C1] ? ndisc_mc_map+0x810/0x810 [ 888.651450][ C1] ? skb_dst+0xd0/0xd0 [ 888.651476][ C1] ? ndisc_ns_create+0x48c/0x620 [ 888.651499][ C1] ndisc_solicit+0x36b/0x660 [ 888.651522][ C1] ? ndisc_cleanup+0x30/0x30 [ 888.651540][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 888.651558][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 888.651577][ C1] ? ndisc_cleanup+0x30/0x30 [ 888.651602][ C1] ? ndisc_cleanup+0x30/0x30 [ 888.651620][ C1] neigh_timer_handler+0xaaa/0x1080 [ 888.651646][ C1] call_timer_fn+0x1ac/0x670 [ 888.651660][ C1] ? neigh_release+0x80/0x80 [ 888.651677][ C1] ? call_timer_fn+0xcf/0x670 [ 888.651691][ C1] ? __run_timers+0x800/0x800 [ 888.651712][ C1] ? neigh_release+0x80/0x80 [ 888.651731][ C1] __run_timers+0x53e/0x800 [ 888.651753][ C1] ? detach_timer+0x350/0x350 [ 888.651771][ C1] ? lock_chain_count+0x20/0x20 [ 888.651795][ C1] run_timer_softirq+0x63/0xf0 [ 888.651809][ C1] handle_softirqs+0x2a1/0x930 [ 888.651828][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 888.651846][ C1] ? do_softirq+0x210/0x210 [ 888.651862][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 888.651879][ C1] __irq_exit_rcu+0x13b/0x230 [ 888.651893][ C1] ? irq_exit_rcu+0x20/0x20 [ 888.651914][ C1] irq_exit_rcu+0x5/0x20 [ 888.651926][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 888.651944][ C1] [ 888.651948][ C1] [ 888.651953][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 888.651972][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 888.651990][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3f 4e 20 f7 65 8b 05 40 c0 c9 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 888.652001][ C1] RSP: 0018:ffffc90005d37a20 EFLAGS: 00000206 [ 888.652013][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 4fa0007b074fe500 [ 888.652023][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 0000000000000001 [ 888.652032][ C1] RBP: ffffc90005d37aa8 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 888.652043][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: dffffc0000000000 [ 888.652053][ C1] R13: ffff888025dd6000 R14: ffffffff96e68b18 R15: 1ffff92000ba6f44 [ 888.652075][ C1] ? _raw_spin_unlock+0x40/0x40 [ 888.652092][ C1] ? page_ext_put+0x98/0xb0 [ 888.652114][ C1] debug_check_no_obj_freed+0x515/0x530 [ 888.652140][ C1] free_unref_page_prepare+0x2a6/0x9a0 [ 888.652165][ C1] free_unref_page+0x2e/0x3f0 [ 888.652187][ C1] __unfreeze_partials+0x1a5/0x200 [ 888.652216][ C1] put_cpu_partial+0x17c/0x250 [ 888.652232][ C1] ? put_cpu_partial+0x6e/0x250 [ 888.652250][ C1] qlist_free_all+0x76/0xe0 [ 888.652267][ C1] kasan_quarantine_reduce+0x144/0x160 [ 888.652284][ C1] __kasan_slab_alloc+0x1e/0x80 [ 888.652305][ C1] slab_post_alloc_hook+0x4b/0x480 [ 888.652320][ C1] ? slab_pre_alloc_hook+0x2e7/0x310 [ 888.652335][ C1] ? slab_pre_alloc_hook+0xb6/0x310 [ 888.652353][ C1] kmem_cache_alloc_lru+0x11a/0x2e0 [ 888.652368][ C1] ? sock_alloc_inode+0x24/0xc0 [ 888.652388][ C1] sock_alloc_inode+0x24/0xc0 [ 888.652402][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 888.652417][ C1] new_inode_pseudo+0x5f/0x1c0 [ 888.652436][ C1] __sock_create+0x129/0x940 [ 888.652458][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 888.652481][ C1] __sys_socket+0xc4/0x190 [ 888.652503][ C1] __x64_sys_socket+0x76/0x80 [ 888.652524][ C1] do_syscall_64+0x4c/0xa0 [ 888.652537][ C1] ? clear_bhb_loop+0x60/0xb0 [ 888.652555][ C1] ? clear_bhb_loop+0x60/0xb0 [ 888.652575][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.652593][ C1] RIP: 0033:0x7fd6ffb9ce59 [ 888.652605][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.652617][ C1] RSP: 002b:00007fd6fddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 888.652631][ C1] RAX: ffffffffffffffda RBX: 00007fd6ffe15fa0 RCX: 00007fd6ffb9ce59 [ 888.652641][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 888.652650][ C1] RBP: 00007fd6ffc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 888.652659][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.652668][ C1] R13: 00007fd6ffe16038 R14: 00007fd6ffe15fa0 R15: 00007ffec0eeb438 [ 888.652688][ C1]