last executing test programs: 6.23045231s ago: executing program 1 (id=2780): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9602, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x12280, 0x2, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000180), 0x43) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) 5.187592384s ago: executing program 1 (id=2788): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000090010000000000003"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)="62afbcf72be12f300800000000fbffff04cc886371faffffff6196ef1844a5a6f885ff24465925e8", 0x28}], 0x1}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r3}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000000)=r4, 0x4) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r3, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0xc0189436, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x1b, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000055a60701000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000100000550901000000000095002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r6, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000002c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) 2.504661432s ago: executing program 3 (id=2797): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 2.504011632s ago: executing program 2 (id=2798): r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x36, 0x6, 0x9, 0x3, 0x0, 0x7fffffff, 0x20, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x8001, 0x7, 0x8, 0x4, 0x7fffffff, 0xfffe, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000b05d25a806c8c6f94f90224fc60100002000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000440)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0) 2.503503942s ago: executing program 1 (id=2799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@union={0x3, 0x2, 0x0, 0x5, 0x1, 0xfee9, [{0x0, 0x5}, {0xf, 0x5, 0x1}]}]}, {0x0, [0x61, 0x61, 0x61]}}, &(0x7f0000000280)=""/216, 0x41, 0xd8, 0x8, 0xdd6}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a070000"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r0}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x42, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003f00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.386052962s ago: executing program 3 (id=2800): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) r3 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r4, 0x107, 0x17, 0x0, 0xb) r5 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x20000000be}, 0x0, 0x0, 0x4082c5, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)=0x7) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB='/\x00\x00\x008 '], 0x20) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000200)=0x3) 2.246657315s ago: executing program 2 (id=2802): r0 = syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000240), &(0x7f0000000380)=r5}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)='\x00'/14, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r2, 0x0, 0xfdef) write$cgroup_pid(r2, &(0x7f0000000000)=r0, 0x12) 2.236771387s ago: executing program 1 (id=2803): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x3, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x0, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0x9, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x403, 0x6, 0x0, 0x34d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000200)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) recvmsg$kcm(r3, 0x0, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000806d0500000800000000000010", @ANYBLOB="fcffffff000000000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000"], 0x0, 0x28}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.172458337s ago: executing program 3 (id=2804): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'wg1\x00', @broadcast}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x88b) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e400002000100000000000000ff0200000000000000000001ffaaaaaa"], 0xfdef) close(r1) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0xfdef) 2.016176973s ago: executing program 2 (id=2806): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/194, 0xc2}], 0x1}, 0x40000101) 2.015018643s ago: executing program 1 (id=2807): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000090010000000000003"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)="62afbcf72be12f300800000000fbffff04cc886371faffffff6196ef1844a5a6f885ff24465925e8", 0x28}], 0x1}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r3}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000000)=r4, 0x4) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r3, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0xc0189436, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x1b, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000055a60701000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000100000550901000000000095002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r6, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000002c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) 1.943031586s ago: executing program 3 (id=2808): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) 1.826092685s ago: executing program 3 (id=2810): r0 = getpid() r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x24414, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x7ff, 0x80000000}, 0x560, 0xf}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x4}, 0x80, 0x0}, 0x4000081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x9, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x8, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x1, 0x0, 0x0, 0x0, 0x480000000000000b, 0x14010, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x4, 0x0, 0x17, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) 1.654595204s ago: executing program 0 (id=2811): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42840, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() gettid() sendmsg$unix(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38, 0x4040040}, 0x40c0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000240), &(0x7f00000002c0)='%pK \x00'}, 0x20) syz_clone(0x10021400, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000580)="683c619ac302b552ef5f98f07099fe6da630f49f36c02e2d5aab4747cafcabc1d3b5056a1766e1dd1c23f030c61b7870ffc07b5c511b935c5c59ef64c25a31b7dc22400e547f999a2d8870a4aba0add339403889beb26d6a7953c2454e7560fb6ef2599127") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r8 = gettid() write$cgroup_pid(r7, &(0x7f00000001c0)=r8, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000cc000000cc000000070000000200000000000007000000000400000006000004ff0100000300000002000000050000000500000005000000fcffffff0900000005000000060000000200000000000000050000000700000004000000000800000600000000000000000800000d00000000000008000000000b000000060000130a0000000b000000020000001c010000040000003f010000020000000900000003000000ff03000001000000598cab4f000000000b0000007f0000005c9700000600000000040000df0c00000b0000000000000c02007f0000002e5f5f"], 0x0, 0xeb, 0x0, 0x1, 0x7}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.287550615s ago: executing program 0 (id=2812): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, 0x0, 0x40002120) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1400"}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.005648172s ago: executing program 2 (id=2813): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x10, &(0x7f0000001880)=ANY=[@ANYBLOB="180000000400000000000000ada0d93520cd6355c3dd96a2b74489010300000018110000e3371036903468537457bb522c2e5b24944df3be142fcde42f3d20cb3566a7907532501bc2d0f3c54f2b9940bafb5a70bcee00c8e389d7e0618a85f2a38826e00bf59283e3d468f0234cff41a5b01b91a39571ec62bc7e6ffcc02d7f0c9c", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008d48060000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000200)={r1}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='io.pressure\x00', 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x10001, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xa}, 0x8000, 0x0, 0x80000, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000014006b04000000d86e6c1d000a117ea6e070d6060003910000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f61400c9f4d49346d88037e786a6d0bdd7000000", 0x5b}, {&(0x7f0000000280)="e1", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000740)={r11}) recvmsg$unix(r8, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001780)=""/242, 0xf2}, {&(0x7f0000000780)=""/4037, 0xfc5}, {&(0x7f0000002a00)=""/4125, 0x101d}, {&(0x7f00000051c0)=""/182, 0xb6}, {&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f00000052c0)=""/81, 0x51}, {&(0x7f00000005c0)=""/239, 0xef}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/66, 0xffffffffffffff53}, {&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000300)=""/33, 0x21}], 0xb}, 0x0) 963.248009ms ago: executing program 0 (id=2814): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) r2 = socket$kcm(0x2, 0x200000000000004, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffff8f}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = gettid() r4 = perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x11, 0x81, 0x0, 0x0, 0x5, 0x80800, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000200), 0x2}, 0x2362, 0xd, 0x1, 0x8, 0x1, 0x2, 0xffff, 0x0, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x9) r5 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9a, 0x9, 0x6, 0x5, 0x0, 0x9, 0x10004, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x10, 0xfffffffffffffff9, 0x3dd, 0x7, 0x3, 0x6, 0x3, 0x0, 0x8, 0x0, 0x8}, r3, 0xf, r4, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x216}, 0x114905, 0x8, 0x0, 0x1, 0x3, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r6, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x32, 0x7, 0x7, 0x7, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x80002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x19, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 929.013495ms ago: executing program 1 (id=2815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000000c0)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000c80)=""/218, 0xda}, {&(0x7f00000038c0)=""/4111, 0x100f}, {&(0x7f00000028c0)=""/4019, 0xfb3}, {&(0x7f0000000380)=""/123, 0x7b}], 0x4}, 0x120) 321.179926ms ago: executing program 0 (id=2816): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x3, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x0, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0x9, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x403, 0x6, 0x0, 0x34d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000200)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) recvmsg$kcm(r3, 0x0, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000806d0500000800000000000010", @ANYBLOB="fcffffff000000000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000"], 0x0, 0x28}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 319.327907ms ago: executing program 3 (id=2817): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}, 0x4040010) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x810) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0xe, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335dd, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000018c0)={r4}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000009000000080000000200000000010000", @ANYRES32, @ANYBLOB="00000000000000306eba2f36c3ac8bdce704055d372f1dd02e14a60106312600000cda625ecb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f70000000000010000000000000000004500000000000000"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f3, &(0x7f0000000080)) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x40186) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000008000000000000000000000000000e884dab120caef2466797a9110000a0f6a9361e7489cf1115312b675eec4f783970484ab7d6163c3e5075da69d30a99cb2071d22f1b88ab8c9893ced2bc89994d0fc5bb58926851a84f93654be537a63c8e993cbbc6a17e550a76d0f872711058cb8b0662a3b018b0d2ca9b1561139a37e736e31244ae9661a171c076294ed3e36abe2df30bf80ad3ba45b50cc55a833f049454329c370017ad796e53fce7ab8903785ac9fca61e6e1edac036fc332240a45746b09627627e54c57318becbf85ac0d537"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec000000000000", 0x0, 0x1f4d, 0x0, 0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 185.715239ms ago: executing program 2 (id=2818): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) 156.555944ms ago: executing program 0 (id=2819): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x801) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r4}) 30.646115ms ago: executing program 0 (id=2820): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r2}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4020940d, &(0x7f00000005c0)=0x81000000000004) openat$cgroup_devices(r4, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, r0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = syz_clone(0x800000, &(0x7f00000001c0)="ec25887fd67be8ddfc6c03e8da30554a753f845e51ea3baa2a31b107dbc536e73923b97a0ea5eb9ff6eeada3f1b9225e7768c3de8eaa4604bb9505ccb796f3ff9bd1e12c60016fbf01cfea478b500d2238d006c826fd5bbdd7b8900f897755144fd08f7789c47162782c1bd6069f58c3a930f03d67181ae9d50c70477756328adc44984966c06cfff685e14d46b52d0fdebb89a8e539f8d8", 0x98, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="c3582690d272cf4f9082dd024fbf9bbf1cb36876d65a3c7db49370eb0c1593f986ea77f6f936c46adcb29ebe74ae781cd4f3ebafd1f2aea7fc95e9f9a3") perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1, 0xc, 0x8, 0x7, 0x0, 0x8, 0x1400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xff, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0x200, 0x4, 0x400, 0x4, 0x1, 0x7, 0x2, 0x0, 0x80000001, 0x0, 0xffffffffffffffd1}, r7, 0x6, r5, 0x10) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91824fc60100005000a000200053582c137153e37000c0680050003000300", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 2 (id=2821): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/194, 0xc2}], 0x1}, 0x40000101) kernel console output (not intermixed with test programs): 0007f9c6a39c819 [ 695.880991][T12750] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 000000000000000f [ 695.888998][T12750] RBP: 00007f9c6b1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 695.897091][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.905098][T12750] R13: 00007f9c6a616038 R14: 00007f9c6a615fa0 R15: 00007ffde85af7f8 [ 695.913115][T12750] [ 695.936056][T12753] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1980'. [ 695.950106][T12753] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.1980'. [ 695.959994][T12753] tc_dump_action: action bad kind [ 695.981699][T12753] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1980'. [ 696.367014][T11052] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 696.454236][T12772] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1987'. [ 696.524618][T12772] netlink: 169404 bytes leftover after parsing attributes in process `syz.0.1987'. [ 696.546254][T12772] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 696.581409][T12779] netlink: 'syz.1.1990': attribute type 10 has an invalid length. [ 696.593441][T12779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1990'. [ 696.606445][T12779] ipvlan1: entered promiscuous mode [ 696.641261][T12779] ipvlan1: entered allmulticast mode [ 696.671341][T12779] veth0_vlan: entered allmulticast mode [ 696.709634][T12779] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 697.192675][T12794] netlink: 'syz.0.1995': attribute type 3 has an invalid length. [ 697.208007][T12794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1995'. [ 697.628585][T12802] netlink: 'syz.3.1998': attribute type 9 has an invalid length. [ 697.671680][T12800] FAULT_INJECTION: forcing a failure. [ 697.671680][T12800] name failslab, interval 1, probability 0, space 0, times 0 [ 697.696702][T12800] CPU: 1 PID: 12800 Comm: syz.1.1999 Not tainted syzkaller #0 [ 697.704479][T12800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 697.714810][T12800] Call Trace: [ 697.718288][T12800] [ 697.721457][T12800] dump_stack_lvl+0x18c/0x250 [ 697.726293][T12800] ? show_regs_print_info+0x20/0x20 [ 697.731566][T12800] ? load_image+0x420/0x420 [ 697.736137][T12800] ? __might_sleep+0xe0/0xe0 [ 697.740775][T12800] ? __lock_acquire+0x7d40/0x7d40 [ 697.745857][T12800] should_fail_ex+0x39d/0x4d0 [ 697.750760][T12800] should_failslab+0x9/0x20 [ 697.755311][T12800] slab_pre_alloc_hook+0x59/0x310 [ 697.760469][T12800] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 697.766317][T12800] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 697.772076][T12800] __kmem_cache_alloc_node+0x53/0x250 [ 697.777588][T12800] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 697.783439][T12800] __kmalloc+0xa4/0x230 [ 697.787711][T12800] tomoyo_realpath_from_path+0xe3/0x5d0 [ 697.793414][T12800] tomoyo_path_number_perm+0x248/0x620 [ 697.799103][T12800] ? tomoyo_path_number_perm+0x217/0x620 [ 697.804868][T12800] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 697.810372][T12800] ? ktime_get+0x7f/0x280 [ 697.814781][T12800] ? __fget_files+0x28/0x4b0 [ 697.819421][T12800] ? __fget_files+0x28/0x4b0 [ 697.824073][T12800] security_file_ioctl+0x70/0xa0 [ 697.829349][T12800] __se_sys_ioctl+0x48/0x170 [ 697.833996][T12800] do_syscall_64+0x55/0xa0 [ 697.838462][T12800] ? clear_bhb_loop+0x40/0x90 [ 697.843201][T12800] ? clear_bhb_loop+0x40/0x90 [ 697.847930][T12800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.853864][T12800] RIP: 0033:0x7fa332f9c819 [ 697.858318][T12800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.878054][T12800] RSP: 002b:00007fa333dd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.886606][T12800] RAX: ffffffffffffffda RBX: 00007fa333215fa0 RCX: 00007fa332f9c819 [ 697.894728][T12800] RDX: 000000110e22fff2 RSI: 0000000040086602 RDI: 000000000000000a [ 697.902736][T12800] RBP: 00007fa333dd9090 R08: 0000000000000000 R09: 0000000000000000 [ 697.910850][T12800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.919047][T12800] R13: 00007fa333216038 R14: 00007fa333215fa0 R15: 00007ffeeaaf7898 [ 697.927084][T12800] [ 697.965419][T12800] ERROR: Out of memory at tomoyo_realpath_from_path. [ 698.421333][T12806] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 698.636750][T11052] Bluetooth: Frame is too long (len 149, expected len 4) [ 699.139340][T12830] netlink: 'syz.2.2008': attribute type 21 has an invalid length. [ 699.282655][T12832] netlink: 'syz.2.2008': attribute type 10 has an invalid length. [ 700.123714][T12854] netlink: 'syz.1.2013': attribute type 10 has an invalid length. [ 700.514388][T12858] __nla_validate_parse: 5 callbacks suppressed [ 700.514412][T12858] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2014'. [ 700.551914][T12865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2015'. [ 700.577319][T12858] netlink: 169404 bytes leftover after parsing attributes in process `syz.2.2014'. [ 700.587965][T12858] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 700.767609][T11052] Bluetooth: Frame is too long (len 149, expected len 4) [ 701.196372][T12876] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2021'. [ 701.656454][T12897] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2027'. [ 702.019210][T12905] FAULT_INJECTION: forcing a failure. [ 702.019210][T12905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.091539][T12905] CPU: 0 PID: 12905 Comm: syz.3.2030 Not tainted syzkaller #0 [ 702.099214][T12905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 702.109356][T12905] Call Trace: [ 702.112686][T12905] [ 702.115668][T12905] dump_stack_lvl+0x18c/0x250 [ 702.120513][T12905] ? show_regs_print_info+0x20/0x20 [ 702.125787][T12905] ? load_image+0x420/0x420 [ 702.130359][T12905] ? __might_fault+0xaa/0x120 [ 702.135192][T12905] ? __lock_acquire+0x7d40/0x7d40 [ 702.140397][T12905] should_fail_ex+0x39d/0x4d0 [ 702.145260][T12905] _copy_from_user+0x2f/0xe0 [ 702.149974][T12905] ___sys_sendmsg+0x1c7/0x360 [ 702.154715][T12905] ? __sys_sendmsg+0x2a0/0x2a0 [ 702.159540][T12905] ? trace_call_bpf+0xc3/0x6c0 [ 702.165132][T12905] __se_sys_sendmsg+0x1c2/0x2b0 [ 702.170163][T12905] ? __x64_sys_sendmsg+0x80/0x80 [ 702.175184][T12905] ? lockdep_hardirqs_on+0x98/0x150 [ 702.180447][T12905] do_syscall_64+0x55/0xa0 [ 702.185005][T12905] ? clear_bhb_loop+0x40/0x90 [ 702.189870][T12905] ? clear_bhb_loop+0x40/0x90 [ 702.194784][T12905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 702.200727][T12905] RIP: 0033:0x7f9c6a39c819 [ 702.205308][T12905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.225051][T12905] RSP: 002b:00007f9c6b1b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.233697][T12905] RAX: ffffffffffffffda RBX: 00007f9c6a615fa0 RCX: 00007f9c6a39c819 [ 702.241918][T12905] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 702.249937][T12905] RBP: 00007f9c6b1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 702.258159][T12905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.266501][T12905] R13: 00007f9c6a616038 R14: 00007f9c6a615fa0 R15: 00007ffde85af7f8 [ 702.274536][T12905] [ 702.496422][T12903] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2029'. [ 702.524923][T12909] netlink: 169404 bytes leftover after parsing attributes in process `syz.0.2029'. [ 702.555664][T12909] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 703.117250][T11052] Bluetooth: Frame is too long (len 149, expected len 4) [ 703.326985][T12932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2037'. [ 704.224188][T12927] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2034'. [ 704.395189][T12927] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 704.425978][T12927] CPU: 0 PID: 12927 Comm: syz.3.2034 Not tainted syzkaller #0 [ 704.433558][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 704.443686][T12927] Call Trace: [ 704.447108][T12927] [ 704.450089][T12927] dump_stack_lvl+0x18c/0x250 [ 704.454828][T12927] ? show_regs_print_info+0x20/0x20 [ 704.460080][T12927] ? load_image+0x420/0x420 [ 704.464680][T12927] sysfs_warn_dup+0x8e/0xa0 [ 704.469323][T12927] sysfs_do_create_link_sd+0xc0/0x110 [ 704.474748][T12927] device_add_class_symlinks+0x1cf/0x240 [ 704.480521][T12927] device_add+0x507/0xc20 [ 704.484928][T12927] wiphy_register+0x1dad/0x2ae0 [ 704.489930][T12927] ? cfg80211_event_work+0x40/0x40 [ 704.495110][T12927] ? minstrel_ht_alloc+0x88a/0x990 [ 704.500311][T12927] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 704.506559][T12927] ieee80211_register_hw+0x3464/0x4250 [ 704.512574][T12927] ? ieee80211_tasklet_handler+0x20/0x20 [ 704.518297][T12927] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 704.524378][T12927] ? __debug_object_init+0xec/0x450 [ 704.529673][T12927] ? __asan_memset+0x22/0x40 [ 704.534364][T12927] ? __hrtimer_init+0x186/0x270 [ 704.539303][T12927] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 704.545095][T12927] ? mac80211_hwsim_free+0x220/0x220 [ 704.550433][T12927] ? rcu_is_watching+0x15/0xb0 [ 704.555413][T12927] ? kstrndup+0xbd/0x140 [ 704.559731][T12927] hwsim_new_radio_nl+0xdc9/0x1a90 [ 704.564902][T12927] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 704.570936][T12927] ? lock_chain_count+0x20/0x20 [ 704.575852][T12927] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 704.582329][T12927] ? __nla_parse+0x40/0x50 [ 704.586831][T12927] ? __nla_parse+0x40/0x50 [ 704.591414][T12927] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 704.597805][T12927] genl_family_rcv_msg_doit+0x211/0x310 [ 704.603409][T12927] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 704.609409][T12927] ? lockdep_hardirqs_on+0x98/0x150 [ 704.614692][T12927] ? genl_rcv_msg+0x5f6/0x7a0 [ 704.619427][T12927] genl_rcv_msg+0x619/0x7a0 [ 704.624064][T12927] ? genl_bind+0x360/0x360 [ 704.628601][T12927] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 704.635009][T12927] netlink_rcv_skb+0x241/0x4d0 [ 704.639835][T12927] ? genl_bind+0x360/0x360 [ 704.644292][T12927] ? netlink_ack+0x1180/0x1180 [ 704.649119][T12927] ? __lock_acquire+0x7d40/0x7d40 [ 704.654455][T12927] ? down_read+0x1ac/0x2e0 [ 704.659001][T12927] genl_rcv+0x28/0x40 [ 704.663021][T12927] netlink_unicast+0x751/0x8d0 [ 704.667890][T12927] netlink_sendmsg+0x8d0/0xbf0 [ 704.672713][T12927] ? netlink_getsockopt+0x590/0x590 [ 704.677968][T12927] ? aa_sock_msg_perm+0x94/0x150 [ 704.682939][T12927] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 704.688259][T12927] ? security_socket_sendmsg+0x80/0xa0 [ 704.693785][T12927] ? netlink_getsockopt+0x590/0x590 [ 704.699686][T12927] ____sys_sendmsg+0x5ba/0x960 [ 704.704626][T12927] ? __asan_memset+0x22/0x40 [ 704.709272][T12927] ? __sys_sendmsg_sock+0x30/0x30 [ 704.714329][T12927] ? __import_iovec+0x5f2/0x850 [ 704.719256][T12927] ? import_iovec+0x73/0xa0 [ 704.723813][T12927] ___sys_sendmsg+0x2a6/0x360 [ 704.728648][T12927] ? __sys_sendmsg+0x2a0/0x2a0 [ 704.733508][T12927] __se_sys_sendmsg+0x1c2/0x2b0 [ 704.738394][T12927] ? __x64_sys_sendmsg+0x80/0x80 [ 704.743387][T12927] ? lockdep_hardirqs_on+0x98/0x150 [ 704.748624][T12927] do_syscall_64+0x55/0xa0 [ 704.753158][T12927] ? clear_bhb_loop+0x40/0x90 [ 704.757882][T12927] ? clear_bhb_loop+0x40/0x90 [ 704.762595][T12927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.768639][T12927] RIP: 0033:0x7f9c6a39c819 [ 704.773148][T12927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.792810][T12927] RSP: 002b:00007f9c6b196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.801396][T12927] RAX: ffffffffffffffda RBX: 00007f9c6a616090 RCX: 00007f9c6a39c819 [ 704.809412][T12927] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 704.817893][T12927] RBP: 00007f9c6a432c91 R08: 0000000000000000 R09: 0000000000000000 [ 704.825932][T12927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.833959][T12927] R13: 00007f9c6a616128 R14: 00007f9c6a616090 R15: 00007ffde85af7f8 [ 704.842020][T12927] [ 704.912924][T12944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.083319][T12949] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2044'. [ 705.122986][T12949] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 705.448515][T11052] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 705.624359][T12970] netlink: 'syz.0.2053': attribute type 39 has an invalid length. [ 706.237551][T12977] netlink: 'syz.3.2055': attribute type 39 has an invalid length. [ 706.403719][T12985] __nla_validate_parse: 2 callbacks suppressed [ 706.403739][T12985] netlink: 169404 bytes leftover after parsing attributes in process `syz.2.2057'. [ 706.427246][T12985] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 706.561566][T12987] netlink: 'syz.1.2058': attribute type 1 has an invalid length. [ 706.574078][T12987] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2058'. [ 706.612532][T12987] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2058'. [ 706.695142][T12984] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2057'. [ 707.172758][T12993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2060'. [ 707.394154][T11052] Bluetooth: Frame is too long (len 149, expected len 4) [ 707.565621][T13003] netlink: 'syz.0.2064': attribute type 21 has an invalid length. [ 707.622086][T13003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2064'. [ 707.836897][T13004] netlink: 'syz.0.2064': attribute type 10 has an invalid length. [ 708.693857][T13026] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2071'. [ 708.712479][T13024] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2070'. [ 708.987269][T11052] Bluetooth: Frame is too long (len 149, expected len 4) [ 709.047851][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 709.073949][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2076'. [ 709.143148][T13037] bridge_slave_0: entered allmulticast mode [ 709.370938][T13044] netlink: 'syz.2.2079': attribute type 21 has an invalid length. [ 709.468639][T13047] netlink: 'syz.3.2078': attribute type 21 has an invalid length. [ 709.589272][T13055] netlink: 'syz.3.2078': attribute type 10 has an invalid length. [ 710.123410][T13067] netlink: 'syz.2.2083': attribute type 10 has an invalid length. [ 710.443393][T13079] FAULT_INJECTION: forcing a failure. [ 710.443393][T13079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.481956][T13079] CPU: 1 PID: 13079 Comm: syz.0.2089 Not tainted syzkaller #0 [ 710.489769][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 710.499905][T13079] Call Trace: [ 710.503290][T13079] [ 710.506305][T13079] dump_stack_lvl+0x18c/0x250 [ 710.511124][T13079] ? show_regs_print_info+0x20/0x20 [ 710.516515][T13079] ? load_image+0x420/0x420 [ 710.521283][T13079] ? __lock_acquire+0x7d40/0x7d40 [ 710.526652][T13079] ? snprintf+0xe9/0x140 [ 710.530979][T13079] should_fail_ex+0x39d/0x4d0 [ 710.535761][T13079] _copy_to_user+0x2f/0xa0 [ 710.540277][T13079] simple_read_from_buffer+0xe7/0x150 [ 710.545929][T13079] proc_fail_nth_read+0x1e8/0x260 [ 710.551313][T13079] ? proc_fault_inject_write+0x360/0x360 [ 710.557168][T13079] ? fsnotify_perm+0x271/0x5e0 [ 710.562229][T13079] ? proc_fault_inject_write+0x360/0x360 [ 710.568182][T13079] vfs_read+0x28b/0x970 [ 710.572719][T13079] ? kernel_read+0x1e0/0x1e0 [ 710.577567][T13079] ? __fget_files+0x28/0x4b0 [ 710.582325][T13079] ? __fget_files+0x28/0x4b0 [ 710.587108][T13079] ? __fget_files+0x43d/0x4b0 [ 710.592154][T13079] ? __fdget_pos+0x2a3/0x330 [ 710.596888][T13079] ? ksys_read+0x75/0x260 [ 710.601326][T13079] ksys_read+0x150/0x260 [ 710.605767][T13079] ? vfs_write+0x990/0x990 [ 710.610440][T13079] ? lockdep_hardirqs_on+0x98/0x150 [ 710.615999][T13079] do_syscall_64+0x55/0xa0 [ 710.620595][T13079] ? clear_bhb_loop+0x40/0x90 [ 710.625442][T13079] ? clear_bhb_loop+0x40/0x90 [ 710.630231][T13079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.636357][T13079] RIP: 0033:0x7f2753b5d04e [ 710.640837][T13079] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 710.660581][T13079] RSP: 002b:00007f2754adbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 710.669086][T13079] RAX: ffffffffffffffda RBX: 00007f2754adc6c0 RCX: 00007f2753b5d04e [ 710.677205][T13079] RDX: 000000000000000f RSI: 00007f2754adc0a0 RDI: 0000000000000004 [ 710.685347][T13079] RBP: 00007f2754adc090 R08: 0000000000000000 R09: 0000000000000000 [ 710.693437][T13079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 710.701485][T13079] R13: 00007f2753e16038 R14: 00007f2753e15fa0 R15: 00007ffc6ab57668 [ 710.709559][T13079] [ 711.435269][T13085] netlink: 'syz.0.2091': attribute type 10 has an invalid length. [ 712.297993][T13095] FAULT_INJECTION: forcing a failure. [ 712.297993][T13095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.328680][T13095] CPU: 0 PID: 13095 Comm: syz.3.2094 Not tainted syzkaller #0 [ 712.336355][T13095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 712.346515][T13095] Call Trace: [ 712.349855][T13095] [ 712.352833][T13095] dump_stack_lvl+0x18c/0x250 [ 712.357585][T13095] ? show_regs_print_info+0x20/0x20 [ 712.362851][T13095] ? load_image+0x420/0x420 [ 712.367427][T13095] ? __might_fault+0xaa/0x120 [ 712.372177][T13095] ? __lock_acquire+0x7d40/0x7d40 [ 712.377356][T13095] should_fail_ex+0x39d/0x4d0 [ 712.382197][T13095] _copy_to_user+0x2f/0xa0 [ 712.386850][T13095] bpf_test_finish+0x19f/0x650 [ 712.391694][T13095] ? convert___skb_to_skb+0x590/0x590 [ 712.397134][T13095] ? convert_skb_to___skb+0x420/0x420 [ 712.402596][T13095] ? slab_build_skb+0x25f/0x3f0 [ 712.407512][T13095] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 712.412954][T13095] ? cpu_online+0x60/0x60 [ 712.417431][T13095] bpf_prog_test_run+0x321/0x390 [ 712.422529][T13095] __sys_bpf+0x49d/0x890 [ 712.426834][T13095] ? bpf_link_show_fdinfo+0x390/0x390 [ 712.432325][T13095] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 712.438567][T13095] __x64_sys_bpf+0x7c/0x90 [ 712.443053][T13095] do_syscall_64+0x55/0xa0 [ 712.447523][T13095] ? clear_bhb_loop+0x40/0x90 [ 712.452238][T13095] ? clear_bhb_loop+0x40/0x90 [ 712.457043][T13095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.462971][T13095] RIP: 0033:0x7f9c6a39c819 [ 712.467440][T13095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.487519][T13095] RSP: 002b:00007f9c6b1b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 712.495969][T13095] RAX: ffffffffffffffda RBX: 00007f9c6a615fa0 RCX: 00007f9c6a39c819 [ 712.504065][T13095] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 712.512171][T13095] RBP: 00007f9c6b1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 712.520273][T13095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.528537][T13095] R13: 00007f9c6a616038 R14: 00007f9c6a615fa0 R15: 00007ffde85af7f8 [ 712.537178][T13095] [ 714.032401][T13136] __nla_validate_parse: 13 callbacks suppressed [ 714.032427][T13136] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2104'. [ 714.408190][T13143] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2113'. [ 715.299597][T11052] Bluetooth: Frame is too long (len 149, expected len 4) [ 715.702858][T13172] syzkaller0: entered allmulticast mode [ 716.524559][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2116'. [ 716.897096][T13181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 717.054361][T13187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.246741][T13187] netlink: 'syz.2.2120': attribute type 1 has an invalid length. [ 717.287161][T13187] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2120'. [ 718.106875][T11052] Bluetooth: Frame is too long (len 149, expected len 4) [ 718.390877][T13204] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2127'. [ 718.569580][T13209] netlink: 'syz.3.2128': attribute type 4 has an invalid length. [ 718.901280][T13213] FAULT_INJECTION: forcing a failure. [ 718.901280][T13213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.950097][T13213] CPU: 1 PID: 13213 Comm: syz.1.2130 Not tainted syzkaller #0 [ 718.957781][T13213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 718.968026][T13213] Call Trace: [ 718.971378][T13213] [ 718.974392][T13213] dump_stack_lvl+0x18c/0x250 [ 718.979289][T13213] ? show_regs_print_info+0x20/0x20 [ 718.984613][T13213] ? load_image+0x420/0x420 [ 718.989249][T13213] ? __might_fault+0xaa/0x120 [ 718.994104][T13213] ? __lock_acquire+0x7d40/0x7d40 [ 718.999327][T13213] should_fail_ex+0x39d/0x4d0 [ 719.004152][T13213] _copy_from_iter+0x1d9/0x12e0 [ 719.009206][T13213] ? __virt_addr_valid+0x18c/0x540 [ 719.014425][T13213] ? __lock_acquire+0x7d40/0x7d40 [ 719.019570][T13213] ? copyout_mc+0x70/0x70 [ 719.024095][T13213] ? __virt_addr_valid+0x18c/0x540 [ 719.029308][T13213] ? __virt_addr_valid+0x18c/0x540 [ 719.034659][T13213] ? __virt_addr_valid+0x469/0x540 [ 719.039898][T13213] ? __check_object_size+0x506/0xa20 [ 719.045422][T13213] rxrpc_send_data+0xd04/0x2950 [ 719.050499][T13213] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 719.056538][T13213] ? rxrpc_do_sendmsg+0x1280/0x1280 [ 719.061880][T13213] ? do_task_dead+0xd0/0xd0 [ 719.066554][T13213] rxrpc_do_sendmsg+0x108a/0x1280 [ 719.071776][T13213] ? rxrpc_propose_abort+0x200/0x200 [ 719.077399][T13213] ? rxrpc_sendmsg+0x391/0x5b0 [ 719.082461][T13213] ? rxrpc_getsockopt+0x150/0x150 [ 719.087583][T13213] ____sys_sendmsg+0x5ba/0x960 [ 719.092470][T13213] ? __lock_acquire+0x7d40/0x7d40 [ 719.098008][T13213] ? __sys_sendmsg_sock+0x30/0x30 [ 719.103690][T13213] ? __import_iovec+0x5f2/0x850 [ 719.108694][T13213] ? import_iovec+0x73/0xa0 [ 719.113311][T13213] ___sys_sendmsg+0x2a6/0x360 [ 719.118124][T13213] ? __sys_sendmsg+0x2a0/0x2a0 [ 719.123104][T13213] ? __lock_acquire+0x7d40/0x7d40 [ 719.128323][T13213] __se_sys_sendmsg+0x1c2/0x2b0 [ 719.133371][T13213] ? __x64_sys_sendmsg+0x80/0x80 [ 719.138466][T13213] ? lockdep_hardirqs_on+0x98/0x150 [ 719.143789][T13213] do_syscall_64+0x55/0xa0 [ 719.148381][T13213] ? clear_bhb_loop+0x40/0x90 [ 719.153230][T13213] ? clear_bhb_loop+0x40/0x90 [ 719.158007][T13213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.164265][T13213] RIP: 0033:0x7fa332f9c819 [ 719.168853][T13213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.188828][T13213] RSP: 002b:00007fa333dd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.197355][T13213] RAX: ffffffffffffffda RBX: 00007fa333215fa0 RCX: 00007fa332f9c819 [ 719.205409][T13213] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000004 [ 719.213734][T13213] RBP: 00007fa333dd9090 R08: 0000000000000000 R09: 0000000000000000 [ 719.221896][T13213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 719.230126][T13213] R13: 00007fa333216038 R14: 00007fa333215fa0 R15: 00007ffeeaaf7898 [ 719.238280][T13213] [ 719.861953][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'. [ 719.886890][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 719.896416][T13226] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2134'. [ 719.913121][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 719.945573][T13226] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2134'. [ 720.135656][T13233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2136'. [ 720.359325][T13235] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2137'. [ 721.379505][T13254] FAULT_INJECTION: forcing a failure. [ 721.379505][T13254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.431241][T13254] CPU: 1 PID: 13254 Comm: syz.1.2144 Not tainted syzkaller #0 [ 721.439013][T13254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 721.449250][T13254] Call Trace: [ 721.452608][T13254] [ 721.455620][T13254] dump_stack_lvl+0x18c/0x250 [ 721.460417][T13254] ? show_regs_print_info+0x20/0x20 [ 721.466007][T13254] ? load_image+0x420/0x420 [ 721.470624][T13254] ? __might_fault+0xaa/0x120 [ 721.475406][T13254] ? __lock_acquire+0x7d40/0x7d40 [ 721.480552][T13254] should_fail_ex+0x39d/0x4d0 [ 721.485368][T13254] _copy_to_user+0x2f/0xa0 [ 721.489906][T13254] bpf_obj_get_info_by_fd+0x23de/0x3080 [ 721.495800][T13254] ? bpf_map_get_fd_by_id+0x310/0x310 [ 721.501304][T13254] ? perf_trace_lock+0x304/0x3b0 [ 721.506372][T13254] ? trace_event_raw_event_lock+0x250/0x250 [ 721.512647][T13254] ? file_end_write+0x159/0x250 [ 721.517798][T13254] ? __might_fault+0xaa/0x120 [ 721.522678][T13254] ? __might_fault+0xc6/0x120 [ 721.527470][T13254] ? __might_fault+0xaa/0x120 [ 721.532535][T13254] ? bpf_lsm_bpf+0x9/0x10 [ 721.536979][T13254] ? security_bpf+0x7e/0xa0 [ 721.541905][T13254] __sys_bpf+0x7eb/0x890 [ 721.546451][T13254] ? bpf_link_show_fdinfo+0x390/0x390 [ 721.552089][T13254] ? lock_chain_count+0x20/0x20 [ 721.557255][T13254] __x64_sys_bpf+0x7c/0x90 [ 721.561861][T13254] do_syscall_64+0x55/0xa0 [ 721.566471][T13254] ? clear_bhb_loop+0x40/0x90 [ 721.571428][T13254] ? clear_bhb_loop+0x40/0x90 [ 721.576311][T13254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 721.582493][T13254] RIP: 0033:0x7fa332f9c819 [ 721.587007][T13254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.606910][T13254] RSP: 002b:00007fa333dd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 721.615530][T13254] RAX: ffffffffffffffda RBX: 00007fa333215fa0 RCX: 00007fa332f9c819 [ 721.623691][T13254] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 000000000000000f [ 721.631855][T13254] RBP: 00007fa333dd9090 R08: 0000000000000000 R09: 0000000000000000 [ 721.640400][T13254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.648658][T13254] R13: 00007fa333216038 R14: 00007fa333215fa0 R15: 00007ffeeaaf7898 [ 721.656879][T13254] [ 722.019942][T13257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2145'. [ 722.191124][T13259] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2146'. [ 722.241113][T13259] netlink: 169404 bytes leftover after parsing attributes in process `syz.3.2146'. [ 722.262226][T13259] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 723.253777][T13276] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 724.194465][T13289] FAULT_INJECTION: forcing a failure. [ 724.194465][T13289] name failslab, interval 1, probability 0, space 0, times 0 [ 724.287227][T13289] CPU: 1 PID: 13289 Comm: syz.1.2155 Not tainted syzkaller #0 [ 724.295069][T13289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 724.305193][T13289] Call Trace: [ 724.308529][T13289] [ 724.311523][T13289] dump_stack_lvl+0x18c/0x250 [ 724.316471][T13289] ? show_regs_print_info+0x20/0x20 [ 724.321746][T13289] ? load_image+0x420/0x420 [ 724.326306][T13289] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 724.332428][T13289] ? __asan_memset+0x22/0x40 [ 724.337226][T13289] should_fail_ex+0x39d/0x4d0 [ 724.342168][T13289] should_failslab+0x9/0x20 [ 724.347110][T13289] slab_pre_alloc_hook+0x59/0x310 [ 724.352395][T13289] ? __debug_object_init+0xec/0x450 [ 724.357677][T13289] kmem_cache_alloc+0x5a/0x2d0 [ 724.362518][T13289] ? slab_build_skb+0x2b/0x3f0 [ 724.367427][T13289] slab_build_skb+0x2b/0x3f0 [ 724.372332][T13289] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 724.377920][T13289] ? __fget_files+0x28/0x4b0 [ 724.382654][T13289] ? __fget_files+0x28/0x4b0 [ 724.387543][T13289] ? __fget_files+0x43d/0x4b0 [ 724.392287][T13289] ? cpu_online+0x60/0x60 [ 724.396689][T13289] bpf_prog_test_run+0x321/0x390 [ 724.401781][T13289] __sys_bpf+0x49d/0x890 [ 724.406069][T13289] ? bpf_link_show_fdinfo+0x390/0x390 [ 724.411491][T13289] ? lock_chain_count+0x20/0x20 [ 724.416466][T13289] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 724.422596][T13289] __x64_sys_bpf+0x7c/0x90 [ 724.427055][T13289] do_syscall_64+0x55/0xa0 [ 724.431512][T13289] ? clear_bhb_loop+0x40/0x90 [ 724.436232][T13289] ? clear_bhb_loop+0x40/0x90 [ 724.440948][T13289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.446880][T13289] RIP: 0033:0x7fa332f9c819 [ 724.451356][T13289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.471230][T13289] RSP: 002b:00007fa333db8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 724.479694][T13289] RAX: ffffffffffffffda RBX: 00007fa333216090 RCX: 00007fa332f9c819 [ 724.487789][T13289] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 724.495964][T13289] RBP: 00007fa333db8090 R08: 0000000000000000 R09: 0000000000000000 [ 724.504151][T13289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.512286][T13289] R13: 00007fa333216128 R14: 00007fa333216090 R15: 00007ffeeaaf7898 [ 724.520966][T13289] [ 725.091187][T13298] __nla_validate_parse: 1 callbacks suppressed [ 725.091504][T13298] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2159'. [ 725.153240][T13298] netlink: 169404 bytes leftover after parsing attributes in process `syz.2.2159'. [ 725.214688][T13298] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 726.294783][T13315] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2165'. [ 727.150423][T13328] FAULT_INJECTION: forcing a failure. [ 727.150423][T13328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.194165][T13328] CPU: 0 PID: 13328 Comm: syz.0.2168 Not tainted syzkaller #0 [ 727.201765][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 727.212099][T13328] Call Trace: [ 727.215439][T13328] [ 727.218426][T13328] dump_stack_lvl+0x18c/0x250 [ 727.223194][T13328] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 727.229530][T13328] ? show_regs_print_info+0x20/0x20 [ 727.234958][T13328] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 727.241214][T13328] ? dump_stack+0x9/0x20 [ 727.245769][T13328] should_fail_ex+0x39d/0x4d0 [ 727.250559][T13328] _copy_from_user+0x2f/0xe0 [ 727.255416][T13328] get_user_ifreq+0x6b/0x180 [ 727.260087][T13328] sock_ioctl+0x6f1/0x7e0 [ 727.264491][T13328] ? sock_poll+0x3e0/0x3e0 [ 727.269083][T13328] ? sock_poll+0x3e0/0x3e0 [ 727.273655][T13328] __se_sys_ioctl+0xfd/0x170 [ 727.278497][T13328] do_syscall_64+0x55/0xa0 [ 727.282999][T13328] ? clear_bhb_loop+0x40/0x90 [ 727.287892][T13328] ? clear_bhb_loop+0x40/0x90 [ 727.292697][T13328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 727.298771][T13328] RIP: 0033:0x7f2753b9c819 [ 727.303267][T13328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.322955][T13328] RSP: 002b:00007f2754abb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.331473][T13328] RAX: ffffffffffffffda RBX: 00007f2753e16090 RCX: 00007f2753b9c819 [ 727.339516][T13328] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000009 [ 727.347757][T13328] RBP: 00007f2754abb090 R08: 0000000000000000 R09: 0000000000000000 [ 727.356056][T13328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.364090][T13328] R13: 00007f2753e16128 R14: 00007f2753e16090 R15: 00007ffc6ab57668 [ 727.372148][T13328] [ 727.785897][T13334] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2170'. [ 727.814458][T13334] netlink: 169404 bytes leftover after parsing attributes in process `syz.2.2170'. [ 727.872602][T13334] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 728.594762][T13349] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2175'. [ 728.952743][T13342] netlink: 'syz.1.2172': attribute type 10 has an invalid length. [ 729.013428][T13342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.155769][T13342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.280842][T13342] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 729.353231][T13353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2176'. [ 730.665514][T13372] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2182'. [ 730.852071][T13372] netlink: 169404 bytes leftover after parsing attributes in process `syz.0.2182'. [ 730.886020][T13372] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 731.821767][T13386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2187'. [ 732.719422][T13389] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2185'. [ 732.984393][T13389] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 733.265538][T11052] Bluetooth: Frame is too long (len 149, expected len 4) [ 733.512665][T13410] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2193'. [ 733.916066][T13422] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2196'. [ 735.128064][T11052] Bluetooth: Frame is too long (len 149, expected len 4) [ 735.440095][T13451] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2205'. [ 735.477102][T13454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2206'. [ 735.524068][T13451] netlink: 169404 bytes leftover after parsing attributes in process `syz.1.2205'. [ 735.537608][T13451] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 736.393453][T13466] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2211'. [ 737.110736][T13471] netlink: 'syz.2.2212': attribute type 1 has an invalid length. [ 737.156809][T13472] netlink: 'syz.2.2212': attribute type 1 has an invalid length. [ 737.210888][T13475] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2212'. [ 737.464983][T13482] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2216'. [ 737.486851][T13485] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2215'. [ 737.511704][T13482] netlink: 169404 bytes leftover after parsing attributes in process `syz.2.2216'. [ 737.526888][T13482] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 737.556647][T11052] Bluetooth: Frame is too long (len 149, expected len 4) [ 738.747955][T13507] netlink: 'syz.2.2220': attribute type 10 has an invalid length. [ 738.770526][T13507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2220'. [ 738.803518][T13507] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 738.820207][T13507] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.886920][T13507] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 739.101567][T13515] FAULT_INJECTION: forcing a failure. [ 739.101567][T13515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.149074][T13515] CPU: 1 PID: 13515 Comm: syz.1.2224 Not tainted syzkaller #0 [ 739.156656][T13515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 739.166784][T13515] Call Trace: [ 739.170307][T13515] [ 739.173363][T13515] dump_stack_lvl+0x18c/0x250 [ 739.178131][T13515] ? show_regs_print_info+0x20/0x20 [ 739.183554][T13515] ? load_image+0x420/0x420 [ 739.188278][T13515] ? __might_fault+0xaa/0x120 [ 739.193050][T13515] ? __lock_acquire+0x7d40/0x7d40 [ 739.198157][T13515] should_fail_ex+0x39d/0x4d0 [ 739.203121][T13515] _copy_from_user+0x2f/0xe0 [ 739.207989][T13515] __sys_bpf+0x23e/0x890 [ 739.212308][T13515] ? bpf_link_show_fdinfo+0x390/0x390 [ 739.217761][T13515] ? lock_chain_count+0x20/0x20 [ 739.222686][T13515] __x64_sys_bpf+0x7c/0x90 [ 739.227279][T13515] do_syscall_64+0x55/0xa0 [ 739.231786][T13515] ? clear_bhb_loop+0x40/0x90 [ 739.236536][T13515] ? clear_bhb_loop+0x40/0x90 [ 739.241279][T13515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 739.247530][T13515] RIP: 0033:0x7fa332f9c819 [ 739.252031][T13515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.271969][T13515] RSP: 002b:00007fa333dd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 739.280518][T13515] RAX: ffffffffffffffda RBX: 00007fa333215fa0 RCX: 00007fa332f9c819 [ 739.288539][T13515] RDX: 0000000000000020 RSI: 0000200000000800 RDI: 0000000000000008 [ 739.296636][T13515] RBP: 00007fa333dd9090 R08: 0000000000000000 R09: 0000000000000000 [ 739.304744][T13515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.312843][T13515] R13: 00007fa333216038 R14: 00007fa333215fa0 R15: 00007ffeeaaf7898 [ 739.321057][T13515] [ 740.072633][T13527] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2229'. [ 740.202349][T13527] netlink: 169404 bytes leftover after parsing attributes in process `syz.3.2229'. [ 740.276102][T13527] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 741.786594][T13537] FAULT_INJECTION: forcing a failure. [ 741.786594][T13537] name failslab, interval 1, probability 0, space 0, times 0 [ 741.845551][T13537] CPU: 1 PID: 13537 Comm: syz.3.2233 Not tainted syzkaller #0 [ 741.853118][T13537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 741.863243][T13537] Call Trace: [ 741.866665][T13537] [ 741.869663][T13537] dump_stack_lvl+0x18c/0x250 [ 741.874542][T13537] ? show_regs_print_info+0x20/0x20 [ 741.879830][T13537] ? load_image+0x420/0x420 [ 741.884416][T13537] ? __asan_memset+0x22/0x40 [ 741.889453][T13537] should_fail_ex+0x39d/0x4d0 [ 741.894220][T13537] should_failslab+0x9/0x20 [ 741.898784][T13537] slab_pre_alloc_hook+0x59/0x310 [ 741.904047][T13537] ? __debug_object_init+0xec/0x450 [ 741.909322][T13537] kmem_cache_alloc+0x5a/0x2d0 [ 741.914157][T13537] ? slab_build_skb+0x2b/0x3f0 [ 741.919833][T13537] slab_build_skb+0x2b/0x3f0 [ 741.924505][T13537] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 741.929975][T13537] ? __fget_files+0x28/0x4b0 [ 741.934641][T13537] ? __fget_files+0x28/0x4b0 [ 741.939291][T13537] ? __fget_files+0x43d/0x4b0 [ 741.944148][T13537] ? cpu_online+0x60/0x60 [ 741.948744][T13537] bpf_prog_test_run+0x321/0x390 [ 741.953948][T13537] __sys_bpf+0x49d/0x890 [ 741.958251][T13537] ? bpf_link_show_fdinfo+0x390/0x390 [ 741.963745][T13537] ? lock_chain_count+0x20/0x20 [ 741.969013][T13537] __x64_sys_bpf+0x7c/0x90 [ 741.973475][T13537] do_syscall_64+0x55/0xa0 [ 741.977965][T13537] ? clear_bhb_loop+0x40/0x90 [ 741.982694][T13537] ? clear_bhb_loop+0x40/0x90 [ 741.987501][T13537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.993654][T13537] RIP: 0033:0x7f9c6a39c819 [ 741.998126][T13537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.018331][T13537] RSP: 002b:00007f9c6b1b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 742.026907][T13537] RAX: ffffffffffffffda RBX: 00007f9c6a615fa0 RCX: 00007f9c6a39c819 [ 742.034922][T13537] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 742.043109][T13537] RBP: 00007f9c6b1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 742.051519][T13537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.059721][T13537] R13: 00007f9c6a616038 R14: 00007f9c6a615fa0 R15: 00007ffde85af7f8 [ 742.067758][T13537] [ 743.215550][T13561] netlink: 'syz.2.2240': attribute type 29 has an invalid length. [ 743.277088][T13561] netlink: 'syz.2.2240': attribute type 29 has an invalid length. [ 743.285625][T13562] netlink: 'syz.2.2240': attribute type 29 has an invalid length. [ 743.348026][T13562] netlink: 'syz.2.2240': attribute type 29 has an invalid length. [ 743.362127][T13562] netlink: 'syz.2.2240': attribute type 29 has an invalid length. [ 743.715881][T13569] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2241'. [ 743.765824][T13569] netlink: 169404 bytes leftover after parsing attributes in process `syz.0.2241'. [ 743.795966][T13569] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 744.106055][T13574] netlink: 'syz.2.2243': attribute type 21 has an invalid length. [ 744.917646][T13592] FAULT_INJECTION: forcing a failure. [ 744.917646][T13592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.943949][T13592] CPU: 0 PID: 13592 Comm: syz.2.2251 Not tainted syzkaller #0 [ 744.951827][T13592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 744.962425][T13592] Call Trace: [ 744.965850][T13592] [ 744.968849][T13592] dump_stack_lvl+0x18c/0x250 [ 744.973616][T13592] ? show_regs_print_info+0x20/0x20 [ 744.978892][T13592] ? load_image+0x420/0x420 [ 744.983568][T13592] ? __might_fault+0xaa/0x120 [ 744.988308][T13592] ? __lock_acquire+0x7d40/0x7d40 [ 744.993576][T13592] should_fail_ex+0x39d/0x4d0 [ 744.998335][T13592] _copy_from_iter+0x1d9/0x12e0 [ 745.003283][T13592] ? slab_post_alloc_hook+0x8a/0x4b0 [ 745.008736][T13592] ? __virt_addr_valid+0x18c/0x540 [ 745.014037][T13592] ? __lock_acquire+0x7d40/0x7d40 [ 745.019146][T13592] ? rcu_is_watching+0x15/0xb0 [ 745.024017][T13592] ? copyout_mc+0x70/0x70 [ 745.028423][T13592] ? __virt_addr_valid+0x18c/0x540 [ 745.033617][T13592] ? __virt_addr_valid+0x18c/0x540 [ 745.038921][T13592] ? __virt_addr_valid+0x469/0x540 [ 745.044132][T13592] ? __check_object_size+0x506/0xa20 [ 745.049624][T13592] netlink_sendmsg+0x76b/0xbf0 [ 745.054516][T13592] ? netlink_getsockopt+0x590/0x590 [ 745.059886][T13592] ? aa_sock_msg_perm+0x94/0x150 [ 745.064984][T13592] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 745.070400][T13592] ? security_socket_sendmsg+0x80/0xa0 [ 745.075989][T13592] ? netlink_getsockopt+0x590/0x590 [ 745.081269][T13592] ____sys_sendmsg+0x5ba/0x960 [ 745.086094][T13592] ? __asan_memset+0x22/0x40 [ 745.090727][T13592] ? __sys_sendmsg_sock+0x30/0x30 [ 745.095782][T13592] ? __import_iovec+0x5f2/0x850 [ 745.100681][T13592] ? import_iovec+0x73/0xa0 [ 745.105567][T13592] ___sys_sendmsg+0x2a6/0x360 [ 745.110342][T13592] ? __sys_sendmsg+0x2a0/0x2a0 [ 745.115168][T13592] ? trace_call_bpf+0xc3/0x6c0 [ 745.120007][T13592] __se_sys_sendmsg+0x1c2/0x2b0 [ 745.124980][T13592] ? __x64_sys_sendmsg+0x80/0x80 [ 745.129970][T13592] ? lockdep_hardirqs_on+0x98/0x150 [ 745.135206][T13592] do_syscall_64+0x55/0xa0 [ 745.139783][T13592] ? clear_bhb_loop+0x40/0x90 [ 745.144508][T13592] ? clear_bhb_loop+0x40/0x90 [ 745.149240][T13592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.155173][T13592] RIP: 0033:0x7fc546b9c819 [ 745.159620][T13592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.179450][T13592] RSP: 002b:00007fc547a50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.187904][T13592] RAX: ffffffffffffffda RBX: 00007fc546e15fa0 RCX: 00007fc546b9c819 [ 745.195909][T13592] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 745.204007][T13592] RBP: 00007fc547a50090 R08: 0000000000000000 R09: 0000000000000000 [ 745.212019][T13592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.220238][T13592] R13: 00007fc546e16038 R14: 00007fc546e15fa0 R15: 00007fffedfaaaf8 [ 745.228558][T13592] [ 745.874484][T13600] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2253'. [ 745.962769][T13600] netlink: 169404 bytes leftover after parsing attributes in process `syz.0.2253'. [ 746.037465][T13600] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 746.836758][T13603] delete_channel: no stack [ 747.963231][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.970341][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.448362][T13635] syzkaller0: entered promiscuous mode [ 748.466171][T13635] syzkaller0: entered allmulticast mode [ 748.547667][T13636] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 748.952347][T13645] mac80211_hwsim hwsim16 ..ãc¤±: renamed from wlan1 (while UP) [ 749.842203][T13646] netlink: 'syz.3.2269': attribute type 10 has an invalid length. [ 749.876897][T13646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2269'. [ 749.929921][T13646] batman_adv: batadv0: Adding interface: virt_wifi0 [ 749.987360][T13646] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.988017][T13643] delete_channel: no stack [ 750.102801][T13646] batman_adv: batadv0: Interface activated: virt_wifi0 [ 750.229891][T13655] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2271'. [ 752.221675][T13689] netlink: 209700 bytes leftover after parsing attributes in process `syz.0.2282'. [ 752.281272][T13689] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present! [ 752.411334][T13692] netlink: 'syz.1.2283': attribute type 21 has an invalid length. [ 753.527426][T11052] Bluetooth: Frame is too long (len 149, expected len 4) [ 753.700283][T13720] netlink: 'syz.0.2291': attribute type 8 has an invalid length. [ 753.716403][T13720] netlink: 160020 bytes leftover after parsing attributes in process `syz.0.2291'. [ 755.720272][T13751] netlink: 'syz.1.2301': attribute type 10 has an invalid length. [ 755.741526][T13751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2301'. [ 755.775185][T13751] batman_adv: batadv0: Adding interface: virt_wifi0 [ 755.805941][T13751] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.853297][T13753] netlink: 'syz.0.2303': attribute type 29 has an invalid length. [ 755.886697][T13751] batman_adv: batadv0: Interface activated: virt_wifi0 [ 755.924279][T13753] netlink: 'syz.0.2303': attribute type 29 has an invalid length. [ 755.963144][T13757] netlink: 'syz.0.2303': attribute type 29 has an invalid length. [ 755.997113][T13753] netlink: 'syz.0.2303': attribute type 29 has an invalid length. [ 756.068849][T13753] netlink: 'syz.0.2303': attribute type 29 has an invalid length. [ 756.227255][T13750] delete_channel: no stack [ 756.381392][T13760] tap1: tun_chr_ioctl cmd 1074025677 [ 756.389659][T13760] tap1: linktype set to 0 [ 756.702547][T13772] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2308'. [ 757.338198][T13782] FAULT_INJECTION: forcing a failure. [ 757.338198][T13782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.372861][T13782] CPU: 1 PID: 13782 Comm: syz.3.2309 Not tainted syzkaller #0 [ 757.380444][T13782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 757.390650][T13782] Call Trace: [ 757.393985][T13782] [ 757.396963][T13782] dump_stack_lvl+0x18c/0x250 [ 757.401699][T13782] ? show_regs_print_info+0x20/0x20 [ 757.406964][T13782] ? load_image+0x420/0x420 [ 757.411523][T13782] ? __might_fault+0xaa/0x120 [ 757.416238][T13782] ? __lock_acquire+0x7d40/0x7d40 [ 757.421320][T13782] should_fail_ex+0x39d/0x4d0 [ 757.426053][T13782] _copy_from_user+0x2f/0xe0 [ 757.430758][T13782] ___sys_sendmsg+0x1c7/0x360 [ 757.435478][T13782] ? __sys_sendmsg+0x2a0/0x2a0 [ 757.440313][T13782] ? trace_call_bpf+0xc3/0x6c0 [ 757.445241][T13782] __se_sys_sendmsg+0x1c2/0x2b0 [ 757.450170][T13782] ? __x64_sys_sendmsg+0x80/0x80 [ 757.455419][T13782] ? lockdep_hardirqs_on+0x98/0x150 [ 757.460684][T13782] do_syscall_64+0x55/0xa0 [ 757.465154][T13782] ? clear_bhb_loop+0x40/0x90 [ 757.469877][T13782] ? clear_bhb_loop+0x40/0x90 [ 757.474702][T13782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.480648][T13782] RIP: 0033:0x7f9c6a39c819 [ 757.485364][T13782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.505207][T13782] RSP: 002b:00007f9c6b1b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.513666][T13782] RAX: ffffffffffffffda RBX: 00007f9c6a615fa0 RCX: 00007f9c6a39c819 [ 757.521774][T13782] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000003 [ 757.530334][T13782] RBP: 00007f9c6b1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 757.538543][T13782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.546821][T13782] R13: 00007f9c6a616038 R14: 00007f9c6a615fa0 R15: 00007ffde85af7f8 [ 757.555195][T13782] [ 758.415354][T13798] netlink: 'syz.0.2314': attribute type 13 has an invalid length. [ 758.457080][T13798] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2314'. [ 758.879253][T13803] netlink: 'syz.2.2316': attribute type 10 has an invalid length. [ 758.906670][T13803] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2316'. [ 758.944191][T13803] batman_adv: batadv0: Adding interface: virt_wifi0 [ 758.996720][T13803] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.097184][T13803] batman_adv: batadv0: Interface activated: virt_wifi0 [ 759.775071][T13802] delete_channel: no stack [ 762.517678][ T3424] tipc: Subscription rejected, illegal request [ 762.799498][T13859] netlink: 'syz.0.2331': attribute type 10 has an invalid length. [ 762.858049][T13859] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2331'. [ 763.017631][T13859] batman_adv: batadv0: Adding interface: virt_wifi0 [ 763.063860][T13859] batman_adv: batadv0: Interface activated: virt_wifi0 [ 763.649178][T13871] syzkaller0: entered promiscuous mode [ 763.654788][T13871] syzkaller0: entered allmulticast mode [ 763.720544][T13858] delete_channel: no stack [ 764.609378][T13889] netlink: 169404 bytes leftover after parsing attributes in process `syz.0.2335'. [ 764.749326][T13889] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 767.991669][T13886] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2335'. [ 768.012508][T13885] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2337'. [ 768.216753][T13901] netlink: 'syz.0.2339': attribute type 10 has an invalid length. [ 768.285507][T13902] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2341'. [ 769.819867][T13928] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2347'. [ 769.860290][T13928] netlink: 169404 bytes leftover after parsing attributes in process `syz.0.2347'. [ 769.870830][T13928] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 770.030558][T13932] syzkaller0: entered promiscuous mode [ 770.036163][T13932] syzkaller0: entered allmulticast mode [ 770.062607][T13934] netlink: 'syz.2.2350': attribute type 10 has an invalid length. [ 770.077140][T13934] hsr0: entered promiscuous mode [ 770.082822][T13934] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 770.406066][T13947] FAULT_INJECTION: forcing a failure. [ 770.406066][T13947] name failslab, interval 1, probability 0, space 0, times 0 [ 770.467550][T13947] CPU: 1 PID: 13947 Comm: syz.0.2355 Not tainted syzkaller #0 [ 770.475127][T13947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 770.485521][T13947] Call Trace: [ 770.488957][T13947] [ 770.492073][T13947] dump_stack_lvl+0x18c/0x250 [ 770.496815][T13947] ? sctp_sendmsg+0x1575/0x28c0 [ 770.501996][T13947] ? ___sys_sendmsg+0x2a6/0x360 [ 770.507174][T13947] ? show_regs_print_info+0x20/0x20 [ 770.512538][T13947] ? load_image+0x420/0x420 [ 770.517127][T13947] should_fail_ex+0x39d/0x4d0 [ 770.521984][T13947] should_failslab+0x9/0x20 [ 770.526632][T13947] slab_pre_alloc_hook+0x59/0x310 [ 770.531901][T13947] ? sctp_add_bind_addr+0x8c/0x360 [ 770.537196][T13947] __kmem_cache_alloc_node+0x53/0x250 [ 770.542670][T13947] ? sctp_add_bind_addr+0x8c/0x360 [ 770.547863][T13947] kmalloc_trace+0x2a/0xe0 [ 770.552536][T13947] sctp_add_bind_addr+0x8c/0x360 [ 770.557545][T13947] sctp_copy_local_addr_list+0x315/0x4f0 [ 770.563236][T13947] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 770.569100][T13947] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 770.575439][T13947] ? sctp_v4_is_any+0x35/0x60 [ 770.580236][T13947] ? sctp_copy_one_addr+0x8c/0x350 [ 770.585461][T13947] sctp_bind_addr_copy+0xb3/0x3c0 [ 770.590634][T13947] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 770.597044][T13947] sctp_connect_new_asoc+0x2f9/0x6a0 [ 770.602402][T13947] ? __sctp_connect+0xd80/0xd80 [ 770.607311][T13947] ? __local_bh_enable_ip+0x13a/0x1c0 [ 770.612732][T13947] ? _local_bh_enable+0xa0/0xa0 [ 770.617632][T13947] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 770.623481][T13947] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 770.629429][T13947] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 770.635042][T13947] ? security_sctp_bind_connect+0x89/0xb0 [ 770.640929][T13947] sctp_sendmsg+0x1575/0x28c0 [ 770.645679][T13947] ? sctp_getsockopt+0xb60/0xb60 [ 770.650666][T13947] ? aa_sk_perm+0x83c/0x970 [ 770.655250][T13947] ? aa_af_perm+0x330/0x330 [ 770.660278][T13947] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 770.666955][T13947] ? sock_rps_record_flow+0x19/0x3f0 [ 770.672699][T13947] ? inet_sendmsg+0x7c/0x2f0 [ 770.677731][T13947] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 770.683191][T13947] ? security_socket_sendmsg+0x80/0xa0 [ 770.688834][T13947] ? inet_send_prepare+0x260/0x260 [ 770.694018][T13947] ____sys_sendmsg+0x5ba/0x960 [ 770.698847][T13947] ? __lock_acquire+0x7d40/0x7d40 [ 770.703940][T13947] ? __asan_memset+0x22/0x40 [ 770.708627][T13947] ? __sys_sendmsg_sock+0x30/0x30 [ 770.713802][T13947] ? __import_iovec+0x5f2/0x850 [ 770.718815][T13947] ? import_iovec+0x73/0xa0 [ 770.723503][T13947] ___sys_sendmsg+0x2a6/0x360 [ 770.728722][T13947] ? __sys_sendmsg+0x2a0/0x2a0 [ 770.733956][T13947] ? trace_call_bpf+0xc3/0x6c0 [ 770.738910][T13947] __se_sys_sendmsg+0x1c2/0x2b0 [ 770.743919][T13947] ? __x64_sys_sendmsg+0x80/0x80 [ 770.749116][T13947] ? lockdep_hardirqs_on+0x98/0x150 [ 770.754470][T13947] do_syscall_64+0x55/0xa0 [ 770.759024][T13947] ? clear_bhb_loop+0x40/0x90 [ 770.763795][T13947] ? clear_bhb_loop+0x40/0x90 [ 770.768731][T13947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 770.774770][T13947] RIP: 0033:0x7f2753b9c819 [ 770.779326][T13947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.799177][T13947] RSP: 002b:00007f2754adc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.808004][T13947] RAX: ffffffffffffffda RBX: 00007f2753e15fa0 RCX: 00007f2753b9c819 [ 770.816069][T13947] RDX: 0000000040004044 RSI: 0000200000000140 RDI: 0000000000000003 [ 770.824280][T13947] RBP: 00007f2754adc090 R08: 0000000000000000 R09: 0000000000000000 [ 770.832306][T13947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 770.840326][T13947] R13: 00007f2753e16038 R14: 00007f2753e15fa0 R15: 00007ffc6ab57668 [ 770.848456][T13947] [ 776.165700][T13977] netlink: 'syz.1.2363': attribute type 10 has an invalid length. [ 776.221380][T13971] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2361'. [ 776.261165][T13971] netlink: 169404 bytes leftover after parsing attributes in process `syz.0.2361'. [ 776.279995][T13971] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 776.356826][T13980] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2364'. [ 776.410042][T13980] netlink: 169404 bytes leftover after parsing attributes in process `syz.2.2364'. [ 776.440002][T13980] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 777.114455][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 777.129707][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 777.140756][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 777.152213][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 777.161825][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 777.174343][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 777.772065][ T6921] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.340972][ T6921] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.396281][T14004] pim6reg1: entered promiscuous mode [ 778.404870][T14004] pim6reg1: entered allmulticast mode [ 778.425737][T13991] chnl_net:caif_netlink_parms(): no params data found [ 778.481165][ T6921] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.585784][T14009] syzkaller0: entered promiscuous mode [ 778.591789][T14009] syzkaller0: entered allmulticast mode [ 778.694871][ T6921] .`: (slave netdevsim0): Releasing backup interface [ 778.709518][ T6921] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.086074][T14016] netlink: 169404 bytes leftover after parsing attributes in process `syz.3.2373'. [ 779.121827][T14016] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 779.236660][ T5781] Bluetooth: hci1: command tx timeout [ 781.326723][ T5781] Bluetooth: hci1: command tx timeout [ 782.195900][T14019] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2373'. [ 782.365574][T13991] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.373142][T13991] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.381812][T13991] bridge_slave_0: entered allmulticast mode [ 782.415756][T13991] bridge_slave_0: entered promiscuous mode [ 782.464927][T13991] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.514000][T13991] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.543702][T13991] bridge_slave_1: entered allmulticast mode [ 782.574422][T13991] bridge_slave_1: entered promiscuous mode [ 782.645973][T14033] netlink: 'syz.3.2374': attribute type 3 has an invalid length. [ 782.654970][T14033] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2374'. [ 782.789521][T13991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.920296][T13991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.325616][T13991] team0: Port device team_slave_0 added [ 783.388587][T13991] team0: Port device team_slave_1 added [ 783.396934][ T5781] Bluetooth: hci1: command tx timeout [ 783.404145][ T6921] tipc: Left network mode [ 783.463142][T13991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.470580][T13991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.506992][T13991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.233201][T13991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.256856][T13991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.327002][T13991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.477081][ T5781] Bluetooth: hci1: command tx timeout [ 785.495067][T13991] hsr_slave_0: entered promiscuous mode [ 785.567741][T13991] hsr_slave_1: entered promiscuous mode [ 786.875274][ T6921] erspan0 (unregistering): left allmulticast mode [ 786.893829][ T6921] erspan0 (unregistering): left promiscuous mode [ 786.918794][ T6921] GPL: port 1(erspan0) entered disabled state [ 789.276931][ T6921] hsr_slave_0: left promiscuous mode [ 789.306946][ T6921] hsr_slave_1: left promiscuous mode [ 789.320565][ T6921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.347303][ T6921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.950624][ T6921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.975455][ T6921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.984896][ T6921] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 789.999716][ T6921] batman_adv: batadv0: Removing interface: virt_wifi0 [ 790.082746][ T6921] veth1_vlan: left allmulticast mode [ 790.088851][ T6921] veth1_vlan: left promiscuous mode [ 790.097144][ T6921] veth0_vlan: left promiscuous mode [ 790.761117][T14153] netlink: 'syz.1.2399': attribute type 9 has an invalid length. [ 790.787968][T14153] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2399'. [ 791.815876][ T6921] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.381439][ T6921] .` (unregistering): (slave batadv0): Releasing backup interface [ 792.465245][ T6921] .` (unregistering): Released all slaves [ 792.615512][T13991] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 792.671258][T13991] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 792.693944][T13991] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 792.730799][T13991] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 793.013175][T14162] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2402'. [ 793.394279][T13991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.645161][T13991] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.706544][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.713887][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.812063][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.819500][ T6929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.933253][T13991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 794.620720][T13991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.815937][T13991] veth0_vlan: entered promiscuous mode [ 794.918034][T13991] veth1_vlan: entered promiscuous mode [ 794.993854][T14193] netlink: 'syz.1.2406': attribute type 9 has an invalid length. [ 795.041429][T14193] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2406'. [ 795.065101][T13991] veth0_macvtap: entered promiscuous mode [ 795.128046][T13991] veth1_macvtap: entered promiscuous mode [ 795.142851][T14197] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2406'. [ 795.236386][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.248512][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.264114][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.275283][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.292871][T13991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.305405][T14204] netlink: 'syz.3.2407': attribute type 9 has an invalid length. [ 795.338990][T14204] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2407'. [ 795.344789][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.366070][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.382066][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.392734][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.412814][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.424337][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.442836][T13991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.507464][T13991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.523777][T13991] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.533669][T13991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.548964][T13991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.579276][T14207] netlink: 'syz.2.2409': attribute type 29 has an invalid length. [ 795.636702][T14207] netlink: 'syz.2.2409': attribute type 29 has an invalid length. [ 795.677112][T14210] netlink: 'syz.2.2409': attribute type 29 has an invalid length. [ 795.752791][T14207] netlink: 'syz.2.2409': attribute type 29 has an invalid length. [ 795.892336][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.936553][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.038375][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.065670][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.741577][T14231] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2365'. [ 797.317779][T14249] syzkaller0: entered promiscuous mode [ 797.346880][T14249] syzkaller0: entered allmulticast mode [ 797.722781][T11052] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 797.732885][T11052] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 797.742762][T11052] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 797.763053][T11052] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 797.773181][T11052] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 797.782755][T11052] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 797.861486][T14256] netlink: 'syz.0.2421': attribute type 9 has an invalid length. [ 797.916358][T14256] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2421'. [ 798.045497][ T1311] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.250267][ T1311] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.563017][ T1311] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.755050][ T1311] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.849461][T14295] syzkaller0: entered promiscuous mode [ 798.855061][T14295] syzkaller0: entered allmulticast mode [ 799.177046][T14297] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2427'. [ 799.396914][T14261] chnl_net:caif_netlink_parms(): no params data found [ 799.684088][T14261] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.694481][T14261] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.702499][T14261] bridge_slave_0: entered allmulticast mode [ 799.711818][T14318] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2430'. [ 799.721943][T14261] bridge_slave_0: entered promiscuous mode [ 799.732915][T14261] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.741034][T14261] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.749744][T14261] bridge_slave_1: entered allmulticast mode [ 799.778851][T14261] bridge_slave_1: entered promiscuous mode [ 799.877293][T11052] Bluetooth: hci0: command tx timeout [ 800.015304][T14322] netlink: 'syz.3.2431': attribute type 9 has an invalid length. [ 800.078118][T14323] netlink: 'syz.0.2432': attribute type 29 has an invalid length. [ 800.106836][T14322] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2431'. [ 800.352880][T14323] netlink: 'syz.0.2432': attribute type 29 has an invalid length. [ 800.480057][T14261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.501510][T14324] netlink: 'syz.0.2432': attribute type 29 has an invalid length. [ 800.517958][T14325] netlink: 'syz.0.2432': attribute type 29 has an invalid length. [ 800.647459][T14261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.700846][T14329] netlink: 'syz.0.2432': attribute type 29 has an invalid length. [ 800.871829][T14261] team0: Port device team_slave_0 added [ 801.008921][T14261] team0: Port device team_slave_1 added [ 801.297014][T14261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.304343][T14261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.371994][T14261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.408119][T14261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.425422][T14261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.478170][T14261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.498649][T14363] netlink: 'syz.2.2437': attribute type 9 has an invalid length. [ 801.517798][T14363] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2437'. [ 801.866814][T14261] hsr_slave_0: entered promiscuous mode [ 801.897017][T14261] hsr_slave_1: entered promiscuous mode [ 801.904458][T14261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 801.926629][T14261] Cannot create hsr debugfs directory [ 801.956788][T11052] Bluetooth: hci0: command tx timeout [ 802.408658][T14368] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2438'. [ 802.684173][T14376] netlink: 'syz.0.2440': attribute type 12 has an invalid length. [ 802.703208][T14376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2440'. [ 802.988624][T14390] syzkaller0: entered promiscuous mode [ 802.998708][T14390] syzkaller0: entered allmulticast mode [ 803.704692][T14414] netlink: 'syz.2.2448': attribute type 10 has an invalid length. [ 803.740516][T14412] delete_channel: no stack [ 803.752103][T14414] geneve0: entered promiscuous mode [ 803.828560][T14414] geneve0: entered allmulticast mode [ 803.857329][T14414] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 803.945096][ T1311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.953991][ T1311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.969383][ T1311] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 803.977382][ T1311] batman_adv: batadv0: Removing interface: virt_wifi0 [ 804.003099][ T1317] tipc: Subscription rejected, illegal request [ 804.036698][T11052] Bluetooth: hci0: command tx timeout [ 804.048597][ T1311] veth1_vlan: left promiscuous mode [ 804.064527][ T1311] veth0_vlan: left promiscuous mode [ 805.241068][T14434] delete_channel: no stack [ 805.301405][ T1311] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 805.484716][ T1311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.976277][ T1311] bond0 (unregistering): Released all slaves [ 806.120853][T11052] Bluetooth: hci0: command tx timeout [ 806.366954][T14437] delete_channel: no stack [ 806.404367][T14444] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2457'. [ 806.525175][T11052] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1 [ 806.528066][ T5781] Bluetooth: hci2: hardware error 0x00 [ 806.588122][T14444] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 806.705050][T14261] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 806.720893][T14261] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 806.746282][T14261] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 806.772070][T14261] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 807.018028][T14454] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2465'. [ 807.043396][T14454] netlink: 169404 bytes leftover after parsing attributes in process `syz.0.2465'. [ 807.070541][T14454] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 807.083929][T14261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.213762][T14261] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.253012][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.260325][ T6929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.340631][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.348042][ T6929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.537031][T14472] netlink: 'syz.2.2462': attribute type 29 has an invalid length. [ 807.616740][T14472] netlink: 'syz.2.2462': attribute type 29 has an invalid length. [ 807.709813][T14472] netlink: 'syz.2.2462': attribute type 29 has an invalid length. [ 807.748407][T14472] netlink: 'syz.2.2462': attribute type 29 has an invalid length. [ 807.777497][T14472] netlink: 'syz.2.2462': attribute type 29 has an invalid length. [ 808.452126][T14261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.551886][T14261] veth0_vlan: entered promiscuous mode [ 808.596862][ T5781] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 808.620479][T14261] veth1_vlan: entered promiscuous mode [ 808.726392][T14261] veth0_macvtap: entered promiscuous mode [ 808.740299][T14261] veth1_macvtap: entered promiscuous mode [ 808.778269][T14261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.790128][T14261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.810283][T14501] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2469'. [ 808.825449][T14261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.846276][T14261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.859029][T14261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.879628][T14261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.896853][T14261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.938288][T14261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.953961][T14261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.974829][T14261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.986360][T14261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.028084][T14507] netlink: 169404 bytes leftover after parsing attributes in process `syz.2.2470'. [ 809.036689][T14261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.065388][T14507] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 809.079824][T14261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.113472][T14261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.139214][T14503] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2470'. [ 809.174775][T14261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.187284][T14261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.196239][T14261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.209574][T14261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.403040][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.409704][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.517963][ T6929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.549357][ T6929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.585188][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.657037][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.011522][T14527] netlink: 'syz.0.2477': attribute type 29 has an invalid length. [ 810.537957][T14537] netlink: 'syz.1.2478': attribute type 10 has an invalid length. [ 810.643564][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 810.705658][T14537] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 811.057610][T14543] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2481'. [ 811.105952][T14544] netlink: 169404 bytes leftover after parsing attributes in process `syz.0.2481'. [ 811.176691][T14544] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 812.399163][T11052] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 812.430745][T11052] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 812.441747][T11052] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 812.469864][T11052] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 812.478163][T11052] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 812.485859][T11052] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 812.500848][T14564] bridge_slave_1: left allmulticast mode [ 812.541533][T14564] bridge_slave_1: left promiscuous mode [ 812.558521][T14564] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.603748][T14564] bridge_slave_0: left allmulticast mode [ 812.623072][T14564] bridge_slave_0: left promiscuous mode [ 812.643418][T14564] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.940887][T14574] netlink: 'syz.2.2491': attribute type 10 has an invalid length. [ 813.019688][T14574] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 813.029138][T14574] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 813.044972][T14574] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 813.116748][T14580] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2493'. [ 813.137679][T14580] netlink: 169404 bytes leftover after parsing attributes in process `syz.1.2493'. [ 813.156888][T14580] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 813.406654][ T5781] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 813.473305][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.114720][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.401494][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.444071][T14566] chnl_net:caif_netlink_parms(): no params data found [ 814.527240][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 814.551823][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.597118][ T5781] Bluetooth: hci4: command tx timeout [ 814.807487][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2501'. [ 815.733125][T14566] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.751854][T14566] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.772175][T14566] bridge_slave_0: entered allmulticast mode [ 815.792644][T14566] bridge_slave_0: entered promiscuous mode [ 815.840055][T14566] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.848550][T14566] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.856371][T14566] bridge_slave_1: entered allmulticast mode [ 815.867580][T14566] bridge_slave_1: entered promiscuous mode [ 816.099951][T14566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.137561][T14566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.256143][T14566] team0: Port device team_slave_0 added [ 816.351699][T14566] team0: Port device team_slave_1 added [ 816.627294][T14566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.634353][T14566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.686533][ T5781] Bluetooth: hci4: command tx timeout [ 816.714152][T14566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.794902][T14634] netlink: 169404 bytes leftover after parsing attributes in process `syz.1.2506'. [ 816.867092][T14634] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 816.895231][T14628] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2506'. [ 816.912800][T14566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.925911][T14566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.978171][T14566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.013872][T14631] netlink: 'syz.0.2505': attribute type 10 has an invalid length. [ 817.154844][T14631] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 817.233555][ T12] erspan0 (unregistering): left allmulticast mode [ 817.257876][ T12] erspan0 (unregistering): left promiscuous mode [ 817.299753][ T12] GPL: port 1(erspan0) entered disabled state [ 817.770070][T14566] hsr_slave_0: entered promiscuous mode [ 817.785596][T14566] hsr_slave_1: entered promiscuous mode [ 817.794735][T14566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 817.806238][T14566] Cannot create hsr debugfs directory [ 817.937755][T14659] syzkaller0: entered promiscuous mode [ 817.943357][T14659] syzkaller0: entered allmulticast mode [ 818.756889][ T5781] Bluetooth: hci4: command tx timeout [ 820.840671][ T5781] Bluetooth: hci4: command tx timeout [ 822.951029][ T12] bond0: (slave wlan1): Releasing backup interface [ 823.065425][T14701] netlink: 169404 bytes leftover after parsing attributes in process `syz.0.2517'. [ 823.078954][T14701] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 823.092588][T14700] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2517'. [ 823.483521][ T12] hsr_slave_0: left promiscuous mode [ 823.505084][ T12] hsr_slave_1: left promiscuous mode [ 823.525114][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.544985][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.558787][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.568850][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.619914][ T12] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 823.636650][ T12] batman_adv: batadv0: Removing interface: virt_wifi0 [ 823.699062][ T12] veth1_vlan: left promiscuous mode [ 823.716620][ T12] 6: left promiscuous mode [ 824.272149][ T1032] tipc: Subscription rejected, illegal request [ 826.821488][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.711845][ T12] bond0 (unregistering): Released all slaves [ 827.818623][T14709] netlink: 'syz.0.2518': attribute type 10 has an invalid length. [ 827.839326][T14709] geneve0: entered promiscuous mode [ 827.897623][T14709] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 829.635531][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 829.959576][T14768] netlink: 169404 bytes leftover after parsing attributes in process `syz.0.2525'. [ 829.966130][T14763] syzkaller0: entered promiscuous mode [ 829.983617][T14763] syzkaller0: entered allmulticast mode [ 830.000723][T14768] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 830.019841][T14766] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2525'. [ 833.098745][T14770] bridge_slave_1: left allmulticast mode [ 833.105656][T14770] bridge_slave_1: left promiscuous mode [ 833.112079][T14770] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.122907][T14770] bridge_slave_0: left allmulticast mode [ 833.130974][T14770] bridge_slave_0: left promiscuous mode [ 833.138209][T14770] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.375762][T14784] syzkaller0: entered promiscuous mode [ 833.393163][T14784] syzkaller0: entered allmulticast mode [ 834.005653][ T6921] tipc: Subscription rejected, illegal request [ 836.412284][T14805] netlink: 'syz.1.2529': attribute type 10 has an invalid length. [ 836.423107][T14805] geneve0: entered promiscuous mode [ 836.453180][T14805] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 836.668094][T14566] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 836.709966][T14566] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 836.761123][T14566] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 836.842474][T14566] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 836.886052][ T5781] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 837.590247][T14835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.599249][T14835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.643829][T14835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.661060][T14835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.764082][T14841] netlink: 169404 bytes leftover after parsing attributes in process `syz.2.2534'. [ 837.775310][T14841] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 837.873576][T14838] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2534'. [ 838.155411][T14843] syzkaller0: entered promiscuous mode [ 838.161272][T14843] syzkaller0: entered allmulticast mode [ 841.197340][T14566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.238832][T14566] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.278660][ T6927] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.285876][ T6927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.350832][ T6927] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.358114][ T6927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.599417][T14875] syzkaller0: entered promiscuous mode [ 841.606138][T14875] syzkaller0: entered allmulticast mode [ 844.843680][T14885] syzkaller0: entered promiscuous mode [ 844.849309][T14885] syzkaller0: entered allmulticast mode [ 848.790650][T14566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.885172][T14566] veth0_vlan: entered promiscuous mode [ 849.035375][T14566] veth1_vlan: entered promiscuous mode [ 849.229080][T14566] veth0_macvtap: entered promiscuous mode [ 849.307497][T14566] veth1_macvtap: entered promiscuous mode [ 849.410384][T14566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.444432][T14566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.479255][T14566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.506535][T14566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.532001][T14975] netlink: 'syz.0.2544': attribute type 1 has an invalid length. [ 849.532177][T14566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.548012][T14975] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2544'. [ 849.598429][T14975] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2544'. [ 849.639104][T14566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.663133][T14566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.682334][T14566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.703993][T14566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.729234][T14566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.754168][T14975] netlink: 'syz.0.2544': attribute type 4 has an invalid length. [ 849.784773][T14975] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2544'. [ 849.915661][T14975] .`: renamed from bond0 (while UP) [ 850.074735][T14983] syzkaller0: entered promiscuous mode [ 850.080575][T14983] syzkaller0: entered allmulticast mode [ 850.099106][T14566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.113884][T14566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.122958][T14566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.139218][T14566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.345225][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 853.865479][ T6921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.916302][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.925465][ T6921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.942088][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.246942][T15011] delete_channel: no stack [ 856.072544][T15051] netlink: 'syz.0.2570': attribute type 22 has an invalid length. [ 857.874804][T15074] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2576'. [ 857.985679][T15076] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2576'. [ 858.057190][T15076] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 861.579281][T15110] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2588'. [ 861.693406][T15112] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2588'. [ 861.741638][T15112] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 865.979479][ T5781] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 866.163750][T15174] FAULT_INJECTION: forcing a failure. [ 866.163750][T15174] name failslab, interval 1, probability 0, space 0, times 0 [ 866.217215][T15174] CPU: 1 PID: 15174 Comm: syz.2.2607 Not tainted syzkaller #0 [ 866.224801][T15174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 866.235101][T15174] Call Trace: [ 866.238436][T15174] [ 866.241411][T15174] dump_stack_lvl+0x18c/0x250 [ 866.246170][T15174] ? show_regs_print_info+0x20/0x20 [ 866.251450][T15174] ? load_image+0x420/0x420 [ 866.256026][T15174] ? __might_sleep+0xe0/0xe0 [ 866.260685][T15174] ? __lock_acquire+0x7d40/0x7d40 [ 866.265768][T15174] ? mark_lock+0x94/0x320 [ 866.270174][T15174] should_fail_ex+0x39d/0x4d0 [ 866.274940][T15174] should_failslab+0x9/0x20 [ 866.279512][T15174] slab_pre_alloc_hook+0x59/0x310 [ 866.284606][T15174] ? __get_vm_area_node+0x125/0x370 [ 866.289871][T15174] __kmem_cache_alloc_node+0x53/0x250 [ 866.295309][T15174] ? __get_vm_area_node+0x125/0x370 [ 866.300573][T15174] kmalloc_node_trace+0x26/0xe0 [ 866.305657][T15174] __get_vm_area_node+0x125/0x370 [ 866.310766][T15174] __vmalloc_node_range+0x36e/0x1330 [ 866.316130][T15174] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 866.321757][T15174] ? mark_lock+0x94/0x320 [ 866.326139][T15174] ? __lock_acquire+0x1347/0x7d40 [ 866.331374][T15174] ? verify_lock_unused+0x140/0x140 [ 866.336626][T15174] ? free_vm_area+0x50/0x50 [ 866.341190][T15174] ? end_current_label_crit_section+0x170/0x170 [ 866.347518][T15174] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 866.353122][T15174] __vmalloc+0x7a/0x90 [ 866.357244][T15174] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 866.362875][T15174] bpf_prog_alloc_no_stats+0x47/0x440 [ 866.368362][T15174] ? bpf_prog_alloc+0x2b/0x1a0 [ 866.373215][T15174] bpf_prog_alloc+0x3d/0x1a0 [ 866.377891][T15174] bpf_prog_load+0x6eb/0x1670 [ 866.382637][T15174] ? map_freeze+0x420/0x420 [ 866.387289][T15174] ? __might_fault+0xaa/0x120 [ 866.392285][T15174] ? __lock_acquire+0x7d40/0x7d40 [ 866.397637][T15174] ? file_end_write+0x159/0x250 [ 866.402550][T15174] ? __might_fault+0xaa/0x120 [ 866.407330][T15174] ? __might_fault+0xc6/0x120 [ 866.412144][T15174] ? __might_fault+0xaa/0x120 [ 866.416868][T15174] ? bpf_lsm_bpf+0x9/0x10 [ 866.421230][T15174] ? security_bpf+0x7e/0xa0 [ 866.425777][T15174] __sys_bpf+0x5ba/0x890 [ 866.430069][T15174] ? bpf_link_show_fdinfo+0x390/0x390 [ 866.435498][T15174] ? lock_chain_count+0x20/0x20 [ 866.440400][T15174] __x64_sys_bpf+0x7c/0x90 [ 866.444857][T15174] do_syscall_64+0x55/0xa0 [ 866.449353][T15174] ? clear_bhb_loop+0x40/0x90 [ 866.454069][T15174] ? clear_bhb_loop+0x40/0x90 [ 866.458797][T15174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 866.464915][T15174] RIP: 0033:0x7fc546b9c819 [ 866.469365][T15174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.489182][T15174] RSP: 002b:00007fc547a50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 866.497637][T15174] RAX: ffffffffffffffda RBX: 00007fc546e15fa0 RCX: 00007fc546b9c819 [ 866.505651][T15174] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 866.513834][T15174] RBP: 00007fc547a50090 R08: 0000000000000000 R09: 0000000000000000 [ 866.521847][T15174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.529958][T15174] R13: 00007fc546e16038 R14: 00007fc546e15fa0 R15: 00007fffedfaaaf8 [ 866.538245][T15174] [ 866.645086][T15174] syz.2.2607: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 866.763414][T15174] CPU: 0 PID: 15174 Comm: syz.2.2607 Not tainted syzkaller #0 [ 866.771046][T15174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 866.781216][T15174] Call Trace: [ 866.784594][T15174] [ 866.787623][T15174] dump_stack_lvl+0x18c/0x250 [ 866.792517][T15174] ? show_regs_print_info+0x20/0x20 [ 866.797840][T15174] ? load_image+0x420/0x420 [ 866.802571][T15174] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 866.809104][T15174] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 866.815728][T15174] warn_alloc+0x246/0x340 [ 866.820405][T15174] ? __get_vm_area_node+0x125/0x370 [ 866.825843][T15174] ? zone_watermark_ok_safe+0x230/0x230 [ 866.831496][T15174] ? rcu_is_watching+0x15/0xb0 [ 866.836402][T15174] ? __get_vm_area_node+0x356/0x370 [ 866.841735][T15174] __vmalloc_node_range+0x393/0x1330 [ 866.847130][T15174] ? mark_lock+0x94/0x320 [ 866.851585][T15174] ? __lock_acquire+0x1347/0x7d40 [ 866.856715][T15174] ? verify_lock_unused+0x140/0x140 [ 866.862070][T15174] ? free_vm_area+0x50/0x50 [ 866.866693][T15174] ? end_current_label_crit_section+0x170/0x170 [ 866.873049][T15174] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 866.878755][T15174] __vmalloc+0x7a/0x90 [ 866.883066][T15174] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 866.888762][T15174] bpf_prog_alloc_no_stats+0x47/0x440 [ 866.894285][T15174] ? bpf_prog_alloc+0x2b/0x1a0 [ 866.899121][T15174] bpf_prog_alloc+0x3d/0x1a0 [ 866.903796][T15174] bpf_prog_load+0x6eb/0x1670 [ 866.908767][T15174] ? map_freeze+0x420/0x420 [ 866.913391][T15174] ? __might_fault+0xaa/0x120 [ 866.918245][T15174] ? __lock_acquire+0x7d40/0x7d40 [ 866.923378][T15174] ? file_end_write+0x159/0x250 [ 866.928368][T15174] ? __might_fault+0xaa/0x120 [ 866.933128][T15174] ? __might_fault+0xc6/0x120 [ 866.937854][T15174] ? __might_fault+0xaa/0x120 [ 866.942679][T15174] ? bpf_lsm_bpf+0x9/0x10 [ 866.947191][T15174] ? security_bpf+0x7e/0xa0 [ 866.951763][T15174] __sys_bpf+0x5ba/0x890 [ 866.956087][T15174] ? bpf_link_show_fdinfo+0x390/0x390 [ 866.961834][T15174] ? lock_chain_count+0x20/0x20 [ 866.966879][T15174] __x64_sys_bpf+0x7c/0x90 [ 866.971370][T15174] do_syscall_64+0x55/0xa0 [ 866.976031][T15174] ? clear_bhb_loop+0x40/0x90 [ 866.980968][T15174] ? clear_bhb_loop+0x40/0x90 [ 866.985790][T15174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 866.991837][T15174] RIP: 0033:0x7fc546b9c819 [ 866.996342][T15174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.016148][T15174] RSP: 002b:00007fc547a50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 867.024745][T15174] RAX: ffffffffffffffda RBX: 00007fc546e15fa0 RCX: 00007fc546b9c819 [ 867.032886][T15174] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 867.040928][T15174] RBP: 00007fc547a50090 R08: 0000000000000000 R09: 0000000000000000 [ 867.049071][T15174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.057224][T15174] R13: 00007fc546e16038 R14: 00007fc546e15fa0 R15: 00007fffedfaaaf8 [ 867.065351][T15174] [ 867.176697][T15174] Mem-Info: [ 867.180020][T15174] active_anon:25516 inactive_anon:0 isolated_anon:0 [ 867.180020][T15174] active_file:19073 inactive_file:40221 isolated_file:0 [ 867.180020][T15174] unevictable:768 dirty:155 writeback:0 [ 867.180020][T15174] slab_reclaimable:10426 slab_unreclaimable:92983 [ 867.180020][T15174] mapped:24940 shmem:21563 pagetables:546 [ 867.180020][T15174] sec_pagetables:0 bounce:0 [ 867.180020][T15174] kernel_misc_reclaimable:0 [ 867.180020][T15174] free:1324878 free_pcp:10538 free_cma:0 [ 867.297390][T15174] Node 0 active_anon:96964kB inactive_anon:0kB active_file:76292kB inactive_file:160680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102160kB dirty:620kB writeback:0kB shmem:79516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10312kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no [ 867.495823][T15174] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 867.656260][T15174] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 867.766079][T15174] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 867.790532][T15174] Node 0 DMA32 free:1409004kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:75156kB inactive_anon:0kB active_file:76292kB inactive_file:159856kB unevictable:1536kB writepending:624kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:33044kB local_pcp:11852kB free_cma:0kB [ 867.966546][T15174] lowmem_reserve[]: 0 0 0 0 0 [ 867.971568][T15174] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 868.068036][T15174] lowmem_reserve[]: 0 0 0 0 0 [ 868.073105][T15174] Node 1 Normal free:3888584kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21976kB local_pcp:13952kB free_cma:0kB [ 868.171977][T15187] FAULT_INJECTION: forcing a failure. [ 868.171977][T15187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.174885][T15174] lowmem_reserve[]: 0 0 0 0 0 [ 868.226198][T15174] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 868.277065][T15187] CPU: 1 PID: 15187 Comm: syz.1.2610 Not tainted syzkaller #0 [ 868.284904][T15187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 868.295039][T15187] Call Trace: [ 868.298390][T15187] [ 868.301374][T15187] dump_stack_lvl+0x18c/0x250 [ 868.306144][T15187] ? show_regs_print_info+0x20/0x20 [ 868.311524][T15187] ? load_image+0x420/0x420 [ 868.316257][T15187] ? __lock_acquire+0x7d40/0x7d40 [ 868.321387][T15187] ? snprintf+0xe9/0x140 [ 868.325967][T15187] should_fail_ex+0x39d/0x4d0 [ 868.330845][T15187] _copy_to_user+0x2f/0xa0 [ 868.335512][T15187] simple_read_from_buffer+0xe7/0x150 [ 868.337440][T15174] Node 0 DMA32: [ 868.340948][T15187] proc_fail_nth_read+0x1e8/0x260 [ 868.344629][T15174] 1547*4kB [ 868.349673][T15187] ? proc_fault_inject_write+0x360/0x360 [ 868.349710][T15187] ? fsnotify_perm+0x271/0x5e0 [ 868.349740][T15187] ? proc_fault_inject_write+0x360/0x360 [ 868.349769][T15187] vfs_read+0x28b/0x970 [ 868.349805][T15187] ? kernel_read+0x1e0/0x1e0 [ 868.378265][T15187] ? __fget_files+0x28/0x4b0 [ 868.382935][T15187] ? __fget_files+0x28/0x4b0 [ 868.387601][T15187] ? __fget_files+0x43d/0x4b0 [ 868.392353][T15187] ? __fdget_pos+0x2a3/0x330 [ 868.397007][T15187] ? ksys_read+0x75/0x260 [ 868.401423][T15187] ksys_read+0x150/0x260 [ 868.405743][T15187] ? vfs_write+0x990/0x990 [ 868.410226][T15187] ? lockdep_hardirqs_on+0x98/0x150 [ 868.415501][T15187] do_syscall_64+0x55/0xa0 [ 868.419987][T15187] ? clear_bhb_loop+0x40/0x90 [ 868.424724][T15187] ? clear_bhb_loop+0x40/0x90 [ 868.429462][T15187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.435422][T15187] RIP: 0033:0x7fd1eff5d04e [ 868.439899][T15187] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 868.458169][T15174] (UME) [ 868.459980][T15187] RSP: 002b:00007fd1f0eccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 868.462870][T15174] 1291*8kB [ 868.471334][T15187] RAX: ffffffffffffffda RBX: 00007fd1f0ecd6c0 RCX: 00007fd1eff5d04e [ 868.471365][T15187] RDX: 000000000000000f RSI: 00007fd1f0ecd0a0 RDI: 0000000000000004 [ 868.471377][T15187] RBP: 00007fd1f0ecd090 R08: 0000000000000000 R09: 0000000000000000 [ 868.471389][T15187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.471400][T15187] R13: 00007fd1f0216038 R14: 00007fd1f0215fa0 R15: 00007ffc392fcac8 [ 868.471433][T15187] [ 868.743759][T15174] (UME) 965*16kB (UME) 1029*32kB (UME) 451*64kB (UME) 497*128kB (UME) 115*256kB (UME) 24*512kB (UM) 5*1024kB (U) 2*2048kB (UM) 294*4096kB (UME) = 1412532kB [ 868.791869][T15174] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 868.820017][T15174] Node 1 Normal: 186*4kB (U) 60*8kB (UME) 44*16kB (UME) 56*32kB (UME) 29*64kB (UE) 2*128kB (UM) 1*256kB (E) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 946*4096kB (M) = 3888584kB [ 868.871429][T15174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 868.902326][T15174] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 868.936845][T15174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 868.969163][T15174] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 868.995345][T15174] 67968 total pagecache pages [ 869.014253][T15174] 0 pages in swap cache [ 869.025636][T15174] Free swap = 124996kB [ 869.035868][T15174] Total swap = 124996kB [ 869.059762][T15174] 2097051 pages RAM [ 869.063668][T15174] 0 pages HighMem/MovableOnly [ 869.087434][T15174] 416927 pages reserved [ 869.097124][T15174] 0 pages cma reserved [ 869.397630][ T5781] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 870.870392][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.883447][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.459845][T15231] netlink: 'syz.2.2624': attribute type 10 has an invalid length. [ 871.498126][T15231] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2624'. [ 871.550666][T15231] FAULT_INJECTION: forcing a failure. [ 871.550666][T15231] name failslab, interval 1, probability 0, space 0, times 0 [ 871.631528][T15231] CPU: 0 PID: 15231 Comm: syz.2.2624 Not tainted syzkaller #0 [ 871.639104][T15231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 871.649324][T15231] Call Trace: [ 871.652749][T15231] [ 871.655735][T15231] dump_stack_lvl+0x18c/0x250 [ 871.660658][T15231] ? show_regs_print_info+0x20/0x20 [ 871.666258][T15231] ? load_image+0x420/0x420 [ 871.670923][T15231] ? __might_sleep+0xe0/0xe0 [ 871.675585][T15231] ? __lock_acquire+0x7d40/0x7d40 [ 871.680773][T15231] should_fail_ex+0x39d/0x4d0 [ 871.685532][T15231] should_failslab+0x9/0x20 [ 871.690206][T15231] slab_pre_alloc_hook+0x59/0x310 [ 871.696123][T15231] kmem_cache_alloc_node+0x60/0x320 [ 871.701451][T15231] ? __alloc_skb+0x103/0x2c0 [ 871.706129][T15231] __alloc_skb+0x103/0x2c0 [ 871.710809][T15231] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 871.716186][T15231] ? ip6_route_dev_notify+0x51f/0x5b0 [ 871.721652][T15231] rtmsg_ifinfo+0x8c/0x1a0 [ 871.726167][T15231] netdev_state_change+0xfe/0x170 [ 871.731360][T15231] ? netdev_features_change+0xd0/0xd0 [ 871.736823][T15231] do_setlink+0x84a/0x4130 [ 871.741342][T15231] ? load_image+0x420/0x420 [ 871.746019][T15231] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 871.752255][T15231] ? rcu_is_watching+0x15/0xb0 [ 871.757103][T15231] ? do_trace_netlink_extack+0x7e/0x1a0 [ 871.762805][T15231] ? __nla_validate_parse+0x262c/0x2ea0 [ 871.768450][T15231] ? mark_lock+0x94/0x320 [ 871.772962][T15231] ? __nla_validate+0x50/0x50 [ 871.777880][T15231] ? mark_lock+0x94/0x320 [ 871.782302][T15231] ? __lock_acquire+0x1347/0x7d40 [ 871.787418][T15231] ? validate_linkmsg+0x719/0x910 [ 871.792519][T15231] rtnl_setlink+0x3d9/0x4e0 [ 871.797093][T15231] ? verify_lock_unused+0x140/0x140 [ 871.802377][T15231] ? rtnl_dump_ifinfo+0x13c0/0x13c0 [ 871.807686][T15231] ? perf_trace_lock+0xfc/0x3b0 [ 871.812784][T15231] ? trace_event_raw_event_lock+0x250/0x250 [ 871.819068][T15231] ? mutex_lock_nested+0x20/0x20 [ 871.824265][T15231] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 871.829477][T15231] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 871.834655][T15231] ? rtnl_dump_ifinfo+0x13c0/0x13c0 [ 871.839924][T15231] rtnetlink_rcv_msg+0x869/0xfa0 [ 871.845058][T15231] ? rtnetlink_bind+0x80/0x80 [ 871.846827][ T5781] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 871.849794][T15231] ? perf_trace_preemptirq_template+0xac/0x330 [ 871.863938][T15231] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 871.870275][T15231] ? lock_chain_count+0x20/0x20 [ 871.875185][T15231] ? __local_bh_enable_ip+0x13a/0x1c0 [ 871.880694][T15231] ? lockdep_hardirqs_on+0x98/0x150 [ 871.885945][T15231] ? __local_bh_enable_ip+0x13a/0x1c0 [ 871.891388][T15231] ? _local_bh_enable+0xa0/0xa0 [ 871.896374][T15231] ? __dev_queue_xmit+0x265/0x3660 [ 871.901646][T15231] ? __dev_queue_xmit+0x265/0x3660 [ 871.906913][T15231] ? __dev_queue_xmit+0x1b2c/0x3660 [ 871.912256][T15231] ? __dev_queue_xmit+0x265/0x3660 [ 871.917681][T15231] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 871.924063][T15231] ? lockdep_hardirqs_on+0x98/0x150 [ 871.929411][T15231] ? perf_trace_lock+0xfc/0x3b0 [ 871.934341][T15231] netlink_rcv_skb+0x241/0x4d0 [ 871.939435][T15231] ? rtnetlink_bind+0x80/0x80 [ 871.944238][T15231] ? netlink_ack+0x1180/0x1180 [ 871.949268][T15231] ? __lock_acquire+0x7d40/0x7d40 [ 871.954354][T15231] ? netlink_deliver_tap+0x2e/0x1b0 [ 871.959698][T15231] netlink_unicast+0x751/0x8d0 [ 871.964545][T15231] netlink_sendmsg+0x8d0/0xbf0 [ 871.969359][T15231] ? lockdep_hardirqs_on+0x98/0x150 [ 871.974691][T15231] ? netlink_getsockopt+0x590/0x590 [ 871.980134][T15231] ? aa_sock_msg_perm+0x94/0x150 [ 871.985205][T15231] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 871.990548][T15231] ? security_socket_sendmsg+0x80/0xa0 [ 871.996140][T15231] ? netlink_getsockopt+0x590/0x590 [ 872.001395][T15231] ____sys_sendmsg+0x5ba/0x960 [ 872.006234][T15231] ? __asan_memset+0x22/0x40 [ 872.011079][T15231] ? __sys_sendmsg_sock+0x30/0x30 [ 872.016170][T15231] ? __import_iovec+0x5f2/0x850 [ 872.021379][T15231] ? import_iovec+0x73/0xa0 [ 872.026025][T15231] ___sys_sendmsg+0x2a6/0x360 [ 872.030761][T15231] ? __sys_sendmsg+0x2a0/0x2a0 [ 872.035691][T15231] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 872.042304][T15231] __se_sys_sendmsg+0x1c2/0x2b0 [ 872.047303][T15231] ? __x64_sys_sendmsg+0x80/0x80 [ 872.052488][T15231] ? lockdep_hardirqs_on+0x98/0x150 [ 872.057826][T15231] do_syscall_64+0x55/0xa0 [ 872.062303][T15231] ? clear_bhb_loop+0x40/0x90 [ 872.067125][T15231] ? clear_bhb_loop+0x40/0x90 [ 872.071846][T15231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.077800][T15231] RIP: 0033:0x7fc546b9c819 [ 872.082353][T15231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.102144][T15231] RSP: 002b:00007fc547a50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.110646][T15231] RAX: ffffffffffffffda RBX: 00007fc546e15fa0 RCX: 00007fc546b9c819 [ 872.118758][T15231] RDX: 0000000000004014 RSI: 00002000000000c0 RDI: 000000000000000a [ 872.126895][T15231] RBP: 00007fc547a50090 R08: 0000000000000000 R09: 0000000000000000 [ 872.134944][T15231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.143031][T15231] R13: 00007fc546e16038 R14: 00007fc546e15fa0 R15: 00007fffedfaaaf8 [ 872.151048][T15231] [ 872.226718][T15231] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 874.045620][T15266] netlink: 'syz.3.2634': attribute type 29 has an invalid length. [ 874.117263][T15266] netlink: 'syz.3.2634': attribute type 29 has an invalid length. [ 876.196012][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 876.325977][T15314] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2652'. [ 876.340530][T15314] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 877.393891][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 877.943392][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 877.963225][T15346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2661'. [ 878.009894][T15346] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2661'. [ 878.035592][T15346] bridge_slave_0: entered allmulticast mode [ 878.049852][T15346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2661'. [ 878.088233][T15346] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2661'. [ 878.199959][T15359] netlink: 'syz.2.2668': attribute type 9 has an invalid length. [ 878.213214][T15359] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2668'. [ 878.522992][ T5781] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 880.184307][ T5781] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 880.224160][T15399] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2681'. [ 880.275766][T15399] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 880.298877][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'. [ 880.356677][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2679'. [ 880.439781][T15390] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2679'. [ 880.468065][T15390] bridge_slave_0: entered allmulticast mode [ 882.301295][T15440] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 882.982402][T15443] __nla_validate_parse: 4 callbacks suppressed [ 882.982428][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2696'. [ 883.004625][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2696'. [ 883.014856][T15443] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2696'. [ 883.024816][T15443] bridge_slave_0: entered allmulticast mode [ 883.039800][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2696'. [ 883.049559][T15443] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2696'. [ 884.537111][T15478] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2706'. [ 884.604589][T15478] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 885.071501][T15493] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2712'. [ 886.090840][ T5781] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 886.320032][T15513] netlink: 'syz.3.2718': attribute type 10 has an invalid length. [ 886.364513][T15518] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2720'. [ 886.389003][T15518] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 887.188362][T15530] FAULT_INJECTION: forcing a failure. [ 887.188362][T15530] name failslab, interval 1, probability 0, space 0, times 0 [ 887.201482][T15530] CPU: 0 PID: 15530 Comm: syz.0.2724 Not tainted syzkaller #0 [ 887.209188][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 887.219495][T15530] Call Trace: [ 887.222848][T15530] [ 887.225928][T15530] dump_stack_lvl+0x18c/0x250 [ 887.230689][T15530] ? show_regs_print_info+0x20/0x20 [ 887.235947][T15530] ? load_image+0x420/0x420 [ 887.240615][T15530] should_fail_ex+0x39d/0x4d0 [ 887.245365][T15530] should_failslab+0x9/0x20 [ 887.250200][T15530] slab_pre_alloc_hook+0x59/0x310 [ 887.255552][T15530] ? nf_ct_ext_add+0x1ab/0x440 [ 887.260401][T15530] ? nf_ct_ext_add+0x1ab/0x440 [ 887.265231][T15530] __kmem_cache_alloc_node+0x53/0x250 [ 887.270803][T15530] ? nf_ct_ext_add+0x1ab/0x440 [ 887.275730][T15530] __kmalloc_node_track_caller+0xa2/0x230 [ 887.282676][T15530] krealloc+0x86/0x120 [ 887.287045][T15530] nf_ct_ext_add+0x1ab/0x440 [ 887.291831][T15530] init_conntrack+0x69c/0xf10 [ 887.296945][T15530] ? early_drop+0x7f0/0x7f0 [ 887.301563][T15530] ? nf_conntrack_find_get+0x650/0x650 [ 887.307161][T15530] ? __siphash_unaligned+0x22e/0x3a0 [ 887.312604][T15530] nf_conntrack_in+0xc06/0x15c0 [ 887.317541][T15530] ? nf_ct_pernet+0x270/0x270 [ 887.322468][T15530] ? ip6t_do_table+0x1d9/0x1510 [ 887.327383][T15530] ? ip6t_alloc_initial_table+0x640/0x640 [ 887.333276][T15530] ? ipv6_defrag+0x2d6/0x3a0 [ 887.338036][T15530] ? ipv4_conntrack_local+0x200/0x200 [ 887.343473][T15530] nf_hook_slow+0xbd/0x200 [ 887.348047][T15530] NF_HOOK+0x21d/0x3b0 [ 887.352185][T15530] ? sk_setup_caps+0xa10/0xa10 [ 887.357009][T15530] ? net_zcopy_put_abort+0x90/0x90 [ 887.362196][T15530] ? NF_HOOK+0x9f/0x3b0 [ 887.366408][T15530] ? ip6_rcv_core+0x1740/0x1740 [ 887.371513][T15530] ? net_zcopy_put_abort+0x90/0x90 [ 887.376791][T15530] ? ip6_rcv_finish_core+0x420/0x420 [ 887.382150][T15530] __netif_receive_skb+0xcc/0x290 [ 887.387277][T15530] ? netif_receive_skb+0x106/0x720 [ 887.392548][T15530] netif_receive_skb+0x1bc/0x720 [ 887.397609][T15530] ? enqueue_to_backlog+0xe30/0xe30 [ 887.402880][T15530] ? perf_trace_preemptirq_template+0x269/0x330 [ 887.409200][T15530] ? tun_rx_batched+0x186/0x790 [ 887.414131][T15530] tun_rx_batched+0x1df/0x790 [ 887.418887][T15530] ? pskb_may_pull+0xf0/0xf0 [ 887.423546][T15530] ? __local_bh_enable_ip+0x13a/0x1c0 [ 887.429086][T15530] ? lockdep_hardirqs_on+0x98/0x150 [ 887.434349][T15530] ? read_lock_is_recursive+0x20/0x20 [ 887.439803][T15530] ? __local_bh_enable_ip+0x13a/0x1c0 [ 887.445231][T15530] ? _local_bh_enable+0xa0/0xa0 [ 887.450216][T15530] ? skb_copy_datagram_from_iter+0x62e/0x6e0 [ 887.456330][T15530] tun_get_user+0x28a3/0x3ca0 [ 887.461441][T15530] ? tun_get_user+0x24d9/0x3ca0 [ 887.466369][T15530] ? aa_file_perm+0x11b/0xee0 [ 887.471312][T15530] ? rcu_read_unlock+0xa0/0xa0 [ 887.476341][T15530] ? tun_get+0x1c/0x2e0 [ 887.480563][T15530] ? __lock_acquire+0x7d40/0x7d40 [ 887.485746][T15530] ? tun_get+0x1c/0x2e0 [ 887.489974][T15530] tun_chr_write_iter+0x119/0x200 [ 887.495153][T15530] vfs_write+0x46c/0x990 [ 887.499487][T15530] ? file_end_write+0x250/0x250 [ 887.504407][T15530] ? __fget_files+0x43d/0x4b0 [ 887.509247][T15530] ? __fdget_pos+0x1d8/0x330 [ 887.513987][T15530] ? ksys_write+0x75/0x260 [ 887.518662][T15530] ksys_write+0x150/0x260 [ 887.523072][T15530] ? __ia32_sys_read+0x90/0x90 [ 887.527918][T15530] ? lockdep_hardirqs_on+0x98/0x150 [ 887.533379][T15530] do_syscall_64+0x55/0xa0 [ 887.537860][T15530] ? clear_bhb_loop+0x40/0x90 [ 887.543139][T15530] ? clear_bhb_loop+0x40/0x90 [ 887.547976][T15530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.553938][T15530] RIP: 0033:0x7f3b4f59c819 [ 887.558502][T15530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.578390][T15530] RSP: 002b:00007f3b5053c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 887.586906][T15530] RAX: ffffffffffffffda RBX: 00007f3b4f815fa0 RCX: 00007f3b4f59c819 [ 887.594947][T15530] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 887.603171][T15530] RBP: 00007f3b5053c090 R08: 0000000000000000 R09: 0000000000000000 [ 887.611309][T15530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 887.619510][T15530] R13: 00007f3b4f816038 R14: 00007f3b4f815fa0 R15: 00007fffba7c78c8 [ 887.627575][T15530] [ 887.972285][T15538] FAULT_INJECTION: forcing a failure. [ 887.972285][T15538] name failslab, interval 1, probability 0, space 0, times 0 [ 887.985237][T15538] CPU: 0 PID: 15538 Comm: syz.0.2726 Not tainted syzkaller #0 [ 887.992776][T15538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 888.002915][T15538] Call Trace: [ 888.006262][T15538] [ 888.009252][T15538] dump_stack_lvl+0x18c/0x250 [ 888.014121][T15538] ? show_regs_print_info+0x20/0x20 [ 888.019391][T15538] ? load_image+0x420/0x420 [ 888.024006][T15538] should_fail_ex+0x39d/0x4d0 [ 888.028797][T15538] should_failslab+0x9/0x20 [ 888.033502][T15538] slab_pre_alloc_hook+0x59/0x310 [ 888.038740][T15538] ? nf_ct_ext_add+0x1ab/0x440 [ 888.043803][T15538] ? nf_ct_ext_add+0x1ab/0x440 [ 888.048912][T15538] __kmem_cache_alloc_node+0x53/0x250 [ 888.054477][T15538] ? nf_ct_ext_add+0x1ab/0x440 [ 888.059324][T15538] __kmalloc_node_track_caller+0xa2/0x230 [ 888.065428][T15538] krealloc+0x86/0x120 [ 888.069586][T15538] nf_ct_ext_add+0x1ab/0x440 [ 888.074287][T15538] init_conntrack+0x69c/0xf10 [ 888.079046][T15538] ? early_drop+0x7f0/0x7f0 [ 888.083633][T15538] ? nf_conntrack_find_get+0x650/0x650 [ 888.089188][T15538] ? __siphash_unaligned+0x22e/0x3a0 [ 888.094585][T15538] nf_conntrack_in+0xc06/0x15c0 [ 888.099601][T15538] ? nf_ct_pernet+0x270/0x270 [ 888.104388][T15538] ? ip6t_do_table+0x1d9/0x1510 [ 888.109434][T15538] ? ip6t_alloc_initial_table+0x640/0x640 [ 888.115271][T15538] ? ipv6_defrag+0x2d6/0x3a0 [ 888.119942][T15538] ? ipv4_conntrack_local+0x200/0x200 [ 888.125610][T15538] nf_hook_slow+0xbd/0x200 [ 888.130197][T15538] NF_HOOK+0x21d/0x3b0 [ 888.134324][T15538] ? sk_setup_caps+0xa10/0xa10 [ 888.139156][T15538] ? net_zcopy_put_abort+0x90/0x90 [ 888.144324][T15538] ? NF_HOOK+0x9f/0x3b0 [ 888.148654][T15538] ? ip6_rcv_core+0x1740/0x1740 [ 888.153595][T15538] ? net_zcopy_put_abort+0x90/0x90 [ 888.158798][T15538] ? ip6_rcv_finish_core+0x420/0x420 [ 888.164414][T15538] __netif_receive_skb+0xcc/0x290 [ 888.169607][T15538] ? netif_receive_skb+0x106/0x720 [ 888.174786][T15538] netif_receive_skb+0x1bc/0x720 [ 888.180085][T15538] ? enqueue_to_backlog+0xe30/0xe30 [ 888.185386][T15538] ? perf_trace_preemptirq_template+0x269/0x330 [ 888.191765][T15538] ? tun_rx_batched+0x186/0x790 [ 888.196718][T15538] tun_rx_batched+0x1df/0x790 [ 888.201702][T15538] ? pskb_may_pull+0xf0/0xf0 [ 888.206460][T15538] ? __local_bh_enable_ip+0x13a/0x1c0 [ 888.212057][T15538] ? lockdep_hardirqs_on+0x98/0x150 [ 888.217438][T15538] ? read_lock_is_recursive+0x20/0x20 [ 888.222959][T15538] ? __local_bh_enable_ip+0x13a/0x1c0 [ 888.228484][T15538] ? _local_bh_enable+0xa0/0xa0 [ 888.233568][T15538] ? skb_copy_datagram_from_iter+0x62e/0x6e0 [ 888.239674][T15538] tun_get_user+0x28a3/0x3ca0 [ 888.244513][T15538] ? tun_get_user+0x24d9/0x3ca0 [ 888.249445][T15538] ? aa_file_perm+0x11b/0xee0 [ 888.254211][T15538] ? rcu_read_unlock+0xa0/0xa0 [ 888.259255][T15538] ? tun_get+0x1c/0x2e0 [ 888.263469][T15538] ? __lock_acquire+0x7d40/0x7d40 [ 888.268661][T15538] ? tun_get+0x1c/0x2e0 [ 888.272992][T15538] tun_chr_write_iter+0x119/0x200 [ 888.278172][T15538] vfs_write+0x46c/0x990 [ 888.282506][T15538] ? file_end_write+0x250/0x250 [ 888.287431][T15538] ? __fget_files+0x43d/0x4b0 [ 888.292192][T15538] ? __fdget_pos+0x1d8/0x330 [ 888.296862][T15538] ? ksys_write+0x75/0x260 [ 888.301366][T15538] ksys_write+0x150/0x260 [ 888.305781][T15538] ? __ia32_sys_read+0x90/0x90 [ 888.310710][T15538] ? lockdep_hardirqs_on+0x98/0x150 [ 888.316156][T15538] do_syscall_64+0x55/0xa0 [ 888.320624][T15538] ? clear_bhb_loop+0x40/0x90 [ 888.325358][T15538] ? clear_bhb_loop+0x40/0x90 [ 888.330108][T15538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.336148][T15538] RIP: 0033:0x7f3b4f59c819 [ 888.340620][T15538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.360375][T15538] RSP: 002b:00007f3b5053c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 888.368889][T15538] RAX: ffffffffffffffda RBX: 00007f3b4f815fa0 RCX: 00007f3b4f59c819 [ 888.377089][T15538] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 888.385548][T15538] RBP: 00007f3b5053c090 R08: 0000000000000000 R09: 0000000000000000 [ 888.393583][T15538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 888.401616][T15538] R13: 00007f3b4f816038 R14: 00007f3b4f815fa0 R15: 00007fffba7c78c8 [ 888.409783][T15538] [ 888.939393][T15549] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2730'. [ 888.951641][T15549] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 891.210472][T15582] netlink: 'syz.0.2743': attribute type 21 has an invalid length. [ 892.178626][T15613] netlink: 'syz.1.2753': attribute type 10 has an invalid length. [ 892.211073][T15613] hsr_slave_0: left promiscuous mode [ 892.279551][T15613] hsr_slave_1: left promiscuous mode [ 896.454905][T15709] netlink: 'syz.0.2785': attribute type 2 has an invalid length. [ 896.463775][T15709] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2785'. [ 896.652287][T15713] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2786'. [ 899.454462][T15740] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2798'. [ 899.889479][T15756] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2805'. [ 899.907644][T15756] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2805'. [ 900.991172][T15778] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2813'. [ 901.187601][T15778] netlink: 'syz.2.2813': attribute type 10 has an invalid length. [ 901.197077][T15778] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2813'. [ 901.234332][T15778] bond0: left allmulticast mode [ 901.242157][T15786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2813'. [ 901.257884][T15778] bond_slave_1: left allmulticast mode [ 901.264348][T15778] geneve0: left allmulticast mode [ 901.278099][T15778] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 901.505383][T15778] team0: Port device bond0 removed [ 901.559419][T15786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2813'. [ 901.640421][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2817'. [ 901.910011][T15796] IPv6: Can't replace route, no match found [ 901.948572][ C0] [ 901.948587][ C0] ================================ [ 901.948593][ C0] WARNING: inconsistent lock state [ 901.948604][ C0] syzkaller #0 Not tainted [ 901.948615][ C0] -------------------------------- [ 901.948620][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 901.948628][ C0] syz.0.2820/15800 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 901.948650][ C0] ffff88801c38d4a0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 901.948721][ C0] {INITIAL USE} state was registered at: [ 901.948732][ C0] lock_acquire+0x19e/0x420 [ 901.948754][ C0] _raw_spin_lock+0x2e/0x40 [ 901.948776][ C0] htab_lock_bucket+0x17d/0x300 [ 901.948794][ C0] htab_lru_map_update_elem+0x2c6/0x990 [ 901.948813][ C0] bpf_map_update_value+0x660/0x720 [ 901.948829][ C0] map_update_elem+0x57b/0x700 [ 901.948848][ C0] __sys_bpf+0x6b5/0x890 [ 901.948866][ C0] __x64_sys_bpf+0x7c/0x90 [ 901.948882][ C0] do_syscall_64+0x55/0xa0 [ 901.948898][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 901.948922][ C0] irq event stamp: 2936 [ 901.948929][ C0] hardirqs last enabled at (2935): [] seqcount_lockdep_reader_access+0x10a/0x190 [ 901.948958][ C0] hardirqs last disabled at (2936): [] exc_debug+0x73/0x140 [ 901.948980][ C0] softirqs last enabled at (2808): [] netlink_insert+0x109f/0x13a0 [ 901.949014][ C0] softirqs last disabled at (2806): [] release_sock+0x2f/0x1c0 [ 901.949043][ C0] [ 901.949043][ C0] other info that might help us debug this: [ 901.949049][ C0] Possible unsafe locking scenario: [ 901.949049][ C0] [ 901.949053][ C0] CPU0 [ 901.949056][ C0] ---- [ 901.949059][ C0] lock(&htab->lockdep_key); [ 901.949072][ C0] [ 901.949075][ C0] lock(&htab->lockdep_key); [ 901.949086][ C0] [ 901.949086][ C0] *** DEADLOCK *** [ 901.949086][ C0] [ 901.949090][ C0] no locks held by syz.0.2820/15800. [ 901.949098][ C0] [ 901.949098][ C0] stack backtrace: [ 901.949105][ C0] CPU: 0 PID: 15800 Comm: syz.0.2820 Not tainted syzkaller #0 [ 901.949124][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 901.949135][ C0] Call Trace: [ 901.949143][ C0] <#DB> [ 901.949151][ C0] dump_stack_lvl+0x18c/0x250 [ 901.949185][ C0] ? show_regs_print_info+0x20/0x20 [ 901.949221][ C0] ? print_usage_bug+0x475/0x690 [ 901.949243][ C0] ? verify_lock_unused+0x18/0x140 [ 901.949268][ C0] lock_acquire+0x2c2/0x420 [ 901.949292][ C0] ? htab_lock_bucket+0x17d/0x300 [ 901.949315][ C0] ? read_lock_is_recursive+0x20/0x20 [ 901.949347][ C0] _raw_spin_lock+0x2e/0x40 [ 901.949369][ C0] ? htab_lock_bucket+0x17d/0x300 [ 901.949390][ C0] htab_lock_bucket+0x17d/0x300 [ 901.949413][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 901.949435][ C0] ? bpf_send_signal_common+0x2c2/0x430 [ 901.949461][ C0] ? verify_lock_unused+0x18/0x140 [ 901.949484][ C0] ? jhash+0x34e/0x740 [ 901.949505][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 901.949530][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 901.949551][ C0] ? perf_callchain+0x220/0x220 [ 901.949571][ C0] ? bpf_overflow_handler+0xde/0x510 [ 901.949599][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 901.949629][ C0] bpf_prog_69bf374aa003a95d+0x46/0x4a [ 901.949651][ C0] bpf_overflow_handler+0x1fc/0x510 [ 901.949688][ C0] ? __perf_event_overflow+0x4f8/0x630 [ 901.949708][ C0] ? bpf_overflow_handler+0xde/0x510 [ 901.949735][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 901.949767][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 901.949793][ C0] __perf_event_overflow+0x447/0x630 [ 901.949821][ C0] perf_swevent_event+0x319/0x570 [ 901.949846][ C0] ? perf_tp_event+0x1520/0x1520 [ 901.949869][ C0] ? perf_trace_lock+0x198/0x3b0 [ 901.949893][ C0] perf_bp_event+0x319/0x430 [ 901.949919][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 901.949964][ C0] ? lock_acquire+0x2c2/0x420 [ 901.949991][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 901.950022][ C0] notifier_call_chain+0x197/0x380 [ 901.950050][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 901.950077][ C0] atomic_notifier_call_chain+0xda/0x180 [ 901.950104][ C0] notify_die+0x145/0x1a0 [ 901.950131][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 901.950161][ C0] ? rcu_is_watching+0x15/0xb0 [ 901.950190][ C0] notify_debug+0x2e/0x50 [ 901.950208][ C0] exc_debug+0xde/0x140 [ 901.950230][ C0] asm_exc_debug+0x1e/0x40 [ 901.950254][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 901.950276][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 901.950295][ C0] RSP: 0018:ffffc90004ed7798 EFLAGS: 00050206 [ 901.950312][ C0] RAX: ffffffff8427e501 RBX: 0000000000033fe0 RCX: 0000000000033ce0 [ 901.950325][ C0] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffffc90004ff1300 [ 901.950338][ C0] RBP: ffffc90004ed78f0 R08: ffffc90005024fdf R09: 1ffff92000a049fb [ 901.950352][ C0] R10: dffffc0000000000 R11: fffff52000a049fc R12: ffffc90004ff1000 [ 901.950366][ C0] R13: 0000200000000040 R14: ffffc90004ed7e38 R15: 1ffff920009dafc7 [ 901.950386][ C0] ? _copy_from_iter+0x1a1/0x12e0 [ 901.950421][ C0] [ 901.950427][ C0] [ 901.950433][ C0] _copy_from_iter+0x24e/0x12e0 [ 901.950462][ C0] ? find_vmap_area+0xfc/0x110 [ 901.950489][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 901.950520][ C0] ? copyout_mc+0x70/0x70 [ 901.950546][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 901.950574][ C0] ? _raw_spin_unlock+0x28/0x40 [ 901.950596][ C0] ? find_vmap_area+0xfc/0x110 [ 901.950622][ C0] ? __check_object_size+0x506/0xa20 [ 901.950645][ C0] netlink_sendmsg+0x76b/0xbf0 [ 901.950687][ C0] ? netlink_getsockopt+0x590/0x590 [ 901.950719][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 901.950746][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 901.950771][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 901.950795][ C0] ? netlink_getsockopt+0x590/0x590 [ 901.950825][ C0] ____sys_sendmsg+0x5ba/0x960 [ 901.950850][ C0] ? __asan_memset+0x22/0x40 [ 901.950878][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 901.950895][ C0] ? __import_iovec+0x5f2/0x850 [ 901.950919][ C0] ? import_iovec+0x73/0xa0 [ 901.950940][ C0] ___sys_sendmsg+0x2a6/0x360 [ 901.950963][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 901.951014][ C0] __se_sys_sendmsg+0x1c2/0x2b0 [ 901.951035][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 901.951065][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 901.951090][ C0] do_syscall_64+0x55/0xa0 [ 901.951106][ C0] ? clear_bhb_loop+0x40/0x90 [ 901.951130][ C0] ? clear_bhb_loop+0x40/0x90 [ 901.951156][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 901.951179][ C0] RIP: 0033:0x7f3b4f59c819 [ 901.951195][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.951211][ C0] RSP: 002b:00007f3b5053c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.951231][ C0] RAX: ffffffffffffffda RBX: 00007f3b4f815fa0 RCX: 00007f3b4f59c819 [ 901.951245][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 901.951257][ C0] RBP: 00007f3b4f632c91 R08: 0000000000000000 R09: 0000000000000000 [ 901.951270][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.951281][ C0] R13: 00007f3b4f816038 R14: 00007f3b4f815fa0 R15: 00007fffba7c78c8 [ 901.951305][ C0] [ 902.070476][T15800] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2820'. [ 903.637888][ T5781] Bluetooth: hci1: command 0x0406 tx timeout