last executing test programs: 2.564259618s ago: executing program 3 (id=6134): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000040001801000020696c250000000000202020db1af80bf1000000bda102000000000007010000f8ffffffb702000008000000b70300000000000085000000d200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x1, 0xb, 0x2, 0x0, 0x7, 0x34000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x1, @perf_config_ext={0xfffffffffffffff9, 0xfff}, 0xba19640fd945f3f5, 0x2000002, 0xfffffffa, 0x0, 0xffffffffffffbbfe, 0x0, 0x1ff, 0x0, 0x2}, 0x0, 0x1000, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0137050010ff"}) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0xc0045878, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2a, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 2.303646424s ago: executing program 0 (id=6140): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001440)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000080)="09bde56420ff986ab6333ac3e22bb9dff1cca25f963477", 0x17}, {&(0x7f00000000c0)}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="c0a91c820881d3ab58f8cd1c601953f10f0191248951adcc1bed532c80c3c3ad63a0d8dad28272c4f35ef7deded6402181434fa8414dd13569c0019e84a22bff1d73e4acfe2cc36e1728ab8f14ea47b4d82de0b61a0b487eade0b101a25f1f89c3221c483237ae84fadfe8904f095b5ed4bea32849c0f1fd258bab74271f87555c51a1a52022c7129e4ee354f39bf0de412b3bf0e4389e9c1efea0dcb9a2b82f401d9ff63bdd40a7891f09ec", 0xac}, {&(0x7f00000011c0)="9d4be18840bc621d8e5f9085f99f6be47b02d227ef14bee8dce58a0bc46e905455671c988c6363f7392308270b8e9d3585849806476c14b9a6cf65d980a363770fda31d0f11d4b5aa293b0a0d43e9acd437644cab50cdb76d28858495369aee6142415729226c2a8e25e968d2cdbe6be7aab7dd8129274b677ad819c79b5ec72b3eef379cbe72b2ef8a4749b817c76c3072ab5f906dd53671ff23314a96dbd931aa796ce608385c8adaa850e4edb2c983a45d7a366670c883c10a2aa6c0176", 0xbf}, {&(0x7f0000001280)="34b2f0fb838df697257a876d7c288f5394d225e68ce91a39031d9d7d9d34a23fa56a56261c5e2f804bf8c7552cef2d", 0x2f}], 0x6, &(0x7f0000001340)="6a53ad29cc6a5b3eabf3ac627ec32bde31ad23290716cb846b89849877a8fddbffb3a94fa725417a7340c238bc5cd2b8dff5b942eb35de6196494c424574f35c5db94f4885d4b14a73ff00ca29eb609b47ba281d8c337e60f53e9f304aeba73c2ce9ce6119ff4f0ea582088699e00493b114e7f00514dcfeaaa83f998198e2ac08ef8a855dee5fcbc46afe32d34c5c5a1ef729573ec3c30b712d43a3a23ec1278a791c455c936990637e3e37506ecaf4474ebebad9786b08dca36a53c4c419d7e2563121a577a26f672e1da83bd6fb2c", 0xd0, 0x40800}, 0x4004) sendmsg$tipc(r1, &(0x7f0000001880)={&(0x7f0000001480)=@name={0x1e, 0x2, 0x3, {{0x1, 0x2}, 0x2}}, 0x10, &(0x7f00000017c0)=[{&(0x7f00000014c0)="cf15dcb3d15a097d6cfe9eca7d70849a0c5d16e0311e08efa71a8dc6e758571ad1469cf0b0cfdb5299689afa961f895d01f3dba6085891ce89d1fc87278d6d8164d894fb556e4626b06aed2b2f41e8c8e19c798862b23c96208f8ab5dbea12d22c649e4a772df19ef9ef798afe0a59c0cf195199", 0x74}, {&(0x7f0000001540)="11d84b8ffffea6b51a2445100028ae8d84f9ee69faef82cbd994c86ed89df9bc1744676fe93c1ed5732fde72e41baff5fc67a82a30c1b57c1b23d6cfbd21461223cbd4b6c2b78e6936563f9a8b388fb733a37e5525a9c92614e98ea06f8d8625c6de8417a279122594d4f7b0a265ecf6f1117fd021b5c75fcda8", 0x7a}, {&(0x7f00000015c0)="d7b486efe30f60d3c343e8e485d4ef4b9735fc6579b63a4ad6259ffedb372164efe1fdb4e96e746d44ada5378b07e0a3d7c84383771497b6563aec2940b7d2860be9d2f8ef1706ce9dd5c4f4b4280f3ad688a38a96defdecb4bba56851cf2b412422d9a2655c5e998dad0513a713499db169c9081a8b180e4d52930fae2b1748991e5233196c2f3cc3ba662c79af0e0bdcdc0158726f94db41441aa97682ff6048ae823fcf6ced6ac4196d2c75db8397f5292c3b783aa50e1986097caf5cc8414535ae450a0d2b32b75b9580afd4eab7ad265aef22767df65c38", 0xda}, {&(0x7f00000016c0)="5f2f2410967d17ff68e853587c15826e0785cac6cc4ae9d24fb15b461b50e7bb5e70cce7c180608174fe0e5906362ac1f0682594b02cf1f8c0b2ca27870701bc682b206c3cad9ed4e1e458f212fc9b2a944cfa081946cddf1a33989f5fb6b4bcfe7429252d5847ddd5c3346129dd293cb26e94d8e724749b30c0a21fb3f9165e37129bb12db47e98487bddb40f30757d2d82fc9c2e9f45a00326dc0912481171bdf47bbbba597023a7520066a46d64554b1bc7187570ec9bb367c55b4c18681f555616636eaa8b296ff7bc68afc57f820a7d55ce8fd533aabc981cacade24fc8ef64e5", 0xe3}], 0x4, &(0x7f0000001800)="ca02ef80f92b5936e04ea63f6e37d3a83483972a3c101c6599006edc842738333ab1757c9c12534b90f35f58d39e1b77056862d8d62456a94bdddf23c383e38f504138ee791b8e7fc52e428c7c", 0x4d, 0x400c840}, 0x20000010) sendmsg$sock(r1, &(0x7f0000001cc0)={&(0x7f00000018c0)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001940)="da151b1e69c6adf779fcc0f68544a38d45485fd70783fb0484e507987feb4d82a9d0ad922e34d2935103540d0bac9f9272de9ae289b414706b8aae49d3195261cb44ff3ed185ba5ea83a53cead1b28d127b1ea6e6003a282059b2041cc902f8f2c9f07f8416a265bac780e18174ead4ca277a7313a8f095625c9b1c18a63118c164f1439dad9e3113dd28c3b0761f796405ec16aed1464c05ae4a33d9514a80c", 0xa0}, {&(0x7f0000001a00)="80aaa3cf8cb6c0b7bbc9ce9053a70656deebe3f3d327f14450cb85ce75d54df0be5cc9f54f527483973edb8d6f88c12a22c7f534dd5c1c5955d02feb495bb0c696f66e43a5dfa280dba1bd707b04fa2d3c70b9057d600a369b95edae95caa6cb18b274035202c8faacafe81c3a889b957b9fdec5bc507f32ebb876adc821f67551cfc735c6", 0x85}, {&(0x7f0000001ac0)="0954e7166defe67e4c6710192a8664ffef38a0f9999b8b2567c1a3e8ad10ca406306d28e7b86f89c461ba648eebfd2177d0a608abda90ed55f0991c444a1b895379f03a2cb415954859089e50410bba8839645d0aae9d117edd13eb5e55f3811c33248578d48d0a8845d822be377e240f091527dbfaeb5cfae06a17c291ca7fd0c5cea6abf6fb96311a9199a8bf56686363ed44be52236dc8988a77c0f7fd4d49318bbe9b4c0070d3d895fb976487ecdb9788c81cddec095d2564b8d5e1a6d38beefd19ec7cd83e9fad1a7e4c042f1f5cc6c941cc84ea216a441d81bdd538460e0e672cdd1594e8a5a68f3acf1", 0xed}], 0x3, &(0x7f0000001c00)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5fc}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9f}}], 0xc0}, 0x824) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d80)={{0x1, 0xffffffffffffffff}, &(0x7f0000001d00), &(0x7f0000001d40)='%pS \x00'}, 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001e80)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = perf_event_open(&(0x7f0000001ec0)={0x1, 0x80, 0x2, 0x3, 0x9, 0x6, 0x0, 0x7, 0x18000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0xd}, 0x211024, 0x0, 0x0, 0x5, 0x10000, 0xb, 0x2, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000001e00)={0x1, 0x80, 0x2, 0x3, 0x5, 0x6, 0x0, 0xe, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000001dc0), 0x4}, 0x862c, 0x3, 0x3, 0x0, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x0, 0xd2af}, r3, 0x5, r4, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002040)={@fallback=r3, 0x0, 0x1, 0x6, &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001f80)=[0x0, 0x0, 0x0], &(0x7f0000001fc0)=[0x0], &(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000023c0)={r5, 0xe0, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000002140)=[0x0], &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000021c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000002200), &(0x7f0000002240), 0x8, 0x13, 0x8, 0x8, &(0x7f0000002280)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x17, 0x7, &(0x7f0000002080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xe}, [@map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x24000}, @generic={0x0, 0x6, 0xf, 0x80, 0x4}, @jmp={0x5, 0x1, 0xd, 0x1, 0x5, 0x80, 0x4}]}, &(0x7f00000020c0)='syzkaller\x00', 0xfffff000, 0x0, 0x0, 0x41000, 0x40, '\x00', r6, @cgroup_sysctl, r5, 0x8, &(0x7f0000002400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000002440)={0x1, 0xc, 0x8, 0x3}, 0x10, 0x0, r5, 0x1, 0x0, &(0x7f0000002480)=[{0x2, 0x2, 0x10, 0xb}], 0x10, 0xe3}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002680)={r5, &(0x7f0000002580)="ebefc46ac097b64151a981dbb494870a6ebe93b38d9e1616130480085075a872cfbe201bd5887edf539daca6278331bccf1911f419d0a6ff7da1779acbff60a9586fe60217b112cdfdc65da391b589efe3f4e4fc490b377c0a77fec027c026184122ebe5c25f30407de2e8492d666ff9c3c5063dfbc7eb18716b94d677f999c1cdbeb85f9b69bb87e7c13630f91b8a8e3aef36b6b169ef176057243fc19dd75ed090237d0e69", &(0x7f0000002640)=""/16, 0x4}, 0x20) sendmsg$kcm(r5, &(0x7f0000002800)={&(0x7f00000026c0)=@pppoe={0x18, 0x0, {0x1, @remote, 'veth1_to_hsr\x00'}}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002740)="8f1e844086485045f78c1478060d305bd0afd0ade0016aa1c71d170002a05986135ee2b40ee053c069030007cbac0b2a7a", 0x31}, {&(0x7f0000002780)="cef9", 0x2}], 0x2}, 0x2000004) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000002840)) recvmsg(r0, &(0x7f0000002cc0)={&(0x7f0000002880)=@ax25={{}, [@netrom, @null, @bcast, @bcast, @default, @bcast, @default]}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002900)=""/172, 0xac}, {&(0x7f00000029c0)=""/170, 0xaa}, {&(0x7f0000002a80)=""/39, 0x27}, {&(0x7f0000002ac0)=""/164, 0xa4}, {&(0x7f0000002b80)=""/147, 0x93}], 0x5}, 0x140) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000002d00)=r5) perf_event_open$cgroup(&(0x7f0000002d40)={0x2, 0x80, 0xe, 0x9, 0x8, 0x2, 0x0, 0x6, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0xffff}, 0x100000, 0x9, 0xffff, 0x7, 0x400, 0xd, 0x8001, 0x0, 0x4c88cc76, 0x0, 0x1}, r3, 0xd, 0xffffffffffffffff, 0x1) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000002dc0), 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002e40)=@generic={&(0x7f0000002e00)='./file0\x00'}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000002ec0)={0x4, 0x80, 0x7, 0x40, 0x7, 0x3, 0x0, 0x5, 0x0, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000002e80), 0x1}, 0x60, 0x1, 0x7, 0x7, 0xd, 0x6, 0x4, 0x0, 0x40, 0x0, 0xff}, 0xffffffffffffffff, 0x4, r4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000002f40)={r0}) bpf$ENABLE_STATS(0x20, &(0x7f0000002f80), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x9, &(0x7f0000002fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xacb, 0x0, 0x0, 0x0, 0x6}, [@exit, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xf}, @ldst={0x0, 0x1, 0x3, 0x4, 0x9, 0x10, 0xfffffffffffffffc}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f0000003040)='GPL\x00', 0x1000, 0xa7, &(0x7f0000003080)=""/167, 0x41100, 0x8, '\x00', r6, 0x25, r5, 0x8, &(0x7f0000003140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000003180)={0x5, 0x7, 0x100, 0x1ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = getpid() r9 = perf_event_open(&(0x7f0000003280)={0x3, 0x80, 0xd, 0x1, 0x8, 0x2, 0x0, 0x1, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x2, @perf_config_ext={0x1000, 0x81ef}, 0x12580, 0x3, 0x4, 0x9, 0x5, 0xffffdee7, 0x871, 0x0, 0x0, 0x0, 0x7}, r8, 0x0, r5, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003300)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xb6, '\x00', r6, r5, 0x4, 0x4, 0x3}, 0x50) perf_event_open$cgroup(&(0x7f0000003380)={0x3, 0x80, 0x2, 0x5, 0x4, 0x97, 0x0, 0xffc0000, 0xe0260, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0xffff}, 0x100023, 0x2, 0xff, 0x5, 0x9, 0x7fff, 0x9, 0x0, 0xfffffffd, 0x0, 0x6f2}, r5, 0xffffffffffffffff, r9, 0x0) 2.276155684s ago: executing program 3 (id=6141): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES8=r0, @ANYBLOB="00c282aa12730000000000000010000000000000", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x200000, &(0x7f00000001c0)="f9a94d399b0e275dab17e1c2c762a22f0d181ff1c6022ab6d40efde799529e34777d56f900156e40d854f1451db9a03fdbb000f60eacb39b1b44ff9c03d68332db7c8f", 0x43, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000740)="b47b4ed2e4b1e0ffaa7fb8f6733a18748599b6262906fa25ba43a528f5a66ce6ddefb7736dd13b0b4d81e87e4381ef9b7453205c03ee0d3773d60e78b62d183e66d0c27f6c40b8a53d4e71a4b1fc5bcaa085b2cf7fe0e7c8d8") r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) socket$kcm(0x2, 0x1, 0x84) (async) r5 = socket$kcm(0x2, 0x1, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x8, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r6, &(0x7f0000000140), &(0x7f0000000200)=""/221, 0x1000000}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8) sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) (async) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r5) (async) close(r5) gettid() (async) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0xfc40) (async) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0xfc40) socket$kcm(0x21, 0x2, 0xa) (async) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 2.220260806s ago: executing program 0 (id=6142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) 2.119232378s ago: executing program 2 (id=6143): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002500ef"], 0x33fe0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0035b69fdb90d984"], 0x0, 0x26}, 0x28) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x18, &(0x7f0000000e80)=ANY=[@ANYRES64=0x0, @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x1000, &(0x7f00000019c0)=""/4096, 0x41100, 0x27}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x8}, 0x100e64, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x10, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) r4 = socket$kcm(0xa, 0x2, 0x73) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xd, 0x0, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001000850000002200000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) 2.118007668s ago: executing program 0 (id=6144): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x81) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000000180100002020642500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x7, &(0x7f00000007c0)=""/7, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x6e, 0x3ff, 0x0, 0x8, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) socket$kcm(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x22, 0x3a0, 0x5, 0x101}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r6, 0x0, 0x500}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x4}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x5, 0x6, 0x3, 0x2009, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0xf}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xe, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffffff, 0xd2, &(0x7f0000000580)=""/210, 0x41000, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000980)=[r5, r6, r2, r7, 0x1, r8, r9], &(0x7f00000009c0)=[{0x1, 0x4, 0x2, 0xb}, {0x5, 0x3, 0x3, 0x4}, {0x1, 0x2, 0x2, 0x7}, {0x5, 0x6, 0xf, 0x8}, {0x4, 0x4, 0xb, 0x6}, {0x5, 0x4, 0x10, 0x9}, {0x3, 0x3, 0x2, 0x8}, {0x0, 0x2, 0xb, 0x1}], 0x10, 0x4ad8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r10 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) setsockopt$sock_attach_bpf(r10, 0x0, 0x10, 0x0, 0x34) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r11, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.04813768s ago: executing program 1 (id=6145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000780)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x22}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}], 0x0, 0xba2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) (fail_nth: 1) 1.749999217s ago: executing program 1 (id=6146): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000080000000", @ANYRES32=0x1], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000180)="966f0d1d9555ef13e4ab05ed4bf3078a86335ae7cc0935affc99e43397cef3d7f76f97ef0bdc25019e209685b1ff5c30b6c1520d95a5ac0c2e4ce6b3fa60e7b7b66ced4b75c8bea225fe9fcf2633486be83871d3bceca7d5ef65915145189640eac28e2cdcf0c97f0dffc1bb", &(0x7f0000000200)=""/58, 0x4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000500000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 1.739722047s ago: executing program 2 (id=6147): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000780)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x22}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}], 0x0, 0xba2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.bfq.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x100000001, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 1.656407589s ago: executing program 3 (id=6148): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000200000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.65618786s ago: executing program 1 (id=6149): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/net\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x3, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) (fail_nth: 10) 1.357915627s ago: executing program 0 (id=6150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x9}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0xff66, 0x10, 0x8, 0xffffffffffffff5a, 0x0}}, 0x10) 1.351864627s ago: executing program 2 (id=6151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000180)=""/84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) (async) socketpair(0x23, 0x5, 0x3, 0x0) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000200850000001b000000b70000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x404000, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x8001, 0x9, 0xf8, 0x2}, {0x2, 0xf4, 0x7, 0x67}]}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random="008dffffffff"}) r9 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x29, 0xb, 0x0, 0x42) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0xd8, 0x10, 0x6, 0xfb, 0x0, 0x81, 0x440, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x2, @perf_bp={0x0, 0x11}, 0x4000, 0x8000000000008, 0x5, 0x7, 0xf98, 0x0, 0x2, 0x0, 0x7, 0x400001, 0xfffffffffffffff9}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x7) (async) r10 = socket$kcm(0x23, 0x5, 0x0) recvmsg$kcm(r10, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40004061) (async) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4008, 0x0, 0x0, 0x0, 0x9}, [@generic={0x6b, 0x1, 0x1, 0x14}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000200)=""/82) 1.292197518s ago: executing program 1 (id=6152): mkdir(&(0x7f0000000000)='./file0\x00', 0x20) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x16, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1dd, 0x0, 0x0, 0x0, 0xff}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x42, &(0x7f0000000200)=""/66, 0x41100, 0x1, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x2, 0x447468eb, 0xb9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x2}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x16, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1dd, 0x0, 0x0, 0x0, 0xff}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x42, &(0x7f0000000200)=""/66, 0x41100, 0x1, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x2, 0x447468eb, 0xb9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f00000000c0)='./file0\x00', r1}, 0x18) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f00000000c0)='./file0\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f0000000700)={&(0x7f0000000440)=@isdn={0x22, 0x1e, 0x1, 0x2, 0x8}, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="3f414a122720340b61e1e6e49a7aa77d1f0358104a6485230e66f6ccea7e2907f45a12c57edfafd4f42eeb3a8d39180397e71131380c0b3eb1a7a2261f56749a8fd6549120c050d3eea48dcfc1543f698309a6401243cab1ead57f07822f972142a913f04069bb826f5c5f7ed69705348fe855d4196cc04ec2026f846b81ccf73bd01a418a1bb1e4b5159d85bad258b981171a676530482f2b7fd09114dac64b5627cfd9e70176ac147229ec74ae6bfd3e33d9c63fb380d4daedfb4efc0bc126a82e78a39784824cbc224509144fe67403316d273800c43fdaff5e21cf04", 0xde}, {&(0x7f00000005c0)="a804d3ec3b0b3b316a46fd2df14ba4492976626b624e2fcdc0cda59ff44461ff7669d151b9fbab6b33ed7c1093bc35b49eb55fa1273f5448f75013912c4b8a786d7a", 0x42}], 0x2, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x25, 0xa1}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xb3}}], 0x60}, 0x85) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x10}, 0x18) socketpair(0x27, 0x80007, 0x7, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000800)={r3}) bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000880)=r1) sendmsg$inet(r2, &(0x7f0000000a40)={&(0x7f00000008c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000900)="0debe189783cb1d6e80e548b754f58670167b9b5b22bb4718c876ee7b12fd552d8d24a56a1b2cdd39e72395974a7bdf15de186652d3c389f249fe19331017839763ca52614c6695164f5fc535eb4377957fcf3cfaeadd5df26cec69ecf866b0457c6a5e95c885e187e5128dc15df4574a9a6160c0c654a5e9d4b4210a8ab65fcb76deb45150b80972bb69cd7b5f8c11a12f164e875774d23045743a0cdf2bcb4a6f1", 0xa2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x24000040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d00)={0x89}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d00)={0x89, 0x0}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', 0x0, r6, 0x3, 0x4, 0x1}, 0x50) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', 0x0, r6, 0x3, 0x4, 0x1}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1d, 0x5, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xaa9, 0x0, 0x0, 0x0, 0x10001}, [@map_val={0x18, 0x2, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000000b00)='syzkaller\x00', 0x7f, 0x58, &(0x7f0000000b40)=""/88, 0x41100, 0x40, '\x00', r8, @lsm=0x2b, r6, 0x8, &(0x7f0000000c80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x2, 0x6, 0x4, 0x2}, 0x10, r9, 0xffffffffffffffff, 0x1, &(0x7f0000000dc0)=[r0, r6, r0, r6, r6, r0, r10, r0, r0], &(0x7f0000000e00)=[{0x1, 0x4, 0x3, 0xc}], 0x10, 0x401}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000f40)=@generic={&(0x7f0000000f00)='./file0\x00', r10}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x1, 0x3, 0x8, 0x401, 0xffffffffffffffff, 0x8, '\x00', 0x0, r6, 0x5, 0x3, 0x1, 0x7}, 0x50) gettid() gettid() (async) gettid() ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001000)={r6, r6}) mkdir(&(0x7f0000001040)='./file0\x00', 0xa0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x1, '\x00', 0x0, r6, 0x2, 0x4, 0x1}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x8001, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x8001, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001500)={&(0x7f0000001140)="2f6a481a1e7e84292886866e67d224031f2985537ed84e0508ec0c448539f7aa3ea2b75eb796685af9a5e0873514bc255bd669f11e35d8d108abeb25911b16f4a80309ebe35f911f1b76071c3a007e98896a958217a3a3cc1ff103146e272d46167199423d9ce222d2a3fc1ec30124d7dfceae0a6e364f956fd97c724d94c72b142a0fca0d520de2698d7e8aefdec57f2a0208", &(0x7f0000001200)=""/211, &(0x7f0000001300)="9145f79710791f4cb4a85450c4dc83a90d2613c78d3c1ab379fe245aaa12691e424d7e6a44a290f46d957b1efd54ea1c4801cc8c63ecad21668a48ff7f4a78ea9d5ad96634923761930f875fe6a61c28be92f1fea4d8d8199f2927999991f1fd06e1c871cc0014f41dfb26a725e3eb71cecd298c35abe8b673f2bbc533267c84804fb1b8c2ef98c702b908e7e47c9fb38f4160efd5ea180c92eb5555c0d0c9f7f77af2fdf705fa41ff0e1437029a2ba3131f9f5b9294fb019105088d0a124a211c10b420e9873d2c699e542734b22938359120b6", &(0x7f0000001400)="7bf2282f5a7166f59071ac715b53282ae24fa45656da1d7d4269ea0fa990d610c211fdf8e376c2b4cabb5c5d7cd9f108bc0a42718ef09851b7c87dbc04697e5e372458ddf620a03925002ff5f1b0b3ccc72b61674151b4399991ea1878088e88bcc368a5d99fda481a5aa6705cb98e38c526af6e49deb47bbb24ba636fd664585f41c76994c8a778258e734c763f2bc110d3d19eb2457d85e92a91cde3b679d8c64ef4baaa01e660b0afa53f415ff7efa2c5fd8f3aefe0f92b7caecfd5c4371efcf0cfbe03c86d2647a4b764a755da412930dfb871a1ba28d384690ec405a958414898d118a978a22e60338fbdf725c4654aab248611343ad0a78a778744", 0xffffb76e, r5}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r12}, &(0x7f0000001540), &(0x7f0000001580)=r6}, 0x20) close(r11) (async) close(r11) r13 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001600)=r13, 0x12) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001600)=r13, 0x12) 1.277925718s ago: executing program 3 (id=6153): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) 1.203883871s ago: executing program 0 (id=6154): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/net\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x27, 0x800, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair(0x5, 0xa, 0x0, &(0x7f0000000240)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x0, 0xbf, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000280), &(0x7f0000000340), 0x8, 0x165, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x7ff, '\x00', r3, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x3, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000a40)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x4, "9fff"}]}}}], 0x18}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 1.161946862s ago: executing program 1 (id=6155): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x10, 0x800, 0x1, &(0x7f0000000080)) (async, rerun: 32) close(r1) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x6b120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80004, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0x11, 0x0, 0x8}, 0x0, 0x0, r2, 0x2) (rerun: 64) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) 1.161144092s ago: executing program 3 (id=6156): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000780)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x22}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}], 0x0, 0xba2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) (fail_nth: 2) 1.100263883s ago: executing program 2 (id=6157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000400000000000000287546988765a73036bc7c8425215554ae4b724b4e167e809b70f23e140ba2ca1b3d8f79039328668e55458d881619d2aba958a7c7920f9818505dda15022c34fb24dc1b979ecccb02cb460f434483fa9abd2dd028fef630ac9d495b7e83883ea359c57a331d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x52, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r2}, 0x8) (async) r4 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) sendmsg$inet(r4, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r4, &(0x7f0000001e80)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000002080)='&:Ee\x00', 0x5}], 0x1}, 0x8050) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, &(0x7f0000000000)=r7, 0x8) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f02000000090000d7ffffff0003000000005f00006161"], 0x0, 0x37, 0x0, 0x9}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x18000000000002a0, 0x31, 0x0, &(0x7f0000000240)="86dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000100)=0x9) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x89a0, &(0x7f0000000340)='.d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r8) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r2}) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 715.998422ms ago: executing program 3 (id=6158): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc72}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1a0000000480"], 0x20) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000200081044e81f782db44b9040a1d080211000000401280a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db701", 0x9b}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r7, @ANYBLOB="20576e07e7d5898b99ecdcfb281575aff87b4075203db4e4ba681d448547e17cee6f5fd127f1e2420fd00b4e1291cd56b6b3603454238565876a9a1e8bed8b776af5c5103a88554e3c169864f4c804253835967a5368e2144755832f4b2644b83a1380a0b841eaccabe553d9153ca4c85775ed2f1c640d2187c7fe034f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xff, '\x00', r6, r8, 0x5, 0x2, 0x5}, 0x50) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="33fe000071009154090893b3520ba54a07"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 714.230052ms ago: executing program 1 (id=6159): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x8, 0xc8, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x2121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x12b4}, 0x6120, 0xfffd, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x84140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xc, 0x7, 0x2, 0x9, 0x0, 0x9, 0x660, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0x81, 0x4}, 0x10, 0x1, 0x3588d5a4, 0x6, 0x1, 0x461d, 0x6, 0x0, 0x6c}, 0xffffffffffffffff, 0xd, r4, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x100000, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fb80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xf7c1}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="0000456a1beae5f1df7f00"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) gettid() r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000036080000b0ffffff8500000007000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) 673.792713ms ago: executing program 0 (id=6160): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x1c, &(0x7f0000000400)=ANY=[@ANYRES64=r0], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002340)={r1, 0x0, 0xbe, 0x6d, &(0x7f0000000180)="2d78b702cef81be6b325bb6d373c07fea41ade10d8021c6b18be37799c3fb2876329aca7464e1485167e1e5ba7282adc32d8e273ec926d861218e0a579691c1eb8be19473bb575835fc72c6eb5b3456a6bb76593c9d991207fa62a40f75d6a09fa67320c36e80265087d2a8803b68bcf18d2988c572a2ba11e483908058d4f38d1adb311428b718a2b5be48bc3b068e227d105638c52a8465887d77a13c5c857a13d5ac83547e50b30cc498008b1892af35d6592c676e8393f2e3339135e", &(0x7f0000000240)=""/109, 0xf5, 0x0, 0x1000, 0xb1, &(0x7f0000001200)="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", &(0x7f0000002280)="8a18a8e33d60edf0cad4da5fbc717416f266175d8be91747e663fc9fd1883df351b51ce5bb66712c3d9d9b91dcb5e60cf1802b957b6ddc7372a6d47c63bf581a623c60f6f9ffb106d3f84d788599a34f42e9fdb9d15974ef98b4e558fd1dc45554c83360ac674e4e2036eb7dd23e3bd3fa483515146a129a9dd03c8a3b2091fb6fddc4db55b7af06f3626f8705079c4a9a47934c233b36e99e5928f7fbceffbf7328a2edf6e16c8824567dd36b4c92e53f", 0x2, 0x0, 0x6c6}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 608.393265ms ago: executing program 2 (id=6161): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r2, r0, 0x10, 0x8, 0x0, @void, @value=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x10f, 0x85, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000780)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x22}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}], 0x0, 0xba2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 0s ago: executing program 2 (id=6162): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @mcast1, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000f80)=ANY=[@ANYBLOB='b *:* r'], 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) kernel console output (not intermixed with test programs): in process `syz.2.4591'. [ 826.998486][T21957] netlink: 'syz.1.4592': attribute type 2 has an invalid length. [ 827.021612][T21957] netlink: 'syz.1.4592': attribute type 8 has an invalid length. [ 827.047775][T21957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4592'. [ 827.405265][T21970] netlink: 'syz.1.4595': attribute type 1 has an invalid length. [ 827.427927][T21970] netlink: 'syz.1.4595': attribute type 3 has an invalid length. [ 827.435721][T21970] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4595'. [ 827.445557][T21970] netlink: 'syz.1.4595': attribute type 1 has an invalid length. [ 827.453714][T21970] netlink: 'syz.1.4595': attribute type 3 has an invalid length. [ 827.469915][T21970] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4595'. [ 829.211712][T18590] tipc: Subscription rejected, illegal request [ 829.972855][T15927] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 830.778542][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 830.796321][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 830.807130][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 830.817216][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 830.826020][ T5090] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 830.834108][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 831.558987][T22023] chnl_net:caif_netlink_parms(): no params data found [ 831.692394][T22023] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.705707][T22023] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.714388][T22023] bridge_slave_0: entered allmulticast mode [ 831.727426][T22023] bridge_slave_0: entered promiscuous mode [ 831.790328][T22023] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.797501][T22023] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.848727][T22023] bridge_slave_1: entered allmulticast mode [ 831.867073][T22023] bridge_slave_1: entered promiscuous mode [ 832.054263][ T2961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.123642][T22023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.156418][T22023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.326039][ T2961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.530526][T22062] __nla_validate_parse: 3 callbacks suppressed [ 832.530593][T22062] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4624'. [ 832.577492][ T2961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.606619][T22023] team0: Port device team_slave_0 added [ 832.624817][T22023] team0: Port device team_slave_1 added [ 832.899247][ T5090] Bluetooth: hci2: command tx timeout [ 833.931236][ T2961] netdevsim netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.959469][T22023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.978020][T22023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.019467][T22023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.113333][T22023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.133850][T22023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.188295][T22023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.294084][T22023] hsr_slave_0: entered promiscuous mode [ 834.314336][T22023] hsr_slave_1: entered promiscuous mode [ 834.332183][T22023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 834.355994][T22023] Cannot create hsr debugfs directory [ 834.977827][ T5090] Bluetooth: hci2: command tx timeout [ 835.712779][T22116] validate_nla: 4 callbacks suppressed [ 835.712852][T22116] netlink: 'syz.1.4637': attribute type 6 has an invalid length. [ 835.754298][T22116] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4637'. [ 836.046539][T22120] netlink: 'syz.2.4639': attribute type 39 has an invalid length. [ 836.454341][T22023] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 836.484492][T22023] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 836.533669][T22023] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 836.586405][T22023] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 837.067023][ T5090] Bluetooth: hci2: command tx timeout [ 837.934500][T22023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.096194][T22023] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.123120][T11489] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.130396][T11489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.173266][T18590] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.180492][T18590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.455755][ T2961] vlan0: left allmulticast mode [ 838.477295][ T2961] veth0_vlan: left allmulticast mode [ 838.486204][ T2961] vlan0: left promiscuous mode [ 838.499911][ T2961] : port 1(vlan0) entered disabled state [ 838.543770][ T2961] bridge_slave_1: left allmulticast mode [ 838.564340][ T2961] bridge_slave_1: left promiscuous mode [ 838.580345][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.664517][ T2961] bridge_slave_0: left allmulticast mode [ 838.701342][ T2961] bridge_slave_0: left promiscuous mode [ 838.707224][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.791666][ T2961] veth1_macvtap: left allmulticast mode [ 838.802050][ T2961] veth1_macvtap: left promiscuous mode [ 838.811648][ T2961] veth0_macvtap: left promiscuous mode [ 838.817521][ T2961] veth1_vlan: left promiscuous mode [ 838.824641][ T2961] veth0_vlan: left promiscuous mode [ 839.097793][ T5090] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 839.138279][ T5090] Bluetooth: hci2: command tx timeout [ 839.264273][T22199] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4657'. [ 839.500463][ T2961]  (unregistering): Port device geneve1 removed [ 839.537120][T22203] netlink: 'syz.1.4658': attribute type 29 has an invalid length. [ 840.383689][ T2961]  (unregistering): Port device hsr_slave_0 removed [ 840.728635][ T2961]  (unregistering): Port device team_slave_1 removed [ 840.814344][ T2961]  (unregistering): Port device team_slave_0 removed [ 841.455950][T22203] netlink: 'syz.1.4658': attribute type 29 has an invalid length. [ 841.885200][ T5090] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 841.955306][T22023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.051483][T22023] veth0_vlan: entered promiscuous mode [ 842.074850][T22023] veth1_vlan: entered promiscuous mode [ 842.101488][T22233] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4666'. [ 842.113144][T22023] veth0_macvtap: entered promiscuous mode [ 842.229881][T22023] veth1_macvtap: entered promiscuous mode [ 842.270005][T22023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.283614][T22023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.296192][T22023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.311825][T22023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.322622][T22023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.334518][T22023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.347331][T22023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.401801][T22023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.412576][T22023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.424115][T22023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 0 [ 842.436329][T22023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.446880][T22023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.461126][T22023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.472842][T22023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.481620][T22242] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4669'. [ 842.500355][T22023] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.509365][T22023] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.518827][T22023] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.527907][T22023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.660584][ T9704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.679680][ T9704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.775121][T22247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4670'. [ 842.873266][T22252] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4672'. [ 843.004033][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.012311][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.176614][ T5090] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 843.373382][T22267] netlink: 'syz.1.4676': attribute type 1 has an invalid length. [ 843.404606][T22267] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4676'. [ 843.688023][T22278] netlink: 'syz.1.4678': attribute type 21 has an invalid length. [ 843.895842][T22285] netlink: 'syz.2.4681': attribute type 2 has an invalid length. [ 843.960232][T22285] netlink: 'syz.2.4681': attribute type 1 has an invalid length. [ 844.614028][T22278] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 846.008512][ T5090] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 847.077075][T22312] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4688'. [ 847.137391][T22312] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.222766][T22312] bridge_slave_0 (unregistering): left allmulticast mode [ 847.237837][T22312] bridge_slave_0 (unregistering): left promiscuous mode [ 847.244973][T22312] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.387492][T22326] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.4693'. [ 847.399241][T22326] netlink: 'syz.3.4693': attribute type 2 has an invalid length. [ 847.638516][T22335] netlink: 'syz.2.4694': attribute type 29 has an invalid length. [ 847.667754][T22335] netlink: 'syz.2.4694': attribute type 29 has an invalid length. [ 847.689578][T22335] netlink: 'syz.2.4694': attribute type 29 has an invalid length. [ 847.734569][T22335] netlink: 'syz.2.4694': attribute type 29 has an invalid length. [ 847.750613][T22335] netlink: 'syz.2.4694': attribute type 29 has an invalid length. [ 847.763233][T22335] netlink: 'syz.2.4694': attribute type 29 has an invalid length. [ 847.859013][ T5090] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 847.957936][T22351] netlink: 'syz.3.4702': attribute type 10 has an invalid length. [ 849.328437][T22370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4705'. [ 850.249122][T22370] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.389465][T22370] bridge_slave_0 (unregistering): left allmulticast mode [ 850.417245][T22370] bridge_slave_0 (unregistering): left promiscuous mode [ 850.431911][ T5090] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 850.445964][T22370] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.170614][T22396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4716'. [ 851.325117][ T2961] macsec0: left allmulticast mode [ 851.334550][ T2961] veth1_macvtap: left allmulticast mode [ 851.344883][ T2961] macsec0: left promiscuous mode [ 851.366044][ T2961] : port 1(macsec0) entered disabled state [ 851.433608][ T2961] hsr_slave_0: left promiscuous mode [ 851.459633][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.488078][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.519427][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.550009][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.574491][ T2961] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 851.582576][ T2961] batman_adv: batadv0: Removing interface: virt_wifi0 [ 851.614683][ T2961] bridge_slave_1: left allmulticast mode [ 851.629911][ T2961] bridge_slave_1: left promiscuous mode [ 851.641977][T22407] netlink: 'syz.3.4720': attribute type 3 has an invalid length. [ 851.651724][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.662917][T22407] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4720'. [ 851.749879][ T2961] veth1_macvtap: left promiscuous mode [ 851.755469][ T2961] veth0_macvtap: left promiscuous mode [ 851.781169][ T2961] veth1_vlan: left promiscuous mode [ 853.652960][T22437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4730'. [ 853.804046][T22439] netlink: 'syz.0.4731': attribute type 11 has an invalid length. [ 853.819574][T22439] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4731'. [ 853.859830][T22440] netlink: 'syz.0.4731': attribute type 21 has an invalid length. [ 853.865545][T22445] netlink: 'syz.3.4732': attribute type 9 has an invalid length. [ 853.888560][T22445] netlink: 'syz.3.4732': attribute type 23 has an invalid length. [ 853.896594][T22445] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.4732'. [ 853.924274][T22448] netlink: 'syz.3.4732': attribute type 10 has an invalid length. [ 853.943285][T22448] hsr0: entered promiscuous mode [ 853.973127][T22448] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 854.008615][T22448] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 854.068129][T22448] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 854.093965][T22448] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 854.314631][T22450] sit0: entered allmulticast mode [ 854.455430][T22457] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.4737'. [ 855.182454][T22469] netlink: 'syz.2.4744': attribute type 10 has an invalid length. [ 855.190751][T22469] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4744'. [ 855.311533][T22477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4745'. [ 855.671242][T22491] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4749'. [ 855.680663][T22491] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4749'. [ 856.054285][T22495] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.4752'. [ 856.070641][T22495] bridge: RTM_NEWNEIGH with invalid ether address [ 856.140529][T22497] netlink: 63579 bytes leftover after parsing attributes in process `syz.0.4753'. [ 856.734390][T22513] netlink: 'syz.2.4758': attribute type 4 has an invalid length. [ 861.405717][T22590] __nla_validate_parse: 3 callbacks suppressed [ 861.405751][T22590] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4784'. [ 861.488019][T22586] : port 1(macsec0) entered blocking state [ 861.511175][T22586] : port 1(macsec0) entered disabled state [ 861.563643][T22586] macsec0: entered allmulticast mode [ 861.583000][T22586] veth1_macvtap: entered allmulticast mode [ 861.594866][T22586] macsec0: entered promiscuous mode [ 862.095679][T22608] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4789'. [ 862.655308][T22608] hsr_slave_0: left promiscuous mode [ 862.669547][T22608] hsr_slave_1: left promiscuous mode [ 862.748389][T22611] netlink: 'syz.3.4790': attribute type 10 has an invalid length. [ 862.839358][T22611] team0: Device hsr_slave_0 failed to register rx_handler [ 863.306130][T22637] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.4797'. [ 863.798001][T22653] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4803'. [ 863.828529][T22654] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4803'. [ 867.031149][T22679] netlink: 13054 bytes leftover after parsing attributes in process `syz.2.4808'. [ 867.178779][T22691] netlink: 'syz.0.4812': attribute type 16 has an invalid length. [ 867.186771][T22691] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4812'. [ 868.004495][T22714] netlink: 'syz.2.4819': attribute type 3 has an invalid length. [ 868.027876][T22714] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4819'. [ 868.433527][T22730] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.4823'. [ 870.101927][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.108602][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.504721][T22796] syzkaller0: entered promiscuous mode [ 870.527699][T22796] syzkaller0: entered allmulticast mode [ 870.764459][T22809] netlink: 'syz.2.4842': attribute type 1 has an invalid length. [ 870.782607][T22809] netlink: 'syz.2.4842': attribute type 3 has an invalid length. [ 870.814821][T22809] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4842'. [ 870.917832][T22809] netlink: 'syz.2.4842': attribute type 10 has an invalid length. [ 870.925963][T22809] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4842'. [ 872.325973][T22849] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.4851'. [ 872.820471][T22837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.892717][T22862] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.4858'. [ 873.216644][T22870] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4859'. [ 873.308755][T22872] netlink: 'syz.0.4861': attribute type 1 has an invalid length. [ 873.325672][T22872] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.4861'. [ 874.328735][T22876] veth1_to_bond: entered allmulticast mode [ 874.594579][T22883] netlink: 'syz.3.4865': attribute type 3 has an invalid length. [ 874.621208][T22883] netlink: 108956 bytes leftover after parsing attributes in process `syz.3.4865'. [ 875.099920][T22900] netlink: 'syz.3.4868': attribute type 21 has an invalid length. [ 875.138102][T22900] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4868'. [ 875.151921][T22900] netlink: 'syz.3.4868': attribute type 4 has an invalid length. [ 880.158417][T22961] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4891'. [ 880.639118][T22974] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 880.658177][T22974] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 880.669521][T22974] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 880.714770][T22974] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 880.746873][T22974] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 880.756923][T22974] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 881.018050][ T2961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.120027][T22983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 881.147475][T22983] netlink: 'syz.2.4892': attribute type 9 has an invalid length. [ 881.167985][T22983] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4892'. [ 881.205170][ T2961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.320579][ T2961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.466180][T22984] netlink: 'syz.2.4892': attribute type 9 has an invalid length. [ 881.497977][T22984] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4892'. [ 881.650343][ T2961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.730838][T22993] netlink: 'syz.0.4896': attribute type 3 has an invalid length. [ 881.773041][T22993] netlink: 108956 bytes leftover after parsing attributes in process `syz.0.4896'. [ 881.878542][T22972] chnl_net:caif_netlink_parms(): no params data found [ 882.072839][T22972] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.080703][T22972] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.088242][T22972] bridge_slave_0: entered allmulticast mode [ 882.096603][T22972] bridge_slave_0: entered promiscuous mode [ 882.105023][T23001] netlink: 'syz.2.4900': attribute type 6 has an invalid length. [ 882.114414][T23001] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4900'. [ 882.132995][T22972] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.147936][T22972] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.156700][T22972] bridge_slave_1: entered allmulticast mode [ 882.178336][T22972] bridge_slave_1: entered promiscuous mode [ 882.211545][T23005] netlink: 'syz.3.4901': attribute type 21 has an invalid length. [ 882.223344][T23005] netlink: 'syz.3.4901': attribute type 1 has an invalid length. [ 882.252384][T23005] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4901'. [ 882.331280][T22972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.368414][ T2961] tipc: Left network mode [ 882.386718][T22972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.514564][T22972] team0: Port device team_slave_0 added [ 882.759897][T22972] team0: Port device team_slave_1 added [ 882.773446][T23015] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.4910'. [ 882.898033][ T5090] Bluetooth: hci4: command tx timeout [ 883.018118][T22972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.029816][T22972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.116322][T22972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.170208][T22972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.177225][T22972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.291154][T22972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.080701][T22972] hsr_slave_0: entered promiscuous mode [ 884.095066][T22972] hsr_slave_1: entered promiscuous mode [ 884.112114][T22972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 884.128935][T22972] Cannot create hsr debugfs directory [ 884.560367][T23064] netlink: 'syz.0.4911': attribute type 3 has an invalid length. [ 884.608967][T23064] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.4911'. [ 884.977729][ T5090] Bluetooth: hci4: command tx timeout [ 885.675735][T23098] netlink: 'syz.0.4916': attribute type 1 has an invalid length. [ 885.717833][T23098] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4916'. [ 885.821090][T23093] netlink: 'syz.0.4916': attribute type 22 has an invalid length. [ 886.260733][T23112] syzkaller0: entered promiscuous mode [ 886.266293][T23112] syzkaller0: entered allmulticast mode [ 886.284666][T23125] netlink: 'syz.0.4920': attribute type 10 has an invalid length. [ 886.325444][T23125] team0: Device vxcan1 is of different type [ 887.057828][ T5090] Bluetooth: hci4: command tx timeout [ 887.756390][T23147] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4926'. [ 888.807727][T23147] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4926'. [ 889.004181][T22972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 889.016832][T22972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 889.085651][T22972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 889.137863][ T5090] Bluetooth: hci4: command tx timeout [ 889.171529][T22972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 889.224303][T23170] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.4932'. [ 889.243662][T23170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4932'. [ 889.353712][T23174] syzkaller0: entered promiscuous mode [ 889.374545][T23174] syzkaller0: entered allmulticast mode [ 890.630855][T23196] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4938'. [ 891.411196][T23196] netlink: 'syz.3.4938': attribute type 1 has an invalid length. [ 891.441046][T23196] netlink: 21820 bytes leftover after parsing attributes in process `syz.3.4938'. [ 891.682565][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.712300][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.738668][ T2961] batman_adv: batadv0: Interface deactivated: 0 [ 891.745332][ T2961] batman_adv: batadv0: Removing interface: 0 [ 893.434744][ T2961] team0 (unregistering): Port device team_slave_1 removed [ 893.479872][ T2961] team0 (unregistering): Port device team_slave_0 removed [ 893.523546][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.600818][ T2961] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 893.799181][ T2961] bond0 (unregistering): Released all slaves [ 893.999798][T23243] syzkaller0: entered promiscuous mode [ 894.005328][T23243] syzkaller0: entered allmulticast mode [ 896.195039][T22972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.279285][T22972] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.313470][T18584] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.320689][T18584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.402859][T18587] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.410157][T18587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.386310][T22972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.554414][T22972] veth0_vlan: entered promiscuous mode [ 897.581814][T22972] veth1_vlan: entered promiscuous mode [ 897.668328][T22972] veth0_macvtap: entered promiscuous mode [ 897.687099][T22972] veth1_macvtap: entered promiscuous mode [ 897.742271][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.763481][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.796865][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.825115][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.837114][T22972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.876319][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.897206][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.929757][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.968322][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.001786][T22972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.078291][T22972] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.097901][T22972] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.106825][T22972] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.146158][T22972] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.266590][ T5090] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 898.417975][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.425854][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.539642][T18590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.547517][T18590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.803726][T23352] delete_channel: no stack [ 898.972144][T23371] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4964'. [ 899.001506][T23376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 899.389194][ T5090] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 899.429245][T23395] netlink: 'syz.2.4969': attribute type 3 has an invalid length. [ 899.535490][T23395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4969'. [ 900.631455][T23406] netlink: 'syz.2.4974': attribute type 3 has an invalid length. [ 900.644468][T23408] sock: sock_timestamping_bind_phc: sock not bind to device [ 900.653597][T23406] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4974'. [ 901.006599][T23420] netlink: 'syz.2.4978': attribute type 21 has an invalid length. [ 901.038294][T23420] netlink: 'syz.2.4978': attribute type 1 has an invalid length. [ 901.158250][ T5090] Bluetooth: hci4: unexpected event 0x33 length: 15 > 10 [ 901.307440][T23429] netlink: 'syz.2.4980': attribute type 39 has an invalid length. [ 901.621508][T23441] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4982'. [ 901.654253][T23441] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 901.785074][T23448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 901.792973][T23448] IPv6: NLM_F_CREATE should be set when creating new route [ 901.800774][T23448] IPv6: NLM_F_CREATE should be set when creating new route [ 901.808428][T23448] IPv6: NLM_F_CREATE should be set when creating new route [ 901.899857][T23448] netlink: 'syz.0.4988': attribute type 9 has an invalid length. [ 901.925601][T23448] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4988'. [ 902.584097][T23469] netlink: 'syz.0.4994': attribute type 39 has an invalid length. [ 902.622337][T23469] veth0_macvtap: left promiscuous mode [ 903.061071][T23485] netlink: 'syz.0.4998': attribute type 19 has an invalid length. [ 903.158592][T23483] netlink: 'syz.3.4997': attribute type 1 has an invalid length. [ 903.709639][T23508] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5006'. [ 905.586630][T23512] netlink: 'syz.3.5007': attribute type 39 has an invalid length. [ 905.596100][T23512] veth0_macvtap: left promiscuous mode [ 905.884564][T23544] netlink: 'syz.2.5017': attribute type 21 has an invalid length. [ 906.157967][T23561] netlink: 'syz.3.5023': attribute type 21 has an invalid length. [ 906.177944][T23561] IPv6: NLM_F_CREATE should be specified when creating new route [ 906.185792][T23561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 906.193102][T23561] IPv6: NLM_F_CREATE should be set when creating new route [ 906.200441][T23561] IPv6: NLM_F_CREATE should be set when creating new route [ 906.207724][T23561] IPv6: NLM_F_CREATE should be set when creating new route [ 906.233211][T23564] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5022'. [ 906.258687][T23562] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5022'. [ 906.278059][T23564] netlink: 'syz.0.5022': attribute type 153 has an invalid length. [ 906.286948][T23564] netlink: 'syz.0.5022': attribute type 3 has an invalid length. [ 906.295385][T23564] netlink: 125364 bytes leftover after parsing attributes in process `syz.0.5022'. [ 906.349463][T23569] netlink: 'syz.2.5024': attribute type 2 has an invalid length. [ 906.378288][T23569] netlink: 'syz.2.5024': attribute type 1 has an invalid length. [ 906.409352][T23569] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5024'. [ 906.478011][T23572] sit0: left promiscuous mode [ 906.665879][T23580] netlink: 'syz.0.5028': attribute type 1 has an invalid length. [ 906.973629][T23588] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5032'. [ 906.994925][T23588] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 907.094456][T23590] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5030'. [ 907.415491][T23607] netlink: 'syz.1.5039': attribute type 30 has an invalid length. [ 908.159149][T23661] netlink: 'syz.0.5052': attribute type 29 has an invalid length. [ 908.230167][T23668] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5054'. [ 908.257888][T23668] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 908.514293][T23675] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5057'. [ 908.613137][T23684] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5061'. [ 908.640117][T23684] openvswitch: netlink: Flow actions attr not present in new flow. [ 908.760986][T23685] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5061'. [ 912.673740][T23818] validate_nla: 11 callbacks suppressed [ 912.673786][T23818] netlink: 'syz.1.5106': attribute type 29 has an invalid length. [ 912.715636][T23820] netlink: 'syz.1.5106': attribute type 29 has an invalid length. [ 914.127534][T23818] netlink: 'syz.1.5106': attribute type 29 has an invalid length. [ 914.140284][T23821] netlink: 'syz.1.5106': attribute type 21 has an invalid length. [ 914.149795][T23821] __nla_validate_parse: 4 callbacks suppressed [ 914.149809][T23821] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5106'. [ 914.170310][T23823] netlink: 'syz.1.5106': attribute type 39 has an invalid length. [ 914.186083][T23823] macvlan0: entered promiscuous mode [ 914.192973][T23823] macvlan0: entered allmulticast mode [ 914.725388][T23843] netlink: 'syz.2.5111': attribute type 1 has an invalid length. [ 914.750115][T23842] netlink: 'syz.1.5113': attribute type 9 has an invalid length. [ 914.770643][T23843] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.5111'. [ 914.783808][T23842] netlink: 'syz.1.5113': attribute type 23 has an invalid length. [ 914.806685][T23842] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.5113'. [ 914.858190][T23844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5113'. [ 915.289773][T23868] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5119'. [ 915.302415][T23868] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 915.394282][T23875] netlink: 'syz.3.5122': attribute type 2 has an invalid length. [ 915.410196][T23875] netlink: 119 bytes leftover after parsing attributes in process `syz.3.5122'. [ 915.428137][T23880] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5123'. [ 916.097214][T23908] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5133'. [ 916.167104][T23908] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 916.694914][T23924] netlink: 'syz.0.5140': attribute type 29 has an invalid length. [ 916.728432][T23924] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5140'. [ 916.750958][T23926] sit0: entered allmulticast mode [ 916.874712][T23924] macvlan0: entered promiscuous mode [ 916.892240][T23924] macvlan0: entered allmulticast mode [ 917.058614][T23931] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.5142'. [ 917.281965][T23947] syzkaller0: entered promiscuous mode [ 917.287510][T23947] syzkaller0: entered allmulticast mode [ 917.928652][T23973] validate_nla: 5 callbacks suppressed [ 917.928669][T23973] netlink: 'syz.0.5152': attribute type 21 has an invalid length. [ 917.954133][T23973] IPv6: NLM_F_CREATE should be specified when creating new route [ 917.964570][T23973] IPv6: Can't replace route, no match found [ 917.972519][T23973] netlink: 'syz.0.5152': attribute type 21 has an invalid length. [ 918.083325][T23973] netlink: 'syz.0.5152': attribute type 33 has an invalid length. [ 918.259484][T22974] Bluetooth: hci0: command 0x0406 tx timeout [ 921.485067][T23984] netlink: 'syz.1.5156': attribute type 21 has an invalid length. [ 921.493983][T23981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5154'. [ 921.504866][T23981] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5154'. [ 921.514597][T23985] netlink: 'syz.1.5156': attribute type 21 has an invalid length. [ 921.547808][T23985] netlink: 'syz.1.5156': attribute type 1 has an invalid length. [ 921.555582][T23985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5156'. [ 922.005713][T24000] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5162'. [ 922.201182][T24009] macsec0: entered promiscuous mode [ 922.221426][T24009] macsec0: entered allmulticast mode [ 922.226888][T24009] veth1_macvtap: entered allmulticast mode [ 922.550413][T24024] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.5169'. [ 924.063544][T24026] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.5171'. [ 924.111131][T24045] netlink: 'syz.3.5175': attribute type 29 has an invalid length. [ 924.129044][T24045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5175'. [ 925.997709][T24045] netlink: 'syz.3.5175': attribute type 29 has an invalid length. [ 926.005596][T24045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5175'. [ 926.038190][T24048] netlink: 'syz.3.5175': attribute type 15 has an invalid length. [ 926.046054][T24048] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5175'. [ 926.082700][T24052] : renamed from hsr0 [ 926.102628][T24055] netlink: 'syz.2.5177': attribute type 19 has an invalid length. [ 926.480429][T24076] netlink: 'syz.3.5184': attribute type 29 has an invalid length. [ 926.553716][T24076] netlink: 'syz.3.5184': attribute type 29 has an invalid length. [ 927.252247][T24080] netlink: 'syz.2.5186': attribute type 3 has an invalid length. [ 927.263658][T24080] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5186'. [ 928.040503][T24099] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5191'. [ 928.050090][T24099] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 928.536796][T24119] delete_channel: no stack [ 928.692256][T24121] netlink: 'syz.0.5200': attribute type 4 has an invalid length. [ 928.700670][T24121] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5200'. [ 928.911481][T24133] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 928.927947][T24133] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode [ 930.215244][T24177] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5219'. [ 930.989160][T24208] netlink: 'syz.2.5231': attribute type 21 has an invalid length. [ 930.997069][T24208] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5231'. [ 931.167567][T24219] netlink: 'syz.0.5234': attribute type 2 has an invalid length. [ 931.181757][T24219] netlink: 'syz.0.5234': attribute type 8 has an invalid length. [ 931.200076][T24219] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5234'. [ 931.263724][T24218] netlink: 'syz.0.5234': attribute type 2 has an invalid length. [ 931.307888][T24218] netlink: 'syz.0.5234': attribute type 8 has an invalid length. [ 931.316244][T24218] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5234'. [ 931.524881][T24239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5239'. [ 931.542071][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.555965][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.717008][T24244] netlink: 'syz.2.5241': attribute type 27 has an invalid length. [ 931.740021][T24244] netlink: 'syz.2.5241': attribute type 10 has an invalid length. [ 931.772947][T24244] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 933.003688][T24288] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5254'. [ 933.515211][T24305] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5260'. [ 933.696067][T24308] mac80211_hwsim hwsim66 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 934.240216][T24320] netlink: 'syz.3.5265': attribute type 21 has an invalid length. [ 934.267787][T24320] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5265'. [ 934.593452][T24336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5270'. [ 934.661650][T24336] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.851212][T24336] bridge_slave_0 (unregistering): left allmulticast mode [ 934.881754][T24336] bridge_slave_0 (unregistering): left promiscuous mode [ 934.914522][T24336] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.242934][T24382] netlink: 'syz.3.5286': attribute type 3 has an invalid length. [ 936.253110][T24382] netlink: 'syz.3.5286': attribute type 1 has an invalid length. [ 936.273358][T24382] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.5286'. [ 936.544433][T24395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5289'. [ 936.573714][T24397] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5291'. [ 936.803536][T24409] netlink: 'syz.0.5295': attribute type 10 has an invalid length. [ 936.815807][T24409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5295'. [ 936.895405][T24416] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5296'. [ 936.922263][T24416] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 937.195938][T24439] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5303'. [ 937.214235][T24442] netlink: 'syz.1.5305': attribute type 33 has an invalid length. [ 937.229634][T24442] `: renamed from ip6tnl0 (while UP) [ 937.299640][T24442] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 937.951193][T24483] netlink: 'syz.0.5315': attribute type 10 has an invalid length. [ 938.201786][T24483] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.320764][T24483] bridge_slave_1: left allmulticast mode [ 938.347476][T24483] bridge_slave_1: left promiscuous mode [ 938.359243][T24483] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.528979][T24487] delete_channel: no stack [ 938.695928][T24483] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 938.711932][T24485] __nla_validate_parse: 3 callbacks suppressed [ 938.711946][T24485] netlink: 17331 bytes leftover after parsing attributes in process `syz.1.5314'. [ 938.730102][T24485] tc_dump_action: action bad kind [ 939.909032][T24501] delete_channel: no stack [ 940.050094][T24503] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0xfe ref_ctr_offset(new): 0x0 [ 940.178478][T24500] syzkaller0: entered promiscuous mode [ 940.225034][T24500] syzkaller0: entered allmulticast mode [ 940.414461][T24518] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5324'. [ 940.595548][T24521] syz.0.5325[24521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 940.597770][T24521] syz.0.5325[24521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 940.675311][T24521] sctp: [Deprecated]: syz.0.5325 (pid 24521) Use of int in maxseg socket option. [ 940.675311][T24521] Use struct sctp_assoc_value instead [ 943.998811][T24547] netlink: 'syz.3.5333': attribute type 39 has an invalid length. [ 944.682151][T24579] netlink: 'syz.0.5341': attribute type 10 has an invalid length. [ 944.716422][T24579] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5341'. [ 944.818170][T24581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5342'. [ 944.839469][T24583] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5343'. [ 944.913456][T24583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5343'. [ 944.938200][T24583] : renamed from caif0 [ 944.988395][T24583] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 945.259354][T24607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 945.266655][T24607] IPv6: NLM_F_CREATE should be set when creating new route [ 945.273980][T24607] IPv6: NLM_F_CREATE should be set when creating new route [ 945.281256][T24607] IPv6: NLM_F_CREATE should be set when creating new route [ 945.749431][T24635] netlink: 'syz.2.5360': attribute type 3 has an invalid length. [ 945.757254][T24635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5360'. [ 945.789493][T24638] netlink: 'syz.1.5361': attribute type 2 has an invalid length. [ 945.841587][T24638] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5361'. [ 945.865596][T24639] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.5361'. [ 945.949871][T24639] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.5361'. [ 947.658468][ T5090] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 948.871065][ T5090] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 949.058563][T24714] netlink: 'syz.1.5383': attribute type 19 has an invalid length. [ 950.339941][T24726] netlink: 'syz.3.5387': attribute type 1 has an invalid length. [ 950.371954][T24726] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.5387'. [ 951.013764][T24725] delete_channel: no stack [ 952.205176][T24735] tap0: tun_chr_ioctl cmd 1074025677 [ 952.210860][T24735] tap0: linktype set to 778 [ 952.220037][T24738] netlink: 'syz.2.5390': attribute type 2 has an invalid length. [ 952.231740][T24738] netlink: 'syz.2.5390': attribute type 8 has an invalid length. [ 952.239636][T24738] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5390'. [ 952.355292][T22974] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 952.392721][T24747] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5391'. [ 952.422641][T24747] netlink: 'syz.1.5391': attribute type 2 has an invalid length. [ 952.438269][T24747] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5391'. [ 952.468376][T24747] netlink: 'syz.1.5391': attribute type 2 has an invalid length. [ 952.486446][T24747] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5391'. [ 953.223175][T24779] netlink: 'syz.3.5402': attribute type 10 has an invalid length. [ 953.250896][T24779] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5402'. [ 953.322401][T22974] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 953.440852][T24791] netlink: 'syz.2.5405': attribute type 21 has an invalid length. [ 953.511692][T24791] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5405'. [ 954.082808][T24812] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5413'. [ 954.100276][T22974] Bluetooth: hci2: command 0x0406 tx timeout [ 954.106465][T24812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 954.188282][ T5090] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 954.827876][T24841] netlink: 'syz.2.5423': attribute type 29 has an invalid length. [ 954.847501][T24838] netlink: 'syz.2.5423': attribute type 29 has an invalid length. [ 954.871027][T24838] netlink: 'syz.2.5423': attribute type 29 has an invalid length. [ 955.021169][ T5090] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 955.111718][T24855] netlink: 'syz.3.5428': attribute type 10 has an invalid length. [ 955.129196][T24855] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5428'. [ 955.139100][T24855] ipvlan1: entered promiscuous mode [ 955.154404][T24855] ipvlan1: entered allmulticast mode [ 955.160104][T24855] veth0_vlan: entered allmulticast mode [ 955.188254][T24855] bridge0: port 1(ipvlan1) entered blocking state [ 955.206005][T24855] bridge0: port 1(ipvlan1) entered disabled state [ 955.229363][T24855] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 955.488686][T24860] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5430'. [ 956.569355][T24882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 956.576909][T24882] IPv6: NLM_F_CREATE should be set when creating new route [ 956.584529][T24882] IPv6: NLM_F_CREATE should be set when creating new route [ 956.591949][T24882] IPv6: NLM_F_CREATE should be set when creating new route [ 956.612235][T24882] netlink: 'syz.1.5435': attribute type 9 has an invalid length. [ 956.620558][T24882] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5435'. [ 956.761056][T24883] netlink: 'syz.1.5435': attribute type 9 has an invalid length. [ 956.777745][T24883] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5435'. [ 958.482226][T24890] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.5437'. [ 958.509366][T24890] netlink: zone id is out of range [ 959.125339][T24912] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5443'. [ 959.146248][T24912] openvswitch: netlink: Tunnel attr 11249 out of range max 16 [ 959.793797][T24924] netlink: 'syz.0.5447': attribute type 21 has an invalid length. [ 959.803096][T24924] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5447'. [ 960.198392][T24931] netlink: set zone limit has 8 unknown bytes [ 960.215643][T24934] netlink: 'syz.2.5450': attribute type 7 has an invalid length. [ 960.238902][T24934] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5450'. [ 960.763009][T24959] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5457'. [ 960.810443][T24959] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 961.596839][T24980] netlink: 'syz.2.5463': attribute type 10 has an invalid length. [ 961.628962][T24980] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5463'. [ 961.765384][T24986] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5466'. [ 962.023293][T24990] netlink: 'syz.2.5467': attribute type 3 has an invalid length. [ 962.061032][T24990] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5467'. [ 962.914965][T25003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 963.043867][T25002] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 963.064768][T25002] syzkaller1: linktype set to 769 [ 963.786977][T25027] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5486'. [ 964.946228][T25059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5489'. [ 965.182131][T25074] mac80211_hwsim hwsim63 wlan1: entered allmulticast mode [ 965.214112][T25074] mac80211_hwsim hwsim63 .3c: renamed from wlan1 [ 965.370236][ T5090] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 965.777305][T25095] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5501'. [ 965.878095][T25100] netlink: 'syz.0.5511': attribute type 11 has an invalid length. [ 965.889116][T25100] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.5511'. [ 966.263315][T25103] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5503'. [ 966.390588][ T5090] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 966.640437][T25114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5507'. [ 966.729040][T25115] sit0: entered promiscuous mode [ 967.922058][ T5090] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 968.078317][T25158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5518'. [ 968.303080][T25162] netlink: 'syz.3.5522': attribute type 21 has an invalid length. [ 968.496415][T25167] netlink: 'syz.0.5521': attribute type 21 has an invalid length. [ 968.527461][T25167] IPv6: Can't replace route, no match found [ 968.886238][ T5090] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 969.052443][T25191] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.5529'. [ 969.487419][T25203] netlink: 'syz.1.5535': attribute type 5 has an invalid length. [ 969.503686][T25203] netlink: 'syz.1.5535': attribute type 1 has an invalid length. [ 969.521015][T25205] netlink: 'syz.1.5535': attribute type 39 has an invalid length. [ 969.538349][T25203] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.5535'. [ 969.655124][T25205] hsr_slave_1 (unregistering): left promiscuous mode [ 969.732058][T25204] netlink: 'syz.1.5535': attribute type 39 has an invalid length. [ 969.793450][T25215] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.5538'. [ 969.803281][T25215] openvswitch: netlink: Duplicate key (type 0). [ 970.132624][ T5090] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 970.538585][ T5090] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 970.743390][T25234] netlink: 'syz.0.5545': attribute type 39 has an invalid length. [ 970.801896][T25230] mac80211_hwsim hwsim66 wlan1: entered allmulticast mode [ 970.831444][T25234] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.5545'. [ 970.849263][T25230] mac80211_hwsim hwsim66 .3c: renamed from wlan1 [ 970.867802][T25234] openvswitch: netlink: Duplicate key (type 0). [ 970.913632][T25234] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5545'. [ 971.091820][T25241] netlink: 'syz.2.5546': attribute type 29 has an invalid length. [ 971.148312][T25241] netlink: 'syz.2.5546': attribute type 29 has an invalid length. [ 971.171666][T25237] netlink: 'syz.2.5546': attribute type 29 has an invalid length. [ 971.375850][ T5090] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 971.537159][ T5090] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 973.387813][ T5090] Bluetooth: hci2: command 0x0406 tx timeout [ 973.853458][T25271] netlink: 'syz.3.5558': attribute type 21 has an invalid length. [ 973.861932][T25271] netlink: 'syz.3.5558': attribute type 20 has an invalid length. [ 973.947772][T25281] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5560'. [ 974.013785][T25281] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.5560'. [ 974.048427][T25287] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5560'. [ 974.096117][ T5090] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 974.160033][T25285] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5561'. [ 974.592316][ T5090] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 974.652028][T25306] netlink: 'syz.3.5568': attribute type 4 has an invalid length. [ 974.663678][T25306] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5568'. [ 974.887206][T25315] netlink: 'syz.0.5570': attribute type 2 has an invalid length. [ 974.943095][T25313] netlink: 'syz.0.5570': attribute type 2 has an invalid length. [ 976.024260][T25346] netlink: 'syz.1.5579': attribute type 29 has an invalid length. [ 976.037528][T25346] netlink: 'syz.1.5579': attribute type 29 has an invalid length. [ 976.159315][T25352] netlink: 1039 bytes leftover after parsing attributes in process `syz.0.5581'. [ 976.183464][T22974] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 976.660566][T22974] Bluetooth: hci4: command tx timeout [ 976.740987][T25372] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5589'. [ 979.567213][T25377] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5591'. [ 979.584067][T25377] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5591'. [ 979.594999][T25377] bond0: (slave bond_slave_0): Releasing backup interface [ 979.609267][T25377] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 979.627959][T22974] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 980.796253][T22974] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 981.543039][T25435] syzkaller0: entered promiscuous mode [ 981.556030][T25435] syzkaller0: entered allmulticast mode [ 981.564772][T25429] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.5607'. [ 982.575420][T22974] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 983.877261][T25462] netlink: 'syz.0.5616': attribute type 21 has an invalid length. [ 984.019769][T25472] syz.1.5620: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 984.067749][T25472] CPU: 0 PID: 25472 Comm: syz.1.5620 Not tainted syzkaller #0 [ 984.075301][T25472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 984.085401][T25472] Call Trace: [ 984.088702][T25472] [ 984.091648][T25472] dump_stack_lvl+0x18c/0x250 [ 984.096353][T25472] ? show_regs_print_info+0x20/0x20 [ 984.101582][T25472] ? load_image+0x420/0x420 [ 984.106120][T25472] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 984.112573][T25472] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 984.119092][T25472] warn_alloc+0x246/0x340 [ 984.123436][T25472] ? stack_trace_save+0xaa/0x100 [ 984.128425][T25472] ? zone_watermark_ok_safe+0x230/0x230 [ 984.133994][T25472] ? kasan_set_track+0x5f/0x70 [ 984.138779][T25472] ? kasan_set_track+0x4e/0x70 [ 984.143566][T25472] ? __kasan_kmalloc+0x8f/0xa0 [ 984.148356][T25472] ? xsk_init_queue+0xad/0x100 [ 984.153132][T25472] ? xsk_setsockopt+0x4c9/0x750 [ 984.158020][T25472] ? do_sock_setsockopt+0x175/0x1a0 [ 984.163247][T25472] ? __x64_sys_setsockopt+0x182/0x200 [ 984.168652][T25472] __vmalloc_node_range+0x129/0x1320 [ 984.173989][T25472] ? free_vm_area+0x50/0x50 [ 984.178540][T25472] vmalloc_user+0x74/0x80 [ 984.182892][T25472] ? xskq_create+0xbf/0x170 [ 984.187413][T25472] xskq_create+0xbf/0x170 [ 984.191763][T25472] xsk_init_queue+0xad/0x100 [ 984.196372][T25472] xsk_setsockopt+0x4c9/0x750 [ 984.201077][T25472] ? xsk_poll+0x670/0x670 [ 984.205431][T25472] ? __fget_files+0x28/0x460 [ 984.210045][T25472] ? aa_sock_opt_perm+0x74/0x100 [ 984.215007][T25472] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 984.220567][T25472] ? security_socket_setsockopt+0x7e/0xa0 [ 984.226296][T25472] ? xsk_poll+0x670/0x670 [ 984.230638][T25472] do_sock_setsockopt+0x175/0x1a0 [ 984.235694][T25472] ? __fdget+0x180/0x210 [ 984.239957][T25472] __x64_sys_setsockopt+0x182/0x200 [ 984.245179][T25472] do_syscall_64+0x55/0xb0 [ 984.249622][T25472] ? clear_bhb_loop+0x40/0x90 [ 984.254330][T25472] ? clear_bhb_loop+0x40/0x90 [ 984.259036][T25472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 984.264961][T25472] RIP: 0033:0x7f1b5879e0d9 [ 984.269389][T25472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.289017][T25472] RSP: 002b:00007f1b59725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 984.297488][T25472] RAX: ffffffffffffffda RBX: 00007f1b58a25fa0 RCX: 00007f1b5879e0d9 [ 984.305482][T25472] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 984.313467][T25472] RBP: 00007f1b58835024 R08: 0000000000000004 R09: 0000000000000000 [ 984.321452][T25472] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 984.329440][T25472] R13: 00007f1b58a26038 R14: 00007f1b58a25fa0 R15: 00007ffe5394a668 [ 984.337455][T25472] [ 984.400577][T25472] Mem-Info: [ 984.403840][T25472] active_anon:7788 inactive_anon:0 isolated_anon:0 [ 984.403840][T25472] active_file:19025 inactive_file:40315 isolated_file:0 [ 984.403840][T25472] unevictable:768 dirty:156 writeback:0 [ 984.403840][T25472] slab_reclaimable:11026 slab_unreclaimable:96264 [ 984.403840][T25472] mapped:24576 shmem:1361 pagetables:523 [ 984.403840][T25472] sec_pagetables:0 bounce:0 [ 984.403840][T25472] kernel_misc_reclaimable:0 [ 984.403840][T25472] free:1334824 free_pcp:12632 free_cma:0 [ 984.504421][T25472] Node 0 active_anon:31152kB inactive_anon:0kB active_file:76100kB inactive_file:161052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:624kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11280kB pagetables:2092kB sec_pagetables:0kB all_unreclaimable? no [ 984.568166][T25472] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 984.757732][T25472] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.846149][T25472] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 984.884407][T25472] Node 0 DMA32 free:1428440kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:31492kB inactive_anon:0kB active_file:76100kB inactive_file:160240kB unevictable:1536kB writepending:624kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:30332kB local_pcp:15052kB free_cma:0kB [ 984.928785][T25472] lowmem_reserve[]: 0 0 0 0 0 [ 984.933666][T25472] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 984.963748][T25472] lowmem_reserve[]: 0 0 0 0 0 [ 984.968992][T25472] Node 1 Normal free:3895556kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19020kB local_pcp:7768kB free_cma:0kB [ 985.005690][T25472] lowmem_reserve[]: 0 0 0 0 0 [ 985.011033][T25472] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 985.027555][T25472] Node 0 DMA32: 3010*4kB (UM) 1848*8kB (UME) 1463*16kB (UME) 671*32kB (UME) 921*64kB (UME) 403*128kB (UME) 288*256kB (UME) 104*512kB (UME) 49*1024kB (UM) 16*2048kB (UME) 253*4096kB (UM) = 1428440kB [ 985.052143][T25472] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 985.079833][T25472] Node 1 Normal: 47*4kB (UME) 49*8kB (UME) 40*16kB (UME) 60*32kB (UME) 25*64kB (UME) 7*128kB (UME) 1*256kB (M) 1*512kB (E) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3895556kB [ 985.103285][T25472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 985.128731][T22974] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 985.129523][T25472] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 985.170867][T25472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 985.196631][T25472] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 985.219518][T25472] 60703 total pagecache pages [ 985.224217][T25472] 0 pages in swap cache [ 985.230166][T25472] Free swap = 124728kB [ 985.234438][T25472] Total swap = 124996kB [ 985.243371][T25472] 2097051 pages RAM [ 985.247326][T25472] 0 pages HighMem/MovableOnly [ 985.252088][T25472] 416959 pages reserved [ 985.256359][T25472] 0 pages cma reserved [ 985.562667][T25496] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5634'. [ 985.572179][T25496] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 985.603144][T25496] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5634'. [ 985.633062][T25494] netlink: 'syz.3.5626': attribute type 29 has an invalid length. [ 985.644541][T25496] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 985.661278][T25494] netlink: 'syz.3.5626': attribute type 29 has an invalid length. [ 985.892188][T25509] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5628'. [ 986.276936][T22974] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 986.588447][T25530] syzkaller0: entered promiscuous mode [ 986.637170][T25530] syzkaller0: entered allmulticast mode [ 986.661810][T25541] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.5638'. [ 989.375903][T25571] netlink: 'syz.1.5644': attribute type 21 has an invalid length. [ 989.384704][T25571] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5644'. [ 989.518457][T22974] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 989.818600][T25594] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5653'. [ 990.173034][T22974] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 990.510806][T25634] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5663'. [ 991.015256][T25651] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5667'. [ 992.987814][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.997517][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.291584][T22974] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 993.566417][T25674] netlink: 'syz.2.5674': attribute type 4 has an invalid length. [ 993.715389][T25674] syzkaller0: entered promiscuous mode [ 993.737711][T25674] syzkaller0: entered allmulticast mode [ 993.765826][T25675] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.5674'. [ 994.019175][T25700] netlink: set zone limit has 8 unknown bytes [ 996.995045][T22974] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 999.024224][T25715] : entered promiscuous mode [ 999.039359][T25715] : entered allmulticast mode [ 999.044551][T25721] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5687'. [ 999.292420][T25730] syzkaller0: entered promiscuous mode [ 999.298152][T25730] syzkaller0: entered allmulticast mode [ 999.336515][T25735] sock: sock_timestamping_bind_phc: sock not bind to device [ 999.378357][T25737] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5692'. [ 1001.570429][T25751] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5698'. [ 1001.614694][T25749] netlink: 'syz.1.5697': attribute type 3 has an invalid length. [ 1001.625136][T25749] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5697'. [ 1001.651636][T25751] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1002.656357][T25774] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5705'. [ 1002.862412][T25790] netlink: 'syz.0.5709': attribute type 33 has an invalid length. [ 1002.869625][T25774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.924091][T25774] bond0 (unregistering): Released all slaves [ 1003.181064][T25791] syzkaller0: entered promiscuous mode [ 1003.186739][T25791] syzkaller0: entered allmulticast mode [ 1004.089911][T25822] sock: sock_timestamping_bind_phc: sock not bind to device [ 1005.298027][T22974] Bluetooth: hci4: command 0x0406 tx timeout [ 1005.987868][T25827] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.5720'. [ 1005.997298][T25827] openvswitch: netlink: IP tunnel dst address not specified [ 1006.095186][T25831] sctp: [Deprecated]: syz.1.5721 (pid 25831) Use of int in maxseg socket option. [ 1006.095186][T25831] Use struct sctp_assoc_value instead [ 1009.180187][T25850] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5728'. [ 1009.224490][T25850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.245836][T25850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.268773][T25850] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1009.289265][T25850] bond0 (unregistering): Released all slaves [ 1009.440790][T25861] sock: sock_timestamping_bind_phc: sock not bind to device [ 1010.425157][T25874] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5735'. [ 1010.846660][T25891] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5742'. [ 1010.972359][T25901] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5745'. [ 1011.012251][T25891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.082352][T25903] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.5746'. [ 1011.099660][T25891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.185552][T25891] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1011.283508][T25891] bond0 (unregistering): Released all slaves [ 1011.628297][T25920] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5751'. [ 1012.784853][T25950] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5761'. [ 1012.794747][T25950] openvswitch: netlink: Key type 29 is not supported [ 1014.071312][T25957] pim6reg1: entered allmulticast mode [ 1014.093801][T25959] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5763'. [ 1014.605425][T25987] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.5770'. [ 1014.719245][T25991] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5772'. [ 1014.753006][T25991] openvswitch: netlink: Key type 29 is not supported [ 1016.370452][T26012] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5779'. [ 1016.518659][T26012] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1016.573783][T26012] CPU: 0 PID: 26012 Comm: syz.0.5779 Not tainted syzkaller #0 [ 1016.581307][T26012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1016.591398][T26012] Call Trace: [ 1016.594703][T26012] [ 1016.597659][T26012] dump_stack_lvl+0x18c/0x250 [ 1016.602393][T26012] ? show_regs_print_info+0x20/0x20 [ 1016.607635][T26012] ? load_image+0x420/0x420 [ 1016.612185][T26012] sysfs_warn_dup+0x8e/0xa0 [ 1016.616713][T26012] sysfs_do_create_link_sd+0xc0/0x110 [ 1016.622112][T26012] device_add_class_symlinks+0x1cf/0x240 [ 1016.627782][T26012] device_add+0x4f9/0xc40 [ 1016.632144][T26012] wiphy_register+0x1d99/0x2ac0 [ 1016.637045][T26012] ? cfg80211_event_work+0x40/0x40 [ 1016.642178][T26012] ? minstrel_ht_alloc+0x88a/0x990 [ 1016.647336][T26012] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1016.653436][T26012] ieee80211_register_hw+0x2dd8/0x3b30 [ 1016.659023][T26012] ? ieee80211_register_hw+0xf71/0x3b30 [ 1016.664608][T26012] ? ieee80211_tasklet_handler+0x20/0x20 [ 1016.670266][T26012] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1016.676179][T26012] ? __debug_object_init+0xec/0x450 [ 1016.681403][T26012] ? __asan_memset+0x22/0x40 [ 1016.686024][T26012] ? __hrtimer_init+0x189/0x270 [ 1016.690899][T26012] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1016.696667][T26012] ? mac80211_hwsim_free+0x220/0x220 [ 1016.701974][T26012] ? rcu_is_watching+0x15/0xb0 [ 1016.706757][T26012] ? kstrndup+0xbd/0x140 [ 1016.711048][T26012] hwsim_new_radio_nl+0xdad/0x1a70 [ 1016.716181][T26012] ? __nla_validate+0x50/0x50 [ 1016.720896][T26012] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1016.727283][T26012] ? __nla_parse+0x40/0x50 [ 1016.731757][T26012] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1016.738130][T26012] genl_family_rcv_msg_doit+0x21a/0x310 [ 1016.743738][T26012] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1016.749681][T26012] ? bpf_lsm_capable+0x9/0x10 [ 1016.754391][T26012] ? security_capable+0x89/0xb0 [ 1016.759270][T26012] genl_rcv_msg+0x611/0x7a0 [ 1016.763814][T26012] ? genl_bind+0x360/0x360 [ 1016.768251][T26012] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1016.774595][T26012] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1016.781196][T26012] ? ref_tracker_free+0x686/0x830 [ 1016.786279][T26012] netlink_rcv_skb+0x235/0x4c0 [ 1016.791069][T26012] ? genl_bind+0x360/0x360 [ 1016.795517][T26012] ? netlink_ack+0x1160/0x1160 [ 1016.800312][T26012] ? __lock_acquire+0x7d80/0x7d80 [ 1016.805363][T26012] ? down_read+0x1ac/0x2e0 [ 1016.809809][T26012] genl_rcv+0x28/0x40 [ 1016.813855][T26012] netlink_unicast+0x7b1/0x930 [ 1016.818648][T26012] netlink_sendmsg+0x8d0/0xbf0 [ 1016.823434][T26012] ? netlink_getsockopt+0x590/0x590 [ 1016.828668][T26012] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1016.834250][T26012] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1016.839566][T26012] ? security_socket_sendmsg+0x80/0xa0 [ 1016.845055][T26012] ? netlink_getsockopt+0x590/0x590 [ 1016.850277][T26012] ____sys_sendmsg+0x61b/0x980 [ 1016.855067][T26012] ? __asan_memset+0x22/0x40 [ 1016.859679][T26012] ? __sys_sendmsg_sock+0x30/0x30 [ 1016.864721][T26012] ? __import_iovec+0x5f2/0x850 [ 1016.869604][T26012] ? import_iovec+0x73/0xa0 [ 1016.874135][T26012] ___sys_sendmsg+0x2a6/0x360 [ 1016.878848][T26012] ? __sys_sendmsg+0x2b0/0x2b0 [ 1016.883647][T26012] ? trace_call_bpf+0xc3/0x6c0 [ 1016.888490][T26012] __se_sys_sendmsg+0x1d0/0x2c0 [ 1016.893372][T26012] ? perf_trace_preemptirq_template+0x269/0x330 [ 1016.899638][T26012] ? __x64_sys_sendmsg+0x80/0x80 [ 1016.904619][T26012] ? lockdep_hardirqs_on+0x98/0x150 [ 1016.909858][T26012] do_syscall_64+0x55/0xb0 [ 1016.914298][T26012] ? clear_bhb_loop+0x40/0x90 [ 1016.919002][T26012] ? clear_bhb_loop+0x40/0x90 [ 1016.923701][T26012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1016.929617][T26012] RIP: 0033:0x7f47a0f9e0d9 [ 1016.934057][T26012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.953693][T26012] RSP: 002b:00007f47a1e20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1016.962127][T26012] RAX: ffffffffffffffda RBX: 00007f47a1226090 RCX: 00007f47a0f9e0d9 [ 1016.970112][T26012] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1016.978095][T26012] RBP: 00007f47a1035024 R08: 0000000000000000 R09: 0000000000000000 [ 1016.986085][T26012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.994070][T26012] R13: 00007f47a1226128 R14: 00007f47a1226090 R15: 00007fffbba83a88 [ 1017.002078][T26012] [ 1018.158762][T26030] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5784'. [ 1018.178193][T26030] openvswitch: netlink: Key type 29 is not supported [ 1018.369960][T26032] netlink: 'syz.3.5785': attribute type 10 has an invalid length. [ 1018.477234][T26032] team0 (unregistering): Port device team_slave_0 removed [ 1018.532603][T26032] team0 (unregistering): Port device team_slave_1 removed [ 1018.863112][T26044] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5788'. [ 1019.251247][T26053] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5792'. [ 1019.291671][T26053] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1019.331225][T26057] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5791'. [ 1019.436509][T26057] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5791'. [ 1019.458648][T26051] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5791'. [ 1019.482041][T26055] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5791'. [ 1019.822701][T26070] netlink: 'syz.1.5798': attribute type 10 has an invalid length. [ 1019.837795][T26070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5798'. [ 1019.868815][T26070] team0: entered promiscuous mode [ 1019.873931][T26070] team_slave_0: entered promiscuous mode [ 1019.908257][T26070] team_slave_1: entered promiscuous mode [ 1019.916340][T26070] team0: entered allmulticast mode [ 1019.930828][T26070] team_slave_0: entered allmulticast mode [ 1019.936756][T26070] team_slave_1: entered allmulticast mode [ 1019.953350][T26070] bridge0: port 1(team0) entered blocking state [ 1019.962562][T26070] bridge0: port 1(team0) entered disabled state [ 1020.002521][T26074] netlink: 'syz.1.5798': attribute type 10 has an invalid length. [ 1020.018046][T26074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5798'. [ 1020.833997][T26099] netlink: 'syz.3.5806': attribute type 10 has an invalid length. [ 1021.202011][T26106] netlink: 'syz.3.5807': attribute type 10 has an invalid length. [ 1022.071166][T26118] netlink: 'syz.3.5811': attribute type 21 has an invalid length. [ 1023.140832][T26158] netlink: 'syz.1.5823': attribute type 29 has an invalid length. [ 1023.172835][T26158] __nla_validate_parse: 2 callbacks suppressed [ 1023.172872][T26158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5823'. [ 1023.193450][T26158] netlink: 'syz.1.5823': attribute type 29 has an invalid length. [ 1023.232343][T26158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5823'. [ 1023.243341][T26163] netlink: 'syz.1.5823': attribute type 15 has an invalid length. [ 1023.261477][T26163] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5823'. [ 1023.500956][T26170] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.5826'. [ 1023.660415][T26185] syz.1.5831: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1023.680084][T26185] CPU: 1 PID: 26185 Comm: syz.1.5831 Not tainted syzkaller #0 [ 1023.687597][T26185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1023.697713][T26185] Call Trace: [ 1023.701029][T26185] [ 1023.703990][T26185] dump_stack_lvl+0x18c/0x250 [ 1023.708739][T26185] ? show_regs_print_info+0x20/0x20 [ 1023.713986][T26185] ? load_image+0x420/0x420 [ 1023.718567][T26185] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1023.725034][T26185] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1023.731595][T26185] warn_alloc+0x246/0x340 [ 1023.735969][T26185] ? stack_trace_save+0xaa/0x100 [ 1023.740956][T26185] ? zone_watermark_ok_safe+0x230/0x230 [ 1023.746546][T26185] ? kasan_set_track+0x5f/0x70 [ 1023.751372][T26185] ? kasan_set_track+0x4e/0x70 [ 1023.756176][T26185] ? __kasan_kmalloc+0x8f/0xa0 [ 1023.760977][T26185] ? xsk_init_queue+0xad/0x100 [ 1023.765778][T26185] ? xsk_setsockopt+0x4c9/0x750 [ 1023.770677][T26185] ? do_sock_setsockopt+0x175/0x1a0 [ 1023.775934][T26185] ? __x64_sys_setsockopt+0x182/0x200 [ 1023.781348][T26185] __vmalloc_node_range+0x129/0x1320 [ 1023.786728][T26185] ? free_vm_area+0x50/0x50 [ 1023.791308][T26185] vmalloc_user+0x74/0x80 [ 1023.795723][T26185] ? xskq_create+0xbf/0x170 [ 1023.800261][T26185] xskq_create+0xbf/0x170 [ 1023.804626][T26185] xsk_init_queue+0xad/0x100 [ 1023.809255][T26185] xsk_setsockopt+0x4c9/0x750 [ 1023.813981][T26185] ? xsk_poll+0x670/0x670 [ 1023.818352][T26185] ? __fget_files+0x28/0x460 [ 1023.822981][T26185] ? aa_sock_opt_perm+0x74/0x100 [ 1023.827975][T26185] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1023.833570][T26185] ? security_socket_setsockopt+0x7e/0xa0 [ 1023.839332][T26185] ? xsk_poll+0x670/0x670 [ 1023.843713][T26185] do_sock_setsockopt+0x175/0x1a0 [ 1023.848795][T26185] ? __fdget+0x180/0x210 [ 1023.853098][T26185] __x64_sys_setsockopt+0x182/0x200 [ 1023.858355][T26185] do_syscall_64+0x55/0xb0 [ 1023.862826][T26185] ? clear_bhb_loop+0x40/0x90 [ 1023.867552][T26185] ? clear_bhb_loop+0x40/0x90 [ 1023.872284][T26185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.878225][T26185] RIP: 0033:0x7f1b5879e0d9 [ 1023.882679][T26185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.902338][T26185] RSP: 002b:00007f1b59704028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1023.910805][T26185] RAX: ffffffffffffffda RBX: 00007f1b58a26090 RCX: 00007f1b5879e0d9 [ 1023.918801][T26185] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 1023.926811][T26185] RBP: 00007f1b58835024 R08: 0000000000000004 R09: 0000000000000000 [ 1023.934802][T26185] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1023.942810][T26185] R13: 00007f1b58a26128 R14: 00007f1b58a26090 R15: 00007ffe5394a668 [ 1023.950823][T26185] [ 1023.969639][T26185] Mem-Info: [ 1023.972904][T26185] active_anon:7848 inactive_anon:0 isolated_anon:0 [ 1023.972904][T26185] active_file:19025 inactive_file:40331 isolated_file:0 [ 1023.972904][T26185] unevictable:768 dirty:78 writeback:0 [ 1023.972904][T26185] slab_reclaimable:11029 slab_unreclaimable:94228 [ 1023.972904][T26185] mapped:24550 shmem:1361 pagetables:554 [ 1023.972904][T26185] sec_pagetables:0 bounce:0 [ 1023.972904][T26185] kernel_misc_reclaimable:0 [ 1023.972904][T26185] free:1341935 free_pcp:7141 free_cma:0 [ 1024.019023][T26185] Node 0 active_anon:31392kB inactive_anon:0kB active_file:76100kB inactive_file:161116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98200kB dirty:312kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10704kB pagetables:2216kB sec_pagetables:0kB all_unreclaimable? no [ 1024.056556][T26185] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1024.091839][T26185] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.129567][T26185] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1024.135399][T26185] Node 0 DMA32 free:1456820kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:31452kB inactive_anon:0kB active_file:76100kB inactive_file:160296kB unevictable:1536kB writepending:312kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:9440kB local_pcp:5928kB free_cma:0kB [ 1024.168141][T26185] lowmem_reserve[]: 0 0 0 0 0 [ 1024.172917][T26185] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1024.199824][T26185] lowmem_reserve[]: 0 0 0 0 0 [ 1024.204594][T26185] Node 1 Normal free:3895556kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19020kB local_pcp:11252kB free_cma:0kB [ 1024.268850][T26185] lowmem_reserve[]: 0 0 0 0 0 [ 1024.274575][T26185] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1024.287463][T26185] Node 0 DMA32: 3253*4kB (UME) 2156*8kB (UME) 2234*16kB (UME) 1205*32kB (UME) 858*64kB (UME) 410*128kB (UME) 293*256kB (UME) 109*512kB (UME) 52*1024kB (UM) 12*2048kB (UME) 253*4096kB (UM) = 1456884kB [ 1024.307422][T26185] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1024.323247][T26185] Node 1 Normal: 47*4kB (UME) 49*8kB (UME) 40*16kB (UME) 60*32kB (UME) 25*64kB (UME) 7*128kB (UME) 1*256kB (M) 1*512kB (E) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3895556kB [ 1024.341719][T26185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1024.351869][T26185] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1024.370757][T26185] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1024.380716][T26185] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1024.390276][T26185] 60717 total pagecache pages [ 1024.395049][T26185] 0 pages in swap cache [ 1024.399625][T26185] Free swap = 124728kB [ 1024.403826][T26185] Total swap = 124996kB [ 1024.408881][T26185] 2097051 pages RAM [ 1024.413348][T26185] 0 pages HighMem/MovableOnly [ 1024.421599][T26185] 416959 pages reserved [ 1024.425856][T26185] 0 pages cma reserved [ 1024.794309][ T5090] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 1024.928549][T26203] netlink: 'syz.2.5833': attribute type 2 has an invalid length. [ 1024.988157][T26203] netlink: 119 bytes leftover after parsing attributes in process `syz.2.5833'. [ 1025.023992][T26212] netlink: 'syz.3.5838': attribute type 3 has an invalid length. [ 1025.081911][T26212] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5838'. [ 1025.210402][T26195] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5832'. [ 1025.236040][T26195] bridge_slave_1: default FDB implementation only supports local addresses [ 1025.343022][T26222] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5840'. [ 1025.372175][T26222] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5840'. [ 1025.418971][T26225] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5840'. [ 1026.183775][T26239] netlink: 'syz.0.5844': attribute type 10 has an invalid length. [ 1026.230294][T26235] can: request_module (can-proto-0) failed. [ 1028.402145][ T5090] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 1029.306888][T26263] netlink: 'syz.3.5854': attribute type 10 has an invalid length. [ 1029.339325][T26263] __nla_validate_parse: 1 callbacks suppressed [ 1029.339375][T26263] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5854'. [ 1029.364021][T26263] batman_adv: batadv0: Adding interface: veth0_vlan [ 1029.397833][T26263] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.442944][T26263] batman_adv: batadv0: Interface activated: veth0_vlan [ 1029.629309][ T5090] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 1029.776376][T26282] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5860'. [ 1029.816815][T26289] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5861'. [ 1033.441614][T26319] netlink: 'syz.1.5867': attribute type 10 has an invalid length. [ 1033.454270][T26319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5867'. [ 1033.486163][T26319] batman_adv: batadv0: Adding interface: veth0_vlan [ 1033.504663][T26319] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.537695][T26319] batman_adv: batadv0: Interface activated: veth0_vlan [ 1033.593898][T26318] sit0: entered allmulticast mode [ 1033.626027][T26322] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5870'. [ 1033.672037][T26322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1033.687637][ T5090] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 1033.692932][T26318] sit0: entered promiscuous mode [ 1033.851176][T26329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5871'. [ 1033.873659][T26334] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5871'. [ 1033.894459][T26334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1035.925819][T26339] netlink: 'syz.3.5874': attribute type 10 has an invalid length. [ 1036.011409][T26339] veth1_macvtap (unregistering): left allmulticast mode [ 1036.205917][ T5090] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 1036.375480][T26360] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.5884'. [ 1036.416602][T26365] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.5885'. [ 1036.848154][T26383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5889'. [ 1038.071149][ T5090] Bluetooth: hci4: unexpected event 0x31 length: 15 > 6 [ 1038.224068][T26403] netlink: 'syz.1.5899': attribute type 7 has an invalid length. [ 1038.251764][T26403] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5899'. [ 1038.280433][T26403] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5899'. [ 1038.291872][T26405] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5899'. [ 1038.302916][T26403] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5899'. [ 1038.429975][T26398] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5896'. [ 1038.670290][T26416] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5903'. [ 1038.750233][T26416] netlink: 'syz.3.5903': attribute type 5 has an invalid length. [ 1038.779899][T26416] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5903'. [ 1038.848168][ T5090] Bluetooth: hci4: unexpected event 0x31 length: 15 > 6 [ 1039.615794][T26443] netlink: 'syz.3.5913': attribute type 9 has an invalid length. [ 1039.797508][T26449] netlink: 'syz.2.5915': attribute type 2 has an invalid length. [ 1039.813896][T26449] netlink: 'syz.2.5915': attribute type 8 has an invalid length. [ 1039.858757][T26449] netlink: 'syz.2.5915': attribute type 2 has an invalid length. [ 1039.886935][T26449] netlink: 'syz.2.5915': attribute type 8 has an invalid length. [ 1040.145479][ T5090] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 1040.291512][T26474] netlink: 'syz.0.5924': attribute type 10 has an invalid length. [ 1040.306672][T26474] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1040.316542][T26474] netlink: 'syz.0.5924': attribute type 29 has an invalid length. [ 1040.326792][T26474] netlink: 'syz.0.5924': attribute type 29 has an invalid length. [ 1040.348168][T26474] netlink: 'syz.0.5924': attribute type 29 has an invalid length. [ 1040.641773][T26489] delete_channel: no stack [ 1043.356297][T26552] macsec0: entered promiscuous mode [ 1043.364965][T26552] macsec0: entered allmulticast mode [ 1043.402793][T26552] veth1_macvtap: entered allmulticast mode [ 1044.766677][T22974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1044.791753][T22974] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1044.813709][T22974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1044.835697][T22974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1044.855889][T22974] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1044.870055][T22974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1046.544038][T18587] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.669245][T18587] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.825914][T26605] __nla_validate_parse: 13 callbacks suppressed [ 1046.825935][T26605] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5964'. [ 1046.850923][T18587] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.868260][T26605] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1046.977774][ T5090] Bluetooth: hci1: command tx timeout [ 1047.013427][T18587] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.584965][T26582] chnl_net:caif_netlink_parms(): no params data found [ 1047.759159][T26619] validate_nla: 5 callbacks suppressed [ 1047.759177][T26619] netlink: 'syz.3.5969': attribute type 10 has an invalid length. [ 1047.787833][T26619] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5969'. [ 1048.165253][T26582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.174836][T26582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.184380][T26582] bridge_slave_0: entered allmulticast mode [ 1048.195800][T26582] bridge_slave_0: entered promiscuous mode [ 1048.223202][T26632] FAULT_INJECTION: forcing a failure. [ 1048.223202][T26632] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.275602][T26632] CPU: 1 PID: 26632 Comm: syz.1.5972 Not tainted syzkaller #0 [ 1048.283130][T26632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1048.293223][T26632] Call Trace: [ 1048.296541][T26632] [ 1048.299509][T26632] dump_stack_lvl+0x18c/0x250 [ 1048.304236][T26632] ? show_regs_print_info+0x20/0x20 [ 1048.309463][T26632] ? load_image+0x420/0x420 [ 1048.314003][T26632] ? __might_sleep+0xe0/0xe0 [ 1048.318627][T26632] ? __lock_acquire+0x7d80/0x7d80 [ 1048.323684][T26632] should_fail_ex+0x394/0x4c0 [ 1048.328395][T26632] should_failslab+0x9/0x20 [ 1048.332917][T26632] slab_pre_alloc_hook+0x59/0x300 [ 1048.337980][T26632] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1048.343728][T26632] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1048.349477][T26632] __kmem_cache_alloc_node+0x53/0x250 [ 1048.354883][T26632] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1048.360629][T26632] __kmalloc+0xa7/0x240 [ 1048.364820][T26632] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1048.370408][T26632] ? tomoyo_domain+0xd6/0x120 [ 1048.375134][T26632] tomoyo_path_number_perm+0x248/0x5e0 [ 1048.380630][T26632] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1048.386291][T26632] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1048.391781][T26632] ? ksys_write+0x1d2/0x260 [ 1048.396345][T26632] ? __fget_files+0x28/0x460 [ 1048.400974][T26632] security_file_ioctl+0x70/0xa0 [ 1048.405964][T26632] __se_sys_ioctl+0x48/0x170 [ 1048.410589][T26632] do_syscall_64+0x55/0xb0 [ 1048.415050][T26632] ? clear_bhb_loop+0x40/0x90 [ 1048.419782][T26632] ? clear_bhb_loop+0x40/0x90 [ 1048.424499][T26632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1048.430410][T26632] RIP: 0033:0x7f1b5879e0d9 [ 1048.434856][T26632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.454495][T26632] RSP: 002b:00007f1b59725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1048.462927][T26632] RAX: ffffffffffffffda RBX: 00007f1b58a25fa0 RCX: 00007f1b5879e0d9 [ 1048.470913][T26632] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004 [ 1048.478902][T26632] RBP: 00007f1b59725090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.486901][T26632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.494893][T26632] R13: 00007f1b58a26038 R14: 00007f1b58a25fa0 R15: 00007ffe5394a668 [ 1048.502912][T26632] [ 1048.518383][T26632] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1048.538075][T26582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.545235][T26582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.562117][T26617] delete_channel: no stack [ 1048.590143][T26582] bridge_slave_1: entered allmulticast mode [ 1048.606928][T26582] bridge_slave_1: entered promiscuous mode [ 1048.905513][T26656] FAULT_INJECTION: forcing a failure. [ 1048.905513][T26656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1048.919294][T26656] CPU: 0 PID: 26656 Comm: syz.1.5975 Not tainted syzkaller #0 [ 1048.926799][T26656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1048.936885][T26656] Call Trace: [ 1048.940204][T26656] [ 1048.943173][T26656] dump_stack_lvl+0x18c/0x250 [ 1048.947902][T26656] ? show_regs_print_info+0x20/0x20 [ 1048.953147][T26656] ? load_image+0x420/0x420 [ 1048.957694][T26656] ? __might_fault+0xaa/0x120 [ 1048.962432][T26656] ? __lock_acquire+0x7d80/0x7d80 [ 1048.967501][T26656] should_fail_ex+0x394/0x4c0 [ 1048.972227][T26656] _copy_from_user+0x2f/0xe0 [ 1048.976854][T26656] __sys_bpf+0x23e/0x890 [ 1048.981152][T26656] ? bpf_link_show_fdinfo+0x390/0x390 [ 1048.986591][T26656] ? lock_chain_count+0x20/0x20 [ 1048.991497][T26656] __x64_sys_bpf+0x7c/0x90 [ 1048.995948][T26656] do_syscall_64+0x55/0xb0 [ 1049.000403][T26656] ? clear_bhb_loop+0x40/0x90 [ 1049.005116][T26656] ? clear_bhb_loop+0x40/0x90 [ 1049.009821][T26656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1049.015731][T26656] RIP: 0033:0x7f1b5879e0d9 [ 1049.020157][T26656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.039770][T26656] RSP: 002b:00007f1b59725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1049.048204][T26656] RAX: ffffffffffffffda RBX: 00007f1b58a25fa0 RCX: 00007f1b5879e0d9 [ 1049.056193][T26656] RDX: 0000000000000050 RSI: 0000200000002200 RDI: 000000000000000a [ 1049.064206][T26656] RBP: 00007f1b59725090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.072194][T26656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.080191][T26656] R13: 00007f1b58a26038 R14: 00007f1b58a25fa0 R15: 00007ffe5394a668 [ 1049.088188][T26656] [ 1049.116311][ T5090] Bluetooth: hci1: command tx timeout [ 1050.963158][T26582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.975469][T26582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.147834][ T5090] Bluetooth: hci1: command tx timeout [ 1051.175500][T26582] team0: Port device team_slave_0 added [ 1051.199438][T26582] team0: Port device team_slave_1 added [ 1051.281775][T26582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.289015][T26582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.316213][T26582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.346269][T26582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.357848][T26582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.384332][T26582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.478959][T26684] netlink: 'syz.3.5984': attribute type 3 has an invalid length. [ 1051.486789][T26684] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5984'. [ 1051.505320][T26680] FAULT_INJECTION: forcing a failure. [ 1051.505320][T26680] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.538102][T26680] CPU: 0 PID: 26680 Comm: syz.0.5982 Not tainted syzkaller #0 [ 1051.545643][T26680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1051.555735][T26680] Call Trace: [ 1051.559046][T26680] [ 1051.561999][T26680] dump_stack_lvl+0x18c/0x250 [ 1051.566697][T26680] ? show_regs_print_info+0x20/0x20 [ 1051.571921][T26680] ? load_image+0x420/0x420 [ 1051.576473][T26680] ? __might_sleep+0xe0/0xe0 [ 1051.581094][T26680] ? __lock_acquire+0x7d80/0x7d80 [ 1051.586181][T26680] should_fail_ex+0x394/0x4c0 [ 1051.590901][T26680] should_failslab+0x9/0x20 [ 1051.595432][T26680] slab_pre_alloc_hook+0x59/0x300 [ 1051.600488][T26680] ? tomoyo_encode+0x2ad/0x570 [ 1051.605271][T26680] ? tomoyo_encode+0x2ad/0x570 [ 1051.610080][T26680] __kmem_cache_alloc_node+0x53/0x250 [ 1051.615485][T26680] ? tomoyo_encode+0x2ad/0x570 [ 1051.620288][T26680] __kmalloc+0xa7/0x240 [ 1051.624489][T26680] tomoyo_encode+0x2ad/0x570 [ 1051.629128][T26680] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1051.634797][T26680] ? tomoyo_domain+0xd6/0x120 [ 1051.639525][T26680] tomoyo_path_number_perm+0x248/0x5e0 [ 1051.645017][T26680] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1051.650670][T26680] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1051.656146][T26680] ? trace_call_bpf+0xc3/0x6c0 [ 1051.660925][T26680] ? trace_call_bpf+0xc3/0x6c0 [ 1051.665704][T26680] ? trace_call_bpf+0x5e9/0x6c0 [ 1051.670594][T26680] ? __fget_files+0x28/0x460 [ 1051.675216][T26680] security_file_ioctl+0x70/0xa0 [ 1051.680186][T26680] __se_sys_ioctl+0x48/0x170 [ 1051.684808][T26680] do_syscall_64+0x55/0xb0 [ 1051.689246][T26680] ? clear_bhb_loop+0x40/0x90 [ 1051.693947][T26680] ? clear_bhb_loop+0x40/0x90 [ 1051.698649][T26680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1051.704563][T26680] RIP: 0033:0x7f47a0f9e0d9 [ 1051.708993][T26680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.728613][T26680] RSP: 002b:00007f47a1e41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1051.737047][T26680] RAX: ffffffffffffffda RBX: 00007f47a1225fa0 RCX: 00007f47a0f9e0d9 [ 1051.745033][T26680] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004 [ 1051.753019][T26680] RBP: 00007f47a1e41090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.761014][T26680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.769017][T26680] R13: 00007f47a1226038 R14: 00007f47a1225fa0 R15: 00007fffbba83a88 [ 1051.777028][T26680] [ 1051.826595][T26582] hsr_slave_0: entered promiscuous mode [ 1051.841949][T26582] hsr_slave_1: entered promiscuous mode [ 1051.851676][T26582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1051.860014][T26582] Cannot create hsr debugfs directory [ 1051.898544][T26680] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1053.217840][ T5090] Bluetooth: hci1: command tx timeout [ 1054.432358][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.438855][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.954928][T18587] team0 (unregistering): Port device hsr_slave_0 removed [ 1056.063345][T18587] team0 (unregistering): Port device team_slave_1 removed [ 1056.407525][T26723] netlink: 'syz.3.5990': attribute type 39 has an invalid length. [ 1057.094223][T26747] FAULT_INJECTION: forcing a failure. [ 1057.094223][T26747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.119850][T26747] CPU: 1 PID: 26747 Comm: syz.0.5993 Not tainted syzkaller #0 [ 1057.127373][T26747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1057.137472][T26747] Call Trace: [ 1057.140789][T26747] [ 1057.143775][T26747] dump_stack_lvl+0x18c/0x250 [ 1057.148504][T26747] ? show_regs_print_info+0x20/0x20 [ 1057.153760][T26747] ? load_image+0x420/0x420 [ 1057.158311][T26747] ? __might_fault+0xaa/0x120 [ 1057.163044][T26747] ? __lock_acquire+0x7d80/0x7d80 [ 1057.168148][T26747] should_fail_ex+0x394/0x4c0 [ 1057.172879][T26747] _copy_from_user+0x2f/0xe0 [ 1057.177513][T26747] get_user_ifreq+0x6b/0x180 [ 1057.182151][T26747] sock_ioctl+0x6f1/0x7e0 [ 1057.186558][T26747] ? sock_poll+0x3e0/0x3e0 [ 1057.191042][T26747] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1057.196020][T26747] ? security_file_ioctl+0x80/0xa0 [ 1057.201171][T26747] ? sock_poll+0x3e0/0x3e0 [ 1057.205629][T26747] __se_sys_ioctl+0xfd/0x170 [ 1057.210319][T26747] do_syscall_64+0x55/0xb0 [ 1057.214815][T26747] ? clear_bhb_loop+0x40/0x90 [ 1057.219541][T26747] ? clear_bhb_loop+0x40/0x90 [ 1057.224298][T26747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1057.230253][T26747] RIP: 0033:0x7f47a0f9e0d9 [ 1057.234725][T26747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.254371][T26747] RSP: 002b:00007f47a1dff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1057.262836][T26747] RAX: ffffffffffffffda RBX: 00007f47a1226180 RCX: 00007f47a0f9e0d9 [ 1057.270861][T26747] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004 [ 1057.278882][T26747] RBP: 00007f47a1dff090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.286889][T26747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.294928][T26747] R13: 00007f47a1226218 R14: 00007f47a1226180 R15: 00007fffbba83a88 [ 1057.302972][T26747] [ 1057.601882][T26755] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5996'. [ 1057.630283][T26582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1057.707289][T26582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1057.736042][T26582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1057.754714][T26582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1058.063754][T26769] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5999'. [ 1058.246872][T26582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.423657][T26582] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.474408][T18591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.481617][T18591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.538257][T10166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.545474][T10166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.820450][T26784] netlink: 'syz.0.6002': attribute type 10 has an invalid length. [ 1059.082498][T26784] team0: Port device geneve1 added [ 1059.746333][T26582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.932533][T26582] veth0_vlan: entered promiscuous mode [ 1060.011922][T26582] veth1_vlan: entered promiscuous mode [ 1060.054243][ T5090] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 1060.162235][T26582] veth0_macvtap: entered promiscuous mode [ 1060.192236][T26582] veth1_macvtap: entered promiscuous mode [ 1060.252024][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.272339][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.307605][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.327658][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.337800][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.358589][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.380080][T26582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.403843][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.452561][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.495130][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.537588][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.553244][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.565772][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.593967][T26582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.625684][T26825] netlink: 'syz.3.6013': attribute type 21 has an invalid length. [ 1060.640025][T26825] netlink: 'syz.3.6013': attribute type 1 has an invalid length. [ 1060.665458][T26841] netlink: 'syz.1.6016': attribute type 10 has an invalid length. [ 1060.698017][T26841] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.6016'. [ 1060.720315][T26582] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.739593][T26582] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.760516][T26582] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.771708][T26582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.980612][T10166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.001979][T10166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.077835][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.096334][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.318376][T26909] netlink: 'syz.1.6029': attribute type 2 has an invalid length. [ 1063.339894][T26909] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.6029'. [ 1064.359408][T26943] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6036'. [ 1064.437811][T26949] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6036'. [ 1064.528997][T26945] netlink: 'syz.3.6037': attribute type 39 has an invalid length. [ 1064.826674][T26954] FAULT_INJECTION: forcing a failure. [ 1064.826674][T26954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1064.841052][T26954] CPU: 1 PID: 26954 Comm: syz.0.6038 Not tainted syzkaller #0 [ 1064.848602][T26954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1064.858695][T26954] Call Trace: [ 1064.862007][T26954] [ 1064.864974][T26954] dump_stack_lvl+0x18c/0x250 [ 1064.869695][T26954] ? show_regs_print_info+0x20/0x20 [ 1064.874939][T26954] ? load_image+0x420/0x420 [ 1064.879515][T26954] ? __lock_acquire+0x7d80/0x7d80 [ 1064.884591][T26954] ? snprintf+0xe9/0x140 [ 1064.888881][T26954] should_fail_ex+0x394/0x4c0 [ 1064.893609][T26954] _copy_to_user+0x2f/0xa0 [ 1064.898078][T26954] simple_read_from_buffer+0xe7/0x150 [ 1064.903547][T26954] proc_fail_nth_read+0x1e8/0x260 [ 1064.908624][T26954] ? proc_fault_inject_write+0x360/0x360 [ 1064.914315][T26954] ? fsnotify_perm+0x271/0x5e0 [ 1064.919137][T26954] ? proc_fault_inject_write+0x360/0x360 [ 1064.924815][T26954] vfs_read+0x298/0x990 [ 1064.929041][T26954] ? kernel_read+0x1e0/0x1e0 [ 1064.933709][T26954] ? __fget_files+0x28/0x460 [ 1064.938368][T26954] ? __fget_files+0x3fc/0x460 [ 1064.943123][T26954] ? __fdget_pos+0x2a3/0x330 [ 1064.947784][T26954] ? ksys_read+0x74/0x260 [ 1064.952166][T26954] ksys_read+0x151/0x260 [ 1064.956481][T26954] ? vfs_write+0x9a0/0x9a0 [ 1064.960964][T26954] ? lockdep_hardirqs_on+0x98/0x150 [ 1064.966243][T26954] do_syscall_64+0x55/0xb0 [ 1064.970710][T26954] ? clear_bhb_loop+0x40/0x90 [ 1064.975444][T26954] ? clear_bhb_loop+0x40/0x90 [ 1064.980175][T26954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1064.986115][T26954] RIP: 0033:0x7f47a0f5e90e [ 1064.990570][T26954] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1065.010209][T26954] RSP: 002b:00007f47a1e40fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1065.018665][T26954] RAX: ffffffffffffffda RBX: 00007f47a1e416c0 RCX: 00007f47a0f5e90e [ 1065.026720][T26954] RDX: 000000000000000f RSI: 00007f47a1e410a0 RDI: 0000000000000004 [ 1065.034741][T26954] RBP: 00007f47a1e41090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.042748][T26954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1065.050777][T26954] R13: 00007f47a1226038 R14: 00007f47a1225fa0 R15: 00007fffbba83a88 [ 1065.058812][T26954] [ 1065.786687][T26992] netlink: 'syz.3.6048': attribute type 2 has an invalid length. [ 1065.829587][T26992] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6048'. [ 1065.889045][T26989] sit0: entered allmulticast mode [ 1065.939514][T26996] netlink: 184172 bytes leftover after parsing attributes in process `syz.0.6049'. [ 1066.468700][T27021] netlink: 'syz.3.6057': attribute type 10 has an invalid length. [ 1066.476614][T27021] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6057'. [ 1066.776580][T27030] netlink: 'syz.0.6061': attribute type 27 has an invalid length. [ 1066.788411][T27030] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6061'. [ 1066.800230][T27023] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6059'. [ 1067.088901][T27042] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6063'. [ 1067.268387][T27045] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6064'. [ 1067.600209][ T5090] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 1067.600427][ T5090] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 1068.231007][T27088] netlink: 'syz.0.6077': attribute type 21 has an invalid length. [ 1068.249787][T27089] hsr_slave_0: left promiscuous mode [ 1068.302634][T27087] netlink: 'syz.0.6077': attribute type 21 has an invalid length. [ 1068.846348][T27109] netlink: 'syz.2.6082': attribute type 3 has an invalid length. [ 1068.871090][T27109] __nla_validate_parse: 4 callbacks suppressed [ 1068.871105][T27109] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6082'. [ 1068.880580][T27113] netlink: 'syz.2.6082': attribute type 1 has an invalid length. [ 1068.912541][T27113] netlink: 'syz.2.6082': attribute type 1 has an invalid length. [ 1070.842213][T27186] netlink: 'syz.2.6107': attribute type 2 has an invalid length. [ 1070.850434][T27186] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.6107'. [ 1071.076259][T27199] netlink: 18187 bytes leftover after parsing attributes in process `syz.1.6111'. [ 1071.291658][T27209] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6117'. [ 1071.375002][T27211] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6119'. [ 1071.389111][T27214] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.6117'. [ 1071.404263][T27211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1071.854608][T27220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1071.877943][T27220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.892942][T27220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1071.912778][T27220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.925819][T27220] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1071.936100][T27220] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1072.286346][T27240] netlink: 'syz.1.6127': attribute type 3 has an invalid length. [ 1072.306510][T27240] netlink: 'syz.1.6127': attribute type 275 has an invalid length. [ 1072.334474][T27241] Q6`Ҙ: renamed from lo (while UP) [ 1072.600097][T27257] : renamed from bond_slave_0 (while UP) [ 1072.812033][T27266] netlink: 763 bytes leftover after parsing attributes in process `syz.2.6138'. [ 1072.839866][T27266] netlink: 'syz.2.6138': attribute type 7 has an invalid length. [ 1072.858010][T27266] netlink: 'syz.2.6138': attribute type 6 has an invalid length. [ 1072.915375][T27272] netlink: 'syz.3.6141': attribute type 3 has an invalid length. [ 1072.947614][T27272] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.6141'. [ 1073.054804][T27278] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.6143'. [ 1073.152995][T27287] FAULT_INJECTION: forcing a failure. [ 1073.152995][T27287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1073.177818][T27287] CPU: 1 PID: 27287 Comm: syz.1.6145 Not tainted syzkaller #0 [ 1073.185398][T27287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1073.195491][T27287] Call Trace: [ 1073.198797][T27287] [ 1073.201786][T27287] dump_stack_lvl+0x18c/0x250 [ 1073.206512][T27287] ? show_regs_print_info+0x20/0x20 [ 1073.211788][T27287] ? load_image+0x420/0x420 [ 1073.216335][T27287] ? __might_fault+0xaa/0x120 [ 1073.221059][T27287] ? __lock_acquire+0x7d80/0x7d80 [ 1073.226135][T27287] should_fail_ex+0x394/0x4c0 [ 1073.230859][T27287] _copy_from_user+0x2f/0xe0 [ 1073.235497][T27287] __sys_bpf+0x23e/0x890 [ 1073.239783][T27287] ? bpf_link_show_fdinfo+0x390/0x390 [ 1073.245205][T27287] ? lock_chain_count+0x20/0x20 [ 1073.250104][T27287] __x64_sys_bpf+0x7c/0x90 [ 1073.254576][T27287] do_syscall_64+0x55/0xb0 [ 1073.259052][T27287] ? clear_bhb_loop+0x40/0x90 [ 1073.263764][T27287] ? clear_bhb_loop+0x40/0x90 [ 1073.268487][T27287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1073.274433][T27287] RIP: 0033:0x7f1b5879e0d9 [ 1073.278895][T27287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.298551][T27287] RSP: 002b:00007f1b59725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1073.307012][T27287] RAX: ffffffffffffffda RBX: 00007f1b58a25fa0 RCX: 00007f1b5879e0d9 [ 1073.315029][T27287] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 1073.323032][T27287] RBP: 00007f1b59725090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.331030][T27287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.339025][T27287] R13: 00007f1b58a26038 R14: 00007f1b58a25fa0 R15: 00007ffe5394a668 [ 1073.347039][T27287] [ 1073.384173][T27288] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6144'. [ 1074.101957][T27323] FAULT_INJECTION: forcing a failure. [ 1074.101957][T27323] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.137678][T27323] CPU: 1 PID: 27323 Comm: syz.3.6156 Not tainted syzkaller #0 [ 1074.145223][T27323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1074.155301][T27323] Call Trace: [ 1074.158593][T27323] [ 1074.161541][T27323] dump_stack_lvl+0x18c/0x250 [ 1074.166240][T27323] ? show_regs_print_info+0x20/0x20 [ 1074.171453][T27323] ? load_image+0x420/0x420 [ 1074.175971][T27323] ? __lock_acquire+0x7d80/0x7d80 [ 1074.181057][T27323] ? verify_lock_unused+0x140/0x140 [ 1074.186279][T27323] should_fail_ex+0x394/0x4c0 [ 1074.190983][T27323] should_failslab+0x9/0x20 [ 1074.195504][T27323] slab_pre_alloc_hook+0x59/0x300 [ 1074.200557][T27323] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 1074.206130][T27323] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 1074.211702][T27323] __kmem_cache_alloc_node+0x53/0x250 [ 1074.217107][T27323] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 1074.222679][T27323] __kmalloc+0xa7/0x240 [ 1074.226871][T27323] bpf_prog_test_run_skb+0x242/0x18f0 [ 1074.232281][T27323] ? __fget_files+0x28/0x460 [ 1074.236906][T27323] ? __fget_files+0x3fc/0x460 [ 1074.241621][T27323] ? cpu_online+0x60/0x60 [ 1074.245975][T27323] bpf_prog_test_run+0x31f/0x390 [ 1074.250944][T27323] __sys_bpf+0x49d/0x890 [ 1074.255214][T27323] ? bpf_link_show_fdinfo+0x390/0x390 [ 1074.260609][T27323] ? lock_chain_count+0x20/0x20 [ 1074.265487][T27323] __x64_sys_bpf+0x7c/0x90 [ 1074.269937][T27323] do_syscall_64+0x55/0xb0 [ 1074.274378][T27323] ? clear_bhb_loop+0x40/0x90 [ 1074.279080][T27323] ? clear_bhb_loop+0x40/0x90 [ 1074.283787][T27323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1074.289726][T27323] RIP: 0033:0x7fd56af9e0d9 [ 1074.294164][T27323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.313799][T27323] RSP: 002b:00007fd56bdfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1074.322243][T27323] RAX: ffffffffffffffda RBX: 00007fd56b225fa0 RCX: 00007fd56af9e0d9 [ 1074.330240][T27323] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 1074.338258][T27323] RBP: 00007fd56bdfd090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.346284][T27323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.354296][T27323] R13: 00007fd56b226038 R14: 00007fd56b225fa0 R15: 00007ffe6a829d38 [ 1074.362357][T27323] [ 1075.066455][T27342] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6162'. [ 1090.421715][T22974] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1090.431040][T22974] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1090.442892][T22974] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1090.451585][T22974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1090.462573][T22974] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1090.471575][T22974] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1090.568215][ T5090] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1090.577320][ T5090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1090.590645][ T5090] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1090.598676][ T5090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1090.606787][ T5090] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1090.617728][ T5090] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1091.558369][T22974] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1091.567766][T22974] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1091.576227][T22974] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1091.584939][T22974] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1091.592785][T22974] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1091.600707][T22974] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1091.979339][T15927] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1091.991185][T15927] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1092.000121][T15927] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1092.012074][T15927] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1092.020426][T15927] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1092.028280][T15927] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1092.497740][T15927] Bluetooth: hci3: command tx timeout [ 1092.657853][T15927] Bluetooth: hci5: command tx timeout [ 1093.697925][T15927] Bluetooth: hci6: command tx timeout [ 1094.097776][T15927] Bluetooth: hci7: command tx timeout [ 1094.577694][T15927] Bluetooth: hci3: command tx timeout [ 1094.738177][T15927] Bluetooth: hci5: command tx timeout [ 1095.779108][T15927] Bluetooth: hci6: command tx timeout [ 1096.177629][T15927] Bluetooth: hci7: command tx timeout [ 1096.657632][T15927] Bluetooth: hci3: command tx timeout [ 1096.820278][T15927] Bluetooth: hci5: command tx timeout [ 1097.858344][T15927] Bluetooth: hci6: command tx timeout [ 1098.257652][T15927] Bluetooth: hci7: command tx timeout [ 1098.737658][T15927] Bluetooth: hci3: command tx timeout [ 1098.897869][T15927] Bluetooth: hci5: command tx timeout [ 1099.937751][T15927] Bluetooth: hci6: command tx timeout [ 1100.340003][T15927] Bluetooth: hci7: command tx timeout [ 1126.584683][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.594226][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1150.053125][T22974] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1150.062738][T22974] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1150.070568][T22974] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1150.079064][T22974] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1150.086674][T22974] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1150.094025][T22974] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1151.131149][T15927] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1151.140281][T15927] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1151.151881][T15927] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1151.160005][T15927] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1151.171611][T15927] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1151.179007][T15927] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1152.180737][T15927] Bluetooth: hci8: command tx timeout [ 1152.509422][ T5090] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1152.522865][ T5090] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1152.532306][ T5090] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1152.541168][ T5090] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1152.548623][ T5090] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1152.556833][ T5090] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1152.566068][ T5090] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1152.574161][ T5090] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1152.582883][ T5090] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1152.590975][ T5090] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1152.598870][ T5090] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1152.606529][ T5090] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1153.217747][T27386] Bluetooth: hci9: command tx timeout [ 1154.257686][T27386] Bluetooth: hci8: command tx timeout [ 1154.657761][T27384] Bluetooth: hci11: command tx timeout [ 1154.664983][T27386] Bluetooth: hci10: command tx timeout [ 1155.297616][T27386] Bluetooth: hci9: command tx timeout [ 1156.337602][T27386] Bluetooth: hci8: command tx timeout [ 1156.737666][T27386] Bluetooth: hci10: command tx timeout [ 1156.743208][T27386] Bluetooth: hci11: command tx timeout [ 1157.377597][T27386] Bluetooth: hci9: command tx timeout [ 1158.417623][T27386] Bluetooth: hci8: command tx timeout [ 1158.817655][T27384] Bluetooth: hci10: command tx timeout [ 1158.824135][T27386] Bluetooth: hci11: command tx timeout [ 1159.457850][T27386] Bluetooth: hci9: command tx timeout [ 1160.897675][T27386] Bluetooth: hci11: command tx timeout [ 1160.903213][T27386] Bluetooth: hci10: command tx timeout [ 1169.144429][T27386] Bluetooth: hci1: command 0x0406 tx timeout [ 1208.018390][ T6458] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 13262 jiffies s: 184953 root: 0x1/. [ 1208.034498][ T6458] rcu: blocking rcu_node structures (internal RCU debug): [ 1208.060335][ T6458] Sending NMI from CPU 1 to CPUs 0: [ 1208.065620][ C0] NMI backtrace for cpu 0 [ 1208.065633][ C0] CPU: 0 PID: 27330 Comm: syz.1.6159 Not tainted syzkaller #0 [ 1208.065650][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1208.065661][ C0] RIP: 0010:perf_callchain_user+0x23b/0x15d0 [ 1208.065727][ C0] Code: e8 0a 40 86 00 41 83 fd 33 0f 85 30 01 00 00 65 4c 8b 2d a8 82 02 7f 49 8d 9d 8c 17 00 00 49 89 de 49 c1 ee 03 43 0f b6 04 3e <84> c0 0f 85 af 0f 00 00 4c 89 74 24 20 48 89 5c 24 28 41 ff 85 8c [ 1208.065742][ C0] RSP: 0018:ffffc90000005ee8 EFLAGS: 00000803 [ 1208.065763][ C0] RAX: 0000000000000000 RBX: ffff888029cb718c RCX: 0000000000000100 [ 1208.065775][ C0] RDX: ffff888029cb5a00 RSI: 0000000000000033 RDI: 0000000000000033 [ 1208.065786][ C0] RBP: 00007f1b58835024 R08: ffffffff8e8c7e2f R09: 1ffffffff1d18fc5 [ 1208.065798][ C0] R10: dffffc0000000000 R11: fffffbfff1d18fc6 R12: ffffc90004a3ff58 [ 1208.065811][ C0] R13: ffff888029cb5a00 R14: 1ffff11005396e31 R15: dffffc0000000000 [ 1208.065836][ C0] FS: 00007f1b597256c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1208.065850][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1208.065860][ C0] CR2: 0000000100000000 CR3: 000000006b5ed000 CR4: 00000000003506f0 [ 1208.065874][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1208.065884][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1208.065893][ C0] Call Trace: [ 1208.065899][ C0] [ 1208.065908][ C0] ? get_callchain_entry+0x185/0x3c0 [ 1208.065929][ C0] get_perf_callchain+0x394/0x510 [ 1208.065947][ C0] ? put_callchain_entry+0xb0/0xb0 [ 1208.065966][ C0] ? kvm_guest_state+0xb7/0xf0 [ 1208.065987][ C0] perf_prepare_sample+0x3c7/0x1db0 [ 1208.066008][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1208.066027][ C0] ? perf_callchain+0x220/0x220 [ 1208.066048][ C0] perf_event_output_forward+0x187/0x3e0 [ 1208.066067][ C0] ? perf_event_output_forward+0xb9/0x3e0 [ 1208.066083][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 1208.066107][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1208.066127][ C0] __perf_event_overflow+0x461/0x660 [ 1208.066159][ C0] perf_swevent_event+0x319/0x570 [ 1208.066177][ C0] ? perf_tp_event+0x1550/0x1550 [ 1208.066195][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 1208.066218][ C0] perf_tp_event+0x620/0x1550 [ 1208.066238][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1208.066259][ C0] ? trace_irq_enable+0xbb/0xe0 [ 1208.066293][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1208.066316][ C0] ? sched_clock_cpu+0x75/0x430 [ 1208.066331][ C0] ? ktime_get+0x24b/0x280 [ 1208.066350][ C0] perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1208.066370][ C0] perf_trace_preemptirq_template+0x269/0x330 [ 1208.066393][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1208.066414][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1208.066437][ C0] ? __irq_exit_rcu+0xdf/0x190 [ 1208.066453][ C0] ? irq_exit_rcu+0x20/0x20 [ 1208.066469][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1208.066487][ C0] trace_irq_enable+0xbb/0xe0 [ 1208.066508][ C0] trace_hardirqs_on+0x18/0x40 [ 1208.066528][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1208.066545][ C0] RIP: 0010:__neigh_event_send+0xc60/0x1480 [ 1208.066661][ C0] Code: 46 53 00 f9 85 ed 0f 84 07 03 00 00 e8 89 4f 00 f9 4d 8d 7d 40 4c 89 ff be 04 00 00 00 e8 48 ca 58 f9 31 f6 f0 41 83 45 40 01 <40> 0f 98 c5 40 0f 98 c6 bf 02 00 00 00 e8 ee 51 00 f9 40 84 ed 0f [ 1208.066674][ C0] RSP: 0018:ffffc90000006850 EFLAGS: 00000206 [ 1208.066686][ C0] RAX: ffffffff88872201 RBX: ffff88807c2cf010 RCX: ffffffff888722f8 [ 1208.066698][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88801c241240 [ 1208.066708][ C0] RBP: 0000000000000001 R08: ffff88801c241243 R09: 1ffff11003848248 [ 1208.066719][ C0] R10: dffffc0000000000 R11: ffffed1003848249 R12: ffff88823bd26058 [ 1208.066731][ C0] R13: ffff88801c241200 R14: 1ffff110477a4c0b R15: ffff88801c241240 [ 1208.066747][ C0] ? __neigh_event_send+0xb61/0x1480 [ 1208.066772][ C0] ? __neigh_event_send+0xc58/0x1480 [ 1208.066805][ C0] neigh_resolve_output+0x1a4/0x710 [ 1208.066829][ C0] ? ip_finish_output2+0x1260/0x1260 [ 1208.066853][ C0] ? ip_finish_output2+0x45a/0x1260 [ 1208.066869][ C0] ip_finish_output2+0xd97/0x1260 [ 1208.066887][ C0] ? ip_finish_output2+0x45a/0x1260 [ 1208.066908][ C0] ? ip_fragment+0x210/0x210 [ 1208.066925][ C0] ? ip_skb_dst_mtu+0x586/0x9c0 [ 1208.066943][ C0] ? ip_finish_output+0x3ec/0x4c0 [ 1208.066961][ C0] ip_output+0x2a5/0x3a0 [ 1208.066976][ C0] ? ip_output+0x5a/0x3a0 [ 1208.066992][ C0] ? __ip_queue_xmit+0x5d/0x1960 [ 1208.067008][ C0] __ip_queue_xmit+0x1056/0x1960 [ 1208.067028][ C0] ? __ip_queue_xmit+0x5d/0x1960 [ 1208.067045][ C0] __tcp_transmit_skb+0x1dd6/0x3470 [ 1208.067082][ C0] ? __tcp_send_ack+0x5a0/0x5a0 [ 1208.067106][ C0] ? __alloc_skb+0x1b2/0x2c0 [ 1208.067124][ C0] ? __tcp_send_ack+0x176/0x5a0 [ 1208.067146][ C0] tcp_validate_incoming+0xf37/0x22b0 [ 1208.067173][ C0] tcp_rcv_established+0x7e1/0x1d70 [ 1208.067192][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1208.067212][ C0] ? tcp_check_space+0xa80/0xa80 [ 1208.067229][ C0] ? rt_is_expired+0x1c/0x2d0 [ 1208.067273][ C0] ? rt_is_expired+0x250/0x2d0 [ 1208.067297][ C0] tcp_v4_do_rcv+0x6d3/0xba0 [ 1208.067314][ C0] tcp_v4_rcv+0x2358/0x2a60 [ 1208.067330][ C0] ? tcp_v4_rcv+0x1051/0x2a60 [ 1208.067360][ C0] ? tcp_filter+0x90/0x90 [ 1208.067373][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1208.067396][ C0] ip_protocol_deliver_rcu+0x20a/0x3f0 [ 1208.067412][ C0] ? ip_local_deliver_finish+0x1c2/0x510 [ 1208.067428][ C0] ip_local_deliver_finish+0x2c3/0x510 [ 1208.067446][ C0] NF_HOOK+0x32d/0x3b0 [ 1208.067459][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1208.067483][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 1208.067497][ C0] ? NF_HOOK+0x9f/0x3b0 [ 1208.067512][ C0] ? ip_local_deliver+0x180/0x180 [ 1208.067549][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 1208.067567][ C0] ? ip_local_deliver+0xb4/0x180 [ 1208.067585][ C0] ? ip_local_deliver+0x10b/0x180 [ 1208.067604][ C0] ip_sublist_rcv+0xa36/0xd60 [ 1208.067623][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1208.067652][ C0] ? ip_list_rcv+0x440/0x440 [ 1208.067666][ C0] ? __sanitizer_cov_trace_const_cmp4+0x10/0x90 [ 1208.067691][ C0] ? ip_rcv_core+0xd80/0xd80 [ 1208.067706][ C0] ? ip_rcv_core+0x898/0xd80 [ 1208.067726][ C0] ip_list_rcv+0x3ed/0x440 [ 1208.067746][ C0] ? ip_rcv_finish+0x250/0x250 [ 1208.067771][ C0] ? ip_rcv_finish+0x250/0x250 [ 1208.067798][ C0] __netif_receive_skb_list_core+0x2d9/0x770 [ 1208.067824][ C0] ? set_rps_cpu+0x6a0/0x6a0 [ 1208.067842][ C0] ? read_tsc+0x9/0x20 [ 1208.067863][ C0] netif_receive_skb_list_internal+0x943/0xca0 [ 1208.067891][ C0] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 1208.067915][ C0] ? netif_receive_skb_core+0x230/0x230 [ 1208.067938][ C0] ? dev_gro_receive+0x10b0/0x22a0 [ 1208.067986][ C0] napi_gro_receive+0x553/0xaf0 [ 1208.068005][ C0] receive_buf+0x20ab/0x3660 [ 1208.068035][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1208.068062][ C0] ? virtnet_poll_tx+0x530/0x530 [ 1208.068086][ C0] virtnet_poll+0x69e/0x1300 [ 1208.068106][ C0] ? refill_work+0x220/0x220 [ 1208.068124][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1208.068150][ C0] __napi_poll+0xbb/0x460 [ 1208.068169][ C0] net_rx_action+0x65f/0xcc0 [ 1208.068194][ C0] ? net_tx_action+0x950/0x950 [ 1208.068212][ C0] ? detach_timer+0x2b0/0x2b0 [ 1208.068229][ C0] ? lock_chain_count+0x20/0x20 [ 1208.068263][ C0] handle_softirqs+0x27d/0x820 [ 1208.068279][ C0] ? read_tsc+0x9/0x20 [ 1208.068295][ C0] ? ktime_get+0x24b/0x280 [ 1208.068314][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1208.068331][ C0] ? do_softirq+0x1a0/0x1a0 [ 1208.068349][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1208.068389][ C0] __irq_exit_rcu+0xd3/0x190 [ 1208.068406][ C0] ? irq_exit_rcu+0x20/0x20 [ 1208.068427][ C0] irq_exit_rcu+0x9/0x20 [ 1208.068441][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1208.068465][ C0] [ 1208.068470][ C0] [ 1208.068476][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1208.068495][ C0] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 1208.068517][ C0] Code: 75 11 e8 0c 10 0b 00 48 85 db 75 16 e8 02 10 0b 00 eb 15 e8 fb 0f 0b 00 e8 06 f8 12 09 48 85 db 74 ea e8 ec 0f 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 1208.068531][ C0] RSP: 0018:ffffc90004a3fa00 EFLAGS: 00000246 [ 1208.068544][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 1208.068555][ C0] RDX: ffffc90015ab4000 RSI: 0000000000003eaa RDI: 0000000000003eab [ 1208.068566][ C0] RBP: ffffc90004a3fad0 R08: ffffffff911ee5ff R09: 1ffffffff223dcbf [ 1208.068578][ C0] R10: dffffc0000000000 R11: fffffbfff223dcc0 R12: 1ffff92000947f44 [ 1208.068590][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000947f65 [ 1208.068612][ C0] ? event_function+0x300/0x300 [ 1208.068633][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 1208.068653][ C0] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 1208.068677][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1208.068699][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 1208.068732][ C0] smp_call_function_single+0x36d/0x5a0 [ 1208.068751][ C0] ? event_function+0x300/0x300 [ 1208.068775][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 1208.068794][ C0] ? event_function+0x300/0x300 [ 1208.068820][ C0] perf_install_in_context+0x5bb/0x920 [ 1208.068842][ C0] ? alloc_file_pseudo+0x1ae/0x210 [ 1208.068860][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 1208.068880][ C0] ? add_event_to_ctx+0x1170/0x1170 [ 1208.068909][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 1208.068932][ C0] ? perf_event__header_size+0x165/0x220 [ 1208.068955][ C0] __se_sys_perf_event_open+0x1841/0x1c60 [ 1208.068975][ C0] ? __fget_files+0x28/0x460 [ 1208.069002][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1208.069027][ C0] ? lock_chain_count+0x20/0x20 [ 1208.069048][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1208.069068][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1208.069088][ C0] do_syscall_64+0x55/0xb0 [ 1208.069105][ C0] ? clear_bhb_loop+0x40/0x90 [ 1208.069140][ C0] ? clear_bhb_loop+0x40/0x90 [ 1208.069160][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1208.069179][ C0] RIP: 0033:0x7f1b5879e0d9 [ 1208.069193][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.069207][ C0] RSP: 002b:00007f1b59725028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1208.069222][ C0] RAX: ffffffffffffffda RBX: 00007f1b58a25fa0 RCX: 00007f1b5879e0d9 [ 1208.069234][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000680 [ 1208.069245][ C0] RBP: 00007f1b58835024 R08: 0000000000000000 R09: 0000000000000000 [ 1208.069256][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1208.069268][ C0] R13: 00007f1b58a26038 R14: 00007f1b58a25fa0 R15: 00007ffe5394a668 [ 1208.069289][ C0] [ 1210.556594][T22974] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1210.572679][T22974] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1210.581407][T22974] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1210.593613][T22974] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1210.601754][T22974] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1210.609615][T22974] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1211.595756][ T5090] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1211.605098][ T5090] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1211.613755][ T5090] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1211.627759][ T5090] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1211.635522][ T5090] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1211.643390][ T5090] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1212.983205][T27399] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1212.992574][T27399] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1213.001040][T27399] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1213.009960][T27399] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1213.018571][T27399] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1213.026045][T27399] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1213.143511][T27402] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1213.241155][T27406] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1213.249196][T27406] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1213.257445][T27408] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1213.265751][T27408] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1213.273544][T27408] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1215.297661][T27407] Bluetooth: hci5: command 0x0406 tx timeout [ 1215.303727][T27407] Bluetooth: hci6: command 0x0406 tx timeout [ 1215.311531][T27408] Bluetooth: hci3: command 0x0406 tx timeout [ 1215.317675][T27408] Bluetooth: hci7: command 0x0406 tx timeout