last executing test programs: 33.557947966s ago: executing program 2 (id=1120): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x5006) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2100) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000004000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.75693865s ago: executing program 2 (id=1124): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0xffffffffffffff9f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1c, &(0x7f00000016c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32, @ANYBLOB="000000005000000018450000080000000000000000000000c135fcff01000000bf91000000000000b7020000010000008500000084000000b7000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2}, 0x0) 32.177421864s ago: executing program 2 (id=1130): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000580)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7be000014000000b703000000000000850000000000005509010000000008000000fcff001f0000bf91000000000000b7020000000000008500000000000000b70000008b88aebc9500"/104], &(0x7f0000000100)='GPL\x00'}, 0x94) 31.887178852s ago: executing program 2 (id=1134): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x1, r3, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x0, 0x0}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061115c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f0000000980)="d70a5a6ca2c27494bd560ca806726993f5601cca7ec900e4803b6602b7fac1b8869e9686d4eb47ca874e96d2a67032ef19891003f83f9497a7fb3e65cf671da906cb13fb01def7fcc4244db88e9352eae306c183dcaefc1beaff9d49132eb882ece23d6b1f06f1169362f31cdbd1827fd377e69c940230425b32e11eeff6bf6ff47135d21fb4315ce70c00914fedc49b0195deb76226f0700bcc7386e4cc4d82fcbb1428fdcdda2f7fb6b2cfd407bd1694ac572839e5a86cbd91c026ba5810ba0538"}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='devlink_hwerr\x00', r5}, 0x11) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x53f, 0x4, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x7eae}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000002b000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001f54680000b7071c12bf0000008500000083000000bf0900000000000255090100000000009500000000000090185600000f00000000fe5e0000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000007c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0xa, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x10, 0x3}, 0x94) 31.172191304s ago: executing program 2 (id=1137): socket$kcm(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @ldst, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10}, 0x80) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30b) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r5 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0xff, 0x0, 0x0, 0x0, 0x374, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xf4b, 0xfffffffffffffff5}, 0x114105, 0x4, 0xfffffffc, 0x6, 0x5, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$TUNGETVNETLE(r0, 0x80047456, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4, 0x0, 0x78, 0x0, &(0x7f00000002c0)="101a04106a4c93820f5cf020ec5f80b85448c568816256fc22f369ca1fb470a20ff4d7203fd1cb1fbe144d5ec3f459fe5f9fb1f438e0e6101124676376a32a25cc003154bd33279c96eac261f544636e18793e1be406cf2ae9358fd96205c3ba3ac22025b9291b9ba5667d545649a28d1e0efc805e288d49", &(0x7f00000000c0), 0x1, 0x0, 0x3}, 0x50) 30.924661577s ago: executing program 2 (id=1140): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004800100ffff"], 0x48) 14.527223044s ago: executing program 32 (id=1140): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004800100ffff"], 0x48) 2.903832345s ago: executing program 1 (id=1289): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e00b90f177020000000000000000", 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec0, 0x0, 0x0, 0x4, 0x0, 0x939}, 0x24) gettid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00'}, 0x80) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x28, 0x1, 0x1, [r1, r1, r1, r3, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x40, 0x200088c5}, 0x40800) 2.704813811s ago: executing program 3 (id=1294): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0xffffffffffffff9f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1c, &(0x7f00000016c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32, @ANYBLOB="000000005000000018450000080000000000000000000000c135fcff01000000bf91000000000000b7020000010000008500000084000000b7000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2}, 0x0) 2.612177462s ago: executing program 1 (id=1295): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001240)=""/251, 0xfb}, {&(0x7f0000001ac0)=""/4081, 0xff1}], 0x2}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4020940d, &(0x7f00000005c0)=0x81000000000004) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2000000000000f, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0xd3}, @exit], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x11}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_freezer_state(r2, &(0x7f0000000380)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 2.333496258s ago: executing program 4 (id=1298): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000280)=0x20000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="0209000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1, 0x0, 0x2b}, 0x42) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="81b2da", 0x3}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b00000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53, 0x2000000}, 0x20) openat$cgroup_ro(r4, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 2.315744161s ago: executing program 3 (id=1299): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017002d63d25a80648c2594f90ba3c92b", 0x14}], 0x1}, 0x0) 2.232537361s ago: executing program 0 (id=1300): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x6, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f00000002c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @jmp={0x5, 0x1, 0xd, 0x6, 0x7, 0xfffffffffffffff4, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4a6}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}], &(0x7f0000000000)='GPL\x00', 0x4, 0xdb, &(0x7f0000000080)=""/222, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffbe}, 0x94) 2.190621217s ago: executing program 1 (id=1301): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x1, r3, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x0, 0x0}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061115c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f0000000980)="d70a5a6ca2c27494bd560ca806726993f5601cca7ec900e4803b6602b7fac1b8869e9686d4eb47ca874e96d2a67032ef19891003f83f9497a7fb3e65cf671da906cb13fb01def7fcc4244db88e9352eae306c183dcaefc1beaff9d49132eb882ece23d6b1f06f1169362f31cdbd1827fd377e69c940230425b32e11eeff6bf6ff47135d21fb4315ce70c00914fedc49b0195deb76226f0700bcc7386e4cc4d82fcbb1428fdcdda2f7fb6b2cfd407bd1694ac572839e5a86cbd91c026ba5810ba0538"}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='devlink_hwerr\x00', r5}, 0x11) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x53f, 0x4, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x7eae}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000002b000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001f54680000b7071c12bf0000008500000083000000bf0900000000000255090100000000009500000000000090185600000f00000000fe5e0000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000007c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0xa, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x10, 0x3}, 0x94) 2.106433038s ago: executing program 0 (id=1302): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000001c0)={r0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00590214000000002f1eafbcf706e105000000894f000f1102ee1680ca8286cee844000000000019b0fb0bba00"/65, 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe73}], 0x4}, 0x0) 1.998598522s ago: executing program 3 (id=1303): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 1.997936122s ago: executing program 4 (id=1304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000005000100000085000000300000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) 1.862288969s ago: executing program 0 (id=1305): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x9, r2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700100000000000ff000020850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r4}, 0x18) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0xffffffffffffffff) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x22, 0x2, 0x21) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.86097974s ago: executing program 3 (id=1306): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600), 0x80) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x100400, 0x10000, 0x9e4, 0x5, 0x8, 0x20005}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000240)) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) recvmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x10}}], 0x10}, 0x60002040) setsockopt$sock_attach_bpf(r0, 0x6, 0x24, &(0x7f0000000200), 0x4) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0x35, 0x0, &(0x7f0000000300)="d2ff03076003008cb89e08f086ddeff9be34b6dae4a93a276032b785807d48097d74bddc47527f7f0851ee059c08006e1068ea961d", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0xa00) 1.664560275s ago: executing program 4 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000f000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.412575817s ago: executing program 4 (id=1308): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4240, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) 1.39172545s ago: executing program 0 (id=1309): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001240)=""/251, 0xfb}, {&(0x7f0000001ac0)=""/4081, 0xff1}], 0x2}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4020940d, &(0x7f00000005c0)=0x81000000000004) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2000000000000f, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0xd3}, @exit], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x11}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_freezer_state(r2, &(0x7f0000000380)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 1.279829285s ago: executing program 1 (id=1310): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$kcm(0x2, 0x1, 0x84) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400050404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27f", 0x88}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x77, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x808, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) (rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x802) (async) sendmsg$kcm(r2, 0x0, 0x8000) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (rerun: 32) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000340)=r0, 0x4) (async) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) (async) socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64) r6 = socket$kcm(0x10, 0x0, 0x4) (rerun: 64) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) (async) r8 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) (async) sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) mkdirat$cgroup(r7, &(0x7f0000000240)='syz1\x00', 0x1ff) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f00000017c0)={&(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x2000000}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="05000000000000000000000000000000000000403d68c8fedb7ac6342416b24ef8380f99623c6eec796f06f9a5ab8480f538c7742d46934a2e834e2558645b5932808b03a0f9cb778f0e1b8c4dd3ab02e09d0c22462e168b8ddbb3d9899f87cb04ea6e199cd0eecf426adf9fa3b5779b0db099e7d67830ac7f02eeb4cb0c999737e44e905f05d1773226f1c28ffff80156d5c483194e98be46f4f4a3bd28a76edee29e5b1108850e20f1e37a3459df0d0f7a5036a4064c61d34d4797762511ec10cfd308d29c76102ab3b66b38d8d146ffd2895372a9a2f960a2de", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000200"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x2f3c, 0x40, 0x4, 0x40, r10, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0xb}, 0x50) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44010) 1.00723185s ago: executing program 3 (id=1311): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 78) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 986.001843ms ago: executing program 1 (id=1312): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000000) 419.682556ms ago: executing program 4 (id=1313): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) socket$kcm(0x29, 0x7, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$kcm(0x10, 0x2, 0x4) (async) r0 = socket$kcm(0xf, 0x3, 0x2) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000011008108090f9becdb4cb92e26483137190000", 0x17}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60", 0x7c}], 0x1}, 0x0) (async) r2 = socket$kcm(0x11, 0x3, 0x0) (async) socket$kcm(0x1e, 0x2, 0x0) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) (async) socket$kcm(0xa, 0x3, 0x73) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0xa888, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8cee795c7e6292d4da9d0d", 0x17}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000030000000000000008000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000006600000000000000180000000000000000000000fdffffff9100000000000000c4030000000000009500000000000000"], &(0x7f0000001300)='GPL\x00'}, 0x94) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 356.558084ms ago: executing program 1 (id=1314): socket$kcm(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$TUNGETVNETLE(r0, 0x80047456, 0x0) 242.315258ms ago: executing program 0 (id=1315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00 \x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 104.714626ms ago: executing program 3 (id=1316): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000280)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x60c02f197a323a35, 0x80, 0x1, 0x2, 0x8, 0x8, 0x0, 0x3, 0x800a2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0x6}, 0x14a10, 0xb, 0x4, 0x2, 0x9, 0x9, 0x3, 0x0, 0x0, 0x0, 0xd912}, 0xffffffffffffffff, 0xf, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000150000001400000004000000030000000100000f0400"/48], &(0x7f0000000f80)=""/4115, 0x30, 0x1013, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000001000)=0x8) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 426.79µs ago: executing program 4 (id=1317): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638977fbac141416ac14141683189f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x20000000}, 0x2c) 0s ago: executing program 0 (id=1318): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$kcm(0x23, 0x5, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x401}, 0x0, 0xc8, 0x0, 0x7, 0x0, 0x0, 0x770a}, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) close(r3) (async) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007111b30000000000850000007500000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000001c0)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000007c0)={&(0x7f00000004c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f00000006c0)="6d28dbe1717f801649678c9743ecfacfcb04f0d25cbbfea487abfd2fb2b8ff35df19af71deecb00ba02a9392a7920f357e34114957ec891f997f60b9d0ed2eeb4d395580f46d44e7a96d642bd85b1420b0802f76bdd3f4d076e167fb7cc66c65426de8d55c219075ed7fc3bccffb98fd86b7c70c8a38de38a432e447caf0740b7440", 0x82}], 0x1, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}, 0x404c880) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000100002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000061000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x2f, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677f2d0b4992", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781c2", @ANYRES8=r1], 0xfdef) (async) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f00000002c0)=""/110, 0x6e}], 0x2}, 0x123) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. [ 63.578941][ T5760] cgroup: Unknown subsys name 'net' [ 63.712863][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.085818][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.455460][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.468250][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.475923][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.496547][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.497167][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.513269][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.521405][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.521882][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.544603][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.553428][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.561827][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.566703][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.576732][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.586065][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.589325][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.593968][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.607993][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.608954][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.616955][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.629703][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.634185][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.646057][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.646238][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.661519][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.038826][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 67.123191][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 67.209372][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 67.230970][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 67.292480][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.299937][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.308059][ T5779] bridge_slave_0: entered allmulticast mode [ 67.314823][ T5779] bridge_slave_0: entered promiscuous mode [ 67.351604][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.359051][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.366421][ T5778] bridge_slave_0: entered allmulticast mode [ 67.373060][ T5778] bridge_slave_0: entered promiscuous mode [ 67.380879][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.390252][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.397504][ T5779] bridge_slave_1: entered allmulticast mode [ 67.404195][ T5779] bridge_slave_1: entered promiscuous mode [ 67.435529][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.442883][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.450527][ T5778] bridge_slave_1: entered allmulticast mode [ 67.457955][ T5778] bridge_slave_1: entered promiscuous mode [ 67.516260][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.528104][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.557775][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.567247][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.574358][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.583418][ T5772] bridge_slave_0: entered allmulticast mode [ 67.590262][ T5772] bridge_slave_0: entered promiscuous mode [ 67.598763][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.605879][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.613206][ T5772] bridge_slave_1: entered allmulticast mode [ 67.620605][ T5772] bridge_slave_1: entered promiscuous mode [ 67.648915][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.674703][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.682008][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.689428][ T5775] bridge_slave_0: entered allmulticast mode [ 67.696747][ T5775] bridge_slave_0: entered promiscuous mode [ 67.707598][ T5779] team0: Port device team_slave_0 added [ 67.731657][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.739933][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.748555][ T5775] bridge_slave_1: entered allmulticast mode [ 67.755272][ T5775] bridge_slave_1: entered promiscuous mode [ 67.763724][ T5779] team0: Port device team_slave_1 added [ 67.781556][ T5778] team0: Port device team_slave_0 added [ 67.792162][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.813357][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.831777][ T5778] team0: Port device team_slave_1 added [ 67.871331][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.880586][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.906888][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.919332][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.927489][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.954483][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.968645][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.983399][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.002393][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.011398][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.038555][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.050120][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.057372][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.084327][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.111011][ T5772] team0: Port device team_slave_0 added [ 68.158877][ T5772] team0: Port device team_slave_1 added [ 68.178266][ T5775] team0: Port device team_slave_0 added [ 68.205501][ T5778] hsr_slave_0: entered promiscuous mode [ 68.211882][ T5778] hsr_slave_1: entered promiscuous mode [ 68.220554][ T5775] team0: Port device team_slave_1 added [ 68.250552][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.257709][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.284413][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.309639][ T5779] hsr_slave_0: entered promiscuous mode [ 68.316027][ T5779] hsr_slave_1: entered promiscuous mode [ 68.322863][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.330765][ T5779] Cannot create hsr debugfs directory [ 68.349664][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.356726][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.382926][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.441031][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.448066][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.474474][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.507792][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.514846][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.540881][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.623579][ T5772] hsr_slave_0: entered promiscuous mode [ 68.629822][ T5783] Bluetooth: hci1: command tx timeout [ 68.635846][ T5772] hsr_slave_1: entered promiscuous mode [ 68.641996][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.650113][ T5772] Cannot create hsr debugfs directory [ 68.706825][ T5785] Bluetooth: hci3: command tx timeout [ 68.706840][ T5777] Bluetooth: hci0: command tx timeout [ 68.718404][ T5783] Bluetooth: hci2: command tx timeout [ 68.795644][ T5775] hsr_slave_0: entered promiscuous mode [ 68.804639][ T5775] hsr_slave_1: entered promiscuous mode [ 68.810929][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.818763][ T5775] Cannot create hsr debugfs directory [ 68.982232][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.014765][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.024400][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.065923][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.132075][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.144018][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.154072][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.174500][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.239547][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.258905][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.277052][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.287250][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.382159][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.401352][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.412702][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.431014][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.539726][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.571218][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.591323][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.606006][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.613404][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.634553][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.650017][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.657182][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.681115][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.711971][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.719141][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.734868][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.741995][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.765934][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.811932][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.819146][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.859996][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.874541][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.881683][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.945979][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.998518][ T5772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.018518][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.038193][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.045575][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.072961][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.080184][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.310925][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.423906][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.444680][ T5779] veth0_vlan: entered promiscuous mode [ 70.483008][ T5779] veth1_vlan: entered promiscuous mode [ 70.530336][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.609186][ T5778] veth0_vlan: entered promiscuous mode [ 70.621897][ T5779] veth0_macvtap: entered promiscuous mode [ 70.640319][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.661033][ T5779] veth1_macvtap: entered promiscuous mode [ 70.687636][ T5772] veth0_vlan: entered promiscuous mode [ 70.693982][ T5778] veth1_vlan: entered promiscuous mode [ 70.707618][ T5783] Bluetooth: hci1: command tx timeout [ 70.718844][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.745661][ T5772] veth1_vlan: entered promiscuous mode [ 70.754133][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.769888][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.779029][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.787381][ T5783] Bluetooth: hci2: command tx timeout [ 70.788789][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.793093][ T5783] Bluetooth: hci3: command tx timeout [ 70.801918][ T5785] Bluetooth: hci0: command tx timeout [ 70.807628][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.884940][ T5775] veth0_vlan: entered promiscuous mode [ 70.901248][ T5778] veth0_macvtap: entered promiscuous mode [ 70.915118][ T5778] veth1_macvtap: entered promiscuous mode [ 70.940378][ T5772] veth0_macvtap: entered promiscuous mode [ 70.961828][ T5775] veth1_vlan: entered promiscuous mode [ 70.972424][ T5772] veth1_macvtap: entered promiscuous mode [ 71.003878][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.015544][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.027455][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.063084][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.074877][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.089779][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.098195][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.113886][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.124592][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.135377][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.147833][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.158227][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.169459][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.179870][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.191610][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.203910][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.230915][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.239871][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.248710][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.259582][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.274437][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.284956][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.295912][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.305081][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.342865][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.361765][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.389114][ T5775] veth0_macvtap: entered promiscuous mode [ 71.452596][ T5775] veth1_macvtap: entered promiscuous mode [ 71.485115][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.496442][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.511386][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.514059][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.530580][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.535437][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.548694][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.559209][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.569102][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.580377][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.592074][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.622670][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.638947][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.649113][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.659575][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.669495][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.680105][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.691980][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.704120][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.713075][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.722332][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.731219][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.765216][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.775187][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.836805][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.843341][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.877604][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.885697][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.920942][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.950718][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.026460][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.034327][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.091804][ T5860] Zero length message leads to an empty skb [ 72.158251][ C1] hrtimer: interrupt took 258516 ns [ 72.170087][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.191969][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.787916][ T5785] Bluetooth: hci1: command tx timeout [ 72.867167][ T5777] Bluetooth: hci2: command tx timeout [ 72.867578][ T5783] Bluetooth: hci0: command tx timeout [ 72.872705][ T5785] Bluetooth: hci3: command tx timeout [ 73.672877][ T5892] netlink: 'syz.3.13': attribute type 10 has an invalid length. [ 73.761469][ T5892] batman_adv: batadv0: Adding interface: team0 [ 73.782484][ T5892] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.814093][ T5892] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 73.837601][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.846203][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.869697][ T5896] bridge0: entered allmulticast mode [ 73.889853][ T5892] syz.3.13 (5892) used greatest stack depth: 20200 bytes left [ 73.985434][ T5899] bridge_slave_1: left allmulticast mode [ 74.006276][ T5899] bridge_slave_1: left promiscuous mode [ 74.029372][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.069188][ T5899] bridge_slave_0: left allmulticast mode [ 74.074914][ T5899] bridge_slave_0: left promiscuous mode [ 74.089421][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.245735][ T5912] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 74.876982][ T5785] Bluetooth: hci1: command tx timeout [ 74.946508][ T5785] Bluetooth: hci3: command tx timeout [ 74.947171][ T5783] Bluetooth: hci0: command tx timeout [ 74.951964][ T5777] Bluetooth: hci2: command tx timeout [ 75.135983][ T5937] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.25'. [ 75.170047][ T5937] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.25'. [ 75.250777][ T5937] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.25'. [ 75.319538][ T5937] warning: `syz.3.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.312546][ T5974] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 76.451615][ T5980] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.42'. [ 76.462680][ T5980] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.42'. [ 76.506302][ T5980] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.42'. [ 77.944665][ T6014] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.52'. [ 77.970389][ T6014] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.52'. [ 78.002763][ T6014] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.52'. [ 78.303248][ T6018] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 78.346447][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.354277][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.374400][ T6024] bridge0: entered allmulticast mode [ 78.415151][ T6027] bridge_slave_1: left allmulticast mode [ 78.434046][ T6027] bridge_slave_1: left promiscuous mode [ 78.444449][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.475566][ T6027] bridge_slave_0: left allmulticast mode [ 78.482150][ T6027] bridge_slave_0: left promiscuous mode [ 78.489343][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.101844][ T6041] netlink: 'syz.1.63': attribute type 10 has an invalid length. [ 79.145257][ T6041] batman_adv: batadv0: Adding interface: team0 [ 79.174014][ T6041] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.206748][ T6041] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 79.241458][ T6048] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.66'. [ 80.251507][ T6061] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 80.502848][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.510598][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.519561][ T6072] bridge0: entered allmulticast mode [ 80.560972][ T6072] bridge_slave_1: left allmulticast mode [ 80.570713][ T6072] bridge_slave_1: left promiscuous mode [ 80.582368][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.602427][ T6072] bridge_slave_0: left allmulticast mode [ 80.608471][ T6072] bridge_slave_0: left promiscuous mode [ 80.614463][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.052892][ T6085] __nla_validate_parse: 2 callbacks suppressed [ 81.052909][ T6085] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.78'. [ 81.083400][ T6085] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.78'. [ 81.093661][ T6085] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.78'. [ 81.173238][ T6087] netlink: 'syz.2.79': attribute type 10 has an invalid length. [ 81.202458][ T6087] batman_adv: batadv0: Adding interface: team0 [ 81.209603][ T6087] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.240279][ T6087] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 81.885903][ T6103] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 81.946818][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.955475][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.966701][ T6106] bridge0: entered allmulticast mode [ 82.030477][ T6110] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.91'. [ 82.046185][ T6108] bridge_slave_1: left allmulticast mode [ 82.052010][ T6108] bridge_slave_1: left promiscuous mode [ 82.058553][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.079468][ T6108] bridge_slave_0: left allmulticast mode [ 82.085132][ T786] cfg80211: failed to load regulatory.db [ 82.094828][ T6108] bridge_slave_0: left promiscuous mode [ 82.103004][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.262926][ T6110] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.91'. [ 82.291630][ T6111] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.91'. [ 82.879863][ T6132] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.104'. [ 82.903161][ T6132] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.104'. [ 82.925231][ T6132] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.104'. [ 83.115585][ T6135] netlink: 'syz.0.96': attribute type 10 has an invalid length. [ 83.180574][ T6135] batman_adv: batadv0: Adding interface: team0 [ 83.212168][ T6135] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.266617][ T6135] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 83.521527][ T6145] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 83.887814][ T6157] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.108'. [ 83.945535][ T6154] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 85.225928][ T6192] netlink: 'syz.1.124': attribute type 15 has an invalid length. [ 85.236288][ T6192] netlink: 'syz.1.124': attribute type 5 has an invalid length. [ 86.691918][ T6238] __nla_validate_parse: 9 callbacks suppressed [ 86.691936][ T6238] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.142'. [ 86.734712][ T6238] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.142'. [ 86.771616][ T6241] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.142'. [ 86.823868][ T6237] netlink: 'syz.3.143': attribute type 5 has an invalid length. [ 86.875865][ T6237] netlink: 'syz.3.143': attribute type 29 has an invalid length. [ 86.884695][ T6237] netlink: 'syz.3.143': attribute type 3 has an invalid length. [ 86.893274][ T6237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.143'. [ 86.981008][ T6247] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.146'. [ 87.015057][ T6247] FAULT_INJECTION: forcing a failure. [ 87.015057][ T6247] name failslab, interval 1, probability 0, space 0, times 1 [ 87.030613][ T6249] netlink: 'syz.0.147': attribute type 10 has an invalid length. [ 87.050777][ T6247] CPU: 1 PID: 6247 Comm: syz.2.146 Not tainted syzkaller #0 [ 87.058215][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.069484][ T6247] Call Trace: [ 87.072802][ T6247] [ 87.076105][ T6247] dump_stack_lvl+0x18c/0x250 [ 87.081104][ T6247] ? show_regs_print_info+0x20/0x20 [ 87.086435][ T6247] ? load_image+0x400/0x400 [ 87.090984][ T6247] ? __lock_acquire+0x7d40/0x7d40 [ 87.096046][ T6247] ? verify_lock_unused+0x140/0x140 [ 87.101842][ T6247] should_fail_ex+0x39d/0x4d0 [ 87.106912][ T6247] should_failslab+0x9/0x20 [ 87.111540][ T6247] slab_pre_alloc_hook+0x59/0x310 [ 87.116704][ T6247] ? verify_lock_unused+0x140/0x140 [ 87.122020][ T6247] ? bpf_test_init+0xc0/0x150 [ 87.126815][ T6247] ? bpf_test_init+0xc0/0x150 [ 87.131520][ T6247] __kmem_cache_alloc_node+0x53/0x250 [ 87.137015][ T6247] ? bpf_test_init+0xc0/0x150 [ 87.141720][ T6247] __kmalloc+0xa4/0x230 [ 87.146050][ T6247] bpf_test_init+0xc0/0x150 [ 87.150594][ T6247] bpf_prog_test_run_xdp+0x38d/0xf80 [ 87.155989][ T6247] ? dev_put+0x80/0x80 [ 87.162695][ T6247] ? dev_put+0x80/0x80 [ 87.167303][ T6247] bpf_prog_test_run+0x321/0x390 [ 87.172272][ T6247] __sys_bpf+0x49d/0x890 [ 87.176976][ T6247] ? bpf_link_show_fdinfo+0x390/0x390 [ 87.185562][ T6247] ? lock_chain_count+0x20/0x20 [ 87.190937][ T6247] __x64_sys_bpf+0x7c/0x90 [ 87.195448][ T6247] do_syscall_64+0x55/0xa0 [ 87.199995][ T6247] ? clear_bhb_loop+0x40/0x90 [ 87.204881][ T6247] ? clear_bhb_loop+0x40/0x90 [ 87.210208][ T6247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.216378][ T6247] RIP: 0033:0x7fc1e699acb9 [ 87.223527][ T6247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.245409][ T6247] RSP: 002b:00007fc1e78f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.255369][ T6247] RAX: ffffffffffffffda RBX: 00007fc1e6c16090 RCX: 00007fc1e699acb9 [ 87.263625][ T6247] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 87.271710][ T6247] RBP: 00007fc1e78f5090 R08: 0000000000000000 R09: 0000000000000000 [ 87.279900][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.288411][ T6247] R13: 00007fc1e6c16128 R14: 00007fc1e6c16090 R15: 00007fffe33f0c38 [ 87.296410][ T6247] [ 87.372192][ T6249] team0: Device veth1_macvtap failed to register rx_handler [ 87.421010][ T6243] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.146'. [ 87.459869][ T6249] syz.0.147 (6249) used greatest stack depth: 18928 bytes left [ 87.583778][ T6251] netlink: 'syz.3.148': attribute type 10 has an invalid length. [ 87.631962][ T6251] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 87.666579][ T6251] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 87.678588][ T6251] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 87.698606][ T6251] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 88.128662][ T6276] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.157'. [ 88.138456][ T6276] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.157'. [ 88.155454][ T6276] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.157'. [ 88.181654][ T6274] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 88.790383][ T6300] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.165'. [ 89.173846][ T6313] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 90.157195][ T6347] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 90.257254][ T6349] netlink: 'syz.2.186': attribute type 10 has an invalid length. [ 90.307502][ T6349] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 90.347307][ T6349] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 90.362358][ T6349] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 90.375553][ T6349] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 91.262360][ T6376] netlink: 'syz.0.194': attribute type 12 has an invalid length. [ 91.462143][ T6382] netlink: 'syz.3.197': attribute type 2 has an invalid length. [ 92.334331][ T6396] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 92.475775][ T6403] __nla_validate_parse: 15 callbacks suppressed [ 92.475792][ T6403] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.204'. [ 92.510206][ T6403] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.204'. [ 92.522113][ T6403] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.204'. [ 93.514914][ T6436] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.216'. [ 95.189899][ T6439] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 95.197446][ T6436] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.216'. [ 95.820006][ T6462] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.222'. [ 95.835925][ T6462] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 95.900793][ T6471] netlink: 'syz.1.223': attribute type 10 has an invalid length. [ 96.426764][ T6489] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.227'. [ 96.479336][ T6489] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.227'. [ 96.531417][ T6493] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.227'. [ 96.942114][ T6505] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.232'. [ 97.308863][ T6509] netlink: 'syz.2.235': attribute type 10 has an invalid length. [ 97.495918][ T6518] __nla_validate_parse: 9 callbacks suppressed [ 97.495935][ T6518] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.238'. [ 97.590130][ T6518] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 97.598061][ T6521] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.239'. [ 97.623381][ T6521] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.239'. [ 97.670379][ T6521] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.239'. [ 98.214662][ T6538] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.244'. [ 98.220950][ T6543] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.246'. [ 98.225255][ T6538] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.244'. [ 98.254221][ T6535] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.244'. [ 98.293434][ T6543] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.246'. [ 98.304013][ T6535] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.244'. [ 99.675646][ T6586] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 100.020725][ T6596] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 100.077853][ T6596] bond0: entered promiscuous mode [ 100.083245][ T6596] bond_slave_0: entered promiscuous mode [ 100.109431][ T6596] bond_slave_1: entered promiscuous mode [ 101.470688][ T6628] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 102.156256][ T6650] netlink: 'syz.3.284': attribute type 10 has an invalid length. [ 102.225219][ T6650] team0: Port device geneve1 added [ 102.492633][ T6664] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.910488][ T6686] FAULT_INJECTION: forcing a failure. [ 103.910488][ T6686] name failslab, interval 1, probability 0, space 0, times 0 [ 103.985211][ T6686] CPU: 1 PID: 6686 Comm: syz.3.296 Not tainted syzkaller #0 [ 103.993010][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.004846][ T6686] Call Trace: [ 104.008417][ T6686] [ 104.011350][ T6686] dump_stack_lvl+0x18c/0x250 [ 104.016142][ T6686] ? show_regs_print_info+0x20/0x20 [ 104.021366][ T6686] ? load_image+0x400/0x400 [ 104.025878][ T6686] ? __might_sleep+0xe0/0xe0 [ 104.030468][ T6686] ? __lock_acquire+0x7d40/0x7d40 [ 104.036382][ T6686] should_fail_ex+0x39d/0x4d0 [ 104.041089][ T6686] should_failslab+0x9/0x20 [ 104.045617][ T6686] slab_pre_alloc_hook+0x59/0x310 [ 104.050669][ T6686] ? __lock_acquire+0x7d40/0x7d40 [ 104.055704][ T6686] kmem_cache_alloc_node+0x60/0x320 [ 104.060916][ T6686] ? __alloc_skb+0x103/0x2c0 [ 104.065967][ T6686] __alloc_skb+0x103/0x2c0 [ 104.070608][ T6686] netlink_sendmsg+0x66a/0xbf0 [ 104.075474][ T6686] ? netlink_getsockopt+0x590/0x590 [ 104.080965][ T6686] ? aa_sock_msg_perm+0x94/0x150 [ 104.085962][ T6686] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 104.091278][ T6686] ? security_socket_sendmsg+0x80/0xa0 [ 104.096832][ T6686] ? netlink_getsockopt+0x590/0x590 [ 104.102074][ T6686] ____sys_sendmsg+0x5ba/0x960 [ 104.106866][ T6686] ? __asan_memset+0x22/0x40 [ 104.111463][ T6686] ? __sys_sendmsg_sock+0x30/0x30 [ 104.116493][ T6686] ? __import_iovec+0x3fa/0x850 [ 104.121372][ T6686] ? import_iovec+0x73/0xa0 [ 104.125987][ T6686] ___sys_sendmsg+0x2a6/0x360 [ 104.130695][ T6686] ? get_pid_task+0x20/0x1e0 [ 104.135475][ T6686] ? __sys_sendmsg+0x2a0/0x2a0 [ 104.140858][ T6686] ? __lock_acquire+0x7d40/0x7d40 [ 104.146175][ T6686] __se_sys_sendmsg+0x1c2/0x2b0 [ 104.151451][ T6686] ? __x64_sys_sendmsg+0x80/0x80 [ 104.156490][ T6686] ? lockdep_hardirqs_on+0x98/0x150 [ 104.162834][ T6686] do_syscall_64+0x55/0xa0 [ 104.167257][ T6686] ? clear_bhb_loop+0x40/0x90 [ 104.172143][ T6686] ? clear_bhb_loop+0x40/0x90 [ 104.177009][ T6686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.183011][ T6686] RIP: 0033:0x7f8059d9acb9 [ 104.187435][ T6686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.208424][ T6686] RSP: 002b:00007f805abd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.217656][ T6686] RAX: ffffffffffffffda RBX: 00007f805a015fa0 RCX: 00007f8059d9acb9 [ 104.225832][ T6686] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 104.234448][ T6686] RBP: 00007f805abd6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.244361][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.252791][ T6686] R13: 00007f805a016038 R14: 00007f805a015fa0 R15: 00007ffd14b5d418 [ 104.260970][ T6686] [ 104.296343][ T6687] netlink: 'syz.1.295': attribute type 21 has an invalid length. [ 104.305793][ T6687] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 104.435173][ T6691] __nla_validate_parse: 18 callbacks suppressed [ 104.435189][ T6691] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.298'. [ 104.481493][ T6691] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.298'. [ 104.520762][ T6691] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.298'. [ 104.868390][ T6698] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 105.015924][ T6704] netlink: 'syz.1.304': attribute type 27 has an invalid length. [ 105.032634][ T6704] netlink: 164 bytes leftover after parsing attributes in process `syz.1.304'. [ 105.678187][ T6725] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.311'. [ 105.711475][ T6725] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.311'. [ 105.727416][ T6725] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.311'. [ 105.928397][ T6735] netlink: 'syz.2.314': attribute type 21 has an invalid length. [ 106.039280][ T6737] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 106.105964][ T6740] netlink: 'syz.3.316': attribute type 27 has an invalid length. [ 106.128785][ T6740] netlink: 164 bytes leftover after parsing attributes in process `syz.3.316'. [ 106.870558][ T6769] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.325'. [ 108.519391][ T6751] netlink: 'syz.3.319': attribute type 10 has an invalid length. [ 108.527386][ T6751] netlink: 55 bytes leftover after parsing attributes in process `syz.3.319'. [ 108.895919][ T6788] netlink: 'syz.0.328': attribute type 27 has an invalid length. [ 109.451995][ T6810] netlink: 'syz.2.338': attribute type 39 has an invalid length. [ 109.665938][ T6812] netlink: 'syz.0.339': attribute type 10 has an invalid length. [ 109.755837][ T6812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.817388][ T6812] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 109.831006][ T6813] __nla_validate_parse: 11 callbacks suppressed [ 109.831021][ T6813] netlink: 14 bytes leftover after parsing attributes in process `syz.0.339'. [ 109.915492][ T6813] bond0: entered promiscuous mode [ 109.920941][ T6813] bond_slave_0: entered promiscuous mode [ 109.930356][ T6813] bond_slave_1: entered promiscuous mode [ 109.937788][ T6813] batadv0: entered promiscuous mode [ 109.965341][ T6815] netlink: 'syz.1.340': attribute type 10 has an invalid length. [ 110.028466][ T6815] team0: Port device geneve1 added [ 110.373277][ T6832] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.347'. [ 110.429836][ T6832] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.347'. [ 110.462710][ T6835] netlink: 'syz.3.348': attribute type 3 has an invalid length. [ 110.476554][ T6833] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.347'. [ 110.496694][ T6835] netlink: 132 bytes leftover after parsing attributes in process `syz.3.348'. [ 111.293887][ T6852] syzkaller0: entered promiscuous mode [ 111.336440][ T6852] syzkaller0: entered allmulticast mode [ 111.615421][ T6875] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.361'. [ 113.975990][ T6875] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.361'. [ 114.444132][ T6897] netlink: 'syz.0.370': attribute type 10 has an invalid length. [ 114.456779][ T6897] netlink: 156 bytes leftover after parsing attributes in process `syz.0.370'. [ 114.944826][ T6912] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.373'. [ 114.955611][ T6912] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.373'. [ 114.973666][ T6912] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.373'. [ 115.495557][ T6932] netlink: 'syz.1.381': attribute type 4 has an invalid length. [ 115.505188][ T6932] netlink: 'syz.1.381': attribute type 4 has an invalid length. [ 115.515516][ T6932] netlink: 152 bytes leftover after parsing attributes in process `syz.1.381'. [ 115.531193][ T6932] .`: renamed from bond0 [ 115.578038][ T6933] netlink: 'syz.0.380': attribute type 29 has an invalid length. [ 115.682873][ T6933] netlink: 'syz.0.380': attribute type 29 has an invalid length. [ 115.738688][ T6934] netlink: 'syz.0.380': attribute type 29 has an invalid length. [ 115.772056][ T6937] netlink: 'syz.0.380': attribute type 29 has an invalid length. [ 115.797497][ T6933] netlink: 'syz.0.380': attribute type 29 has an invalid length. [ 115.966372][ T6943] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.384'. [ 115.994313][ T6943] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.384'. [ 116.036676][ T6946] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.384'. [ 116.457172][ T6963] FAULT_INJECTION: forcing a failure. [ 116.457172][ T6963] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.523557][ T6963] CPU: 0 PID: 6963 Comm: syz.3.394 Not tainted syzkaller #0 [ 116.530913][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.541005][ T6963] Call Trace: [ 116.544299][ T6963] [ 116.547449][ T6963] dump_stack_lvl+0x18c/0x250 [ 116.552281][ T6963] ? show_regs_print_info+0x20/0x20 [ 116.557602][ T6963] ? load_image+0x400/0x400 [ 116.562154][ T6963] ? __might_fault+0xaa/0x120 [ 116.566866][ T6963] ? __lock_acquire+0x7d40/0x7d40 [ 116.572015][ T6963] should_fail_ex+0x39d/0x4d0 [ 116.576731][ T6963] _copy_from_user+0x2f/0xe0 [ 116.581608][ T6963] ___sys_sendmsg+0x1c7/0x360 [ 116.586570][ T6963] ? get_pid_task+0x20/0x1e0 [ 116.591190][ T6963] ? __sys_sendmsg+0x2a0/0x2a0 [ 116.596001][ T6963] ? __lock_acquire+0x7d40/0x7d40 [ 116.601076][ T6963] __se_sys_sendmsg+0x1c2/0x2b0 [ 116.605967][ T6963] ? __x64_sys_sendmsg+0x80/0x80 [ 116.610945][ T6963] ? lockdep_hardirqs_on+0x98/0x150 [ 116.616180][ T6963] do_syscall_64+0x55/0xa0 [ 116.620623][ T6963] ? clear_bhb_loop+0x40/0x90 [ 116.625323][ T6963] ? clear_bhb_loop+0x40/0x90 [ 116.630046][ T6963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.635983][ T6963] RIP: 0033:0x7f8059d9acb9 [ 116.640522][ T6963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.660160][ T6963] RSP: 002b:00007f805abd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.668601][ T6963] RAX: ffffffffffffffda RBX: 00007f805a015fa0 RCX: 00007f8059d9acb9 [ 116.677554][ T6963] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 116.685899][ T6963] RBP: 00007f805abd6090 R08: 0000000000000000 R09: 0000000000000000 [ 116.693897][ T6963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.702062][ T6963] R13: 00007f805a016038 R14: 00007f805a015fa0 R15: 00007ffd14b5d418 [ 116.710104][ T6963] [ 117.062832][ T6976] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.398'. [ 117.078509][ T6971] batman_adv: batadv0: Removing interface: team0 [ 117.095687][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.113458][ T6971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.128345][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.146911][ T6971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.236733][ T6986] netlink: 'syz.0.400': attribute type 29 has an invalid length. [ 117.262288][ T6976] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.398'. [ 117.297161][ T6986] netlink: 'syz.0.400': attribute type 29 has an invalid length. [ 117.316723][ T6980] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.398'. [ 118.770645][ T7026] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 118.780823][ T7026] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 120.045351][ T7023] netlink: 'syz.0.413': attribute type 15 has an invalid length. [ 120.054009][ T7023] netlink: 'syz.0.413': attribute type 5 has an invalid length. [ 120.069561][ T7023] __nla_validate_parse: 4 callbacks suppressed [ 120.069574][ T7023] netlink: 144 bytes leftover after parsing attributes in process `syz.0.413'. [ 120.106314][ T7025] netlink: 'syz.2.414': attribute type 10 has an invalid length. [ 120.127603][ T7025] macvlan0: entered allmulticast mode [ 120.163302][ T7025] veth1_vlan: entered allmulticast mode [ 120.195769][ T7025] team0: Port device macvlan0 added [ 120.226650][ T7030] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 120.522535][ T7041] sit0: entered allmulticast mode [ 120.635272][ T7036] sit0: entered promiscuous mode [ 120.946844][ T7050] netlink: 'syz.1.423': attribute type 10 has an invalid length. [ 120.964704][ T7050] batman_adv: batadv0: Removing interface: team0 [ 121.053479][ T7050] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.080503][ T7050] team0: entered promiscuous mode [ 121.099220][ T7050] team_slave_0: entered promiscuous mode [ 121.118983][ T7050] team_slave_1: entered promiscuous mode [ 121.136759][ T7050] geneve1: entered promiscuous mode [ 121.147745][ T7050] .`: (slave team0): Enslaving as an active interface with an up link [ 121.439354][ T7065] netlink: 'syz.1.427': attribute type 10 has an invalid length. [ 121.463570][ T7065] FAULT_INJECTION: forcing a failure. [ 121.463570][ T7065] name failslab, interval 1, probability 0, space 0, times 0 [ 121.478297][ T7065] CPU: 1 PID: 7065 Comm: syz.1.427 Not tainted syzkaller #0 [ 121.485787][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.496041][ T7065] Call Trace: [ 121.499729][ T7065] [ 121.502703][ T7065] dump_stack_lvl+0x18c/0x250 [ 121.507722][ T7065] ? asm_sysvec_call_function_single+0x1a/0x20 [ 121.514481][ T7065] ? show_regs_print_info+0x20/0x20 [ 121.519688][ T7065] ? asm_sysvec_call_function_single+0x1a/0x20 [ 121.525973][ T7065] should_fail_ex+0x39d/0x4d0 [ 121.530776][ T7065] should_failslab+0x9/0x20 [ 121.535284][ T7065] slab_pre_alloc_hook+0x59/0x310 [ 121.540314][ T7065] ? rt6_nlmsg_size+0x404/0x490 [ 121.545177][ T7065] kmem_cache_alloc_node+0x60/0x320 [ 121.550404][ T7065] ? __alloc_skb+0x103/0x2c0 [ 121.555558][ T7065] __alloc_skb+0x103/0x2c0 [ 121.560077][ T7065] inet6_rt_notify+0xb4/0x240 [ 121.564769][ T7065] fib6_del+0x10d2/0x1580 [ 121.569224][ T7065] ? fib6_locate_1+0x6c0/0x6c0 [ 121.574003][ T7065] ? perf_trace_lock+0xfc/0x3b0 [ 121.578866][ T7065] fib6_clean_node+0x297/0x540 [ 121.583713][ T7065] ? node_free_rcu+0x30/0x30 [ 121.588312][ T7065] ? __local_bh_enable_ip+0x13a/0x1c0 [ 121.593680][ T7065] fib6_walk_continue+0x672/0x900 [ 121.598706][ T7065] fib6_walk+0x149/0x290 [ 121.602947][ T7065] __fib6_clean_all+0x283/0x3e0 [ 121.607810][ T7065] ? __fib6_clean_all+0xb2/0x3e0 [ 121.612766][ T7065] ? rt6_sync_down_dev+0x160/0x160 [ 121.617888][ T7065] ? fib6_clean_all+0x30/0x30 [ 121.622572][ T7065] ? node_free_rcu+0x30/0x30 [ 121.627179][ T7065] ? rt6_sync_down_dev+0x160/0x160 [ 121.636662][ T7065] ? trace_event_raw_event_lock+0x250/0x250 [ 121.643008][ T7065] rt6_disable_ip+0x12d/0x7b0 [ 121.647985][ T7065] ? fib6_ifdown+0x4b0/0x4b0 [ 121.653387][ T7065] ? __lock_acquire+0x7d40/0x7d40 [ 121.660089][ T7065] ? rcu_is_watching+0x15/0xb0 [ 121.664905][ T7065] addrconf_ifdown+0x16c/0x18c0 [ 121.670030][ T7065] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 121.675870][ T7065] ? tls_dev_event+0x74d/0xf40 [ 121.680673][ T7065] ? addrconf_cleanup+0x1e0/0x1e0 [ 121.685709][ T7065] addrconf_notify+0x6c6/0x1010 [ 121.690683][ T7065] notifier_call_chain+0x197/0x380 [ 121.695925][ T7065] __dev_notify_flags+0x16e/0x310 [ 121.700972][ T7065] ? __dev_change_flags+0x6a0/0x6a0 [ 121.706172][ T7065] ? __dev_change_flags+0x4d4/0x6a0 [ 121.711371][ T7065] ? vprintk_emit+0x53d/0x610 [ 121.716045][ T7065] ? dev_get_flags+0x1c0/0x1c0 [ 121.720827][ T7065] ? printk_sprint+0x460/0x460 [ 121.725593][ T7065] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 121.731508][ T7065] ? _raw_spin_unlock+0x40/0x40 [ 121.736369][ T7065] dev_change_flags+0xe8/0x1a0 [ 121.741146][ T7065] do_setlink+0xc58/0x4130 [ 121.745591][ T7065] ? arch_stack_walk+0x160/0x190 [ 121.750562][ T7065] ? load_image+0x400/0x400 [ 121.755083][ T7065] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 121.761261][ T7065] ? stack_trace_save+0xaa/0x100 [ 121.766238][ T7065] ? __nla_validate_parse+0x2522/0x2ea0 [ 121.771904][ T7065] ? __nla_validate+0x50/0x50 [ 121.776627][ T7065] ? validate_linkmsg+0x719/0x910 [ 121.781668][ T7065] rtnl_newlink+0x17da/0x20a0 [ 121.786381][ T7065] ? rtnl_newlink+0x431/0x20a0 [ 121.791261][ T7065] ? rtnl_setlink+0x4e0/0x4e0 [ 121.795948][ T7065] ? trace_raw_output_contention_end+0xd0/0xd0 [ 121.802309][ T7065] ? rcu_is_watching+0x15/0xb0 [ 121.807096][ T7065] ? trace_contention_end+0x39/0xe0 [ 121.812315][ T7065] ? __mutex_lock+0x315/0xcc0 [ 121.817127][ T7065] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 121.822519][ T7065] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 121.827636][ T7065] ? rtnl_setlink+0x4e0/0x4e0 [ 121.832316][ T7065] rtnetlink_rcv_msg+0x869/0xfa0 [ 121.837275][ T7065] ? rtnetlink_bind+0x80/0x80 [ 121.841963][ T7065] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 121.847955][ T7065] ? __dev_queue_xmit+0x26b/0x36b0 [ 121.853219][ T7065] ? lock_chain_count+0x20/0x20 [ 121.858091][ T7065] ? __local_bh_enable_ip+0x13a/0x1c0 [ 121.863466][ T7065] ? lockdep_hardirqs_on+0x98/0x150 [ 121.868754][ T7065] ? __local_bh_enable_ip+0x13a/0x1c0 [ 121.874117][ T7065] ? _local_bh_enable+0xa0/0xa0 [ 121.879010][ T7065] ? __dev_queue_xmit+0x26b/0x36b0 [ 121.884165][ T7065] ? __dev_queue_xmit+0x26b/0x36b0 [ 121.889911][ T7065] ? __dev_queue_xmit+0x124f/0x36b0 [ 121.895234][ T7065] ? __dev_queue_xmit+0x26b/0x36b0 [ 121.900469][ T7065] ? perf_trace_lock+0xfc/0x3b0 [ 121.908008][ T7065] netlink_rcv_skb+0x241/0x4d0 [ 121.914379][ T7065] ? rtnetlink_bind+0x80/0x80 [ 121.920048][ T7065] ? netlink_ack+0x1180/0x1180 [ 121.926927][ T7065] ? __lock_acquire+0x7d40/0x7d40 [ 121.933651][ T7065] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.940326][ T7065] netlink_unicast+0x751/0x8d0 [ 121.947660][ T7065] netlink_sendmsg+0x8d0/0xbf0 [ 121.953360][ T7065] ? netlink_getsockopt+0x590/0x590 [ 121.959476][ T7065] ? aa_sock_msg_perm+0x94/0x150 [ 121.965284][ T7065] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 121.972424][ T7065] ? security_socket_sendmsg+0x80/0xa0 [ 121.980953][ T7065] ? netlink_getsockopt+0x590/0x590 [ 121.989743][ T7065] ____sys_sendmsg+0x5ba/0x960 [ 121.995296][ T7065] ? __asan_memset+0x22/0x40 [ 122.002413][ T7065] ? __sys_sendmsg_sock+0x30/0x30 [ 122.009731][ T7065] ? __import_iovec+0x5f2/0x850 [ 122.015219][ T7065] ? import_iovec+0x73/0xa0 [ 122.021925][ T7065] ___sys_sendmsg+0x2a6/0x360 [ 122.028649][ T7065] ? __sys_sendmsg+0x2a0/0x2a0 [ 122.034183][ T7065] ? __lock_acquire+0x7d40/0x7d40 [ 122.039922][ T7065] __se_sys_sendmsg+0x1c2/0x2b0 [ 122.048333][ T7065] ? __x64_sys_sendmsg+0x80/0x80 [ 122.054785][ T7065] ? lockdep_hardirqs_on+0x98/0x150 [ 122.061344][ T7065] do_syscall_64+0x55/0xa0 [ 122.067620][ T7065] ? clear_bhb_loop+0x40/0x90 [ 122.073449][ T7065] ? clear_bhb_loop+0x40/0x90 [ 122.080082][ T7065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.087139][ T7065] RIP: 0033:0x7f072c59acb9 [ 122.092177][ T7065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.118848][ T7065] RSP: 002b:00007f072d418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.127808][ T7065] RAX: ffffffffffffffda RBX: 00007f072c815fa0 RCX: 00007f072c59acb9 [ 122.135919][ T7065] RDX: 0000000020040040 RSI: 0000200000000600 RDI: 0000000000000003 [ 122.144001][ T7065] RBP: 00007f072d418090 R08: 0000000000000000 R09: 0000000000000000 [ 122.152074][ T7065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.160079][ T7065] R13: 00007f072c816038 R14: 00007f072c815fa0 R15: 00007ffd35811a38 [ 122.168358][ T7065] [ 122.211201][ T7065] .`: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 122.235577][ T7067] netlink: 14 bytes leftover after parsing attributes in process `syz.3.428'. [ 122.245193][ T7065] .`: (slave hsr0): The slave device specified does not support setting the MAC address [ 122.255530][ T7067] netlink: get zone limit has 4 unknown bytes [ 122.270665][ T7065] .`: (slave hsr0): Error -95 calling set_mac_address [ 122.499294][ T7076] netlink: 'syz.0.431': attribute type 2 has an invalid length. [ 122.674095][ T7085] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.434'. [ 122.684964][ T7084] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.435'. [ 122.699860][ T7084] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.435'. [ 122.710193][ T7085] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.434'. [ 122.724553][ T7084] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.435'. [ 122.735824][ T7088] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.434'. [ 122.948064][ T7096] netlink: 'syz.1.437': attribute type 3 has an invalid length. [ 122.956729][ T7096] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.437'. [ 123.892713][ T7117] netlink: 'syz.1.447': attribute type 10 has an invalid length. [ 123.947748][ T7117] veth1_macvtap: left promiscuous mode [ 124.471121][ T7124] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 124.640955][ T7127] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 126.298535][ T7143] netlink: 48 bytes leftover after parsing attributes in process `syz.2.456'. [ 126.436653][ T7150] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.459'. [ 126.451561][ T7150] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.459'. [ 126.534641][ T7153] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.460'. [ 126.557256][ T7153] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.460'. [ 127.053813][ T7163] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.462'. [ 127.116532][ T7163] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.462'. [ 127.187372][ T7165] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.462'. [ 128.468859][ T7175] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.465'. [ 128.573990][ T7189] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.469'. [ 128.941457][ T7190] delete_channel: no stack [ 130.551740][ T7227] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 133.192938][ T7283] __nla_validate_parse: 8 callbacks suppressed [ 133.192953][ T7283] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.499'. [ 133.210694][ T7283] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.499'. [ 133.271674][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.282148][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.850029][ T7307] netlink: 'syz.0.509': attribute type 21 has an invalid length. [ 134.023816][ T7305] netlink: 830 bytes leftover after parsing attributes in process `syz.2.508'. [ 134.239251][ T7316] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.511'. [ 134.249561][ T7316] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.511'. [ 136.211946][ T7328] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.514'. [ 136.691508][ T7345] netlink: 'syz.3.520': attribute type 10 has an invalid length. [ 136.708542][ T7345] netlink: 55 bytes leftover after parsing attributes in process `syz.3.520'. [ 136.721259][ T7344] netlink: 'syz.0.522': attribute type 10 has an invalid length. [ 136.778538][ T7344] netlink: 14 bytes leftover after parsing attributes in process `syz.0.522'. [ 136.941142][ T7350] netlink: 'syz.0.526': attribute type 4 has an invalid length. [ 136.955554][ T7350] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.526'. [ 137.095790][ T7358] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.528'. [ 137.982925][ T7398] netlink: 'syz.1.544': attribute type 10 has an invalid length. [ 139.503166][ T7398] veth0_vlan: left promiscuous mode [ 139.534121][ T7398] veth0_vlan: entered promiscuous mode [ 139.558353][ T7398] team0: Device veth0_vlan failed to register rx_handler [ 139.612246][ T7401] ÿÿÿÿÿÿ: renamed from hsr0 [ 139.867408][ T7409] netlink: zone id is out of range [ 139.872611][ T7409] netlink: set zone limit has 8 unknown bytes [ 139.984434][ T7416] __nla_validate_parse: 5 callbacks suppressed [ 139.984450][ T7416] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.549'. [ 140.255968][ T7425] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.552'. [ 140.287219][ T7425] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.552'. [ 140.334968][ T7429] netlink: 'syz.2.554': attribute type 15 has an invalid length. [ 140.358181][ T7431] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 140.380815][ T7425] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.552'. [ 140.394122][ T7431] netlink: 'syz.1.555': attribute type 3 has an invalid length. [ 140.405962][ T7431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.555'. [ 140.559675][ T7437] netlink: 'syz.2.557': attribute type 10 has an invalid length. [ 140.583049][ T7437] netlink: 156 bytes leftover after parsing attributes in process `syz.2.557'. [ 140.606836][ T7440] syz.3.558 uses obsolete (PF_INET,SOCK_PACKET) [ 142.032816][ T7519] netlink: 'syz.0.564': attribute type 29 has an invalid length. [ 142.177030][ T7519] netlink: 'syz.0.564': attribute type 29 has an invalid length. [ 142.252722][ T7529] netlink: 'syz.0.564': attribute type 29 has an invalid length. [ 142.415651][ T7531] netlink: 'syz.0.564': attribute type 29 has an invalid length. [ 142.451659][ T7534] netlink: 'syz.0.564': attribute type 29 has an invalid length. [ 144.209707][ T7557] netlink: 'syz.2.573': attribute type 10 has an invalid length. [ 144.248735][ T7557] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 144.616064][ T7572] Driver unsupported XDP return value 0 on prog (id 474) dev N/A, expect packet loss! [ 144.677846][ T7575] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.581'. [ 144.864996][ T7581] bond0: (slave bond_slave_0): Releasing backup interface [ 144.873729][ T7581] bond_slave_0: left promiscuous mode [ 144.906810][ T7571] delete_channel: no stack [ 147.043836][ T7613] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.594'. [ 147.103004][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.121951][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.133257][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.148742][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.956068][ T7650] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.604'. [ 148.009729][ T7653] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.608'. [ 148.054668][ T7653] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.608'. [ 148.098007][ T7655] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.609'. [ 148.110833][ T7656] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.608'. [ 148.924020][ T7679] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.619'. [ 148.934660][ T7679] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.619'. [ 148.950406][ T7679] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.619'. [ 149.129822][ T7683] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.620'. [ 149.240837][ T7687] validate_nla: 1 callbacks suppressed [ 149.240877][ T7687] netlink: 'syz.2.623': attribute type 2 has an invalid length. [ 149.482092][ T7696] pim6reg1: entered promiscuous mode [ 149.491852][ T7696] pim6reg1: entered allmulticast mode [ 150.190510][ T7720] netlink: 'syz.1.634': attribute type 10 has an invalid length. [ 150.344836][ T7722] netlink: 'syz.3.636': attribute type 10 has an invalid length. [ 150.709005][ T7740] netlink: 'syz.0.641': attribute type 10 has an invalid length. [ 150.891661][ T7748] netlink: 'syz.1.646': attribute type 10 has an invalid length. [ 151.712347][ T7768] delete_channel: no stack [ 151.718045][ T7768] delete_channel: no stack [ 151.767313][ T7768] netlink: 'syz.0.650': attribute type 15 has an invalid length. [ 151.816417][ T7768] netlink: 'syz.0.650': attribute type 5 has an invalid length. [ 151.909492][ T7771] tun0: tun_chr_ioctl cmd 1074025677 [ 151.914992][ T7771] tun0: linktype set to 776 [ 152.097054][ T7787] __nla_validate_parse: 15 callbacks suppressed [ 152.097069][ T7787] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.654'. [ 152.134879][ T7781] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.654'. [ 152.182353][ T7791] netlink: 'syz.1.659': attribute type 12 has an invalid length. [ 152.190734][ T7791] netlink: 132 bytes leftover after parsing attributes in process `syz.1.659'. [ 152.230479][ T7796] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.660'. [ 152.241172][ T7796] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.660'. [ 152.253519][ T7796] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.660'. [ 152.880985][ T7810] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.667'. [ 152.891618][ T7810] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.667'. [ 152.904090][ T7810] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.667'. [ 153.045657][ T7814] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.669'. [ 153.109763][ T7816] FAULT_INJECTION: forcing a failure. [ 153.109763][ T7816] name failslab, interval 1, probability 0, space 0, times 0 [ 153.136484][ T7816] CPU: 0 PID: 7816 Comm: syz.1.670 Not tainted syzkaller #0 [ 153.143915][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.154084][ T7816] Call Trace: [ 153.157383][ T7816] [ 153.160340][ T7816] dump_stack_lvl+0x18c/0x250 [ 153.165057][ T7816] ? show_regs_print_info+0x20/0x20 [ 153.170275][ T7816] ? load_image+0x400/0x400 [ 153.174820][ T7816] should_fail_ex+0x39d/0x4d0 [ 153.179536][ T7816] should_failslab+0x9/0x20 [ 153.184077][ T7816] slab_pre_alloc_hook+0x59/0x310 [ 153.189399][ T7816] ? __asan_memcpy+0x40/0x70 [ 153.194108][ T7816] kmem_cache_alloc_node+0x60/0x320 [ 153.199500][ T7816] ? __alloc_skb+0x103/0x2c0 [ 153.204205][ T7816] __alloc_skb+0x103/0x2c0 [ 153.208741][ T7816] _sctp_make_chunk+0x5e/0x420 [ 153.213926][ T7816] sctp_make_init+0x5f3/0xfc0 [ 153.218631][ T7816] ? sctp_addto_chunk+0x230/0x230 [ 153.223868][ T7816] ? kernel_text_address+0xa0/0xd0 [ 153.229238][ T7816] ? __kernel_text_address+0xd/0x30 [ 153.234876][ T7816] ? stack_trace_save+0x100/0x100 [ 153.240067][ T7816] ? arch_stack_walk+0x160/0x190 [ 153.245206][ T7816] sctp_sf_do_prm_asoc+0xd2/0x3e0 [ 153.250265][ T7816] sctp_do_sm+0x23a/0x5a60 [ 153.255021][ T7816] ? sctp_cname+0x110/0x110 [ 153.259560][ T7816] ? __stack_depot_save+0x1f/0x630 [ 153.264666][ T7816] ? kasan_set_track+0x4e/0x70 [ 153.269442][ T7816] ? __kasan_kmalloc+0x8f/0xa0 [ 153.274303][ T7816] ? sctp_stream_init_ext+0x57/0x170 [ 153.279678][ T7816] ? sctp_sendmsg_to_asoc+0x1324/0x1830 [ 153.285224][ T7816] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 153.291112][ T7816] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 153.296153][ T7816] ? do_syscall_64+0x55/0xa0 [ 153.300746][ T7816] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.306922][ T7816] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 153.313340][ T7816] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 153.318739][ T7816] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 153.324107][ T7816] ? __asan_memcpy+0x40/0x70 [ 153.328701][ T7816] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 153.334110][ T7816] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 153.339925][ T7816] ? __sctp_connect+0xd80/0xd80 [ 153.344804][ T7816] ? __local_bh_enable_ip+0x13a/0x1c0 [ 153.350270][ T7816] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 153.355819][ T7816] ? security_sctp_bind_connect+0x89/0xb0 [ 153.361535][ T7816] sctp_sendmsg+0x1b83/0x28c0 [ 153.366219][ T7816] ? sctp_getsockopt+0xb60/0xb60 [ 153.371177][ T7816] ? aa_sk_perm+0x83c/0x970 [ 153.375701][ T7816] ? aa_af_perm+0x330/0x330 [ 153.380217][ T7816] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 153.386745][ T7816] ? sock_rps_record_flow+0x19/0x3f0 [ 153.392146][ T7816] ? inet_sendmsg+0xe9/0x2f0 [ 153.396743][ T7816] ? inet_send_prepare+0x260/0x260 [ 153.401853][ T7816] ____sys_sendmsg+0x5ba/0x960 [ 153.406632][ T7816] ? __lock_acquire+0x7d40/0x7d40 [ 153.411668][ T7816] ? __asan_memset+0x22/0x40 [ 153.416259][ T7816] ? __sys_sendmsg_sock+0x30/0x30 [ 153.421277][ T7816] ? __import_iovec+0x5f2/0x850 [ 153.426155][ T7816] ? import_iovec+0x73/0xa0 [ 153.430689][ T7816] ___sys_sendmsg+0x2a6/0x360 [ 153.435365][ T7816] ? get_pid_task+0x20/0x1e0 [ 153.439957][ T7816] ? __sys_sendmsg+0x2a0/0x2a0 [ 153.444816][ T7816] ? __lock_acquire+0x7d40/0x7d40 [ 153.449851][ T7816] __se_sys_sendmsg+0x1c2/0x2b0 [ 153.454699][ T7816] ? __x64_sys_sendmsg+0x80/0x80 [ 153.459642][ T7816] ? lockdep_hardirqs_on+0x98/0x150 [ 153.464876][ T7816] do_syscall_64+0x55/0xa0 [ 153.469307][ T7816] ? clear_bhb_loop+0x40/0x90 [ 153.473990][ T7816] ? clear_bhb_loop+0x40/0x90 [ 153.478687][ T7816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.484596][ T7816] RIP: 0033:0x7f072c59acb9 [ 153.489031][ T7816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.508655][ T7816] RSP: 002b:00007f072d418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.517071][ T7816] RAX: ffffffffffffffda RBX: 00007f072c815fa0 RCX: 00007f072c59acb9 [ 153.525036][ T7816] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003 [ 153.532998][ T7816] RBP: 00007f072d418090 R08: 0000000000000000 R09: 0000000000000000 [ 153.540979][ T7816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.549141][ T7816] R13: 00007f072c816038 R14: 00007f072c815fa0 R15: 00007ffd35811a38 [ 153.557572][ T7816] [ 153.771264][ T7823] netlink: 'syz.3.673': attribute type 10 has an invalid length. [ 153.799342][ T7823] bond0: (slave bond_slave_0): Releasing backup interface [ 153.970570][ T7817] delete_channel: no stack [ 153.977266][ T7826] bond0: entered promiscuous mode [ 153.982377][ T7826] bond_slave_0: entered promiscuous mode [ 154.018075][ T7826] bond_slave_1: entered promiscuous mode [ 154.024898][ T7826] veth0_to_bond: entered promiscuous mode [ 154.283124][ T7844] FAULT_INJECTION: forcing a failure. [ 154.283124][ T7844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.300109][ T7842] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 154.319597][ T7844] CPU: 0 PID: 7844 Comm: syz.0.681 Not tainted syzkaller #0 [ 154.326950][ T7844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.337015][ T7844] Call Trace: [ 154.340400][ T7844] [ 154.343338][ T7844] dump_stack_lvl+0x18c/0x250 [ 154.348069][ T7844] ? show_regs_print_info+0x20/0x20 [ 154.353278][ T7844] ? load_image+0x400/0x400 [ 154.357798][ T7844] ? lockdep_hardirqs_on+0x98/0x150 [ 154.363001][ T7844] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 154.369243][ T7844] should_fail_ex+0x39d/0x4d0 [ 154.373925][ T7844] copyin+0x1a/0x90 [ 154.377738][ T7844] _copy_from_iter+0x404/0x12e0 [ 154.382605][ T7844] ? copyout_mc+0x70/0x70 [ 154.386952][ T7844] ? dev_get_by_index+0x22/0x2d0 [ 154.391984][ T7844] ? dev_get_by_index+0x22/0x2d0 [ 154.396930][ T7844] packet_sendmsg+0x2e23/0x4d70 [ 154.401789][ T7844] ? aa_sk_perm+0x970/0x970 [ 154.406321][ T7844] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 154.412043][ T7844] ? perf_trace_preemptirq_template+0x269/0x330 [ 154.418482][ T7844] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 154.424620][ T7844] ? lock_chain_count+0x20/0x20 [ 154.429492][ T7844] ? aa_sk_perm+0x83c/0x970 [ 154.434030][ T7844] ? packet_getsockopt+0xad0/0xad0 [ 154.439325][ T7844] ? lockdep_hardirqs_on+0x98/0x150 [ 154.444620][ T7844] ? packet_getsockopt+0xad0/0xad0 [ 154.449779][ T7844] ? packet_getsockopt+0xad0/0xad0 [ 154.454896][ T7844] ____sys_sendmsg+0x5ba/0x960 [ 154.459854][ T7844] ? __asan_memset+0x22/0x40 [ 154.464448][ T7844] ? __sys_sendmsg_sock+0x30/0x30 [ 154.469466][ T7844] ? __import_iovec+0x3fa/0x850 [ 154.474323][ T7844] ? import_iovec+0x73/0xa0 [ 154.478830][ T7844] ___sys_sendmsg+0x2a6/0x360 [ 154.483506][ T7844] ? __sys_sendmsg+0x2a0/0x2a0 [ 154.488278][ T7844] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 154.494531][ T7844] __se_sys_sendmsg+0x1c2/0x2b0 [ 154.499383][ T7844] ? __x64_sys_sendmsg+0x80/0x80 [ 154.504330][ T7844] ? lockdep_hardirqs_on+0x98/0x150 [ 154.509536][ T7844] do_syscall_64+0x55/0xa0 [ 154.514035][ T7844] ? clear_bhb_loop+0x40/0x90 [ 154.518707][ T7844] ? clear_bhb_loop+0x40/0x90 [ 154.523382][ T7844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.529273][ T7844] RIP: 0033:0x7f0e8c79acb9 [ 154.533683][ T7844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.553306][ T7844] RSP: 002b:00007f0e8d61e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.561815][ T7844] RAX: ffffffffffffffda RBX: 00007f0e8ca15fa0 RCX: 00007f0e8c79acb9 [ 154.569791][ T7844] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 154.577782][ T7844] RBP: 00007f0e8d61e090 R08: 0000000000000000 R09: 0000000000000000 [ 154.585852][ T7844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.593848][ T7844] R13: 00007f0e8ca16038 R14: 00007f0e8ca15fa0 R15: 00007ffe53a4b308 [ 154.601843][ T7844] [ 154.850129][ T7851] netlink: 'syz.2.682': attribute type 10 has an invalid length. [ 154.864861][ T7851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.881618][ T7851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.968987][ T7851] batadv_slave_0: entered promiscuous mode [ 154.982439][ T7851] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 155.216001][ T7866] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 156.692666][ T7893] netlink: 'syz.1.700': attribute type 3 has an invalid length. [ 156.814714][ T7893] sctp: [Deprecated]: syz.1.700 (pid 7893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.814714][ T7893] Use struct sctp_sack_info instead [ 157.007328][ T7902] netlink: 'syz.3.704': attribute type 21 has an invalid length. [ 157.126615][ T7907] netlink: 'syz.1.705': attribute type 29 has an invalid length. [ 157.150449][ T7907] netlink: 'syz.1.705': attribute type 3 has an invalid length. [ 157.193237][ T7907] __nla_validate_parse: 15 callbacks suppressed [ 157.193252][ T7907] netlink: 132 bytes leftover after parsing attributes in process `syz.1.705'. [ 157.487795][ T7900] netlink: 'syz.2.702': attribute type 10 has an invalid length. [ 157.560189][ T7900] bond0: (slave bond_slave_0): Releasing backup interface [ 157.603657][ T7900] bond_slave_0: left promiscuous mode [ 157.806740][ T7899] delete_channel: no stack [ 158.161499][ T7925] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.710'. [ 158.177834][ T7926] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.712'. [ 158.458712][ T7925] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 158.480487][ T7926] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.712'. [ 158.698235][ T7929] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.712'. [ 158.909994][ T7937] netlink: 'syz.0.714': attribute type 3 has an invalid length. [ 158.930245][ T7937] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.714'. [ 159.016791][ T7937] sctp: [Deprecated]: syz.0.714 (pid 7937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.016791][ T7937] Use struct sctp_sack_info instead [ 159.406855][ T7957] netlink: 'syz.3.720': attribute type 21 has an invalid length. [ 159.414706][ T7957] netlink: 'syz.3.720': attribute type 1 has an invalid length. [ 159.439357][ T7949] netlink: 'syz.1.718': attribute type 10 has an invalid length. [ 159.478544][ T7949] .`: (slave bond_slave_0): Releasing backup interface [ 159.494391][ T7961] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.723'. [ 159.511566][ T7949] bond_slave_0: left promiscuous mode [ 159.541289][ T7961] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.723'. [ 159.554115][ T7962] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.723'. [ 159.588166][ T7948] delete_channel: no stack [ 160.880000][ T7997] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 160.933425][ T7997] syzkaller0: entered promiscuous mode [ 160.940318][ T7997] syzkaller0: entered allmulticast mode [ 161.254539][ T8013] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.743'. [ 162.620325][ T8013] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.743'. [ 162.882586][ T8030] netlink: 'syz.3.749': attribute type 46 has an invalid length. [ 162.899693][ T8030] netlink: 55 bytes leftover after parsing attributes in process `syz.3.749'. [ 163.005203][ T8037] netlink: 'syz.2.752': attribute type 4 has an invalid length. [ 163.013245][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.752'. [ 163.090128][ T8037] ÿÿÿÿÿÿ: renamed from hsr0 [ 163.370731][ T8047] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.755'. [ 163.382919][ T8047] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.755'. [ 163.393344][ T8047] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.755'. [ 163.611589][ T8050] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 164.209786][ T8051] netlink: 'syz.0.756': attribute type 10 has an invalid length. [ 164.258804][ T8051] netlink: 55 bytes leftover after parsing attributes in process `syz.0.756'. [ 164.441293][ T8060] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 164.461708][ T8061] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 164.483444][ T8060] netlink: 'syz.2.759': attribute type 3 has an invalid length. [ 164.506501][ T8060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.759'. [ 164.997523][ T8088] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.767'. [ 165.009367][ T8089] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 165.022241][ T8088] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.767'. [ 165.509925][ T8094] netlink: 'syz.3.770': attribute type 10 has an invalid length. [ 166.002347][ T8112] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 166.477730][ T8125] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 166.860851][ T8141] netlink: 'syz.1.784': attribute type 4 has an invalid length. [ 166.952252][ T8146] netlink: 'syz.3.787': attribute type 1 has an invalid length. [ 167.103356][ T8147] netlink: 'syz.2.786': attribute type 10 has an invalid length. [ 167.565904][ T8157] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 167.778436][ T8164] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 167.884044][ T8170] __nla_validate_parse: 7 callbacks suppressed [ 167.884059][ T8170] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.794'. [ 167.937120][ T8170] netlink: 'syz.2.794': attribute type 2 has an invalid length. [ 168.174920][ T8182] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.799'. [ 168.206320][ T8182] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.799'. [ 168.237251][ T8182] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.799'. [ 168.618094][ T8192] C: renamed from team_slave_0 (while UP) [ 168.637119][ T8192] netlink: 'syz.0.805': attribute type 1 has an invalid length. [ 168.656548][ T8192] netlink: 152 bytes leftover after parsing attributes in process `syz.0.805'. [ 169.403916][ T8213] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.812'. [ 169.427017][ T8212] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.812'. [ 169.454085][ T8213] FAULT_INJECTION: forcing a failure. [ 169.454085][ T8213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.476945][ T8213] CPU: 0 PID: 8213 Comm: syz.3.812 Not tainted syzkaller #0 [ 169.484303][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.494392][ T8213] Call Trace: [ 169.497697][ T8213] [ 169.500650][ T8213] dump_stack_lvl+0x18c/0x250 [ 169.505352][ T8213] ? show_regs_print_info+0x20/0x20 [ 169.510564][ T8213] ? load_image+0x400/0x400 [ 169.515089][ T8213] ? __might_fault+0xaa/0x120 [ 169.519871][ T8213] ? __lock_acquire+0x7d40/0x7d40 [ 169.524906][ T8213] should_fail_ex+0x39d/0x4d0 [ 169.529590][ T8213] _copy_from_user+0x2f/0xe0 [ 169.534188][ T8213] bpf_prog_test_run_xdp+0xc99/0xf80 [ 169.539481][ T8213] ? dev_put+0x80/0x80 [ 169.543563][ T8213] ? dev_put+0x80/0x80 [ 169.547659][ T8213] bpf_prog_test_run+0x321/0x390 [ 169.552604][ T8213] __sys_bpf+0x49d/0x890 [ 169.556857][ T8213] ? bpf_link_show_fdinfo+0x390/0x390 [ 169.562248][ T8213] ? lock_chain_count+0x20/0x20 [ 169.567101][ T8213] __x64_sys_bpf+0x7c/0x90 [ 169.571524][ T8213] do_syscall_64+0x55/0xa0 [ 169.575942][ T8213] ? clear_bhb_loop+0x40/0x90 [ 169.580619][ T8213] ? clear_bhb_loop+0x40/0x90 [ 169.585405][ T8213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.591308][ T8213] RIP: 0033:0x7f8059d9acb9 [ 169.595725][ T8213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.615331][ T8213] RSP: 002b:00007f805abb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.623737][ T8213] RAX: ffffffffffffffda RBX: 00007f805a016090 RCX: 00007f8059d9acb9 [ 169.631699][ T8213] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 169.639669][ T8213] RBP: 00007f805abb5090 R08: 0000000000000000 R09: 0000000000000000 [ 169.647631][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.655591][ T8213] R13: 00007f805a016128 R14: 00007f805a016090 R15: 00007ffd14b5d418 [ 169.663568][ T8213] [ 169.937608][ T8228] netlink: 'syz.3.817': attribute type 10 has an invalid length. [ 169.967161][ T8228] bond0: (slave ÿÿÿÿÿÿ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 170.003045][ T8228] bond0: (slave ÿÿÿÿÿÿ): The slave device specified does not support setting the MAC address [ 170.035722][ T8228] ÿÿÿÿÿÿ: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 170.066337][ T8228] bond0: (slave ÿÿÿÿÿÿ): Error -22 calling dev_set_mtu [ 170.081499][ T8230] netlink: 'syz.0.819': attribute type 21 has an invalid length. [ 170.344534][ T8242] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.820'. [ 170.366869][ T8242] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.820'. [ 170.380989][ T8242] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.820'. [ 171.647044][ T8306] netlink: 'syz.2.834': attribute type 21 has an invalid length. [ 171.779071][ T8311] C: renamed from team_slave_0 (while UP) [ 171.796511][ T8311] netlink: 'syz.1.836': attribute type 1 has an invalid length. [ 171.810858][ T5777] Bluetooth: hci2: Malformed LE Event: 0x02 [ 172.473456][ T8333] netlink: 'syz.3.846': attribute type 10 has an invalid length. [ 173.034179][ T8353] __nla_validate_parse: 6 callbacks suppressed [ 173.034197][ T8353] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.853'. [ 173.050253][ T8353] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.853'. [ 173.069909][ T8353] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.853'. [ 173.254887][ T8356] C: renamed from team_slave_0 (while UP) [ 173.315412][ T8356] netlink: 'syz.2.854': attribute type 1 has an invalid length. [ 173.390085][ T8356] netlink: 152 bytes leftover after parsing attributes in process `syz.2.854'. [ 174.454723][ T8410] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.857'. [ 174.498282][ T8403] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.857'. [ 174.822915][ T8421] netlink: 48 bytes leftover after parsing attributes in process `syz.1.864'. [ 175.007374][ T8426] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.866'. [ 175.024527][ T8426] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.866'. [ 175.036612][ T8426] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.866'. [ 175.117680][ T8430] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 175.703397][ T8442] netlink: 'syz.1.871': attribute type 10 has an invalid length. [ 175.796673][ T8440] delete_channel: no stack [ 175.961912][ T8455] FAULT_INJECTION: forcing a failure. [ 175.961912][ T8455] name failslab, interval 1, probability 0, space 0, times 0 [ 175.995849][ T8455] CPU: 1 PID: 8455 Comm: syz.1.876 Not tainted syzkaller #0 [ 176.003204][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.013285][ T8455] Call Trace: [ 176.017159][ T8455] [ 176.020156][ T8455] dump_stack_lvl+0x18c/0x250 [ 176.024960][ T8455] ? show_regs_print_info+0x20/0x20 [ 176.030347][ T8455] ? load_image+0x400/0x400 [ 176.034974][ T8455] ? __might_sleep+0xe0/0xe0 [ 176.039661][ T8455] ? __lock_acquire+0x7d40/0x7d40 [ 176.044693][ T8455] should_fail_ex+0x39d/0x4d0 [ 176.049381][ T8455] should_failslab+0x9/0x20 [ 176.053886][ T8455] slab_pre_alloc_hook+0x59/0x310 [ 176.058919][ T8455] kmem_cache_alloc_node+0x60/0x320 [ 176.064136][ T8455] ? __alloc_skb+0x103/0x2c0 [ 176.068739][ T8455] __alloc_skb+0x103/0x2c0 [ 176.073331][ T8455] alloc_skb_with_frags+0xca/0x7b0 [ 176.078442][ T8455] ? __lock_acquire+0x7d40/0x7d40 [ 176.083468][ T8455] sock_alloc_send_pskb+0x883/0x9a0 [ 176.088671][ T8455] ? lock_chain_count+0x20/0x20 [ 176.093526][ T8455] ? sock_kzfree_s+0x50/0x50 [ 176.098116][ T8455] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 176.104360][ T8455] packet_sendmsg+0x316e/0x4d70 [ 176.109353][ T8455] ? __might_sleep+0xe0/0xe0 [ 176.114107][ T8455] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 176.119827][ T8455] ? aa_sk_perm+0x83c/0x970 [ 176.124339][ T8455] ? packet_getsockopt+0xad0/0xad0 [ 176.129620][ T8455] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 176.135774][ T8455] ? aa_sock_msg_perm+0x94/0x150 [ 176.140762][ T8455] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 176.146314][ T8455] ? security_socket_sendmsg+0x80/0xa0 [ 176.151945][ T8455] ? packet_getsockopt+0xad0/0xad0 [ 176.157230][ T8455] ____sys_sendmsg+0x5ba/0x960 [ 176.162056][ T8455] ? __asan_memset+0x22/0x40 [ 176.166747][ T8455] ? __sys_sendmsg_sock+0x30/0x30 [ 176.171792][ T8455] ? __import_iovec+0x3fa/0x850 [ 176.176662][ T8455] ? import_iovec+0x73/0xa0 [ 176.181201][ T8455] ___sys_sendmsg+0x2a6/0x360 [ 176.186195][ T8455] ? __sys_sendmsg+0x2a0/0x2a0 [ 176.191003][ T8455] __se_sys_sendmsg+0x1c2/0x2b0 [ 176.195867][ T8455] ? __x64_sys_sendmsg+0x80/0x80 [ 176.200817][ T8455] ? syscall_enter_from_user_mode+0x2e/0x80 [ 176.206805][ T8455] do_syscall_64+0x55/0xa0 [ 176.211307][ T8455] ? clear_bhb_loop+0x40/0x90 [ 176.215998][ T8455] ? clear_bhb_loop+0x40/0x90 [ 176.220796][ T8455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.226717][ T8455] RIP: 0033:0x7f072c59acb9 [ 176.231170][ T8455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.250978][ T8455] RSP: 002b:00007f072d418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.259411][ T8455] RAX: ffffffffffffffda RBX: 00007f072c815fa0 RCX: 00007f072c59acb9 [ 176.267394][ T8455] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 176.275385][ T8455] RBP: 00007f072d418090 R08: 0000000000000000 R09: 0000000000000000 [ 176.283381][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.291371][ T8455] R13: 00007f072c816038 R14: 00007f072c815fa0 R15: 00007ffd35811a38 [ 176.299542][ T8455] [ 176.560359][ T8463] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 176.586264][ T8463] CPU: 1 PID: 8463 Comm: syz.0.879 Not tainted syzkaller #0 [ 176.593645][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.603740][ T8463] Call Trace: [ 176.607049][ T8463] [ 176.609995][ T8463] dump_stack_lvl+0x18c/0x250 [ 176.614706][ T8463] ? show_regs_print_info+0x20/0x20 [ 176.619940][ T8463] ? load_image+0x400/0x400 [ 176.624533][ T8463] sysfs_warn_dup+0x8e/0xa0 [ 176.629077][ T8463] sysfs_do_create_link_sd+0xc0/0x110 [ 176.634501][ T8463] device_add_class_symlinks+0x1cf/0x240 [ 176.640176][ T8463] device_add+0x507/0xc20 [ 176.644635][ T8463] wiphy_register+0x1dad/0x2ae0 [ 176.649723][ T8463] ? cfg80211_event_work+0x40/0x40 [ 176.654972][ T8463] ? minstrel_ht_alloc+0x88a/0x990 [ 176.660225][ T8463] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 176.666531][ T8463] ieee80211_register_hw+0x3464/0x4250 [ 176.672331][ T8463] ? ieee80211_tasklet_handler+0x20/0x20 [ 176.678353][ T8463] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 176.686444][ T8463] ? __debug_object_init+0xec/0x450 [ 176.691860][ T8463] ? __asan_memset+0x22/0x40 [ 176.696718][ T8463] ? __hrtimer_init+0x186/0x270 [ 176.701802][ T8463] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 176.707665][ T8463] ? mac80211_hwsim_free+0x220/0x220 [ 176.713065][ T8463] ? rcu_is_watching+0x15/0xb0 [ 176.717845][ T8463] ? kstrndup+0xbd/0x140 [ 176.722266][ T8463] hwsim_new_radio_nl+0xdc9/0x1a90 [ 176.727392][ T8463] ? __nla_validate+0x50/0x50 [ 176.732196][ T8463] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 176.739105][ T8463] ? __nla_parse+0x40/0x50 [ 176.743701][ T8463] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 176.750074][ T8463] genl_family_rcv_msg_doit+0x211/0x310 [ 176.755651][ T8463] ? end_current_label_crit_section+0x170/0x170 [ 176.761912][ T8463] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 176.767827][ T8463] ? bpf_lsm_capable+0x9/0x10 [ 176.772555][ T8463] ? security_capable+0x89/0xb0 [ 176.778202][ T8463] genl_rcv_msg+0x619/0x7a0 [ 176.782753][ T8463] ? genl_bind+0x360/0x360 [ 176.787179][ T8463] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 176.793714][ T8463] ? ref_tracker_free+0x690/0x840 [ 176.799120][ T8463] netlink_rcv_skb+0x241/0x4d0 [ 176.803904][ T8463] ? genl_bind+0x360/0x360 [ 176.808348][ T8463] ? netlink_ack+0x1180/0x1180 [ 176.813140][ T8463] ? __lock_acquire+0x7d40/0x7d40 [ 176.818176][ T8463] ? down_read+0x1ac/0x2e0 [ 176.822607][ T8463] genl_rcv+0x28/0x40 [ 176.826630][ T8463] netlink_unicast+0x751/0x8d0 [ 176.831412][ T8463] netlink_sendmsg+0x8d0/0xbf0 [ 176.836180][ T8463] ? netlink_getsockopt+0x590/0x590 [ 176.841386][ T8463] ? aa_sock_msg_perm+0x94/0x150 [ 176.846352][ T8463] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 176.851799][ T8463] ? security_socket_sendmsg+0x80/0xa0 [ 176.857379][ T8463] ? netlink_getsockopt+0x590/0x590 [ 176.862618][ T8463] ____sys_sendmsg+0x5ba/0x960 [ 176.867489][ T8463] ? __asan_memset+0x22/0x40 [ 176.872264][ T8463] ? __sys_sendmsg_sock+0x30/0x30 [ 176.877397][ T8463] ? __import_iovec+0x5f2/0x850 [ 176.882481][ T8463] ? import_iovec+0x73/0xa0 [ 176.887015][ T8463] ___sys_sendmsg+0x2a6/0x360 [ 176.891799][ T8463] ? __sys_sendmsg+0x2a0/0x2a0 [ 176.896618][ T8463] ? debug_mutex_init+0x38/0x70 [ 176.901542][ T8463] __se_sys_sendmsg+0x1c2/0x2b0 [ 176.906424][ T8463] ? __x64_sys_sendmsg+0x80/0x80 [ 176.911404][ T8463] ? lockdep_hardirqs_on+0x98/0x150 [ 176.916620][ T8463] do_syscall_64+0x55/0xa0 [ 176.921391][ T8463] ? clear_bhb_loop+0x40/0x90 [ 176.926139][ T8463] ? clear_bhb_loop+0x40/0x90 [ 176.931818][ T8463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.937808][ T8463] RIP: 0033:0x7f0e8c79acb9 [ 176.942230][ T8463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.964212][ T8463] RSP: 002b:00007f0e8d61e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.973522][ T8463] RAX: ffffffffffffffda RBX: 00007f0e8ca15fa0 RCX: 00007f0e8c79acb9 [ 176.981951][ T8463] RDX: 0e00000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 176.990013][ T8463] RBP: 00007f0e8c808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 176.998098][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.006090][ T8463] R13: 00007f0e8ca16038 R14: 00007f0e8ca15fa0 R15: 00007ffe53a4b308 [ 177.014181][ T8463] [ 178.275702][ T8511] netlink: 'syz.3.895': attribute type 10 has an invalid length. [ 178.379393][ T8510] delete_channel: no stack [ 178.580838][ T8531] __nla_validate_parse: 2 callbacks suppressed [ 178.580853][ T8531] netlink: 60 bytes leftover after parsing attributes in process `syz.3.899'. [ 178.612723][ T8531] netlink: 60 bytes leftover after parsing attributes in process `syz.3.899'. [ 179.292838][ T8555] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 179.313251][ T8560] netlink: 'syz.1.912': attribute type 21 has an invalid length. [ 179.333332][ T8560] netlink: 'syz.1.912': attribute type 1 has an invalid length. [ 179.380118][ T8553] delete_channel: no stack [ 179.420373][ T8562] netlink: 'syz.2.913': attribute type 2 has an invalid length. [ 179.444113][ T8562] netlink: 'syz.2.913': attribute type 8 has an invalid length. [ 179.452657][ T8562] netlink: 132 bytes leftover after parsing attributes in process `syz.2.913'. [ 179.811914][ T8582] syz.0.919[8582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.812113][ T8582] syz.0.919[8582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.916772][ T8590] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.920'. [ 179.963050][ T8590] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.920'. [ 179.980963][ T8592] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.920'. [ 180.359412][ T8605] netlink: 'syz.0.927': attribute type 10 has an invalid length. [ 180.384021][ T8605] netlink: 14 bytes leftover after parsing attributes in process `syz.0.927'. [ 181.287693][ T8628] netlink: 'syz.2.936': attribute type 7 has an invalid length. [ 181.625761][ T8632] netlink: 60 bytes leftover after parsing attributes in process `syz.2.938'. [ 181.646797][ T8632] netlink: 60 bytes leftover after parsing attributes in process `syz.2.938'. [ 181.672815][ T8632] netlink: 60 bytes leftover after parsing attributes in process `syz.2.938'. [ 181.861529][ T8630] netlink: 'syz.3.937': attribute type 10 has an invalid length. [ 182.489035][ T8663] netlink: 'syz.2.949': attribute type 21 has an invalid length. [ 183.646920][ T8695] netlink: 'syz.0.957': attribute type 32 has an invalid length. [ 183.785369][ T8699] __nla_validate_parse: 11 callbacks suppressed [ 183.785384][ T8699] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.958'. [ 183.873281][ T8699] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.958'. [ 183.898794][ T8705] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.958'. [ 184.135371][ T8712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.962'. [ 184.145689][ T8712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.962'. [ 184.173826][ T8712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.962'. [ 184.198648][ T8712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.962'. [ 184.662582][ T8726] netlink: 'syz.1.967': attribute type 1 has an invalid length. [ 184.673207][ T8726] netlink: 'syz.1.967': attribute type 3 has an invalid length. [ 184.707737][ T8726] netlink: 132 bytes leftover after parsing attributes in process `syz.1.967'. [ 185.163608][ T8742] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 185.196996][ T8742] netlink: 156 bytes leftover after parsing attributes in process `syz.3.974'. [ 185.214813][ T8746] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.976'. [ 187.147403][ T8803] netlink: 'syz.3.989': attribute type 29 has an invalid length. [ 187.161180][ T8803] netlink: 'syz.3.989': attribute type 29 has an invalid length. [ 187.189903][ T8805] netlink: 'syz.3.989': attribute type 29 has an invalid length. [ 187.236525][ T8803] netlink: 'syz.3.989': attribute type 29 has an invalid length. [ 187.274233][ T8803] netlink: 'syz.3.989': attribute type 29 has an invalid length. [ 187.472689][ T8813] netlink: 'syz.1.992': attribute type 39 has an invalid length. [ 187.723733][ T8820] netlink: 'syz.0.995': attribute type 10 has an invalid length. [ 187.853055][ T8820] dummy0: entered promiscuous mode [ 187.867800][ T8820] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 188.694622][ T8848] FAULT_INJECTION: forcing a failure. [ 188.694622][ T8848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.714113][ T8848] CPU: 0 PID: 8848 Comm: syz.1.1005 Not tainted syzkaller #0 [ 188.721539][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.731712][ T8848] Call Trace: [ 188.735019][ T8848] [ 188.737971][ T8848] dump_stack_lvl+0x18c/0x250 [ 188.742678][ T8848] ? show_regs_print_info+0x20/0x20 [ 188.747904][ T8848] ? load_image+0x400/0x400 [ 188.752691][ T8848] ? __might_fault+0xaa/0x120 [ 188.757370][ T8848] ? __lock_acquire+0x7d40/0x7d40 [ 188.762400][ T8848] should_fail_ex+0x39d/0x4d0 [ 188.767088][ T8848] _copy_from_user+0x2f/0xe0 [ 188.771674][ T8848] ___sys_sendmsg+0x1c7/0x360 [ 188.776346][ T8848] ? get_pid_task+0x20/0x1e0 [ 188.780959][ T8848] ? __sys_sendmsg+0x2a0/0x2a0 [ 188.785773][ T8848] ? __lock_acquire+0x7d40/0x7d40 [ 188.790831][ T8848] __se_sys_sendmsg+0x1c2/0x2b0 [ 188.795707][ T8848] ? __x64_sys_sendmsg+0x80/0x80 [ 188.801863][ T8848] ? lockdep_hardirqs_on+0x98/0x150 [ 188.807658][ T8848] do_syscall_64+0x55/0xa0 [ 188.812368][ T8848] ? clear_bhb_loop+0x40/0x90 [ 188.817056][ T8848] ? clear_bhb_loop+0x40/0x90 [ 188.821789][ T8848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.827709][ T8848] RIP: 0033:0x7f072c59acb9 [ 188.832141][ T8848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.851934][ T8848] RSP: 002b:00007f072d418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.860368][ T8848] RAX: ffffffffffffffda RBX: 00007f072c815fa0 RCX: 00007f072c59acb9 [ 188.868444][ T8848] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000003 [ 188.876417][ T8848] RBP: 00007f072d418090 R08: 0000000000000000 R09: 0000000000000000 [ 188.884380][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.892440][ T8848] R13: 00007f072c816038 R14: 00007f072c815fa0 R15: 00007ffd35811a38 [ 188.900480][ T8848] [ 189.072219][ T8855] __nla_validate_parse: 6 callbacks suppressed [ 189.072264][ T8855] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1010'. [ 190.175826][ T8892] validate_nla: 1 callbacks suppressed [ 190.175844][ T8892] netlink: 'syz.0.1021': attribute type 7 has an invalid length. [ 190.216360][ T8892] netlink: 'syz.0.1021': attribute type 1 has an invalid length. [ 190.252541][ T8892] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1021'. [ 190.454491][ T8901] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1024'. [ 190.598972][ T8904] netlink: 'syz.2.1025': attribute type 10 has an invalid length. [ 190.614605][ T8904] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1025'. [ 190.722708][ T8908] netlink: 'syz.1.1027': attribute type 10 has an invalid length. [ 190.744004][ T8908] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1027'. [ 191.666328][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 191.677893][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 191.679604][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 191.695847][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 192.335641][ T8916] netlink: 'syz.0.1028': attribute type 10 has an invalid length. [ 192.351236][ T8916] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 192.373960][ T8916] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 192.385522][ T8916] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 192.398429][ T8916] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 192.739680][ T8931] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 192.889065][ T8934] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 193.715943][ T8971] netlink: 'syz.0.1048': attribute type 10 has an invalid length. [ 193.726596][ T8971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1048'. [ 193.783729][ T8968] netlink: 'syz.2.1047': attribute type 7 has an invalid length. [ 193.846422][ T8968] netlink: 'syz.2.1047': attribute type 1 has an invalid length. [ 193.884499][ T8968] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1047'. [ 194.070458][ T8981] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1049'. [ 194.128160][ T8974] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1049'. [ 194.310460][ T8989] netlink: 'syz.2.1054': attribute type 10 has an invalid length. [ 194.415507][ T8989] veth1_macvtap: left promiscuous mode [ 194.713652][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.721605][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.841854][ T9003] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1058'. [ 194.867925][ T8996] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1057'. [ 194.879224][ T9003] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1058'. [ 194.894841][ T9005] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1058'. [ 195.716846][ T9004] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1060'. [ 195.964288][ T9025] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 196.210536][ T9032] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 196.321735][ T9038] netlink: 'syz.2.1071': attribute type 1 has an invalid length. [ 196.344552][ T9038] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.1071'. [ 196.382965][ T9041] FAULT_INJECTION: forcing a failure. [ 196.382965][ T9041] name failslab, interval 1, probability 0, space 0, times 0 [ 196.400791][ T9041] CPU: 0 PID: 9041 Comm: syz.1.1072 Not tainted syzkaller #0 [ 196.408252][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.418945][ T9041] Call Trace: [ 196.422868][ T9041] [ 196.425839][ T9041] dump_stack_lvl+0x18c/0x250 [ 196.430916][ T9041] ? show_regs_print_info+0x20/0x20 [ 196.437729][ T9041] ? load_image+0x400/0x400 [ 196.442364][ T9041] ? __might_sleep+0xe0/0xe0 [ 196.447000][ T9041] ? __lock_acquire+0x7d40/0x7d40 [ 196.452069][ T9041] ? perf_trace_lock_acquire+0x104/0x410 [ 196.458528][ T9041] should_fail_ex+0x39d/0x4d0 [ 196.463265][ T9041] should_failslab+0x9/0x20 [ 196.467796][ T9041] slab_pre_alloc_hook+0x59/0x310 [ 196.473018][ T9041] kmem_cache_alloc_node+0x60/0x320 [ 196.479626][ T9041] ? __alloc_skb+0x103/0x2c0 [ 196.484387][ T9041] __alloc_skb+0x103/0x2c0 [ 196.489112][ T9041] sctp_packet_transmit+0x2cc/0x2a30 [ 196.494466][ T9041] ? __sctp_packet_append_chunk+0x90b/0xd00 [ 196.500382][ T9041] ? sctp_packet_append_chunk+0x9b2/0xfe0 [ 196.506124][ T9041] ? sctp_packet_config+0x5b1/0xcf0 [ 196.511465][ T9041] sctp_packet_singleton+0x235/0x340 [ 196.516942][ T9041] ? sctp_outq_select_transport+0x570/0x570 [ 196.522871][ T9041] ? sctp_outq_select_transport+0x45d/0x570 [ 196.528886][ T9041] ? sctp_transport_burst_limited+0x197/0x280 [ 196.535025][ T9041] sctp_outq_flush+0x50e/0x3120 [ 196.540088][ T9041] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 196.546016][ T9041] ? _raw_spin_unlock+0x40/0x40 [ 196.551022][ T9041] ? rcu_is_watching+0x15/0xb0 [ 196.555833][ T9041] ? enqueue_timer+0x23d/0x550 [ 196.563656][ T9041] ? sctp_outq_tail+0x8a0/0x8a0 [ 196.568523][ T9041] ? sctp_outq_tail+0x604/0x8a0 [ 196.573399][ T9041] ? sctp_outq_uncork+0x4d/0xa0 [ 196.578269][ T9041] sctp_do_sm+0x533b/0x5a60 [ 196.582820][ T9041] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 196.588829][ T9041] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 196.594431][ T9041] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 196.600472][ T9041] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 196.606758][ T9041] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 196.612189][ T9041] ? __asan_memcpy+0x40/0x70 [ 196.616802][ T9041] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 196.622197][ T9041] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 196.628531][ T9041] ? __sctp_connect+0xd80/0xd80 [ 196.633749][ T9041] ? __local_bh_enable_ip+0x13a/0x1c0 [ 196.639574][ T9041] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 196.645256][ T9041] ? security_sctp_bind_connect+0x89/0xb0 [ 196.650997][ T9041] sctp_sendmsg+0x1b83/0x28c0 [ 196.655689][ T9041] ? sctp_getsockopt+0xb60/0xb60 [ 196.660646][ T9041] ? aa_sk_perm+0x83c/0x970 [ 196.665272][ T9041] ? aa_af_perm+0x330/0x330 [ 196.669793][ T9041] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 196.676219][ T9041] ? sock_rps_record_flow+0x19/0x3f0 [ 196.681524][ T9041] ? inet_sendmsg+0xe9/0x2f0 [ 196.686118][ T9041] ? inet_send_prepare+0x260/0x260 [ 196.691231][ T9041] ____sys_sendmsg+0x5ba/0x960 [ 196.695990][ T9041] ? __lock_acquire+0x7d40/0x7d40 [ 196.701012][ T9041] ? __asan_memset+0x22/0x40 [ 196.705598][ T9041] ? __sys_sendmsg_sock+0x30/0x30 [ 196.710898][ T9041] ? __import_iovec+0x5f2/0x850 [ 196.715860][ T9041] ? import_iovec+0x73/0xa0 [ 196.720377][ T9041] ___sys_sendmsg+0x2a6/0x360 [ 196.725058][ T9041] ? get_pid_task+0x20/0x1e0 [ 196.729649][ T9041] ? __sys_sendmsg+0x2a0/0x2a0 [ 196.734427][ T9041] ? __lock_acquire+0x7d40/0x7d40 [ 196.739468][ T9041] __se_sys_sendmsg+0x1c2/0x2b0 [ 196.744360][ T9041] ? __x64_sys_sendmsg+0x80/0x80 [ 196.749540][ T9041] ? lockdep_hardirqs_on+0x98/0x150 [ 196.755017][ T9041] do_syscall_64+0x55/0xa0 [ 196.759429][ T9041] ? clear_bhb_loop+0x40/0x90 [ 196.764110][ T9041] ? clear_bhb_loop+0x40/0x90 [ 196.768785][ T9041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.774671][ T9041] RIP: 0033:0x7f072c59acb9 [ 196.779080][ T9041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.798828][ T9041] RSP: 002b:00007f072d418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.807705][ T9041] RAX: ffffffffffffffda RBX: 00007f072c815fa0 RCX: 00007f072c59acb9 [ 196.815684][ T9041] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003 [ 196.823654][ T9041] RBP: 00007f072d418090 R08: 0000000000000000 R09: 0000000000000000 [ 196.831629][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.839611][ T9041] R13: 00007f072c816038 R14: 00007f072c815fa0 R15: 00007ffd35811a38 [ 196.847861][ T9041] [ 197.059440][ T9054] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1075'. [ 197.088436][ T9054] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1075'. [ 197.112132][ T9054] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1075'. [ 197.570309][ T9073] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 197.648136][ T9075] netlink: 'syz.3.1084': attribute type 1 has an invalid length. [ 198.299339][ T9100] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 198.458660][ T9108] : renamed from veth0_vlan (while UP) [ 198.529533][ T9112] netlink: 'syz.0.1098': attribute type 21 has an invalid length. [ 198.985348][ T9129] FAULT_INJECTION: forcing a failure. [ 198.985348][ T9129] name failslab, interval 1, probability 0, space 0, times 0 [ 199.004016][ T9129] CPU: 0 PID: 9129 Comm: syz.2.1106 Not tainted syzkaller #0 [ 199.011444][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.021522][ T9129] Call Trace: [ 199.025293][ T9129] [ 199.028342][ T9129] dump_stack_lvl+0x18c/0x250 [ 199.033053][ T9129] ? show_regs_print_info+0x20/0x20 [ 199.038282][ T9129] ? load_image+0x400/0x400 [ 199.043506][ T9129] ? perf_trace_lock_acquire+0x104/0x410 [ 199.049196][ T9129] ? verify_lock_unused+0x140/0x140 [ 199.054961][ T9129] ? perf_trace_lock_acquire+0x104/0x410 [ 199.060985][ T9129] should_fail_ex+0x39d/0x4d0 [ 199.065701][ T9129] should_failslab+0x9/0x20 [ 199.070232][ T9129] slab_pre_alloc_hook+0x59/0x310 [ 199.075270][ T9129] kmem_cache_alloc+0x5a/0x2d0 [ 199.080039][ T9129] ? skb_clone+0x1eb/0x370 [ 199.084478][ T9129] skb_clone+0x1eb/0x370 [ 199.088736][ T9129] __netlink_deliver_tap+0x41c/0x830 [ 199.094248][ T9129] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.101169][ T9129] netlink_deliver_tap+0x19c/0x1b0 [ 199.106435][ T9129] netlink_unicast+0x72c/0x8d0 [ 199.111235][ T9129] netlink_sendmsg+0x8d0/0xbf0 [ 199.116069][ T9129] ? netlink_getsockopt+0x590/0x590 [ 199.122028][ T9129] ? aa_sock_msg_perm+0x94/0x150 [ 199.127104][ T9129] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 199.132415][ T9129] ? security_socket_sendmsg+0x80/0xa0 [ 199.137878][ T9129] ? netlink_getsockopt+0x590/0x590 [ 199.143077][ T9129] ____sys_sendmsg+0x5ba/0x960 [ 199.147907][ T9129] ? __asan_memset+0x22/0x40 [ 199.153254][ T9129] ? __sys_sendmsg_sock+0x30/0x30 [ 199.158671][ T9129] ? __import_iovec+0x3fa/0x850 [ 199.163582][ T9129] ? import_iovec+0x73/0xa0 [ 199.168128][ T9129] ___sys_sendmsg+0x2a6/0x360 [ 199.174509][ T9129] ? get_pid_task+0x20/0x1e0 [ 199.179413][ T9129] ? __sys_sendmsg+0x2a0/0x2a0 [ 199.184406][ T9129] ? __lock_acquire+0x7d40/0x7d40 [ 199.190005][ T9129] __se_sys_sendmsg+0x1c2/0x2b0 [ 199.194874][ T9129] ? __x64_sys_sendmsg+0x80/0x80 [ 199.200127][ T9129] ? lockdep_hardirqs_on+0x98/0x150 [ 199.206422][ T9129] do_syscall_64+0x55/0xa0 [ 199.211566][ T9129] ? clear_bhb_loop+0x40/0x90 [ 199.216431][ T9129] ? clear_bhb_loop+0x40/0x90 [ 199.221847][ T9129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.227830][ T9129] RIP: 0033:0x7fc1e699acb9 [ 199.232295][ T9129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.251920][ T9129] RSP: 002b:00007fc1e7916028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.260347][ T9129] RAX: ffffffffffffffda RBX: 00007fc1e6c15fa0 RCX: 00007fc1e699acb9 [ 199.268403][ T9129] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 199.276515][ T9129] RBP: 00007fc1e7916090 R08: 0000000000000000 R09: 0000000000000000 [ 199.284785][ T9129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.292950][ T9129] R13: 00007fc1e6c16038 R14: 00007fc1e6c15fa0 R15: 00007fffe33f0c38 [ 199.301286][ T9129] [ 200.471166][ T9155] netlink: 'syz.1.1118': attribute type 13 has an invalid length. [ 200.911918][ T9167] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 201.095033][ T9173] netlink: 'syz.1.1125': attribute type 10 has an invalid length. [ 201.234338][ T9173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.253927][ T9173] batadv0: entered promiscuous mode [ 201.264971][ T9173] .`: (slave batadv0): Enslaving as an active interface with an up link [ 201.359464][ T9182] netlink: 'syz.0.1128': attribute type 7 has an invalid length. [ 202.036976][ T9190] ÿÿÿÿÿÿ: renamed from hsr0 [ 202.314976][ T9210] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 202.570824][ T9219] __nla_validate_parse: 4 callbacks suppressed [ 202.570839][ T9219] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1136'. [ 202.631443][ T9219] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1136'. [ 202.712486][ T9222] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1136'. [ 203.010319][ T9230] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 203.030582][ T9230] netlink: 'syz.1.1142': attribute type 3 has an invalid length. [ 203.040067][ T9230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1142'. [ 203.546909][ T9245] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 204.370060][ T9266] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1156'. [ 204.396360][ T9266] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1156'. [ 204.430172][ T9266] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1156'. [ 204.738737][ T9274] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 205.044290][ T9278] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1161'. [ 205.986349][ T9298] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 206.329585][ T9307] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1171'. [ 206.371008][ T9307] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1171'. [ 207.570349][ T9322] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 208.043984][ T9329] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 208.054283][ T9329] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 208.098457][ T9330] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 208.127675][ T9329] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 208.194471][ T9329] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 208.467283][ T9344] __nla_validate_parse: 4 callbacks suppressed [ 208.467305][ T9344] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1186'. [ 208.520842][ T9344] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1186'. [ 208.557788][ T9347] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1186'. [ 208.836876][ T9353] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 209.210269][ T9363] netlink: 'syz.1.1193': attribute type 29 has an invalid length. [ 209.259364][ T9363] netlink: 'syz.1.1193': attribute type 29 has an invalid length. [ 209.277504][ T9365] netlink: 'syz.1.1193': attribute type 29 has an invalid length. [ 209.349898][ T9363] netlink: 'syz.1.1193': attribute type 29 has an invalid length. [ 209.386912][ T9363] netlink: 'syz.1.1193': attribute type 29 has an invalid length. [ 209.757649][ T9380] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1198'. [ 209.788007][ T9380] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1198'. [ 209.820415][ T9380] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1198'. [ 209.867303][ T9382] netlink: 17071 bytes leftover after parsing attributes in process `syz.0.1199'. [ 210.174784][ T9389] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 210.375324][ T9394] netlink: 16050 bytes leftover after parsing attributes in process `syz.1.1204'. [ 211.034726][ T9410] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1209'. [ 211.064959][ T9410] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1209'. [ 213.116668][ T9423] validate_nla: 1 callbacks suppressed [ 213.116683][ T9423] netlink: 'syz.3.1214': attribute type 10 has an invalid length. [ 213.196001][ T9423] bond0: (slave ÿÿÿÿÿÿ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 213.336283][ T9423] bond0: (slave ÿÿÿÿÿÿ): The slave device specified does not support setting the MAC address [ 213.427793][ T9423] ÿÿÿÿÿÿ: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 213.606414][ T9423] bond0: (slave ÿÿÿÿÿÿ): Error -22 calling dev_set_mtu [ 215.338555][ T9483] __nla_validate_parse: 5 callbacks suppressed [ 215.338572][ T9483] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1231'. [ 215.385156][ T9486] netlink: 'syz.0.1232': attribute type 2 has an invalid length. [ 215.407097][ T9483] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1231'. [ 215.429034][ T9484] netlink: 17071 bytes leftover after parsing attributes in process `syz.3.1229'. [ 215.449457][ T9487] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1231'. [ 216.514461][ T9506] netlink: 'syz.1.1240': attribute type 10 has an invalid length. [ 216.546375][ T9506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1240'. [ 220.040932][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.054783][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.075565][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.085821][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.093986][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.101827][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.772057][ T9532] chnl_net:caif_netlink_parms(): no params data found [ 220.879212][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.896327][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.903597][ T9532] bridge_slave_0: entered allmulticast mode [ 220.917565][ T9532] bridge_slave_0: entered promiscuous mode [ 220.933482][ T9532] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.970293][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.001929][ T9532] bridge_slave_1: entered allmulticast mode [ 221.026596][ T9532] bridge_slave_1: entered promiscuous mode [ 221.119746][ T9532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.149733][ T9532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.253054][ T9532] team0: Port device team_slave_0 added [ 221.279960][ T9532] team0: Port device team_slave_1 added Stopping sshd: [ 221.381561][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.407533][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. stopped /usr/sbin/sshd (pid 5531) [ 221.466536][ T9532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active OK [ 221.506677][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.513677][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. Stopping crond: [ 221.566662][ T9532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active stopped /usr/sbin/crond (pid 5515) OK [ 221.683005][ T9532] hsr_slave_0: entered promiscuous mode [ 221.716777][ T9532] hsr_slave_1: entered promiscuous mode Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5435) [ 222.147017][ T5774] Bluetooth: hci1: command tx timeout [ 222.232449][ T9532] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.291343][ T9532] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.350492][ T9532] netdevsim netdevsim4 netdevsim2: renamed from eth2 Stopping network: [ 222.376943][ T9532] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.664760][ T9532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.725291][ T9532] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.764708][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.772534][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.823578][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.832155][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state OK [ 223.507107][ T9532] 8021q: adding VLAN 0 to HW filter on device batadv0 Stopping iptables: OK Stopping system message bus: [ 224.212254][ T9532] veth0_vlan: entered promiscuous mode [ 224.227447][ T5774] Bluetooth: hci1: command tx timeout [ 224.254407][ T9532] veth1_vlan: entered promiscuous mode [ 224.357568][ T9532] veth0_macvtap: entered promiscuous mode [ 224.388974][ T9532] veth1_macvtap: entered promiscuous mode [ 224.433963][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.469266][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.487495][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.516195][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.538479][ T9532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.582501][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.606280][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.626682][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.656264][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.667082][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 done [ 224.678828][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.694455][ T9532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.714687][ T9532] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.728513][ T9532] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.737819][ T9532] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.746858][ T9532] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.838088][ T8262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.856303][ T8262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.898013][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.905977][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.058432][ T9600] netlink: 'syz.0.1254': attribute type 9 has an invalid length. [ 225.084000][ T9600] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1254'. [ 225.105529][ T9601] syzkaller0: tun_chr_ioctl cmd 2147767521 killall: can't kill pid 5767: No such process Stopping klogd: OK [ 226.088617][ T9621] netlink: 17071 bytes leftover after parsing attributes in process `syz.4.1247'. Stopping acpid: [ 226.360870][ T5774] Bluetooth: hci1: command tx timeout OK [ 227.934141][ T9671] netlink: 'syz.0.1264': attribute type 10 has an invalid length. [ 228.003942][ T9676] netlink: 'syz.3.1268': attribute type 9 has an invalid length. [ 228.014290][ T9676] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1268'. Stopping syslogd: [ 228.106313][ T9663] delete_channel: no stack stopped /sbin/syslogd (pid 5123) OK [ 228.365483][ T9683] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 228.396266][ T5774] Bluetooth: hci1: command tx timeout [ 228.471085][ T9687] syzkaller0: tun_chr_ioctl cmd 2147767521 umount: can't remount debugfs read-only [ 229.535220][ T9705] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1276'. [ 231.932152][ T9773] netlink: 'syz.0.1305': attribute type 9 has an invalid length. [ 232.007772][ T9773] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1305'. [ 232.291870][ T9780] netlink: 'syz.3.1306': attribute type 21 has an invalid length. [ 232.336610][ T9780] netlink: 'syz.3.1306': attribute type 1 has an invalid length. [ 232.946636][ T9795] FAULT_INJECTION: forcing a failure. [ 232.946636][ T9795] name failslab, interval 1, probability 0, space 0, times 0 [ 232.959372][ T9795] CPU: 1 PID: 9795 Comm: syz.3.1311 Not tainted syzkaller #0 [ 232.966757][ T9795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.977330][ T9795] Call Trace: [ 232.980600][ T9795] [ 232.983535][ T9795] dump_stack_lvl+0x18c/0x250 [ 232.988211][ T9795] ? show_regs_print_info+0x20/0x20 [ 232.993426][ T9795] ? load_image+0x400/0x400 [ 232.998026][ T9795] ? read_tsc+0x9/0x20 [ 233.002384][ T9795] ? preempt_schedule_common+0x82/0xc0 [ 233.007879][ T9795] ? schedule_preempt_disabled+0x20/0x20 [ 233.013644][ T9795] should_fail_ex+0x39d/0x4d0 [ 233.018772][ T9795] should_failslab+0x9/0x20 [ 233.023822][ T9795] slab_pre_alloc_hook+0x59/0x310 [ 233.028978][ T9795] kmem_cache_alloc_bulk+0x52/0x5a0 [ 233.034193][ T9795] ? page_pool_alloc_pages+0xba/0x160 [ 233.040087][ T9795] bpf_test_run_xdp_live+0x1699/0x1b20 [ 233.045683][ T9795] ? static_call_force_reinit+0x40/0x40 [ 233.051255][ T9795] ? mark_lock+0x94/0x320 [ 233.055694][ T9795] ? bpf_test_run_xdp_live+0x4d6/0x1b20 [ 233.061352][ T9795] ? xdp_convert_md_to_buff+0x330/0x330 [ 233.066998][ T9795] ? 0xffffffffa000065c [ 233.071455][ T9795] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 233.077699][ T9795] ? __might_fault+0xc6/0x120 [ 233.082389][ T9795] ? __might_fault+0xaa/0x120 [ 233.087127][ T9795] ? _copy_from_user+0xa5/0xe0 [ 233.091913][ T9795] ? bpf_test_init+0x134/0x150 [ 233.097223][ T9795] ? xdp_convert_md_to_buff+0x5b/0x330 [ 233.102725][ T9795] bpf_prog_test_run_xdp+0x712/0xf80 [ 233.108243][ T9795] ? dev_put+0x80/0x80 [ 233.112351][ T9795] ? dev_put+0x80/0x80 [ 233.116449][ T9795] bpf_prog_test_run+0x321/0x390 [ 233.121757][ T9795] __sys_bpf+0x49d/0x890 [ 233.126039][ T9795] ? bpf_link_show_fdinfo+0x390/0x390 [ 233.131423][ T9795] ? lock_chain_count+0x20/0x20 [ 233.136411][ T9795] __x64_sys_bpf+0x7c/0x90 [ 233.140851][ T9795] do_syscall_64+0x55/0xa0 [ 233.145301][ T9795] ? clear_bhb_loop+0x40/0x90 [ 233.149985][ T9795] ? clear_bhb_loop+0x40/0x90 [ 233.154683][ T9795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.160939][ T9795] RIP: 0033:0x7f8059d9acb9 [ 233.165494][ T9795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.185561][ T9795] RSP: 002b:00007f805abd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.193979][ T9795] RAX: ffffffffffffffda RBX: 00007f805a015fa0 RCX: 00007f8059d9acb9 [ 233.203274][ T9795] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 233.211245][ T9795] RBP: 00007f805abd6090 R08: 0000000000000000 R09: 0000000000000000 [ 233.219232][ T9795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.227769][ T9795] R13: 00007f805a016038 R14: 00007f805a015fa0 R15: 00007ffd14b5d418 [ 233.236043][ T9795] [ 233.745619][ T9810] syzkaller0: tun_chr_ioctl cmd 2147767521 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.218 closed by remote host. [ 234.879122][ T3461] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.971608][ T3461] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 235.084518][ T3461] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.140601][ T3461] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.020059][ T9814] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 236.032946][ T9814] ACPI: PM: Preparing to enter system sleep state S5 [ 236.045719][ T9814] kvm: exiting hardware virtualization [ 236.051815][ T9814] reboot: Power down [ 236.066558][ T3461] hsr_slave_0: left promiscuous mode serialport: VM disconnected.