last executing test programs: 13.275132752s ago: executing program 0 (id=9668): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x882, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0xfffffffff0ba0eb1, 0x8}, 0x806, 0x0, 0x3, 0x3, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="d80000001900eb054e81f783db4cb9040a1d080006007c09e8f655a10a0015000600143603600e1208001e0006000401035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ae5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809f4e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754c2397c388b0dd6e4edef3d9300000000000000000000000000000000007d04a458affe23bc6a4e97", 0xd7}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r2], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c07e8fe55a1040008400100142603600e120800060000000401a80008000800104003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg(r8, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000040)=r7, 0x17) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079108f00000000000500000000f0ff0095000000000000004593786cf15e82b4dae7120c800b03f6a92832d75c2a0736235121042465349f05f94e6192bf0e1ca9f986173d1d54be876efe5049493b61ed1e5845018cfe73cd3aa5902faa8b4a28"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x20008000) 13.031523638s ago: executing program 0 (id=9674): socket$kcm(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() r6 = getpid() gettid() sendmsg$unix(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002880)=[{0x0}, {&(0x7f0000001500)="1da0674867f5ded8b84042973c101dfab2e2ff286c56af5ddc9490c3a3ac29273774bf41003614e7ccb41e9d0b1c47faa4048b85c4eef3d203cb9d839f47840c1836cce2ad498ec410fb6d1e1a3e06abf8e863025306d67b2fdd9f3018f44d63461daaf6693a22b3262e61df545a57fc958925d6e7dbad176de2d2aa1f352d878924215312123376d98f03267e929065e7df9a373d28ff819c724288b292fb5612d07c68131bbf61c6ba626f2ddbe38792a0f06fa1ae9d2d1e749776937dfb5f7e6901c78c60f410974858a2774202b5ff45a83b661104a37f3df14975271da9baa56268e80a837ae84d56c307873a8fc1128e26973c997c83013f508ac8c279ab387842d30d9270664eb04eefab1019adf91089fa2d8a9835e6072f6a0ec8a6fcc4f3b5a4f2c7e99edf03e51e80309ce51ad4147f1b4554130cc25d3d71e82cf01598955be45a5a3ac29f014f0ae66ca3177bfc6ad796fbb08755f6fb4a50fdc2fd191e261ceb36ef8a9ec9d892131f87d7bf93464d80acc5ab5c8acab96474acf5301a792a9c83d31b703197934a10fce22b9e508a4c746226e664fa0fc7e1cd706f47b1c361c160158e4ff3f29368ab625f0ec9f9cceab42a54e895c796206495c03f2ed5945b372b82295959f417d606e2dea3c072712b4cd2e02130628a17379ff08a2fe41aa7d1a01c286e00d8ed8e8b14a4d137d29b5e84bea1dfad041475e6fa50245552eb960ccca2d30df3f453967196d7ccf28f0d062586d150527c230ba8348598ec713e20263c9419df1b7f679e98d273bdf32559f46bebf065db0ee97ba98d6937c41d86636ae78b91bf867fa25318dabcca27c73b410b97030c0a60e3f149b04f3cf31e9107184402dfc2258674d67ac7cb804e417501ba4b934719c0ca5a354d61e44968a612b30978387af5096cfd9f4e719e0f781ba06347c9c4d8e7de4f5d6fcf4501a200bbbfca3073c24e883f919f0045a6434156d9865658c849ecadf318150aa943edc32b", 0x2d0}, {0x0}, {&(0x7f00000025c0)="0a0e74ee65d8cad266b8c3e348a1a314f95bb0fc1ee1e21c43e094d53e7966bb8046aa4a8421521656b13650fd3e335f7940a268dbec4c8dfcf1d6124e1a04b8e407e28d33d15c58c4fdcdb028004a86c99e67b5f0253eb1687ee01637e60801af2127f9e57f1bb05597e95bae16d5bf2a376ada9434483f", 0x78}, {&(0x7f0000002640)="388409fcb7ff01090c1481d142e660cb7dec87ff76b6b54cf121fe6d23fdf29f19b727be16b4976293f2636de72e7290b031d6133405deb91bcd4994cbef6a9e1f99735e68ba84cf52739b0f5be27cfa21ab87419e288a370576188876eaafba650e53140f7c9ef4330d56170752a2d5a68f56886adcfa8a6f1f6d12a4442ee9044a85ca7d73e2ded1e92c5ba18cc916733dee101db655657e9e679e07f48d5c8781138d395af1260d93de9fc12b88e51bfa0c71169434bf8ebc3869ebbfccc7839012b197ea73d4529c363fab11fda34e16dee0ae", 0xd5}, {&(0x7f0000002800)="16b64a0c0ab9cd95dd876fb166d4de5ef61364c8d0cc459d32dc7fcc17146bed17c4957ef3f6816881b390131c644b2052d324ee494c9d9b1bb27b06c9d08107300ae1d1051033492b04b528637f4f3a8eb008bab18730806207c9473e714c427a9dc1d3758842d557eabcf86a06437549e4f2380de929cc", 0xffffff89}], 0x6, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee00}}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x80, 0x4040040}, 0x40c0) syz_clone(0x10021400, &(0x7f00000003c0)="625a75b8843d22", 0x7, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000580)="683c619ac302b552ef5f98f07099fe6da630f49f36c02e2d5aab4747cafcabc1d3b5056a1766e1dd1c23f030c61b7870ffc07b5c511b935c5c59ef64c25a31b7dc22400e547f999a2d8870a4aba0add339403889beb26d6a7953c2454e7560fb6ef25991276f0e5f919e1e7b657d730c581f96a975b766b1c6ab3c7ae54a715894b513b71c236847c1cb07e7ac352c3d32a8527236e9ddcb417d186d2bdce0ec37b11b8fd9881b3c4fd04c9eaa993cf9413e4d5e063040fde5aba6513ab35dd2aa7ba2865e2ba1e25a16ad0759b06f1c538ee0337c0da281a3c0739f4adc0e854267a229799c") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 12.335685597s ago: executing program 0 (id=9678): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000002ac0)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c0000001800000003000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x21, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.21603729s ago: executing program 0 (id=9680): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xda3, 0x80}, 0x4505, 0x0, 0x0, 0x6, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001d000b63d25a80648c2594f90124fc60100c130005000000053582c137153e", 0x23}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)="d80000001c4c00810406000014db44b9", 0x10}], 0x1, 0x0, 0x0, 0x7400}, 0x8810) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x5}, 0x8000, 0x6, 0x43a1bd76, 0x7, 0x1000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000300), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x3, 0xffffffff}, 0x80, &(0x7f0000001500)=[{&(0x7f00000013c0)="ac382eb1da7b1cac58b9e99cebbea052b1f05b09000000437fb811087d4ed377", 0x20}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)}, 0x40002060) socket$kcm(0x2, 0x1000000000000005, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ffe5ffffff0000000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9b98c154bb444c6d291", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000500)={'vlan0\x00', @random="0137013501bf"}) 11.801054851s ago: executing program 0 (id=9687): socket$kcm(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() r6 = getpid() gettid() sendmsg$unix(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002880)=[{0x0}, {&(0x7f0000001500)="1da0674867f5ded8b84042973c101dfab2e2ff286c56af5ddc9490c3a3ac29273774bf41003614e7ccb41e9d0b1c47faa4048b85c4eef3d203cb9d839f47840c1836cce2ad498ec410fb6d1e1a3e06abf8e863025306d67b2fdd9f3018f44d63461daaf6693a22b3262e61df545a57fc958925d6e7dbad176de2d2aa1f352d878924215312123376d98f03267e929065e7df9a373d28ff819c724288b292fb5612d07c68131bbf61c6ba626f2ddbe38792a0f06fa1ae9d2d1e749776937dfb5f7e6901c78c60f410974858a2774202b5ff45a83b661104a37f3df14975271da9baa56268e80a837ae84d56c307873a8fc1128e26973c997c83013f508ac8c279ab387842d30d9270664eb04eefab1019adf91089fa2d8a9835e6072f6a0ec8a6fcc4f3b5a4f2c7e99edf03e51e80309ce51ad4147f1b4554130cc25d3d71e82cf01598955be45a5a3ac29f014f0ae66ca3177bfc6ad796fbb08755f6fb4a50fdc2fd191e261ceb36ef8a9ec9d892131f87d7bf93464d80acc5ab5c8acab96474acf5301a792a9c83d31b703197934a10fce22b9e508a4c746226e664fa0fc7e1cd706f47b1c361c160158e4ff3f29368ab625f0ec9f9cceab42a54e895c796206495c03f2ed5945b372b82295959f417d606e2dea3c072712b4cd2e02130628a17379ff08a2fe41aa7d1a01c286e00d8ed8e8b14a4d137d29b5e84bea1dfad041475e6fa50245552eb960ccca2d30df3f453967196d7ccf28f0d062586d150527c230ba8348598ec713e20263c9419df1b7f679e98d273bdf32559f46bebf065db0ee97ba98d6937c41d86636ae78b91bf867fa25318dabcca27c73b410b97030c0a60e3f149b04f3cf31e9107184402dfc2258674d67ac7cb804e417501ba4b934719c0ca5a354d61e44968a612b30978387af5096cfd9f4e719e0f781ba06347c9c4d8e7de4f5d6fcf4501a200bbbfca3073c24e883f919f0045a6434156d9865658c849ecadf318150aa943edc32b", 0x2d0}, {0x0}, {&(0x7f00000025c0)="0a0e74ee65d8cad266b8c3e348a1a314f95bb0fc1ee1e21c43e094d53e7966bb8046aa4a8421521656b13650fd3e335f7940a268dbec4c8dfcf1d6124e1a04b8e407e28d33d15c58c4fdcdb028004a86c99e67b5f0253eb1687ee01637e60801af2127f9e57f1bb05597e95bae16d5bf2a376ada9434483f", 0x78}, {&(0x7f0000002640)="388409fcb7ff01090c1481d142e660cb7dec87ff76b6b54cf121fe6d23fdf29f19b727be16b4976293f2636de72e7290b031d6133405deb91bcd4994cbef6a9e1f99735e68ba84cf52739b0f5be27cfa21ab87419e288a370576188876eaafba650e53140f7c9ef4330d56170752a2d5a68f56886adcfa8a6f1f6d12a4442ee9044a85ca7d73e2ded1e92c5ba18cc916733dee101db655657e9e679e07f48d5c8781138d395af1260d93de9fc12b88e51bfa0c71169434bf8ebc3869ebbfccc7839012b197ea73d4529c363fab11fda34e16dee0ae", 0xd5}, {&(0x7f0000002800)="16b64a0c0ab9cd95dd876fb166d4de5ef61364c8d0cc459d32dc7fcc17146bed17c4957ef3f6816881b390131c644b2052d324ee494c9d9b1bb27b06c9d08107300ae1d1051033492b04b528637f4f3a8eb008bab18730806207c9473e714c427a9dc1d3758842d557eabcf86a06437549e4f2380de929cc", 0xffffff89}], 0x6, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee00}}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x80, 0x4040040}, 0x40c0) syz_clone(0x10021400, &(0x7f00000003c0)="625a75b8843d22", 0x7, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000580)="683c619ac302b552ef5f98f07099fe6da630f49f36c02e2d5aab4747cafcabc1d3b5056a1766e1dd1c23f030c61b7870ffc07b5c511b935c5c59ef64c25a31b7dc22400e547f999a2d8870a4aba0add339403889beb26d6a7953c2454e7560fb6ef25991276f0e5f919e1e7b657d730c581f96a975b766b1c6ab3c7ae54a715894b513b71c236847c1cb07e7ac352c3d32a8527236e9ddcb417d186d2bdce0ec37b11b8fd9881b3c4fd04c9eaa993cf9413e4d5e063040fde5aba6513ab35dd2aa7ba2865e2ba1e25a16ad0759b06f1c538ee0337c0da281a3c0739f4adc0e854267a229799c") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 10.712004011s ago: executing program 0 (id=9692): perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x26, 0x5, 0x1, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x7, 0x73, 0x4, 0x2, 0x0, 0xe, 0x40c44, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3fffe, 0x8}, 0x10060, 0x349b, 0x20000003, 0x6, 0x40007, 0xffff, 0xf0, 0x0, 0x6b, 0x0, 0x4}) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x14, &(0x7f0000000100), 0x120) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f00000000c0)) 7.344809801s ago: executing program 3 (id=9710): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0, {0xa, 0x4e23, 0xffffffff, @loopback}}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001a80)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)="9312bd2d1aa67686e757d5a966edd828cd1a789ab711912189e5dd80e21079e687c66e2d9d9e9788b11603fbad3012f28b1767e843bb164f028bc309dc3191ece23c40b481f6de8722ae19ae5dec33509141292e", 0x54}, {&(0x7f00000002c0)="303a0a2b6f3067405ccf5d04433166d998c73199dd516d9afe907dd9e1201fe7a3148421b453c662a154291961c9ed30ea12670c07c1f29b6ae7702843aaaeb4def92b510eb5ab42fba94dd92c17fda8d8f84b3b393e40e38ba7b5ba1c789d", 0x5f}], 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1138}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000100018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000001380)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002e80)=""/199, 0xc7}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/4081, 0xff1}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000740)=""/65, 0x41}, {&(0x7f0000000d40)=""/4099, 0x1003}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f00000059c0)=""/109, 0x6d}], 0xc}, 0x2122) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002e00)=""/4104, 0x1008}, {&(0x7f0000002d00)=""/197, 0xc5}, {&(0x7f0000001ac0)=""/4147, 0x1033}, {&(0x7f0000000040)=""/43, 0x2b}], 0x4}, 0x0) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x98) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r10, &(0x7f0000000200)={&(0x7f0000000180)=@in6={0xa, 0x4e20, 0xfff, @mcast2, 0xb4}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x7ffc}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x30}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) 5.217769169s ago: executing program 3 (id=9713): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xda3, 0x80}, 0x4505, 0x0, 0x0, 0x6, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)="d80000001c4c008104060000", 0xc}], 0x1, 0x0, 0x0, 0x7400}, 0x8810) close(0xffffffffffffffff) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000300), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x3, 0xffffffff}, 0x80, &(0x7f0000001500)=[{&(0x7f00000013c0)="ac382eb1da7b1cac58b9e99cebbea052b1f05b09000000437fb811087d4ed377", 0x20}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 4.741135632s ago: executing program 3 (id=9715): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000500)={0x4}, 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r2, 0x24, 0x0, 0xffff, &(0x7f0000000200)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="140000002d000b35f8ffffffffffffff0fa3096d", 0x14}], 0x1}, 0x854) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a13608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600d8ded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bce38ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2d03aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b907d25379897e851e7106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10e53a9f792ecb28ec39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8132301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979ce67c7a1f8924017e73bcf1ae3ed821a4b9839725000000000000000000000000000000f0ce2bf979256f99e89e05d466843d32b983d19cfa3c2a04e9f48311b786927c6c2d505637cad9ae8ae32fbee21a721e38edf6e80ff33a3a3cef251918374de4d4636348ef77a7bad1e8250117d604f59921f29bda75f135865bdc3e10906562e01af1fef96e49b969eaf4ec6b4c51fa2dcc7c1a117243fd64d641426e6a582fcda4be9f58724d4a66e46c032e6f6b3d46fb9616b4b6efc5d083e003fdcf3d78fea7ee48b2a5cc89"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000580)={'\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x208041, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000680)={'vlan0\x00', @random="2001dbe468d6"}) socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f00000006c0)='syzkaller\x00'}, 0x94) 4.605360106s ago: executing program 2 (id=9716): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x21, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.45112183s ago: executing program 1 (id=9717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002f00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffa7ffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb01001800000000000000260000002400000002000000010000000300000d000000000a000000020000000300000004000000ffffffff02f40e5396df"], 0x0, 0x3e, 0x0, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x8}, 0x9280, 0x4, 0x43a1bd76, 0x0, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0xfffffffffffffffb) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4001000) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e12080016", 0x2b}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.358982362s ago: executing program 2 (id=9718): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xda3, 0x80}, 0x4505, 0x0, 0x0, 0x6, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r2, 0x120) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)="d80000001c4c00810406000014db44b9", 0x10}], 0x1, 0x0, 0x0, 0x7400}, 0x8810) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x5}, 0x8000, 0x6, 0x43a1bd76, 0x7, 0x1000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000300), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x3, 0xffffffff}, 0x80, &(0x7f0000001500)=[{&(0x7f00000013c0)="ac382eb1da7b1cac58b9e99cebbea052b1f05b09000000437fb811087d4ed377", 0x20}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)}, 0x40002060) socket$kcm(0x2, 0x1000000000000005, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ffe5ffffff0000000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9b98c154bb444c6d291", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000500)={'vlan0\x00', @random="0137013501bf"}) 4.105919509s ago: executing program 3 (id=9719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000040), 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x1, 0x4, 0x12}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, &(0x7f0000000180), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x1, 0x9a, 0x4, 0x81, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x54b, 0x5}, 0x600f, 0x6, 0x4, 0xf, 0x5, 0x6, 0x8, 0x0, 0x10000, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x9}, 0x100808, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, 0x0, 0x3, r4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) socketpair(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1f, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.512796575s ago: executing program 3 (id=9720): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000001600)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\xdf\xda^\xcd\fb!\btp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\x03&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r\b\x00\x00\x00_\xb2\xe9\x8e\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fv\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[e\xc9k\r[\x8d\x9c\v\xf0\x85y^~\xcc\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xe2\x8abci.\x8eH\xa3\xc2\x94E\x1d g\x99\xc7\xeb\xf9\x84\xd5\x1dQ\xef\xad)\xc3n\xf3\xf2T@\xcdB\xdfw\x8c\xd4k\xcf\xe3\xd6\xe8\xdc\xdb\xcb\x84\xb9Wb\xca\xdd\xa2\x95\x19{\xd2\xe7\x91\xe5\x1a\x98\x12\xeb\xd1\f\xb1\xea\xc2S\x17\xfaYq\xfa\x81\x03wO\f83a\xf5wf\xe0\x90\xde5\xf1\x10A\b\xb0\xbaT}\xcdj\xc4\x7fj\\\xd3X\xfa!1t\xfan\xa3 |\xc4\x007\xca\xc3\x8d\xf8\xe66\xf5m6\x96\xfa\xaaY\xd0\xc0\xb7\x1d\x1d\xfe\xfa\xc0\xfaG\xa8J\xcd\x8e\x94\xb1\x14\x9enm&\xe8,,\x95\xe6^\xb5\'\x7f\\T\xc7\x11\xa9\xddX\xef\\[t\xe0\xc7\xf2\xb5\xbf\xbf\x15\xecR?\bB)\xec\'V[\xfc\xf5s\xe6u\xdc)\xbad\xce\xee\xd8`7\xf9\x12N~\xde\xe8,\xff_nG\xafS{Q\x91!d-\xf0\xbb\xd01\xf9\x86C\xc7\xb3\xd4\xa4>\xf2A,Q\x7f\x8c\x91\xc7t\x19\xb5') r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = getpid() r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xa, 0x6c9, 0x3, 0x0, 0x0, 0x0, 0x2009}, r2, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x6, 0x6}, 0xc634, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES8=r4, @ANYRESDEC=r4, @ANYRES32=r5, @ANYRESOCT=r5], 0xffdd) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000008000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$kcm(0x1e, 0x4, 0x0) r8 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(0xffffffffffffffff, 0x0, 0x10182) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x2000000000000077, &(0x7f0000000c80)=ANY=[@ANYBLOB="852045e0c17fbd778d85a2000003000000850000008a00000018150080", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000700)='GPL\x00', 0x802, 0x15, &(0x7f0000000740)=""/21, 0x41100, 0x1, '\x00', 0x0, @fallback=0x22, r0, 0x8, &(0x7f0000000780)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0xfffffffe, 0xa, 0x2bb8, 0xd268}, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea", 0x34}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[], 0xfe33) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) 3.466159096s ago: executing program 1 (id=9721): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000a509000000000018490000fed7581b23e8e63edbc4e7a3d4e5f3652023f0654d3947030b34b1df81b7a9473a0453f2f7da6335c313a7f1a3dc268ea49a5942b02e4d2e52004b7f36211fc4c46fcd86abf16659415c89a43802fd"], 0x0, 0x0, 0xffffff50, 0x0, 0x41100, 0x1d, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x800, 0x10}, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x40008}, 0x0, 0xc, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x31}, 0x81c0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB=','], 0x9a) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000600)='\x00', r1}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) 3.431048067s ago: executing program 2 (id=9722): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x882, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0xfffffffff0ba0eb1, 0x8}, 0x806, 0x0, 0x3, 0x3, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="d80000001900eb054e81f783db4cb9040a1d080006007c09e8f655a10a0015000600143603600e1208001e0006000401035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ae5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809f4e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754c2397c388b0dd6e4edef3d9300000000000000000000000000000000007d04a458affe23bc6a4e9705", 0xd8}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c07e8fe55a1040008400100142603600e120800060000000401a80008000800104003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000040)=r6, 0x17) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079108f00000000000500000000f0ff0095000000000000004593786cf15e82b4dae7120c800b03f6a92832d75c2a0736235121042465349f05f94e6192bf0e1ca9f986173d1d54be876efe5049493b61ed1e5845018cfe73cd3aa5902faa8b4a28"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x20008000) 3.164580334s ago: executing program 1 (id=9723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x102200, 0x10000, 0x9e6, 0x5, 0x10008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x16, 0x0, 0x0, 0xfffffff9}]}) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2, 0x4}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r7, &(0x7f0000000140)='I', 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="0010000900"}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x8}, 0x4846, 0x0, 0x0, 0x2, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map, 0x26, 0x2000000, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.994796939s ago: executing program 2 (id=9724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4008744b, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100104, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x3}, 0x2018, 0x1, 0x2, 0x0, 0x0, 0x81, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c00"/84], 0x68}, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x103, 0x12) 526.698805ms ago: executing program 1 (id=9725): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x21, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 523.797936ms ago: executing program 3 (id=9726): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000500)={0x4}, 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r2, 0x24, 0x0, 0xffff, &(0x7f0000000200)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="140000002d000b35f8ffffffffffffff0fa3096d", 0x14}], 0x1}, 0x854) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000580)={'\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x208041, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000680)={'vlan0\x00', @random="2001dbe468d6"}) socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f00000006c0)='syzkaller\x00'}, 0x94) 495.075687ms ago: executing program 2 (id=9727): socketpair(0x1f, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000008000000000000000800000081118000000000009500000000000000556681aa397a9baffb4f2f7b72e12b17e7e1dac7a492020a840b4e982b397aa8c8710a160ed3856b4e8027d9201299092cd07c230ba9905538be1c4eaed4f6731621bcae126c5e2aa7e5a5195964aae54d74f11fc710dc6d81d88d78e836c137b5b455436af1a19e1ad11d995274f0f2cf63628a377466e1613f8f7d6aab52f518211aa71ba55f01762ff9b0dae87e577067b8565d9bf175af8f0fd43fd49fdbc8ed9431331dd4be56d20f9e5b7200d6a672c2c7c1"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async, rerun: 32) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000300)={0x9, 0x80, 0x4, 0x0, 0x7, 0xc, 0x0, 0xb1a7, 0x4800, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x81, 0x1, @perf_config_ext={0x80000000000000, 0xfffffffffffffffb}, 0x8000, 0x17, 0x4, 0x5, 0x8000, 0x7ff, 0x77, 0x0, 0x9, 0x0, 0xa}, 0x0, 0x6, r0, 0x3) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) (rerun: 32) 256.590853ms ago: executing program 1 (id=9728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000040), 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x1, 0x4, 0x12}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, &(0x7f0000000180), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x1, 0x9a, 0x4, 0x81, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x54b, 0x5}, 0x600f, 0x6, 0x4, 0xf, 0x5, 0x6, 0x8, 0x0, 0x10000, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x9}, 0x100808, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, 0x0, 0x3, r4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) socketpair(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1f, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 113.258597ms ago: executing program 2 (id=9729): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xda3, 0x80}, 0x4505, 0x0, 0x0, 0x6, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r2, 0x120) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)="d80000001c4c00810406000014db44b9", 0x10}], 0x1, 0x0, 0x0, 0x7400}, 0x8810) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x5}, 0x8000, 0x6, 0x43a1bd76, 0x7, 0x1000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000300), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x3, 0xffffffff}, 0x80, &(0x7f0000001500)=[{&(0x7f00000013c0)="ac382eb1da7b1cac58b9e99cebbea052b1f05b09000000437fb811087d4ed377", 0x20}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)}, 0x40002060) socket$kcm(0x2, 0x1000000000000005, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ffe5ffffff0000000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9b98c154bb444c6d291", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000500)={'vlan0\x00', @random="0137013501bf"}) 0s ago: executing program 1 (id=9730): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000a509000000000018490000fed7581b23e8e63edbc4e7a3d4e5f3652023f0654d3947030b34b1df81b7a9473a0453f2f7da6335c313a7f1a3dc268ea49a5942b02e4d2e52004b7f36211fc4c46fcd86abf16659415c89a43802fd"], 0x0, 0x0, 0xffffff50, 0x0, 0x41100, 0x1d, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x800, 0x10}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x31}, 0x81c0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB=','], 0x9a) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000600)='\x00', r1}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): cess `syz.2.8768'. [ 1838.781340][T20108] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1838.781374][T20108] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1838.800683][ T654] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8770'. [ 1839.016402][ T662] netlink: 'syz.2.8774': attribute type 29 has an invalid length. [ 1839.027379][ T662] netlink: 'syz.2.8774': attribute type 29 has an invalid length. [ 1839.120674][ T664] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8775'. [ 1841.347783][T20648] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1842.191110][ T679] __nla_validate_parse: 1 callbacks suppressed [ 1842.191129][ T679] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8780'. [ 1842.394333][ T683] validate_nla: 4 callbacks suppressed [ 1842.394350][ T683] netlink: 'syz.1.8781': attribute type 21 has an invalid length. [ 1842.412432][ T683] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8781'. [ 1842.423655][ T683] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8781'. [ 1842.438991][ T683] netlink: 'syz.1.8781': attribute type 10 has an invalid length. [ 1842.449284][ T683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8781'. [ 1843.557146][ T693] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.8783'. [ 1844.148874][ T701] netlink: 'syz.1.8788': attribute type 3 has an invalid length. [ 1844.158153][ T701] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8788'. [ 1844.169543][ T702] netlink: 'syz.3.8787': attribute type 11 has an invalid length. [ 1844.178847][ T702] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8787'. [ 1844.241351][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1844.242372][ T704] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8789'. [ 1844.331593][ T707] netlink: 'syz.2.8791': attribute type 21 has an invalid length. [ 1844.339784][ T707] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8791'. [ 1844.356331][ T707] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8791'. [ 1844.372011][ T707] netlink: 'syz.2.8791': attribute type 10 has an invalid length. [ 1844.381964][ T707] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1847.911577][ T718] __nla_validate_parse: 1 callbacks suppressed [ 1847.911591][ T718] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.8795'. [ 1848.017570][ T722] netlink: 'syz.1.8796': attribute type 29 has an invalid length. [ 1848.035990][ T722] netlink: 'syz.1.8796': attribute type 29 has an invalid length. [ 1848.055410][ T725] netlink: 'syz.1.8796': attribute type 29 has an invalid length. [ 1848.077339][ T655] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1848.077381][ T655] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1848.100845][ T727] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8799'. [ 1848.143246][ T722] netlink: 'syz.1.8796': attribute type 29 has an invalid length. [ 1848.156845][ T725] netlink: 'syz.1.8796': attribute type 29 has an invalid length. [ 1848.215623][ T730] netlink: 'syz.0.8800': attribute type 3 has an invalid length. [ 1848.233194][ T730] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8800'. [ 1848.333796][ T736] netlink: 'syz.1.8803': attribute type 3 has an invalid length. [ 1848.341660][ T736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8803'. [ 1848.390833][ T739] netlink: 'syz.3.8802': attribute type 11 has an invalid length. [ 1848.405285][ T739] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8802'. [ 1848.443387][ T738] netlink: 'syz.2.8804': attribute type 3 has an invalid length. [ 1848.451336][ T738] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.8804'. [ 1849.301922][ T750] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8808'. [ 1849.409056][ T754] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.8810'. [ 1851.898296][ T762] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1852.270946][ T768] netlink: 'syz.2.8813': attribute type 2 has an invalid length. [ 1852.287504][ T768] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.8813'. [ 1852.328690][ T764] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8813'. [ 1852.602769][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1853.500602][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.515548][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.226927][T12944] wlan1: Trigger new scan to find an IBSS to join [ 1856.297746][ T809] validate_nla: 4 callbacks suppressed [ 1856.297781][ T809] netlink: 'syz.0.8828': attribute type 3 has an invalid length. [ 1856.316569][ T809] __nla_validate_parse: 6 callbacks suppressed [ 1856.327579][ T809] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8828'. [ 1856.633223][ T655] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1856.633265][ T655] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1856.661475][ T813] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8829'. [ 1856.685440][ T815] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.8830'. [ 1856.823821][ T817] netlink: 'syz.3.8831': attribute type 4 has an invalid length. [ 1856.835359][ T817] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8831'. [ 1856.899327][ T821] netlink: 'syz.2.8833': attribute type 21 has an invalid length. [ 1856.908414][ T821] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8833'. [ 1856.924653][ T822] netlink: 'syz.0.8832': attribute type 11 has an invalid length. [ 1856.924681][ T822] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8832'. [ 1856.965218][ T821] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8833'. [ 1857.044463][ T821] netlink: 'syz.2.8833': attribute type 10 has an invalid length. [ 1857.061725][ T821] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8833'. [ 1857.073549][ T821] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1857.144732][ T827] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8835'. [ 1857.275825][ T831] netlink: 'syz.2.8837': attribute type 3 has an invalid length. [ 1857.286375][ T831] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.8837'. [ 1858.217098][T11396] wlan1: Trigger new scan to find an IBSS to join [ 1860.127719][T20648] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1860.475855][ T846] netlink: 'syz.3.8841': attribute type 29 has an invalid length. [ 1860.484448][ T846] netlink: 'syz.3.8841': attribute type 29 has an invalid length. [ 1860.499572][ T846] netlink: 'syz.3.8841': attribute type 29 has an invalid length. [ 1860.509508][ T846] netlink: 'syz.3.8841': attribute type 29 has an invalid length. [ 1861.869925][ T862] netlink: 'syz.2.8846': attribute type 11 has an invalid length. [ 1861.878186][ T862] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8846'. [ 1862.731201][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1865.952101][ T874] netlink: 'syz.0.8850': attribute type 29 has an invalid length. [ 1866.751415][ T866] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8848'. [ 1866.761307][ T874] netlink: 'syz.0.8850': attribute type 29 has an invalid length. [ 1866.912807][ T883] netlink: 'syz.2.8851': attribute type 21 has an invalid length. [ 1866.927560][ T883] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8851'. [ 1866.994277][ T883] netlink: 'syz.2.8851': attribute type 10 has an invalid length. [ 1867.009942][ T883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8851'. [ 1867.025713][ T883] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1867.263323][ T902] netlink: 'syz.0.8856': attribute type 11 has an invalid length. [ 1867.295435][ T902] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8856'. [ 1867.308064][ T904] netlink: 'syz.1.8858': attribute type 21 has an invalid length. [ 1867.316051][ T904] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8858'. [ 1867.318983][ T899] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.8857'. [ 1867.339893][ T907] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8859'. [ 1867.349396][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1867.355052][ T904] netlink: 'syz.1.8858': attribute type 10 has an invalid length. [ 1867.382951][ T904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8858'. [ 1867.426246][ T911] netlink: 'syz.2.8860': attribute type 29 has an invalid length. [ 1867.437028][ T911] netlink: 'syz.2.8860': attribute type 29 has an invalid length. [ 1867.450396][ T911] netlink: 'syz.2.8860': attribute type 29 has an invalid length. [ 1867.515104][ T911] netlink: 'syz.2.8860': attribute type 29 has an invalid length. [ 1867.552435][ T914] netlink: 'syz.1.8861': attribute type 3 has an invalid length. [ 1867.560840][ T914] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8861'. [ 1867.677157][ T919] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.8862'. [ 1867.881291][ T935] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8866'. [ 1868.042737][ T938] ¿: renamed from vlan0 (while UP) [ 1868.144302][ T944] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1868.731796][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1868.797653][ T970] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1868.918810][ T978] FAULT_INJECTION: forcing a failure. [ 1868.918810][ T978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1868.933303][ T978] CPU: 0 PID: 978 Comm: syz.2.8885 Not tainted syzkaller #0 [ 1868.940642][ T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1868.950724][ T978] Call Trace: [ 1868.954028][ T978] [ 1868.956982][ T978] dump_stack_lvl+0x18c/0x250 [ 1868.961691][ T978] ? show_regs_print_info+0x20/0x20 [ 1868.966893][ T978] ? load_image+0x420/0x420 [ 1868.971398][ T978] ? __might_fault+0xaa/0x120 [ 1868.976068][ T978] ? __lock_acquire+0x7d40/0x7d40 [ 1868.981087][ T978] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1868.987067][ T978] should_fail_ex+0x39d/0x4d0 [ 1868.991749][ T978] _copy_from_iter+0x1d9/0x12e0 [ 1868.996604][ T978] ? __virt_addr_valid+0x18c/0x540 [ 1869.001719][ T978] ? __lock_acquire+0x7d40/0x7d40 [ 1869.006738][ T978] ? __alloc_skb+0x138/0x2c0 [ 1869.011324][ T978] ? rcu_is_watching+0x15/0xb0 [ 1869.016089][ T978] ? __alloc_skb+0x138/0x2c0 [ 1869.020670][ T978] ? copyout_mc+0x70/0x70 [ 1869.024998][ T978] ? __virt_addr_valid+0x18c/0x540 [ 1869.030107][ T978] ? __virt_addr_valid+0x18c/0x540 [ 1869.035212][ T978] ? __virt_addr_valid+0x469/0x540 [ 1869.040330][ T978] ? __check_object_size+0x506/0xa20 [ 1869.045696][ T978] pfkey_sendmsg+0x203/0x10e0 [ 1869.050369][ T978] ? __might_sleep+0xe0/0xe0 [ 1869.054958][ T978] ? __lock_acquire+0x1273/0x7d40 [ 1869.059976][ T978] ? pfkey_release+0x320/0x320 [ 1869.064735][ T978] ? aa_sk_perm+0x83c/0x970 [ 1869.069236][ T978] ? __perf_event_overflow+0x4f8/0x630 [ 1869.074689][ T978] ? aa_af_perm+0x330/0x330 [ 1869.079186][ T978] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1869.085594][ T978] ? aa_sock_msg_perm+0x94/0x150 [ 1869.090526][ T978] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1869.095808][ T978] ? security_socket_sendmsg+0x80/0xa0 [ 1869.101261][ T978] ? pfkey_release+0x320/0x320 [ 1869.106025][ T978] ____sys_sendmsg+0x5ba/0x960 [ 1869.110788][ T978] ? __asan_memset+0x22/0x40 [ 1869.115376][ T978] ? __sys_sendmsg_sock+0x30/0x30 [ 1869.120391][ T978] ? __import_iovec+0x5f2/0x850 [ 1869.125241][ T978] ? import_iovec+0x73/0xa0 [ 1869.129745][ T978] ___sys_sendmsg+0x2a6/0x360 [ 1869.134418][ T978] ? get_pid_task+0x20/0x1e0 [ 1869.139009][ T978] ? __sys_sendmsg+0x2a0/0x2a0 [ 1869.143777][ T978] ? __lock_acquire+0x7d40/0x7d40 [ 1869.148812][ T978] __se_sys_sendmsg+0x1c2/0x2b0 [ 1869.153661][ T978] ? __x64_sys_sendmsg+0x80/0x80 [ 1869.158601][ T978] ? lockdep_hardirqs_on+0x98/0x150 [ 1869.163803][ T978] do_syscall_64+0x55/0xa0 [ 1869.168217][ T978] ? clear_bhb_loop+0x40/0x90 [ 1869.172890][ T978] ? clear_bhb_loop+0x40/0x90 [ 1869.177565][ T978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1869.183455][ T978] RIP: 0033:0x7fb82259cdd9 [ 1869.187865][ T978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1869.207470][ T978] RSP: 002b:00007fb82344a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1869.215881][ T978] RAX: ffffffffffffffda RBX: 00007fb822815fa0 RCX: 00007fb82259cdd9 [ 1869.223847][ T978] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004 [ 1869.231815][ T978] RBP: 00007fb82344a090 R08: 0000000000000000 R09: 0000000000000000 [ 1869.239780][ T978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1869.247742][ T978] R13: 00007fb822816038 R14: 00007fb822815fa0 R15: 00007ffe45870a28 [ 1869.255735][ T978] [ 1869.696933][ T655] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1869.814635][ T997] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1870.916412][ T1042] FAULT_INJECTION: forcing a failure. [ 1870.916412][ T1042] name failslab, interval 1, probability 0, space 0, times 0 [ 1870.952462][ T1042] CPU: 1 PID: 1042 Comm: syz.0.8905 Not tainted syzkaller #0 [ 1870.959904][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1870.969981][ T1042] Call Trace: [ 1870.973281][ T1042] [ 1870.976230][ T1042] dump_stack_lvl+0x18c/0x250 [ 1870.980939][ T1042] ? show_regs_print_info+0x20/0x20 [ 1870.986180][ T1042] ? load_image+0x420/0x420 [ 1870.990713][ T1042] ? verify_lock_unused+0x140/0x140 [ 1870.995951][ T1042] should_fail_ex+0x39d/0x4d0 [ 1871.000681][ T1042] should_failslab+0x9/0x20 [ 1871.005214][ T1042] slab_pre_alloc_hook+0x59/0x310 [ 1871.010280][ T1042] kmem_cache_alloc+0x5a/0x2d0 [ 1871.015073][ T1042] ? skb_clone+0x1eb/0x370 [ 1871.019517][ T1042] skb_clone+0x1eb/0x370 [ 1871.023781][ T1042] __netlink_deliver_tap+0x41c/0x830 [ 1871.029109][ T1042] ? netlink_deliver_tap+0x2e/0x1b0 [ 1871.034332][ T1042] netlink_deliver_tap+0x19c/0x1b0 [ 1871.039477][ T1042] netlink_unicast+0x72c/0x8d0 [ 1871.044272][ T1042] netlink_sendmsg+0x8d0/0xbf0 [ 1871.049069][ T1042] ? netlink_getsockopt+0x590/0x590 [ 1871.054292][ T1042] ? aa_sock_msg_perm+0x94/0x150 [ 1871.059345][ T1042] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1871.064654][ T1042] ? security_socket_sendmsg+0x80/0xa0 [ 1871.070125][ T1042] ? netlink_getsockopt+0x590/0x590 [ 1871.075363][ T1042] ____sys_sendmsg+0x5ba/0x960 [ 1871.080152][ T1042] ? __asan_memset+0x22/0x40 [ 1871.084764][ T1042] ? __sys_sendmsg_sock+0x30/0x30 [ 1871.089809][ T1042] ? __import_iovec+0x5f2/0x850 [ 1871.094686][ T1042] ? import_iovec+0x73/0xa0 [ 1871.099208][ T1042] ___sys_sendmsg+0x2a6/0x360 [ 1871.103910][ T1042] ? __sys_sendmsg+0x2a0/0x2a0 [ 1871.108719][ T1042] ? trace_call_bpf+0xc3/0x6c0 [ 1871.113535][ T1042] __se_sys_sendmsg+0x1c2/0x2b0 [ 1871.118416][ T1042] ? __x64_sys_sendmsg+0x80/0x80 [ 1871.123399][ T1042] ? lockdep_hardirqs_on+0x98/0x150 [ 1871.128633][ T1042] do_syscall_64+0x55/0xa0 [ 1871.133066][ T1042] ? clear_bhb_loop+0x40/0x90 [ 1871.137768][ T1042] ? clear_bhb_loop+0x40/0x90 [ 1871.142473][ T1042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1871.148408][ T1042] RIP: 0033:0x7fcda4b9cdd9 [ 1871.152846][ T1042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1871.172480][ T1042] RSP: 002b:00007fcda5b04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1871.180919][ T1042] RAX: ffffffffffffffda RBX: 00007fcda4e15fa0 RCX: 00007fcda4b9cdd9 [ 1871.188919][ T1042] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1871.196910][ T1042] RBP: 00007fcda5b04090 R08: 0000000000000000 R09: 0000000000000000 [ 1871.204902][ T1042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1871.212902][ T1042] R13: 00007fcda4e16038 R14: 00007fcda4e15fa0 R15: 00007ffcda506878 [ 1871.220912][ T1042] [ 1871.287939][ T1045] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1872.070363][ T1077] FAULT_INJECTION: forcing a failure. [ 1872.070363][ T1077] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.092571][ T1078] validate_nla: 32 callbacks suppressed [ 1872.092588][ T1078] netlink: 'syz.0.8915': attribute type 11 has an invalid length. [ 1872.110313][ T1077] CPU: 0 PID: 1077 Comm: syz.1.8916 Not tainted syzkaller #0 [ 1872.117727][ T1077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1872.127780][ T1077] Call Trace: [ 1872.131065][ T1077] [ 1872.134000][ T1077] dump_stack_lvl+0x18c/0x250 [ 1872.138699][ T1077] ? show_regs_print_info+0x20/0x20 [ 1872.143896][ T1077] ? load_image+0x420/0x420 [ 1872.148400][ T1077] ? __might_sleep+0xe0/0xe0 [ 1872.152985][ T1077] ? __lock_acquire+0x7d40/0x7d40 [ 1872.158006][ T1077] should_fail_ex+0x39d/0x4d0 [ 1872.162694][ T1077] should_failslab+0x9/0x20 [ 1872.167200][ T1077] slab_pre_alloc_hook+0x59/0x310 [ 1872.172226][ T1077] kmem_cache_alloc+0x5a/0x2d0 [ 1872.176991][ T1077] ? ptlock_alloc+0x20/0x70 [ 1872.181496][ T1077] ptlock_alloc+0x20/0x70 [ 1872.185823][ T1077] pte_alloc_one+0xcc/0x530 [ 1872.190321][ T1077] ? pfn_modify_allowed+0x560/0x560 [ 1872.195519][ T1077] ? __pud_alloc+0x1f0/0x1f0 [ 1872.200103][ T1077] __pte_alloc+0x22/0x2a0 [ 1872.204433][ T1077] handle_mm_fault+0x3ff8/0x4c00 [ 1872.209364][ T1077] ? handle_mm_fault+0xe7/0x4c00 [ 1872.214304][ T1077] ? numa_migrate_prep+0x350/0x350 [ 1872.219413][ T1077] ? lock_chain_count+0x20/0x20 [ 1872.224262][ T1077] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1872.229541][ T1077] do_user_addr_fault+0x730/0x12c0 [ 1872.234656][ T1077] exc_page_fault+0x64/0x100 [ 1872.239248][ T1077] asm_exc_page_fault+0x26/0x30 [ 1872.244116][ T1077] RIP: 0010:__put_user_4+0x11/0x20 [ 1872.249223][ T1077] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 1872.268825][ T1077] RSP: 0018:ffffc90010b07e80 EFLAGS: 00050202 [ 1872.274890][ T1077] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000001640 [ 1872.282852][ T1077] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8fe0 [ 1872.290818][ T1077] RBP: 0000000000000004 R08: ffffffff8e8b19ef R09: 1ffffffff1d1633d [ 1872.298785][ T1077] R10: dffffc0000000000 R11: fffffbfff1d1633e R12: 0000000000000000 [ 1872.306753][ T1077] R13: 0000200000001640 R14: 0000000000000010 R15: 0000000000000003 [ 1872.314731][ T1077] __sys_socketpair+0xb8/0x550 [ 1872.319503][ T1077] __x64_sys_socketpair+0x9b/0xb0 [ 1872.324525][ T1077] do_syscall_64+0x55/0xa0 [ 1872.328933][ T1077] ? clear_bhb_loop+0x40/0x90 [ 1872.333610][ T1077] ? clear_bhb_loop+0x40/0x90 [ 1872.338284][ T1077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1872.344200][ T1077] RIP: 0033:0x7f008ab9cdd9 [ 1872.348611][ T1077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1872.368207][ T1077] RSP: 002b:00007f008babd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1872.376619][ T1077] RAX: ffffffffffffffda RBX: 00007f008ae15fa0 RCX: 00007f008ab9cdd9 [ 1872.384592][ T1077] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 0000000000000010 [ 1872.392559][ T1077] RBP: 00007f008babd090 R08: 0000000000000000 R09: 0000000000000000 [ 1872.400522][ T1077] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000001 [ 1872.408483][ T1077] R13: 00007f008ae16038 R14: 00007f008ae15fa0 R15: 00007ffec7f7abe8 [ 1872.416573][ T1077] [ 1872.420878][ T1078] __nla_validate_parse: 31 callbacks suppressed [ 1872.420895][ T1078] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8915'. [ 1872.535826][ T1086] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8919'. [ 1872.553384][ T1084] netlink: 'syz.2.8920': attribute type 3 has an invalid length. [ 1872.571757][ T1084] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.8920'. [ 1872.630411][ T1088] netlink: 'syz.3.8921': attribute type 21 has an invalid length. [ 1872.647052][ T1088] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8921'. [ 1872.677464][ T1088] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8921'. [ 1872.709910][ T1088] netlink: 'syz.3.8921': attribute type 10 has an invalid length. [ 1872.718403][ T1088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8921'. [ 1872.729371][ T1088] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1872.835255][ T1094] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8924'. [ 1873.250492][ T1103] netlink: 'syz.1.8926': attribute type 10 has an invalid length. [ 1873.476235][ T1113] netlink: 'syz.0.8927': attribute type 21 has an invalid length. [ 1873.541180][ T655] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1873.547955][ T1115] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8930'. [ 1873.596539][ T1120] netlink: 'syz.2.8929': attribute type 15 has an invalid length. [ 1873.610207][ T1120] netlink: 'syz.2.8929': attribute type 7 has an invalid length. [ 1873.759374][ T1125] netlink: 'syz.2.8929': attribute type 39 has an invalid length. [ 1873.875553][ T1127] netlink: 'syz.0.8934': attribute type 21 has an invalid length. [ 1873.883692][ T1127] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8934'. [ 1873.899797][ T1127] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8934'. [ 1877.042356][ T1136] ¿: renamed from vlan0 (while UP) [ 1877.422874][ T1140] validate_nla: 1 callbacks suppressed [ 1877.422892][ T1140] netlink: 'syz.2.8939': attribute type 4 has an invalid length. [ 1877.467022][ T1140] __nla_validate_parse: 2 callbacks suppressed [ 1877.467038][ T1140] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8939'. [ 1877.974235][ T1142] FAULT_INJECTION: forcing a failure. [ 1877.974235][ T1142] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.993170][ T655] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1877.993206][ T655] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1878.006928][ T1142] CPU: 1 PID: 1142 Comm: syz.1.8941 Not tainted syzkaller #0 [ 1878.017029][ T1142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1878.027097][ T1142] Call Trace: [ 1878.030382][ T1142] [ 1878.033313][ T1142] dump_stack_lvl+0x18c/0x250 [ 1878.037998][ T1142] ? show_regs_print_info+0x20/0x20 [ 1878.043195][ T1142] ? load_image+0x420/0x420 [ 1878.047695][ T1142] ? __asan_memset+0x22/0x40 [ 1878.052284][ T1142] should_fail_ex+0x39d/0x4d0 [ 1878.056966][ T1142] should_failslab+0x9/0x20 [ 1878.061552][ T1142] slab_pre_alloc_hook+0x59/0x310 [ 1878.066570][ T1142] ? __debug_object_init+0xec/0x450 [ 1878.071780][ T1142] kmem_cache_alloc+0x5a/0x2d0 [ 1878.076543][ T1142] ? slab_build_skb+0x2b/0x3f0 [ 1878.081301][ T1142] slab_build_skb+0x2b/0x3f0 [ 1878.085897][ T1142] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 1878.091265][ T1142] ? __fget_files+0x28/0x4b0 [ 1878.095850][ T1142] ? __fget_files+0x28/0x4b0 [ 1878.100438][ T1142] ? __fget_files+0x43d/0x4b0 [ 1878.105114][ T1142] ? cpu_online+0x60/0x60 [ 1878.109440][ T1142] bpf_prog_test_run+0x321/0x390 [ 1878.114376][ T1142] __sys_bpf+0x49d/0x890 [ 1878.118614][ T1142] ? bpf_link_show_fdinfo+0x390/0x390 [ 1878.123989][ T1142] ? lock_chain_count+0x20/0x20 [ 1878.128830][ T1142] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1878.134809][ T1142] __x64_sys_bpf+0x7c/0x90 [ 1878.139217][ T1142] do_syscall_64+0x55/0xa0 [ 1878.143621][ T1142] ? clear_bhb_loop+0x40/0x90 [ 1878.148294][ T1142] ? clear_bhb_loop+0x40/0x90 [ 1878.152963][ T1142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1878.158853][ T1142] RIP: 0033:0x7f008ab9cdd9 [ 1878.163262][ T1142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1878.182866][ T1142] RSP: 002b:00007f008babd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1878.191294][ T1142] RAX: ffffffffffffffda RBX: 00007f008ae15fa0 RCX: 00007f008ab9cdd9 [ 1878.199263][ T1142] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1878.207227][ T1142] RBP: 00007f008babd090 R08: 0000000000000000 R09: 0000000000000000 [ 1878.215190][ T1142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1878.223164][ T1142] R13: 00007f008ae16038 R14: 00007f008ae15fa0 R15: 00007ffec7f7abe8 [ 1878.231137][ T1142] [ 1878.246940][ T1144] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8940'. [ 1878.283985][ T1150] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8941'. [ 1878.323214][ T1149] netlink: 'syz.2.8943': attribute type 21 has an invalid length. [ 1878.331949][ T1149] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8943'. [ 1878.342665][ T1149] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8943'. [ 1878.357064][ T1149] netlink: 'syz.2.8943': attribute type 10 has an invalid length. [ 1878.365122][ T1149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8943'. [ 1878.375261][ T1149] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1878.469710][ T1157] netlink: 'syz.3.8945': attribute type 3 has an invalid length. [ 1878.482862][ T1157] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.8945'. [ 1878.533025][ T1159] netlink: 'syz.2.8946': attribute type 21 has an invalid length. [ 1881.550916][ T1176] netlink: 'syz.1.8951': attribute type 29 has an invalid length. [ 1881.573416][ T1176] netlink: 'syz.1.8951': attribute type 29 has an invalid length. [ 1881.604134][ T1176] netlink: 'syz.1.8951': attribute type 29 has an invalid length. [ 1881.626006][ T1176] netlink: 'syz.1.8951': attribute type 29 has an invalid length. [ 1881.763520][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1881.763922][ T1180] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8952'. [ 1882.150396][ T1187] netlink: 'syz.2.8955': attribute type 3 has an invalid length. [ 1882.158770][ T1187] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.8955'. [ 1882.202885][ T1190] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8956'. [ 1882.511259][ T1194] validate_nla: 2 callbacks suppressed [ 1882.511277][ T1194] netlink: 'syz.3.8958': attribute type 29 has an invalid length. [ 1882.527017][ T1194] netlink: 'syz.3.8958': attribute type 29 has an invalid length. [ 1882.556312][ T1194] netlink: 'syz.3.8958': attribute type 29 has an invalid length. [ 1882.571807][ T1194] netlink: 'syz.3.8958': attribute type 29 has an invalid length. [ 1886.111455][ T1204] netlink: 'syz.1.8962': attribute type 29 has an invalid length. [ 1886.125878][ T1204] netlink: 'syz.1.8962': attribute type 29 has an invalid length. [ 1886.136001][ T1204] netlink: 'syz.1.8962': attribute type 29 has an invalid length. [ 1886.158462][ T1204] netlink: 'syz.1.8962': attribute type 29 has an invalid length. [ 1886.585622][ T1226] netlink: 'syz.3.8968': attribute type 11 has an invalid length. [ 1886.614068][ T1227] netlink: 'syz.0.8967': attribute type 3 has an invalid length. [ 1886.619947][ T1226] __nla_validate_parse: 2 callbacks suppressed [ 1886.619962][ T1226] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8968'. [ 1886.624208][ T1227] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8967'. [ 1886.956774][ T1237] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8972'. [ 1887.042976][ T1237] bond0 (unregistering): left promiscuous mode [ 1887.051857][ T1237] bond_slave_0: left promiscuous mode [ 1887.059027][ T1237] bond_slave_1: left promiscuous mode [ 1887.064794][ T1237] bond0 (unregistering): left allmulticast mode [ 1887.072274][ T1237] bond_slave_0: left allmulticast mode [ 1887.079534][ T1237] bond_slave_1: left allmulticast mode [ 1887.093430][ T1237] team0: Port device bond0 removed [ 1887.103102][ T1237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1887.119448][ T1237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1887.138473][ T1237] bond0 (unregistering): Released all slaves [ 1887.182736][ T1243] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8974'. [ 1887.214230][ T1243] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8974'. [ 1887.227699][ T1243] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1887.261639][ T1245] ¿: renamed from vlan0 (while UP) [ 1887.362501][ T1249] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.8977'. [ 1887.373373][ T1249] netlink: zone id is out of range [ 1887.379017][ T1249] netlink: zone id is out of range [ 1887.384289][ T1249] netlink: zone id is out of range [ 1887.390106][ T1249] netlink: zone id is out of range [ 1887.395382][ T1249] netlink: zone id is out of range [ 1887.401028][ T1249] netlink: zone id is out of range [ 1887.406327][ T1249] netlink: zone id is out of range [ 1887.412131][ T1249] netlink: zone id is out of range [ 1887.417859][ T1249] netlink: zone id is out of range [ 1887.422985][ T1251] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8978'. [ 1887.984457][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1887.985249][ T1263] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8982'. [ 1888.065070][ T1266] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8991'. [ 1888.150068][ T1269] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8984'. [ 1888.163646][ T1269] validate_nla: 2 callbacks suppressed [ 1888.163660][ T1269] netlink: 'syz.1.8984': attribute type 10 has an invalid length. [ 1888.303385][ T1277] netlink: 'syz.2.8987': attribute type 11 has an invalid length. [ 1888.770555][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1888.929046][ T1298] netlink: 'syz.2.8995': attribute type 10 has an invalid length. [ 1889.055462][ T1302] netlink: 'syz.2.8997': attribute type 11 has an invalid length. [ 1889.125204][ T1304] netlink: 'syz.2.9006': attribute type 11 has an invalid length. [ 1889.482857][ T1313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1889.497995][ T1313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1889.513936][ T1313] bond0 (unregistering): Released all slaves [ 1889.590660][ T1319] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1889.777701][ T1326] netlink: 'syz.2.9007': attribute type 21 has an invalid length. [ 1889.807917][ T1326] netlink: 'syz.2.9007': attribute type 10 has an invalid length. [ 1889.815179][ T1328] netlink: 'syz.3.9008': attribute type 11 has an invalid length. [ 1890.073504][ T655] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1890.073544][ T655] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1890.079335][ T1338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1890.598008][ T1354] netlink: 'syz.3.9018': attribute type 11 has an invalid length. [ 1890.630898][ T1352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1890.658901][ T1352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1890.714683][ T1352] bond0 (unregistering): Released all slaves [ 1890.742987][ T1357] netlink: 'syz.3.9019': attribute type 21 has an invalid length. [ 1890.954654][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1891.671700][ T1379] __nla_validate_parse: 29 callbacks suppressed [ 1891.671722][ T1379] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9027'. [ 1891.839032][ T1381] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9028'. [ 1891.868370][ T1381] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9028'. [ 1891.896322][ T1381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9028'. [ 1891.932607][ T655] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1891.932650][ T655] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1891.937326][ T1385] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9031'. [ 1892.537360][T12944] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1892.613304][ T1400] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9037'. [ 1892.955039][ T1410] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9048'. [ 1893.228700][ T1412] validate_nla: 12 callbacks suppressed [ 1893.228720][ T1412] netlink: 'syz.1.9041': attribute type 21 has an invalid length. [ 1893.264733][ T1412] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9041'. [ 1893.322943][ T1413] netlink: 184 bytes leftover after parsing attributes in process `syz.1.9041'. [ 1893.375519][ T1412] netlink: 'syz.1.9041': attribute type 10 has an invalid length. [ 1893.398675][ T655] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1893.425507][ T1412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9041'. [ 1893.426519][ T1419] netlink: 'syz.0.9044': attribute type 29 has an invalid length. [ 1893.454241][ T1419] netlink: 'syz.0.9044': attribute type 29 has an invalid length. [ 1893.517492][ T1419] netlink: 'syz.0.9044': attribute type 29 has an invalid length. [ 1893.546174][ T1419] netlink: 'syz.0.9044': attribute type 29 has an invalid length. [ 1894.102121][ T1436] netlink: 'syz.3.9050': attribute type 11 has an invalid length. [ 1894.983101][ T1445] FAULT_INJECTION: forcing a failure. [ 1894.983101][ T1445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1895.019598][ T1445] CPU: 1 PID: 1445 Comm: syz.3.9053 Not tainted syzkaller #0 [ 1895.027040][ T1445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1895.037108][ T1445] Call Trace: [ 1895.040397][ T1445] [ 1895.043352][ T1445] dump_stack_lvl+0x18c/0x250 [ 1895.048069][ T1445] ? show_regs_print_info+0x20/0x20 [ 1895.053289][ T1445] ? load_image+0x420/0x420 [ 1895.057821][ T1445] ? __might_fault+0xaa/0x120 [ 1895.062516][ T1445] should_fail_ex+0x39d/0x4d0 [ 1895.067218][ T1445] copyin+0x1a/0x90 [ 1895.071054][ T1445] _copy_from_iter+0x404/0x12e0 [ 1895.075937][ T1445] ? copyout_mc+0x70/0x70 [ 1895.080287][ T1445] ? dev_get_by_index+0x22/0x2d0 [ 1895.085235][ T1445] ? dev_get_by_index+0x22/0x2d0 [ 1895.090190][ T1445] packet_sendmsg+0x2cd5/0x4c30 [ 1895.095079][ T1445] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1895.101074][ T1445] ? __might_sleep+0xe0/0xe0 [ 1895.105695][ T1445] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1895.111871][ T1445] ? lockdep_hardirqs_on+0x98/0x150 [ 1895.117093][ T1445] ? aa_sk_perm+0x83c/0x970 [ 1895.121616][ T1445] ? packet_getsockopt+0xad0/0xad0 [ 1895.126751][ T1445] ? tomoyo_gc_thread+0x7d0/0x1410 [ 1895.131875][ T1445] ? lockdep_hardirqs_on+0x98/0x150 [ 1895.137094][ T1445] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1895.143267][ T1445] ? aa_sock_msg_perm+0x94/0x150 [ 1895.148219][ T1445] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1895.153518][ T1445] ? security_socket_sendmsg+0x80/0xa0 [ 1895.158984][ T1445] ? packet_getsockopt+0xad0/0xad0 [ 1895.164117][ T1445] ____sys_sendmsg+0x5ba/0x960 [ 1895.168892][ T1445] ? __sanitizer_cov_trace_const_cmp8+0x8/0x80 [ 1895.175065][ T1445] ? __asan_memset+0x22/0x40 [ 1895.179673][ T1445] ? __sys_sendmsg_sock+0x30/0x30 [ 1895.184704][ T1445] ? __import_iovec+0x3fa/0x850 [ 1895.189574][ T1445] ? import_iovec+0x73/0xa0 [ 1895.194091][ T1445] ___sys_sendmsg+0x2a6/0x360 [ 1895.198785][ T1445] ? __sys_sendmsg+0x2a0/0x2a0 [ 1895.203603][ T1445] __se_sys_sendmsg+0x1c2/0x2b0 [ 1895.208474][ T1445] ? __x64_sys_sendmsg+0x80/0x80 [ 1895.213526][ T1445] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1895.219441][ T1445] do_syscall_64+0x55/0xa0 [ 1895.223876][ T1445] ? clear_bhb_loop+0x40/0x90 [ 1895.228573][ T1445] ? clear_bhb_loop+0x40/0x90 [ 1895.233282][ T1445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1895.239220][ T1445] RIP: 0033:0x7f371cb9cdd9 [ 1895.243655][ T1445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1895.263286][ T1445] RSP: 002b:00007f371da68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1895.271734][ T1445] RAX: ffffffffffffffda RBX: 00007f371ce15fa0 RCX: 00007f371cb9cdd9 [ 1895.279730][ T1445] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1895.287715][ T1445] RBP: 00007f371da68090 R08: 0000000000000000 R09: 0000000000000000 [ 1895.295698][ T1445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1895.303683][ T1445] R13: 00007f371ce16038 R14: 00007f371ce15fa0 R15: 00007ffc2b16c2e8 [ 1895.311679][ T1445] [ 1895.539794][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1895.606337][ T1453] netlink: 'syz.3.9056': attribute type 21 has an invalid length. [ 1895.642623][ T1453] netlink: 'syz.3.9056': attribute type 10 has an invalid length. [ 1895.654276][ T1453] net_ratelimit: 675 callbacks suppressed [ 1895.654314][ T1453] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1895.746464][ T1463] netlink: 'syz.3.9059': attribute type 11 has an invalid length. [ 1895.830204][ T1468] FAULT_INJECTION: forcing a failure. [ 1895.830204][ T1468] name failslab, interval 1, probability 0, space 0, times 0 [ 1895.843163][ T1468] CPU: 0 PID: 1468 Comm: syz.3.9061 Not tainted syzkaller #0 [ 1895.850577][ T1468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1895.860680][ T1468] Call Trace: [ 1895.863964][ T1468] [ 1895.866911][ T1468] dump_stack_lvl+0x18c/0x250 [ 1895.871595][ T1468] ? show_regs_print_info+0x20/0x20 [ 1895.876807][ T1468] ? load_image+0x420/0x420 [ 1895.881337][ T1468] ? __might_sleep+0xe0/0xe0 [ 1895.885953][ T1468] ? __lock_acquire+0x7d40/0x7d40 [ 1895.890989][ T1468] ? rcu_is_watching+0x15/0xb0 [ 1895.895764][ T1468] should_fail_ex+0x39d/0x4d0 [ 1895.900474][ T1468] should_failslab+0x9/0x20 [ 1895.904996][ T1468] slab_pre_alloc_hook+0x59/0x310 [ 1895.910047][ T1468] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1895.915939][ T1468] __kmem_cache_alloc_node+0x53/0x250 [ 1895.921321][ T1468] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1895.927219][ T1468] kmalloc_trace+0x2a/0xe0 [ 1895.931645][ T1468] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1895.937380][ T1468] sctp_association_new+0x15d3/0x25c0 [ 1895.942774][ T1468] sctp_connect_new_asoc+0x2de/0x6a0 [ 1895.948063][ T1468] ? __sctp_connect+0xd80/0xd80 [ 1895.952910][ T1468] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1895.958298][ T1468] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1895.963847][ T1468] ? security_sctp_bind_connect+0x89/0xb0 [ 1895.969575][ T1468] sctp_sendmsg+0x1575/0x28c0 [ 1895.974269][ T1468] ? sctp_getsockopt+0xb60/0xb60 [ 1895.979208][ T1468] ? aa_sk_perm+0x83c/0x970 [ 1895.983732][ T1468] ? aa_af_perm+0x330/0x330 [ 1895.988239][ T1468] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1895.994676][ T1468] ? sock_rps_record_flow+0x19/0x3f0 [ 1895.999970][ T1468] ? inet_sendmsg+0xe9/0x2f0 [ 1896.004562][ T1468] ? inet_send_prepare+0x260/0x260 [ 1896.009681][ T1468] ____sys_sendmsg+0x5ba/0x960 [ 1896.014445][ T1468] ? __lock_acquire+0x7d40/0x7d40 [ 1896.019475][ T1468] ? __asan_memset+0x22/0x40 [ 1896.024066][ T1468] ? __sys_sendmsg_sock+0x30/0x30 [ 1896.029088][ T1468] ? __import_iovec+0x5f2/0x850 [ 1896.033949][ T1468] ? import_iovec+0x73/0xa0 [ 1896.038457][ T1468] ___sys_sendmsg+0x2a6/0x360 [ 1896.043144][ T1468] ? __sys_sendmsg+0x2a0/0x2a0 [ 1896.047945][ T1468] ? __lock_acquire+0x7d40/0x7d40 [ 1896.053002][ T1468] __se_sys_sendmsg+0x1c2/0x2b0 [ 1896.057856][ T1468] ? __x64_sys_sendmsg+0x80/0x80 [ 1896.062816][ T1468] ? lockdep_hardirqs_on+0x98/0x150 [ 1896.068022][ T1468] do_syscall_64+0x55/0xa0 [ 1896.072437][ T1468] ? clear_bhb_loop+0x40/0x90 [ 1896.077120][ T1468] ? clear_bhb_loop+0x40/0x90 [ 1896.081801][ T1468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1896.087695][ T1468] RIP: 0033:0x7f371cb9cdd9 [ 1896.092120][ T1468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1896.111905][ T1468] RSP: 002b:00007f371da68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1896.120323][ T1468] RAX: ffffffffffffffda RBX: 00007f371ce15fa0 RCX: 00007f371cb9cdd9 [ 1896.128295][ T1468] RDX: 000000000004c0e0 RSI: 00002000000006c0 RDI: 0000000000000007 [ 1896.136264][ T1468] RBP: 00007f371da68090 R08: 0000000000000000 R09: 0000000000000000 [ 1896.144233][ T1468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1896.152210][ T1468] R13: 00007f371ce16038 R14: 00007f371ce15fa0 R15: 00007ffc2b16c2e8 [ 1896.160204][ T1468] [ 1896.216040][ T1471] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1898.217518][T20649] wlan1: Trigger new scan to find an IBSS to join [ 1899.502384][ T1483] __nla_validate_parse: 8 callbacks suppressed [ 1899.502402][ T1483] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9066'. [ 1899.630363][ T1485] netlink: 'syz.2.9067': attribute type 29 has an invalid length. [ 1899.669697][ T1485] netlink: 'syz.2.9067': attribute type 29 has an invalid length. [ 1899.718144][ T1485] netlink: 'syz.2.9067': attribute type 29 has an invalid length. [ 1899.756464][ T1485] netlink: 'syz.2.9067': attribute type 29 has an invalid length. [ 1899.793090][ T1490] netlink: 'syz.1.9068': attribute type 21 has an invalid length. [ 1899.821535][ T1490] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9068'. [ 1899.839334][ T1490] netlink: 184 bytes leftover after parsing attributes in process `syz.1.9068'. [ 1899.872597][ T1490] netlink: 'syz.1.9068': attribute type 10 has an invalid length. [ 1899.882654][ T1490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9068'. [ 1900.371453][ T1499] syzkaller0: entered promiscuous mode [ 1900.395841][ T1499] syzkaller0: entered allmulticast mode [ 1900.620701][ T1508] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 1900.642793][ T1509] netlink: 'syz.1.9074': attribute type 29 has an invalid length. [ 1900.658415][ T1509] netlink: 'syz.1.9074': attribute type 29 has an invalid length. [ 1900.682526][ T1509] netlink: 'syz.1.9074': attribute type 2 has an invalid length. [ 1900.694191][ T1509] netlink: 'syz.1.9074': attribute type 8 has an invalid length. [ 1900.706037][ T1509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9074'. [ 1900.724327][ T1509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9074'. [ 1901.237127][ T1511] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9076'. [ 1901.321059][ T655] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1903.187095][ T857] wlan1: Trigger new scan to find an IBSS to join [ 1903.538136][ T1513] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9077'. [ 1903.547735][ T1516] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9078'. [ 1903.560161][ T1517] netlink: 184 bytes leftover after parsing attributes in process `syz.1.9078'. [ 1903.985716][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1904.022208][ T1545] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1904.085656][ T1549] FAULT_INJECTION: forcing a failure. [ 1904.085656][ T1549] name failslab, interval 1, probability 0, space 0, times 0 [ 1904.101173][ T1549] CPU: 1 PID: 1549 Comm: syz.2.9090 Not tainted syzkaller #0 [ 1904.108603][ T1549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1904.112852][ T1547] dú0Ù~Ô: renamed from veth0_vlan (while UP) [ 1904.118661][ T1549] Call Trace: [ 1904.118699][ T1549] [ 1904.118707][ T1549] dump_stack_lvl+0x18c/0x250 [ 1904.118742][ T1549] ? show_regs_print_info+0x20/0x20 [ 1904.118766][ T1549] ? load_image+0x420/0x420 [ 1904.118791][ T1549] ? __might_sleep+0xe0/0xe0 [ 1904.150119][ T1549] ? __lock_acquire+0x7d40/0x7d40 [ 1904.155184][ T1549] should_fail_ex+0x39d/0x4d0 [ 1904.159908][ T1549] should_failslab+0x9/0x20 [ 1904.164437][ T1549] slab_pre_alloc_hook+0x59/0x310 [ 1904.169508][ T1549] ? __inet_diag_dump_start+0x8b/0x9f0 [ 1904.175052][ T1549] __kmem_cache_alloc_node+0x53/0x250 [ 1904.180579][ T1549] ? __inet_diag_dump_start+0x8b/0x9f0 [ 1904.186078][ T1549] kmalloc_trace+0x2a/0xe0 [ 1904.190525][ T1549] __inet_diag_dump_start+0x8b/0x9f0 [ 1904.195837][ T1549] ? netlink_lookup+0x30/0x200 [ 1904.200622][ T1549] ? netlink_lookup+0x30/0x200 [ 1904.205407][ T1549] __netlink_dump_start+0x4a9/0x810 [ 1904.210622][ T1549] inet_diag_rcv_msg_compat+0x215/0x440 [ 1904.216175][ T1549] ? __inet_diag_dump+0x380/0x380 [ 1904.221206][ T1549] ? sock_diag_rcv_msg+0xd1/0x600 [ 1904.226232][ T1549] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 1904.231954][ T1549] ? inet_diag_dump_start_compat+0x20/0x20 [ 1904.237780][ T1549] ? inet_diag_dump+0x50/0x50 [ 1904.242470][ T1549] ? __inet_diag_dump+0x380/0x380 [ 1904.247497][ T1549] sock_diag_rcv_msg+0x3d8/0x600 [ 1904.252433][ T1549] netlink_rcv_skb+0x241/0x4d0 [ 1904.257201][ T1549] ? sock_diag_bind+0xb0/0xb0 [ 1904.261876][ T1549] ? netlink_ack+0x1180/0x1180 [ 1904.266654][ T1549] ? __lock_acquire+0x7d40/0x7d40 [ 1904.271686][ T1549] ? net_generic+0x1e/0x240 [ 1904.276189][ T1549] ? netlink_deliver_tap+0x2e/0x1b0 [ 1904.281389][ T1549] sock_diag_rcv+0x2a/0x40 [ 1904.285811][ T1549] netlink_unicast+0x751/0x8d0 [ 1904.290591][ T1549] netlink_sendmsg+0x8d0/0xbf0 [ 1904.295371][ T1549] ? netlink_getsockopt+0x590/0x590 [ 1904.300576][ T1549] ? aa_sock_msg_perm+0x94/0x150 [ 1904.305521][ T1549] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1904.310812][ T1549] ? security_socket_sendmsg+0x80/0xa0 [ 1904.316270][ T1549] ? netlink_getsockopt+0x590/0x590 [ 1904.321481][ T1549] ____sys_sendmsg+0x5ba/0x960 [ 1904.326247][ T1549] ? __asan_memset+0x22/0x40 [ 1904.330840][ T1549] ? __sys_sendmsg_sock+0x30/0x30 [ 1904.335861][ T1549] ? __import_iovec+0x5f2/0x850 [ 1904.340714][ T1549] ? import_iovec+0x73/0xa0 [ 1904.345218][ T1549] ___sys_sendmsg+0x2a6/0x360 [ 1904.349894][ T1549] ? get_pid_task+0x20/0x1e0 [ 1904.354491][ T1549] ? __sys_sendmsg+0x2a0/0x2a0 [ 1904.359267][ T1549] ? __lock_acquire+0x7d40/0x7d40 [ 1904.364308][ T1549] __se_sys_sendmsg+0x1c2/0x2b0 [ 1904.369155][ T1549] ? __x64_sys_sendmsg+0x80/0x80 [ 1904.374099][ T1549] ? lockdep_hardirqs_on+0x98/0x150 [ 1904.379296][ T1549] do_syscall_64+0x55/0xa0 [ 1904.383707][ T1549] ? clear_bhb_loop+0x40/0x90 [ 1904.388383][ T1549] ? clear_bhb_loop+0x40/0x90 [ 1904.393061][ T1549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1904.398973][ T1549] RIP: 0033:0x7fb82259cdd9 [ 1904.403439][ T1549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1904.423068][ T1549] RSP: 002b:00007fb82344a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1904.431527][ T1549] RAX: ffffffffffffffda RBX: 00007fb822815fa0 RCX: 00007fb82259cdd9 [ 1904.439504][ T1549] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1904.447476][ T1549] RBP: 00007fb82344a090 R08: 0000000000000000 R09: 0000000000000000 [ 1904.455445][ T1549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1904.463415][ T1549] R13: 00007fb822816038 R14: 00007fb822815fa0 R15: 00007ffe45870a28 [ 1904.471404][ T1549] [ 1904.904498][T20648] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1904.926117][ T1557] FAULT_INJECTION: forcing a failure. [ 1904.926117][ T1557] name failslab, interval 1, probability 0, space 0, times 0 [ 1904.940315][ T1557] CPU: 1 PID: 1557 Comm: syz.2.9093 Not tainted syzkaller #0 [ 1904.947730][ T1557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1904.957808][ T1557] Call Trace: [ 1904.961103][ T1557] [ 1904.964045][ T1557] dump_stack_lvl+0x18c/0x250 [ 1904.968749][ T1557] ? sctp_sendmsg+0x1575/0x28c0 [ 1904.973672][ T1557] ? ___sys_sendmsg+0x2a6/0x360 [ 1904.978546][ T1557] ? show_regs_print_info+0x20/0x20 [ 1904.983775][ T1557] ? load_image+0x420/0x420 [ 1904.988326][ T1557] should_fail_ex+0x39d/0x4d0 [ 1904.993039][ T1557] should_failslab+0x9/0x20 [ 1904.997569][ T1557] slab_pre_alloc_hook+0x59/0x310 [ 1905.002627][ T1557] ? sctp_add_bind_addr+0x8c/0x360 [ 1905.007770][ T1557] __kmem_cache_alloc_node+0x53/0x250 [ 1905.013166][ T1557] ? sctp_add_bind_addr+0x8c/0x360 [ 1905.018277][ T1557] kmalloc_trace+0x2a/0xe0 [ 1905.022696][ T1557] sctp_add_bind_addr+0x8c/0x360 [ 1905.027635][ T1557] sctp_copy_local_addr_list+0x315/0x4f0 [ 1905.033273][ T1557] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1905.038990][ T1557] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1905.045058][ T1557] ? sctp_v4_is_any+0x35/0x60 [ 1905.049730][ T1557] ? sctp_copy_one_addr+0x8c/0x350 [ 1905.054846][ T1557] sctp_bind_addr_copy+0xb3/0x3c0 [ 1905.059872][ T1557] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1905.066199][ T1557] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1905.071514][ T1557] ? __sctp_connect+0xd80/0xd80 [ 1905.076371][ T1557] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1905.081746][ T1557] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1905.087292][ T1557] ? security_sctp_bind_connect+0x89/0xb0 [ 1905.093024][ T1557] sctp_sendmsg+0x1575/0x28c0 [ 1905.097709][ T1557] ? sctp_getsockopt+0xb60/0xb60 [ 1905.102644][ T1557] ? aa_sk_perm+0x83c/0x970 [ 1905.107162][ T1557] ? aa_af_perm+0x330/0x330 [ 1905.111675][ T1557] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1905.118100][ T1557] ? sock_rps_record_flow+0x19/0x3f0 [ 1905.123390][ T1557] ? inet_sendmsg+0xe9/0x2f0 [ 1905.127979][ T1557] ? inet_send_prepare+0x260/0x260 [ 1905.133094][ T1557] ____sys_sendmsg+0x5ba/0x960 [ 1905.137856][ T1557] ? __lock_acquire+0x7d40/0x7d40 [ 1905.142880][ T1557] ? __asan_memset+0x22/0x40 [ 1905.147471][ T1557] ? __sys_sendmsg_sock+0x30/0x30 [ 1905.152490][ T1557] ? __import_iovec+0x5f2/0x850 [ 1905.157343][ T1557] ? import_iovec+0x73/0xa0 [ 1905.161845][ T1557] ___sys_sendmsg+0x2a6/0x360 [ 1905.166528][ T1557] ? __sys_sendmsg+0x2a0/0x2a0 [ 1905.171351][ T1557] __se_sys_sendmsg+0x1c2/0x2b0 [ 1905.176204][ T1557] ? __x64_sys_sendmsg+0x80/0x80 [ 1905.181170][ T1557] ? lockdep_hardirqs_on+0x98/0x150 [ 1905.186395][ T1557] do_syscall_64+0x55/0xa0 [ 1905.190821][ T1557] ? clear_bhb_loop+0x40/0x90 [ 1905.195517][ T1557] ? clear_bhb_loop+0x40/0x90 [ 1905.200221][ T1557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1905.206124][ T1557] RIP: 0033:0x7fb82259cdd9 [ 1905.210541][ T1557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1905.230150][ T1557] RSP: 002b:00007fb82344a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1905.238563][ T1557] RAX: ffffffffffffffda RBX: 00007fb822815fa0 RCX: 00007fb82259cdd9 [ 1905.246531][ T1557] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000000e [ 1905.254502][ T1557] RBP: 00007fb82344a090 R08: 0000000000000000 R09: 0000000000000000 [ 1905.262474][ T1557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1905.270442][ T1557] R13: 00007fb822816038 R14: 00007fb822815fa0 R15: 00007ffe45870a28 [ 1905.278425][ T1557] [ 1905.551706][ T1568] __nla_validate_parse: 7 callbacks suppressed [ 1905.551739][ T1568] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9096'. [ 1905.723745][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1905.724891][ T1577] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9099'. [ 1908.916979][ T1591] validate_nla: 7 callbacks suppressed [ 1908.916997][ T1591] netlink: 'syz.1.9103': attribute type 4 has an invalid length. [ 1909.133417][ T655] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1909.133455][ T655] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1909.154314][ T1597] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9108'. [ 1909.568721][ T1609] netlink: 'syz.2.9111': attribute type 21 has an invalid length. [ 1909.592923][ T1609] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9111'. [ 1909.650624][ T1609] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9111'. [ 1909.719309][ T1609] netlink: 'syz.2.9111': attribute type 10 has an invalid length. [ 1909.743178][ T1609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9111'. [ 1909.764365][ T1609] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1909.865204][ T1614] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9112'. [ 1913.181020][ T655] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1913.181057][ T655] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1913.201701][ T1625] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9117'. [ 1913.523263][ T1636] netlink: 'syz.2.9122': attribute type 21 has an invalid length. [ 1913.534824][ T1636] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9122'. [ 1913.581379][ T1636] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9122'. [ 1913.595016][ T1636] netlink: 'syz.2.9122': attribute type 10 has an invalid length. [ 1913.612284][ T1636] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9122'. [ 1913.624643][ T1636] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1913.670174][ T1638] netlink: 'syz.1.9123': attribute type 29 has an invalid length. [ 1913.680517][ T1638] netlink: 'syz.1.9123': attribute type 29 has an invalid length. [ 1913.731535][ T1638] netlink: 'syz.1.9123': attribute type 29 has an invalid length. [ 1913.752840][ T1638] netlink: 'syz.1.9123': attribute type 29 has an invalid length. [ 1913.779038][ T1638] netlink: 'syz.1.9123': attribute type 29 has an invalid length. [ 1914.525786][ T1648] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9126'. [ 1914.680637][ T1654] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9127'. [ 1914.950730][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.958852][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.775419][ T655] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1917.775455][ T655] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1917.818067][ T1676] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9136'. [ 1917.920017][ T1680] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9138'. [ 1921.312637][ T1700] netlink: 'syz.2.9144': attribute type 21 has an invalid length. [ 1921.370303][ T1700] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9144'. [ 1921.500750][ T1707] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9144'. [ 1921.743435][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1921.748645][ T1712] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9147'. [ 1921.809778][ T1715] veth1_macvtap: left promiscuous mode [ 1921.815328][ T1715] macsec0: entered allmulticast mode [ 1921.929740][ T1719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9149'. [ 1925.372844][ T1740] netlink: 'syz.0.9155': attribute type 21 has an invalid length. [ 1925.419931][ T1740] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9155'. [ 1925.480209][ T1740] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9155'. [ 1925.529100][ T1744] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9156'. [ 1925.848437][ T1755] netlink: 'syz.0.9160': attribute type 21 has an invalid length. [ 1925.865888][ T1755] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9160'. [ 1925.896987][ T1755] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9160'. [ 1925.906214][ T1757] netlink: 'syz.2.9162': attribute type 21 has an invalid length. [ 1925.926051][ T1757] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9162'. [ 1926.767502][ T1767] __nla_validate_parse: 2 callbacks suppressed [ 1926.767546][ T1767] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9165'. [ 1929.468256][ T1774] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9175'. [ 1929.913378][ T1779] netlink: 'syz.2.9174': attribute type 21 has an invalid length. [ 1930.052636][ T1779] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9174'. [ 1930.541172][ T655] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1930.547875][ T1789] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9169'. [ 1930.583467][ T1791] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9178'. [ 1930.679018][ T1796] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.9171'. [ 1930.752185][ T1799] netlink: 'syz.3.9172': attribute type 21 has an invalid length. [ 1930.783469][ T1799] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9172'. [ 1930.901531][ T1799] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9172'. [ 1930.922520][ T1803] wg2: entered promiscuous mode [ 1930.931984][ T1803] wg2: entered allmulticast mode [ 1930.948694][ T1800] netlink: 'syz.3.9172': attribute type 10 has an invalid length. [ 1930.976678][ T1800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9172'. [ 1930.986248][ T1800] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1931.140506][ T1805] netlink: 'syz.1.9173': attribute type 29 has an invalid length. [ 1931.165036][ T1805] netlink: 'syz.1.9173': attribute type 29 has an invalid length. [ 1931.182358][ T1805] netlink: 'syz.1.9173': attribute type 29 has an invalid length. [ 1931.217332][ T1805] netlink: 'syz.1.9173': attribute type 29 has an invalid length. [ 1931.237303][ T1805] netlink: 'syz.1.9173': attribute type 29 has an invalid length. [ 1931.350750][ T1807] netlink: 'syz.3.9176': attribute type 21 has an invalid length. [ 1931.365485][ T1807] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9176'. [ 1932.072127][ T1819] netlink: 'syz.3.9180': attribute type 21 has an invalid length. [ 1932.128188][ T1819] __nla_validate_parse: 1 callbacks suppressed [ 1932.128208][ T1819] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9180'. [ 1932.599852][ T1826] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9182'. [ 1934.560639][ T655] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1934.560675][ T655] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1934.579394][ T1829] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9183'. [ 1934.726264][ T1833] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9185'. [ 1934.746429][ T1833] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9185'. [ 1934.760546][ T1833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9185'. [ 1934.812317][ T1835] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9186'. [ 1934.938169][ T1837] syzkaller0: entered promiscuous mode [ 1934.943865][ T1837] syzkaller0: entered allmulticast mode [ 1934.954932][ T1840] validate_nla: 2 callbacks suppressed [ 1934.954964][ T1840] netlink: 'syz.0.9189': attribute type 21 has an invalid length. [ 1934.970598][ T1840] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9189'. [ 1934.982564][ T1843] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9189'. [ 1937.337449][T12944] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1940.510608][ T1872] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9195'. [ 1940.672204][ T1881] netlink: 'syz.3.9197': attribute type 21 has an invalid length. [ 1940.689480][ T1881] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9197'. [ 1940.726252][ T1881] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9197'. [ 1940.752698][ T1881] netlink: 'syz.3.9197': attribute type 10 has an invalid length. [ 1940.772760][ T1881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9197'. [ 1940.794314][ T1881] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1940.969074][ T1887] netlink: 'syz.0.9196': attribute type 21 has an invalid length. [ 1941.029745][ T1887] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9196'. [ 1941.367168][ T1891] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9200'. [ 1941.606753][ T1900] netlink: 'syz.3.9202': attribute type 29 has an invalid length. [ 1941.614954][ T1900] netlink: 'syz.3.9202': attribute type 29 has an invalid length. [ 1941.651359][ T1900] netlink: 'syz.3.9202': attribute type 29 has an invalid length. [ 1941.668244][ T1900] netlink: 'syz.3.9202': attribute type 29 has an invalid length. [ 1944.781927][ T1915] netlink: 'syz.0.9209': attribute type 21 has an invalid length. [ 1944.806733][ T1915] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9209'. [ 1944.827334][ T1918] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9209'. [ 1944.850610][ T1922] netlink: 'syz.0.9209': attribute type 10 has an invalid length. [ 1944.879096][ T1922] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9209'. [ 1945.243016][ T1926] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9212'. [ 1945.948204][ T1933] FAULT_INJECTION: forcing a failure. [ 1945.948204][ T1933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1945.977116][ T1933] CPU: 0 PID: 1933 Comm: syz.3.9215 Not tainted syzkaller #0 [ 1945.984567][ T1933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1945.994635][ T1933] Call Trace: [ 1945.997925][ T1933] [ 1946.000868][ T1933] dump_stack_lvl+0x18c/0x250 [ 1946.005580][ T1933] ? show_regs_print_info+0x20/0x20 [ 1946.010797][ T1933] ? load_image+0x420/0x420 [ 1946.015320][ T1933] ? __might_fault+0xaa/0x120 [ 1946.020013][ T1933] ? __lock_acquire+0x7d40/0x7d40 [ 1946.025085][ T1933] should_fail_ex+0x39d/0x4d0 [ 1946.029887][ T1933] _copy_to_user+0x2f/0xa0 [ 1946.034321][ T1933] __htab_map_lookup_and_delete_batch+0x1034/0x1360 [ 1946.040984][ T1933] ? __fget_files+0x28/0x4b0 [ 1946.045595][ T1933] ? jhash+0x740/0x740 [ 1946.049697][ T1933] ? __fdget+0x180/0x210 [ 1946.053964][ T1933] ? htab_lru_map_lookup_and_delete_elem+0x40/0x40 [ 1946.060472][ T1933] bpf_map_do_batch+0x477/0x610 [ 1946.065353][ T1933] __sys_bpf+0x78c/0x890 [ 1946.069616][ T1933] ? bpf_link_show_fdinfo+0x390/0x390 [ 1946.075036][ T1933] ? lock_chain_count+0x20/0x20 [ 1946.079919][ T1933] __x64_sys_bpf+0x7c/0x90 [ 1946.084350][ T1933] do_syscall_64+0x55/0xa0 [ 1946.088775][ T1933] ? clear_bhb_loop+0x40/0x90 [ 1946.093462][ T1933] ? clear_bhb_loop+0x40/0x90 [ 1946.098158][ T1933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1946.104066][ T1933] RIP: 0033:0x7f371cb9cdd9 [ 1946.108500][ T1933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1946.128116][ T1933] RSP: 002b:00007f371da68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1946.136733][ T1933] RAX: ffffffffffffffda RBX: 00007f371ce15fa0 RCX: 00007f371cb9cdd9 [ 1946.144727][ T1933] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 0000000000000019 [ 1946.152717][ T1933] RBP: 00007f371da68090 R08: 0000000000000000 R09: 0000000000000000 [ 1946.160709][ T1933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1946.168693][ T1933] R13: 00007f371ce16038 R14: 00007f371ce15fa0 R15: 00007ffc2b16c2e8 [ 1946.176721][ T1933] [ 1946.311478][ T1940] netlink: 'syz.2.9216': attribute type 29 has an invalid length. [ 1946.838143][ T1940] netlink: 'syz.2.9216': attribute type 29 has an invalid length. [ 1946.847286][ T1942] netlink: 'syz.2.9216': attribute type 29 has an invalid length. [ 1946.860177][ T1943] netlink: 'syz.1.9214': attribute type 21 has an invalid length. [ 1946.868875][ T1943] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9214'. [ 1946.890131][ T1947] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9217'. [ 1946.904368][ T1944] netlink: 'syz.2.9216': attribute type 29 has an invalid length. [ 1947.162523][ T1961] netlink: 'syz.3.9220': attribute type 21 has an invalid length. [ 1947.167635][ T1960] FAULT_INJECTION: forcing a failure. [ 1947.167635][ T1960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1947.170574][ T1961] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9220'. [ 1947.204437][ T1961] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9220'. [ 1947.206899][ T1960] CPU: 0 PID: 1960 Comm: syz.0.9221 Not tainted syzkaller #0 [ 1947.217785][ T1961] netlink: 'syz.3.9220': attribute type 10 has an invalid length. [ 1947.220855][ T1960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1947.220870][ T1960] Call Trace: [ 1947.220879][ T1960] [ 1947.220887][ T1960] dump_stack_lvl+0x18c/0x250 [ 1947.228968][ T1961] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9220'. [ 1947.238794][ T1960] ? show_regs_print_info+0x20/0x20 [ 1947.238834][ T1960] ? load_image+0x420/0x420 [ 1947.238857][ T1960] ? __lock_acquire+0x7d40/0x7d40 [ 1947.238877][ T1960] ? snprintf+0xe9/0x140 [ 1947.243932][ T1961] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1947.245101][ T1960] should_fail_ex+0x39d/0x4d0 [ 1947.245139][ T1960] _copy_to_user+0x2f/0xa0 [ 1947.245159][ T1960] simple_read_from_buffer+0xe7/0x150 [ 1947.245187][ T1960] proc_fail_nth_read+0x1e8/0x260 [ 1947.245210][ T1960] ? proc_fault_inject_write+0x360/0x360 [ 1947.245232][ T1960] ? fsnotify_perm+0x271/0x5e0 [ 1947.245254][ T1960] ? proc_fault_inject_write+0x360/0x360 [ 1947.245273][ T1960] vfs_read+0x28b/0x970 [ 1947.245300][ T1960] ? kernel_read+0x1e0/0x1e0 [ 1947.245321][ T1960] ? __fget_files+0x28/0x4b0 [ 1947.245340][ T1960] ? __fget_files+0x28/0x4b0 [ 1947.245362][ T1960] ? __fget_files+0x43d/0x4b0 [ 1947.245388][ T1960] ? __fdget_pos+0x2a3/0x330 [ 1947.245405][ T1960] ? ksys_read+0x75/0x260 [ 1947.245426][ T1960] ksys_read+0x150/0x260 [ 1947.245449][ T1960] ? vfs_write+0x990/0x990 [ 1947.245473][ T1960] ? lockdep_hardirqs_on+0x98/0x150 [ 1947.245496][ T1960] do_syscall_64+0x55/0xa0 [ 1947.245510][ T1960] ? clear_bhb_loop+0x40/0x90 [ 1947.383473][ T1960] ? clear_bhb_loop+0x40/0x90 [ 1947.388159][ T1960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1947.394059][ T1960] RIP: 0033:0x7fcda4b5d60e [ 1947.398483][ T1960] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1947.418177][ T1960] RSP: 002b:00007fcda5ae2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1947.426611][ T1960] RAX: ffffffffffffffda RBX: 00007fcda5ae36c0 RCX: 00007fcda4b5d60e [ 1947.434612][ T1960] RDX: 000000000000000f RSI: 00007fcda5ae30a0 RDI: 0000000000000005 [ 1947.442596][ T1960] RBP: 00007fcda5ae3090 R08: 0000000000000000 R09: 0000000000000000 [ 1947.450589][ T1960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1947.458579][ T1960] R13: 00007fcda4e16128 R14: 00007fcda4e16090 R15: 00007ffcda506878 [ 1947.466618][ T1960] [ 1950.880720][ T1976] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.9228'. [ 1950.968395][ T1974] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 1951.153093][ T1981] netlink: 'syz.1.9229': attribute type 29 has an invalid length. [ 1951.176549][ T1981] netlink: 'syz.1.9229': attribute type 29 has an invalid length. [ 1951.197589][ T1981] netlink: 'syz.1.9229': attribute type 29 has an invalid length. [ 1951.250107][ T1983] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9231'. [ 1951.378693][ T1986] validate_nla: 1 callbacks suppressed [ 1951.378712][ T1986] netlink: 'syz.2.9232': attribute type 29 has an invalid length. [ 1951.430852][ T1986] netlink: 'syz.2.9232': attribute type 29 has an invalid length. [ 1951.462424][ T1987] netlink: 'syz.2.9232': attribute type 29 has an invalid length. [ 1951.511630][ T1986] netlink: 'syz.2.9232': attribute type 29 has an invalid length. [ 1951.549676][ T1986] netlink: 'syz.2.9232': attribute type 29 has an invalid length. [ 1951.578517][ T1989] netlink: 'syz.0.9233': attribute type 3 has an invalid length. [ 1951.601936][ T1989] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.9233'. [ 1952.121305][ T1999] netlink: 'syz.0.9235': attribute type 29 has an invalid length. [ 1952.154733][ T1999] netlink: 'syz.0.9235': attribute type 29 has an invalid length. [ 1952.178114][ T2000] netlink: 'syz.0.9235': attribute type 29 has an invalid length. [ 1952.199026][ T2000] netlink: 'syz.0.9235': attribute type 29 has an invalid length. [ 1953.013850][ T2019] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9243'. [ 1953.063851][ T2025] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9244'. [ 1953.163773][ T2029] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9248'. [ 1953.192161][ T2029] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9248'. [ 1953.229985][ T2029] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9248'. [ 1954.825599][ T2056] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9256'. [ 1955.063124][ T2062] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9257'. [ 1955.627882][ T2069] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9260'. [ 1956.263791][ T2083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9265'. [ 1957.155578][ T2099] validate_nla: 22 callbacks suppressed [ 1957.155596][ T2099] netlink: 'syz.0.9279': attribute type 29 has an invalid length. [ 1957.173475][ T2099] netlink: 'syz.0.9279': attribute type 29 has an invalid length. [ 1957.190511][ T2097] netlink: 'syz.1.9271': attribute type 3 has an invalid length. [ 1957.202384][ T2097] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.9271'. [ 1957.206814][ T2102] netlink: 'syz.0.9279': attribute type 29 has an invalid length. [ 1957.251413][ T2099] netlink: 'syz.0.9279': attribute type 29 has an invalid length. [ 1958.145248][ T2116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9276'. [ 1958.300947][ T2120] netlink: 'syz.2.9281': attribute type 10 has an invalid length. [ 1958.329127][ T2120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9281'. [ 1958.382378][ T2120] ipvlan1: entered promiscuous mode [ 1958.432142][ T2120] ipvlan1: entered allmulticast mode [ 1958.459570][ T2120] veth0_vlan: entered allmulticast mode [ 1958.483796][ T2120] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1958.502607][ T2117] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9280'. [ 1958.549018][ T2117] bridge_slave_1: default FDB implementation only supports local addresses [ 1959.430224][ T2141] netlink: 'syz.1.9285': attribute type 29 has an invalid length. [ 1959.465341][ T2141] netlink: 'syz.1.9285': attribute type 29 has an invalid length. [ 1959.498590][ T2146] netlink: 'syz.1.9285': attribute type 29 has an invalid length. [ 1959.530530][ T2141] netlink: 'syz.1.9285': attribute type 29 has an invalid length. [ 1959.876370][ T2156] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 1959.953287][ T2158] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9292'. [ 1960.091624][ T2162] syzkaller0: entered promiscuous mode [ 1960.109717][ T2162] syzkaller0: entered allmulticast mode [ 1962.464139][ T2185] validate_nla: 5 callbacks suppressed [ 1962.464151][ T2185] netlink: 'syz.1.9301': attribute type 29 has an invalid length. [ 1962.529730][ T2193] netlink: 'syz.1.9302': attribute type 3 has an invalid length. [ 1962.538131][ T2193] netlink: 'syz.1.9302': attribute type 4 has an invalid length. [ 1962.546016][ T2193] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.9302'. [ 1962.600836][ T2195] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9303'. [ 1963.008052][ T2211] netlink: 'syz.3.9308': attribute type 21 has an invalid length. [ 1963.046541][ T2211] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9308'. [ 1966.081431][ T2216] netlink: 'syz.2.9310': attribute type 29 has an invalid length. [ 1966.093684][ T2219] FAULT_INJECTION: forcing a failure. [ 1966.093684][ T2219] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.146271][ T2218] FAULT_INJECTION: forcing a failure. [ 1966.146271][ T2218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1966.163391][ T2216] netlink: 'syz.2.9310': attribute type 29 has an invalid length. [ 1966.172337][ T2219] CPU: 0 PID: 2219 Comm: syz.3.9312 Not tainted syzkaller #0 [ 1966.179758][ T2219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1966.189838][ T2219] Call Trace: [ 1966.193132][ T2219] [ 1966.196071][ T2219] dump_stack_lvl+0x18c/0x250 [ 1966.200781][ T2219] ? show_regs_print_info+0x20/0x20 [ 1966.205980][ T2219] ? load_image+0x420/0x420 [ 1966.210486][ T2219] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1966.216492][ T2219] ? __asan_memset+0x22/0x40 [ 1966.221112][ T2219] should_fail_ex+0x39d/0x4d0 [ 1966.225816][ T2219] should_failslab+0x9/0x20 [ 1966.230351][ T2219] slab_pre_alloc_hook+0x59/0x310 [ 1966.235396][ T2219] ? __debug_object_init+0xec/0x450 [ 1966.240619][ T2219] kmem_cache_alloc+0x5a/0x2d0 [ 1966.245402][ T2219] ? slab_build_skb+0x2b/0x3f0 [ 1966.250187][ T2219] slab_build_skb+0x2b/0x3f0 [ 1966.254796][ T2219] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 1966.260187][ T2219] ? __fget_files+0x28/0x4b0 [ 1966.264794][ T2219] ? __fget_files+0x28/0x4b0 [ 1966.269411][ T2219] ? __fget_files+0x43d/0x4b0 [ 1966.274117][ T2219] ? cpu_online+0x60/0x60 [ 1966.278466][ T2219] bpf_prog_test_run+0x321/0x390 [ 1966.283418][ T2219] __sys_bpf+0x49d/0x890 [ 1966.287675][ T2219] ? bpf_link_show_fdinfo+0x390/0x390 [ 1966.293071][ T2219] ? lock_chain_count+0x20/0x20 [ 1966.297944][ T2219] __x64_sys_bpf+0x7c/0x90 [ 1966.302373][ T2219] do_syscall_64+0x55/0xa0 [ 1966.306798][ T2219] ? clear_bhb_loop+0x40/0x90 [ 1966.311497][ T2219] ? clear_bhb_loop+0x40/0x90 [ 1966.316192][ T2219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1966.322098][ T2219] RIP: 0033:0x7f371cb9cdd9 [ 1966.326554][ T2219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1966.346185][ T2219] RSP: 002b:00007f371da68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1966.354621][ T2219] RAX: ffffffffffffffda RBX: 00007f371ce15fa0 RCX: 00007f371cb9cdd9 [ 1966.362611][ T2219] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1966.370592][ T2219] RBP: 00007f371da68090 R08: 0000000000000000 R09: 0000000000000000 [ 1966.378629][ T2219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1966.386616][ T2219] R13: 00007f371ce16038 R14: 00007f371ce15fa0 R15: 00007ffc2b16c2e8 [ 1966.394609][ T2219] [ 1966.397654][ T2218] CPU: 1 PID: 2218 Comm: syz.0.9311 Not tainted syzkaller #0 [ 1966.405058][ T2218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1966.415123][ T2218] Call Trace: [ 1966.418399][ T2218] [ 1966.421326][ T2218] dump_stack_lvl+0x18c/0x250 [ 1966.426013][ T2218] ? show_regs_print_info+0x20/0x20 [ 1966.431211][ T2218] ? load_image+0x420/0x420 [ 1966.435712][ T2218] ? __lock_acquire+0x7d40/0x7d40 [ 1966.440737][ T2218] ? snprintf+0xe9/0x140 [ 1966.444980][ T2218] should_fail_ex+0x39d/0x4d0 [ 1966.449665][ T2218] _copy_to_user+0x2f/0xa0 [ 1966.454081][ T2218] simple_read_from_buffer+0xe7/0x150 [ 1966.459462][ T2218] proc_fail_nth_read+0x1e8/0x260 [ 1966.464486][ T2218] ? proc_fault_inject_write+0x360/0x360 [ 1966.470120][ T2218] ? fsnotify_perm+0x271/0x5e0 [ 1966.474881][ T2218] ? proc_fault_inject_write+0x360/0x360 [ 1966.480518][ T2218] vfs_read+0x28b/0x970 [ 1966.484683][ T2218] ? kernel_read+0x1e0/0x1e0 [ 1966.489271][ T2218] ? __fget_files+0x28/0x4b0 [ 1966.493858][ T2218] ? __fget_files+0x28/0x4b0 [ 1966.498445][ T2218] ? __fget_files+0x43d/0x4b0 [ 1966.503123][ T2218] ? __fdget_pos+0x2a3/0x330 [ 1966.507723][ T2218] ? ksys_read+0x75/0x260 [ 1966.512050][ T2218] ksys_read+0x150/0x260 [ 1966.516287][ T2218] ? vfs_write+0x990/0x990 [ 1966.520788][ T2218] ? lockdep_hardirqs_on+0x98/0x150 [ 1966.525984][ T2218] do_syscall_64+0x55/0xa0 [ 1966.530394][ T2218] ? clear_bhb_loop+0x40/0x90 [ 1966.535071][ T2218] ? clear_bhb_loop+0x40/0x90 [ 1966.539747][ T2218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1966.545639][ T2218] RIP: 0033:0x7fcda4b5d60e [ 1966.550069][ T2218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1966.569768][ T2218] RSP: 002b:00007fcda5b03fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1966.578181][ T2218] RAX: ffffffffffffffda RBX: 00007fcda5b046c0 RCX: 00007fcda4b5d60e [ 1966.586152][ T2218] RDX: 000000000000000f RSI: 00007fcda5b040a0 RDI: 000000000000000a [ 1966.594208][ T2218] RBP: 00007fcda5b04090 R08: 0000000000000000 R09: 0000000000000000 [ 1966.602171][ T2218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1966.610134][ T2218] R13: 00007fcda4e16038 R14: 00007fcda4e15fa0 R15: 00007ffcda506878 [ 1966.618113][ T2218] [ 1966.637030][ T2220] netlink: 'syz.2.9310': attribute type 29 has an invalid length. [ 1966.647063][ T2216] netlink: 'syz.2.9310': attribute type 29 has an invalid length. [ 1966.760608][ T2227] netlink: 'syz.3.9313': attribute type 3 has an invalid length. [ 1966.772835][ T2227] netlink: 'syz.3.9313': attribute type 4 has an invalid length. [ 1966.782829][ T2227] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.9313'. [ 1966.927557][ T2232] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9316'. [ 1967.258868][ T2246] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9321'. [ 1970.237264][ T2250] validate_nla: 5 callbacks suppressed [ 1970.237303][ T2250] netlink: 'syz.2.9322': attribute type 3 has an invalid length. [ 1970.307814][ T2250] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9322'. [ 1970.414859][ T2255] netlink: 184 bytes leftover after parsing attributes in process `syz.1.9324'. [ 1970.474510][ T2255] netlink: 'syz.1.9324': attribute type 10 has an invalid length. [ 1970.509205][ T2255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9324'. [ 1970.713604][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1970.714656][ T2262] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9327'. [ 1970.770681][ T2264] netlink: 'syz.1.9328': attribute type 3 has an invalid length. [ 1970.800473][ T2264] netlink: 'syz.1.9328': attribute type 4 has an invalid length. [ 1970.838878][ T2264] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.9328'. [ 1970.844853][ T2266] netlink: 'syz.2.9329': attribute type 17 has an invalid length. [ 1970.868709][ T2266] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9329'. [ 1970.913054][ T2266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1970.952857][ T2270] netlink: 'syz.3.9331': attribute type 3 has an invalid length. [ 1970.961708][ T2270] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9331'. [ 1971.255015][ T2283] netlink: 'syz.1.9332': attribute type 21 has an invalid length. [ 1972.064234][ T2292] __nla_validate_parse: 3 callbacks suppressed [ 1972.064256][ T2292] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9336'. [ 1972.096511][ T2292] netlink: 'syz.2.9336': attribute type 10 has an invalid length. [ 1972.104953][ T2292] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9336'. [ 1972.115338][ T2292] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1974.851821][ T2294] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9337'. [ 1975.061037][ T2299] netlink: 'syz.1.9340': attribute type 3 has an invalid length. [ 1975.102575][ T2299] netlink: 'syz.1.9340': attribute type 4 has an invalid length. [ 1975.137068][ T2298] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.9339'. [ 1975.150965][ T2302] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9341'. [ 1975.160767][ T2299] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.9340'. [ 1975.329502][ T2308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9342'. [ 1976.391724][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.398398][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1979.043315][ T2332] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9349'. [ 1979.059656][ T2334] validate_nla: 2 callbacks suppressed [ 1979.059672][ T2334] netlink: 'syz.2.9350': attribute type 3 has an invalid length. [ 1979.095538][ T2334] netlink: 'syz.2.9350': attribute type 4 has an invalid length. [ 1979.133361][ T2334] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.9350'. [ 1979.245936][ T2337] netlink: 'syz.0.9351': attribute type 3 has an invalid length. [ 1979.274183][ T2337] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.9351'. [ 1979.532347][ T2350] netlink: 'syz.3.9355': attribute type 3 has an invalid length. [ 1979.540698][ T2350] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9355'. [ 1980.241661][ T2357] netlink: 'syz.0.9354': attribute type 21 has an invalid length. [ 1980.252706][ T2357] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9354'. [ 1980.262203][ T2358] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9357'. [ 1980.276147][ T2362] netlink: 'syz.2.9357': attribute type 10 has an invalid length. [ 1980.284870][ T2362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9357'. [ 1980.295858][ T2362] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1980.324778][ T2355] netlink: 'syz.3.9356': attribute type 21 has an invalid length. [ 1980.453964][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1980.457734][ T2373] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9360'. [ 1981.017366][ T2383] netlink: 'syz.2.9362': attribute type 3 has an invalid length. [ 1981.039818][ T2383] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9362'. [ 1981.233412][ T2389] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9363'. [ 1981.267670][ T2389] netlink: 'syz.3.9363': attribute type 10 has an invalid length. [ 1981.298624][ T2389] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1981.787168][ T2397] netlink: 'syz.3.9367': attribute type 21 has an invalid length. [ 1982.522017][ T2413] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1982.562579][ T655] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1982.562619][ T655] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1984.608031][ T2451] __nla_validate_parse: 7 callbacks suppressed [ 1984.608048][ T2451] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9381'. [ 1984.738049][ T2458] netlink: 184 bytes leftover after parsing attributes in process `syz.1.9382'. [ 1984.779885][ T2458] validate_nla: 4 callbacks suppressed [ 1984.779902][ T2458] netlink: 'syz.1.9382': attribute type 10 has an invalid length. [ 1984.815170][ T2458] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9382'. [ 1984.828717][ T2460] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9383'. [ 1985.030798][ T2468] netlink: 'syz.1.9385': attribute type 3 has an invalid length. [ 1985.043839][ T2468] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.9385'. [ 1985.612292][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1985.615222][ T2490] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9390'. [ 1986.369735][ T2505] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9395'. [ 1986.605096][ T2514] netlink: 'syz.2.9397': attribute type 3 has an invalid length. [ 1986.633024][ T2514] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9397'. [ 1986.784752][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1986.785913][ T2526] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9401'. [ 1987.336432][ T2538] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9403'. [ 1987.339704][ T655] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1987.345570][ T655] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1987.442327][ T2538] netlink: 'syz.2.9403': attribute type 10 has an invalid length. [ 1987.494700][ T2538] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1989.204655][ T2578] netlink: 'syz.1.9413': attribute type 29 has an invalid length. [ 1989.215536][ T2578] netlink: 'syz.1.9413': attribute type 29 has an invalid length. [ 1989.219165][ T2574] netlink: 'syz.3.9411': attribute type 3 has an invalid length. [ 1989.230814][ T2579] netlink: 'syz.1.9413': attribute type 29 has an invalid length. [ 1989.282029][ T2585] netlink: 'syz.0.9414': attribute type 10 has an invalid length. [ 1989.698754][ T2594] __nla_validate_parse: 7 callbacks suppressed [ 1989.698876][ T2594] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9418'. [ 1989.937328][ T2605] netlink: 'syz.2.9420': attribute type 10 has an invalid length. [ 1990.071287][ T2605] hsr0: left promiscuous mode [ 1990.105635][ T2605] hsr0: entered promiscuous mode [ 1990.111462][ T2605] hsr0: entered allmulticast mode [ 1990.117414][ T2605] hsr_slave_0: entered allmulticast mode [ 1990.123479][ T2605] hsr_slave_1: entered allmulticast mode [ 1990.131357][ T2605] team0: Port device hsr0 added [ 1990.547746][ T2619] netlink: 'syz.1.9424': attribute type 29 has an invalid length. [ 1990.570114][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1990.571242][ T2623] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9425'. [ 1990.641707][ T2619] netlink: 'syz.1.9424': attribute type 29 has an invalid length. [ 1990.674697][ T2625] netlink: 'syz.0.9426': attribute type 3 has an invalid length. [ 1990.692881][ T2625] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.9426'. [ 1990.706964][ T2620] netlink: 'syz.1.9424': attribute type 29 has an invalid length. [ 1990.715456][ T2626] netlink: 'syz.1.9424': attribute type 29 has an invalid length. [ 1990.850163][ T2635] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9427'. [ 1990.909794][ T2635] netlink: 'syz.2.9427': attribute type 10 has an invalid length. [ 1990.927646][ T2635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9427'. [ 1990.932285][ T2637] netlink: 'syz.0.9428': attribute type 29 has an invalid length. [ 1990.965418][ T2635] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1991.016276][ T2637] netlink: 'syz.0.9428': attribute type 29 has an invalid length. [ 1991.026081][ T2638] netlink: 'syz.0.9428': attribute type 29 has an invalid length. [ 1991.319935][ T2649] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9431'. [ 1991.626564][ T2658] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9434'. [ 1991.718185][ T2658] netlink: 32707 bytes leftover after parsing attributes in process `syz.1.9434'. [ 1991.821502][ T655] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1991.823369][ T2664] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9435'. [ 1991.933238][ T2666] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.9436'. [ 1992.013791][ T2670] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1992.319037][ T2683] FAULT_INJECTION: forcing a failure. [ 1992.319037][ T2683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1992.335263][ T2683] CPU: 1 PID: 2683 Comm: syz.0.9442 Not tainted syzkaller #0 [ 1992.342693][ T2683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1992.352776][ T2683] Call Trace: [ 1992.356083][ T2683] [ 1992.359039][ T2683] dump_stack_lvl+0x18c/0x250 [ 1992.363755][ T2683] ? show_regs_print_info+0x20/0x20 [ 1992.368993][ T2683] ? load_image+0x420/0x420 [ 1992.373536][ T2683] ? __might_fault+0xaa/0x120 [ 1992.378240][ T2683] ? __lock_acquire+0x7d40/0x7d40 [ 1992.383308][ T2683] should_fail_ex+0x39d/0x4d0 [ 1992.388026][ T2683] _copy_from_user+0x2f/0xe0 [ 1992.392846][ T2683] sctp_setsockopt+0x19e/0x11e0 [ 1992.397748][ T2683] ? sock_common_recvmsg+0x190/0x190 [ 1992.403083][ T2683] do_sock_setsockopt+0x175/0x1a0 [ 1992.408138][ T2683] ? __fdget+0x180/0x210 [ 1992.412681][ T2683] __x64_sys_setsockopt+0x182/0x200 [ 1992.417921][ T2683] do_syscall_64+0x55/0xa0 [ 1992.422365][ T2683] ? clear_bhb_loop+0x40/0x90 [ 1992.427070][ T2683] ? clear_bhb_loop+0x40/0x90 [ 1992.431764][ T2683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1992.437688][ T2683] RIP: 0033:0x7fcda4b9cdd9 [ 1992.442097][ T2683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1992.461702][ T2683] RSP: 002b:00007fcda5b04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1992.470129][ T2683] RAX: ffffffffffffffda RBX: 00007fcda4e15fa0 RCX: 00007fcda4b9cdd9 [ 1992.478112][ T2683] RDX: 0000000000000007 RSI: 0000000000000084 RDI: 0000000000000004 [ 1992.486099][ T2683] RBP: 00007fcda5b04090 R08: 0000000000000004 R09: 0000000000000000 [ 1992.494069][ T2683] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 1992.502034][ T2683] R13: 00007fcda4e16038 R14: 00007fcda4e15fa0 R15: 00007ffcda506878 [ 1992.510043][ T2683] [ 1992.724683][ T655] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1992.724723][ T655] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1992.949174][ T2704] mac80211_hwsim hwsim44 wlan1: left allmulticast mode [ 1992.961702][ T2704] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 1992.969432][ T2704] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 1992.983130][ T2704] team0: Port device wlan1 added [ 1992.989482][ T2703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1994.721012][ T2717] __nla_validate_parse: 6 callbacks suppressed [ 1994.721059][ T2717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9449'. [ 1994.743324][ T2717] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1994.893360][ T2729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9456'. [ 1999.593128][ T2757] validate_nla: 20 callbacks suppressed [ 1999.593169][ T2757] netlink: 'syz.2.9460': attribute type 3 has an invalid length. [ 1999.633567][ T2757] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9460'. [ 1999.739981][ T2761] netlink: 184 bytes leftover after parsing attributes in process `syz.1.9462'. [ 1999.858061][ T2761] netlink: 'syz.1.9462': attribute type 10 has an invalid length. [ 1999.877339][ T2761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9462'. [ 2001.119726][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2001.130765][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2001.140065][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2001.150801][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2001.160571][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2001.168193][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2001.460176][ T2774] chnl_net:caif_netlink_parms(): no params data found [ 2001.630863][ T2774] bridge0: port 1(bridge_slave_0) entered blocking state [ 2001.638564][ T2774] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.645895][ T2774] bridge_slave_0: entered allmulticast mode [ 2001.654380][ T2774] bridge_slave_0: entered promiscuous mode [ 2001.668490][ T2774] bridge0: port 2(bridge_slave_1) entered blocking state [ 2001.676046][ T2774] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.683507][ T2774] bridge_slave_1: entered allmulticast mode [ 2001.691999][ T2774] bridge_slave_1: entered promiscuous mode [ 2001.738464][ T2774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2001.752896][ T2774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2001.806541][ T2774] team0: Port device team_slave_0 added [ 2001.819619][ T2774] team0: Port device team_slave_1 added [ 2001.863579][ T2774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2001.870995][ T2774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2001.899272][ T2774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2001.915169][ T2774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2001.923064][ T2774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2001.951091][ T2774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2003.090115][ T2774] hsr_slave_0: entered promiscuous mode [ 2003.141200][ T2774] hsr_slave_1: entered promiscuous mode [ 2003.264861][ T2794] netlink: 'syz.3.9467': attribute type 10 has an invalid length. [ 2003.286872][ T655] Bluetooth: hci4: command tx timeout [ 2003.319429][ T2794] hsr0: entered promiscuous mode [ 2003.338850][ T2794] hsr0: entered allmulticast mode [ 2003.348978][ T2794] hsr_slave_0: entered allmulticast mode [ 2003.365529][ T2794] hsr_slave_1: entered allmulticast mode [ 2003.376398][ T2794] team0: Port device hsr0 added [ 2005.336895][ T655] Bluetooth: hci4: command tx timeout [ 2006.986378][ T2774] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.074652][ T2805] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9470'. [ 2007.091323][ T2811] netlink: 'syz.0.9470': attribute type 10 has an invalid length. [ 2007.105361][ T2816] netlink: 'syz.2.9472': attribute type 3 has an invalid length. [ 2007.107141][ T2811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9470'. [ 2007.140480][ T2816] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9472'. [ 2007.185616][ T2774] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.284133][ T2774] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.315469][ T2825] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9475'. [ 2007.325618][ T2832] netlink: 'syz.0.9475': attribute type 10 has an invalid length. [ 2007.333707][ T2832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9475'. [ 2007.389634][ T2774] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.417283][ T655] Bluetooth: hci4: command tx timeout [ 2007.447429][ T2834] netlink: 'syz.2.9477': attribute type 21 has an invalid length. [ 2007.455899][ T2834] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9477'. [ 2007.705922][ T2774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2009.496936][ T655] Bluetooth: hci4: command tx timeout [ 2010.630761][ T2774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2010.763259][ T2774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2010.825432][ T2774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2010.898174][ T2859] netlink: 'syz.2.9483': attribute type 3 has an invalid length. [ 2010.928192][ T2859] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9483'. [ 2011.075776][ T2774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2011.123894][ T2774] 8021q: adding VLAN 0 to HW filter on device team0 [ 2011.182616][ T857] bridge0: port 1(bridge_slave_0) entered blocking state [ 2011.189965][ T857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2011.390357][T11396] bridge0: port 2(bridge_slave_1) entered blocking state [ 2011.397658][T11396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2011.785256][ T2868] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9486'. [ 2011.814828][ T2868] netlink: 'syz.0.9486': attribute type 10 has an invalid length. [ 2011.835607][ T2868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9486'. [ 2011.996313][ T2870] netlink: 'syz.2.9487': attribute type 21 has an invalid length. [ 2012.039025][ T2870] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9487'. [ 2015.506265][ T2774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2018.482458][ T2774] veth0_vlan: entered promiscuous mode [ 2018.531147][ T2774] veth1_vlan: entered promiscuous mode [ 2018.544126][ T2905] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9495'. [ 2018.580814][ T2905] netlink: 'syz.0.9495': attribute type 10 has an invalid length. [ 2018.588900][ T2905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9495'. [ 2018.640732][ T2774] veth0_macvtap: entered promiscuous mode [ 2018.691258][ T2774] veth1_macvtap: entered promiscuous mode [ 2018.732551][ T2774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2018.775325][ T2774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2018.833221][ T2774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2018.906833][ T2774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2018.985055][ T2774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2019.074608][ T2909] netlink: 'syz.2.9497': attribute type 21 has an invalid length. [ 2019.215025][ T2909] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9497'. [ 2019.763886][ T2774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2019.795981][ T2774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.816510][ T2774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2019.831499][ T2774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.843461][ T2774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2019.949786][ T2774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2019.960144][ T2774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2019.970331][ T2774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.000385][ T2774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.447865][ T2937] netlink: zone id is out of range [ 2023.490325][ T2937] netlink: set zone limit has 8 unknown bytes [ 2023.823930][T12944] bridge0: port 3(team0) entered disabled state [ 2023.898188][T12944] bridge_slave_1: left allmulticast mode [ 2023.903910][T12944] bridge_slave_1: left promiscuous mode [ 2023.932984][T12944] bridge0: port 2(bridge_slave_1) entered disabled state [ 2023.968168][T12944] bridge_slave_0: left allmulticast mode [ 2023.973902][T12944] bridge_slave_0: left promiscuous mode [ 2023.994072][T12944] bridge0: port 1(bridge_slave_0) entered disabled state [ 2024.095037][ T2946] netlink: 'syz.3.9507': attribute type 29 has an invalid length. [ 2024.105315][T12944] veth0_macvtap: left promiscuous mode [ 2024.113563][T12944] veth1_vlan: left promiscuous mode [ 2024.121226][T12944] veth0_vlan: left promiscuous mode [ 2024.232765][ T655] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 2024.242817][ T655] Bluetooth: hci3: unexpected event 0x1c length: 151 > 5 [ 2024.349737][T12944] geneve1 (unregistering): left promiscuous mode [ 2024.377294][T12944] geneve1 (unregistering): left allmulticast mode [ 2024.391996][T12944] team0 (unregistering): Port device geneve1 removed [ 2024.556195][ T2957] netlink: 'syz.0.9510': attribute type 29 has an invalid length. [ 2025.265188][T12944] team_slave_1 (unregistering): left promiscuous mode [ 2025.272458][T12944] team_slave_1 (unregistering): left allmulticast mode [ 2025.283543][T12944] team0 (unregistering): Port device team_slave_1 removed [ 2025.345233][T12944] team_slave_0 (unregistering): left promiscuous mode [ 2025.352326][T12944] team_slave_0 (unregistering): left allmulticast mode [ 2025.364774][T12944] team0 (unregistering): Port device team_slave_0 removed [ 2025.852866][ T857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2025.856774][ T2946] netlink: 'syz.3.9507': attribute type 29 has an invalid length. [ 2025.861235][ T857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2025.876451][ T2952] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9509'. [ 2025.902795][ T2957] netlink: 'syz.0.9510': attribute type 29 has an invalid length. [ 2026.002970][ T1873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2026.024577][ T1873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2029.364767][ T2980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9466'. [ 2029.414113][ T2980] ¿: renamed from vlan0 (while UP) [ 2029.786708][ T2987] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9517'. [ 2029.795955][ T2989] netlink: 'syz.2.9517': attribute type 10 has an invalid length. [ 2029.804460][ T2989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9517'. [ 2029.815233][ T2989] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 2030.059436][ T2993] netlink: 'syz.2.9518': attribute type 21 has an invalid length. [ 2030.107755][ T2995] netlink: 'syz.3.9520': attribute type 29 has an invalid length. [ 2030.120384][ T2995] netlink: 'syz.3.9520': attribute type 29 has an invalid length. [ 2030.162230][ T2995] netlink: 'syz.3.9520': attribute type 29 has an invalid length. [ 2030.172581][ T2995] netlink: 'syz.3.9520': attribute type 29 has an invalid length. [ 2030.783701][ T3002] netlink: 'syz.0.9519': attribute type 21 has an invalid length. [ 2030.806291][ T3002] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9519'. [ 2031.234221][ T3004] netlink: 'syz.1.9521': attribute type 10 has an invalid length. [ 2031.243637][ T3004] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9521'. [ 2031.254725][ T3004] hsr0: entered promiscuous mode [ 2031.262784][ T3004] bridge0: port 3(hsr0) entered blocking state [ 2031.270836][ T3004] bridge0: port 3(hsr0) entered disabled state [ 2031.279785][ T3004] hsr0: entered allmulticast mode [ 2031.286349][ T3004] hsr_slave_0: entered allmulticast mode [ 2031.302198][ T3004] hsr_slave_1: entered allmulticast mode [ 2031.358607][ T3004] bridge0: port 3(hsr0) entered blocking state [ 2031.366850][ T3004] bridge0: port 3(hsr0) entered forwarding state [ 2034.673729][ T3016] netlink: 'syz.2.9526': attribute type 29 has an invalid length. [ 2034.691562][ T3016] netlink: 'syz.2.9526': attribute type 29 has an invalid length. [ 2034.710295][ T3022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9527'. [ 2035.937571][ T3045] validate_nla: 3 callbacks suppressed [ 2035.937589][ T3045] netlink: 'syz.1.9531': attribute type 29 has an invalid length. [ 2035.956277][ T3045] netlink: 'syz.1.9531': attribute type 29 has an invalid length. [ 2035.979561][ T3045] netlink: 'syz.1.9531': attribute type 29 has an invalid length. [ 2036.020816][ T3045] netlink: 'syz.1.9531': attribute type 29 has an invalid length. [ 2036.265717][ T3055] netlink: 'syz.0.9537': attribute type 10 has an invalid length. [ 2036.276752][ T3055] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9537'. [ 2036.289340][ T3055] hsr0: entered promiscuous mode [ 2037.820501][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.829366][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.239872][ T3059] netlink: 'syz.3.9539': attribute type 10 has an invalid length. [ 2039.263990][ T3059] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9539'. [ 2039.291745][ T655] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 2039.291791][ T655] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 2039.409690][ T3062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9541'. [ 2039.784740][ T3070] netlink: 'syz.0.9542': attribute type 29 has an invalid length. [ 2041.903748][ T3070] netlink: 'syz.0.9542': attribute type 29 has an invalid length. [ 2042.146979][ T3084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9546'. [ 2042.170505][ T3085] netlink: 'syz.3.9547': attribute type 29 has an invalid length. [ 2042.197145][ T3085] netlink: 'syz.3.9547': attribute type 29 has an invalid length. [ 2042.228288][ T3088] netlink: 'syz.3.9547': attribute type 29 has an invalid length. [ 2042.278606][ T3085] netlink: 'syz.3.9547': attribute type 29 has an invalid length. [ 2042.681735][ T3099] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9552'. [ 2046.279964][ T3114] netlink: 'syz.1.9556': attribute type 21 has an invalid length. [ 2046.303975][ T3114] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9556'. [ 2046.341179][ T3115] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.9554'. [ 2046.363027][ T3115] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.9554'. [ 2046.388624][ T3110] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.9554'. [ 2046.408881][ T3115] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.9554'. [ 2046.630668][ T3123] netlink: 'syz.1.9559': attribute type 29 has an invalid length. [ 2046.753468][ T3110] syzkaller0: entered promiscuous mode [ 2046.762976][ T3110] syzkaller0: entered allmulticast mode [ 2046.839085][ T3123] netlink: 'syz.1.9559': attribute type 29 has an invalid length. [ 2046.848116][ T3128] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9561'. [ 2047.024219][ T3136] netlink: 'syz.3.9562': attribute type 29 has an invalid length. [ 2049.178028][ T3129] netlink: 'syz.1.9559': attribute type 29 has an invalid length. [ 2049.186432][ T3136] netlink: 'syz.3.9562': attribute type 29 has an invalid length. [ 2049.375505][ T3148] netlink: 'syz.1.9564': attribute type 3 has an invalid length. [ 2049.392991][ T3148] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.9564'. [ 2052.884747][ T3168] netlink: 'syz.2.9569': attribute type 21 has an invalid length. [ 2052.934210][ T3168] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9569'. [ 2053.335804][ T3171] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9571'. [ 2053.373563][ T3174] netlink: 'syz.0.9572': attribute type 29 has an invalid length. [ 2053.392766][ T3174] netlink: 'syz.0.9572': attribute type 29 has an invalid length. [ 2053.414398][ T3174] netlink: 'syz.0.9572': attribute type 29 has an invalid length. [ 2053.436360][ T3174] netlink: 'syz.0.9572': attribute type 29 has an invalid length. [ 2053.507458][ T3181] netlink: 'syz.2.9573': attribute type 29 has an invalid length. [ 2053.515631][ T3181] netlink: 'syz.2.9573': attribute type 29 has an invalid length. [ 2053.529736][ T3181] netlink: 'syz.2.9573': attribute type 29 has an invalid length. [ 2053.539808][ T3181] netlink: 'syz.2.9573': attribute type 29 has an invalid length. [ 2053.548931][ T3181] netlink: 'syz.2.9573': attribute type 29 has an invalid length. [ 2054.432349][ T3192] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.9578'. [ 2057.985625][ T3210] validate_nla: 9 callbacks suppressed [ 2057.985645][ T3210] netlink: 'syz.2.9582': attribute type 21 has an invalid length. [ 2058.137991][ T3210] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9582'. [ 2058.199341][ T3209] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9584'. [ 2059.031120][ T3222] netlink: 'syz.0.9588': attribute type 29 has an invalid length. [ 2059.051674][ T3222] netlink: 'syz.0.9588': attribute type 29 has an invalid length. [ 2059.067635][ T3228] netlink: 'syz.0.9588': attribute type 29 has an invalid length. [ 2059.085761][ T3222] netlink: 'syz.0.9588': attribute type 29 has an invalid length. [ 2059.099897][ T3222] netlink: 'syz.0.9588': attribute type 29 has an invalid length. [ 2059.118321][ T3223] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.9585'. [ 2059.204723][ T3223] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.9585'. [ 2059.410074][ T3216] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.9585'. [ 2059.478046][ T3230] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.9585'. [ 2059.834477][ T3235] netlink: 'syz.3.9591': attribute type 3 has an invalid length. [ 2059.867283][ T3235] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9591'. [ 2059.868710][ T3216] syzkaller0: entered promiscuous mode [ 2059.899262][ T3216] syzkaller0: entered allmulticast mode [ 2060.175637][ T3242] netlink: 'syz.3.9593': attribute type 29 has an invalid length. [ 2062.543915][ T3242] netlink: 'syz.3.9593': attribute type 29 has an invalid length. [ 2062.560059][ T3252] netlink: 'syz.0.9594': attribute type 21 has an invalid length. [ 2062.568047][ T3252] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9594'. [ 2062.734821][ T3258] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9596'. [ 2063.008444][ T3259] validate_nla: 1 callbacks suppressed [ 2063.008462][ T3259] netlink: 'syz.0.9597': attribute type 29 has an invalid length. [ 2063.097323][ T3265] netlink: 'syz.0.9597': attribute type 29 has an invalid length. [ 2063.160098][ T3259] netlink: 'syz.0.9597': attribute type 29 has an invalid length. [ 2063.693657][ T3269] netlink: 'syz.1.9600': attribute type 3 has an invalid length. [ 2064.451669][ T3274] netlink: 'syz.3.9601': attribute type 3 has an invalid length. [ 2064.473923][ T3274] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9601'. [ 2064.544140][ T3277] netlink: 184 bytes leftover after parsing attributes in process `syz.1.9602'. [ 2064.586784][ T3277] netlink: 'syz.1.9602': attribute type 10 has an invalid length. [ 2064.594716][ T3277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9602'. [ 2064.605122][ T3277] batadv0: entered promiscuous mode [ 2064.611346][ T3277] batadv0: entered allmulticast mode [ 2064.618232][ T3277] bridge0: port 4(batadv0) entered blocking state [ 2064.624895][ T3277] bridge0: port 4(batadv0) entered disabled state [ 2064.638257][ T3277] bridge0: port 4(batadv0) entered blocking state [ 2064.644879][ T3277] bridge0: port 4(batadv0) entered forwarding state [ 2064.644894][ T3281] netlink: 'syz.2.9603': attribute type 29 has an invalid length. [ 2064.713318][ T3281] netlink: 'syz.2.9603': attribute type 29 has an invalid length. [ 2064.847592][ T3290] netlink: 'syz.3.9605': attribute type 21 has an invalid length. [ 2064.870790][ T3290] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9605'. [ 2064.895458][ T3286] netlink: 'syz.2.9603': attribute type 29 has an invalid length. [ 2064.980511][ T1873] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2064.990173][ T1873] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2065.445126][ T3300] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9608'. [ 2065.596518][ T3306] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9606'. [ 2065.624135][ T3306] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9606'. [ 2065.640471][ T3296] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9606'. [ 2065.651488][ T3306] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9606'. [ 2066.058152][ T3296] syzkaller0: entered promiscuous mode [ 2066.074932][ T3296] syzkaller0: entered allmulticast mode [ 2066.102438][ T3310] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9610'. [ 2066.409207][ T3318] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.9613'. [ 2069.081981][ T3323] validate_nla: 7 callbacks suppressed [ 2069.081996][ T3323] netlink: 'syz.3.9615': attribute type 21 has an invalid length. [ 2069.116715][ T3329] netlink: 'syz.0.9616': attribute type 21 has an invalid length. [ 2069.159778][ T3332] netlink: 'syz.1.9617': attribute type 29 has an invalid length. [ 2069.198090][ T3332] netlink: 'syz.1.9617': attribute type 29 has an invalid length. [ 2069.220217][ T3332] netlink: 'syz.1.9617': attribute type 29 has an invalid length. [ 2069.244128][ T3332] netlink: 'syz.1.9617': attribute type 29 has an invalid length. [ 2069.550810][ T3347] netlink: 'syz.3.9623': attribute type 29 has an invalid length. [ 2069.573987][ T3347] netlink: 'syz.3.9623': attribute type 29 has an invalid length. [ 2069.583692][ T3347] netlink: 'syz.3.9623': attribute type 29 has an invalid length. [ 2069.592843][ T3347] netlink: 'syz.3.9623': attribute type 29 has an invalid length. [ 2069.772388][ T3351] __nla_validate_parse: 3 callbacks suppressed [ 2069.772423][ T3351] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9625'. [ 2069.991058][ T3358] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9627'. [ 2070.349030][ T3364] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9628'. [ 2070.523800][ T3368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9630'. [ 2071.237855][ T3387] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.9636'. [ 2071.391043][ T655] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 2071.391080][ T655] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 2071.500901][ T3399] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9640'. [ 2071.698402][ T3407] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9642'. [ 2072.467197][ T3419] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9648'. [ 2072.566968][ T655] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 2072.723808][ T3428] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9652'. [ 2072.753524][ T3429] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9654'. [ 2072.785474][ T3428] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 2073.831569][ T655] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 2074.457276][ T3475] validate_nla: 14 callbacks suppressed [ 2074.457315][ T3475] netlink: 'syz.0.9668': attribute type 10 has an invalid length. [ 2074.488705][ T3479] netlink: 'syz.1.9670': attribute type 3 has an invalid length. [ 2074.595745][ T655] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 2074.657465][ T3484] netlink: 'syz.2.9671': attribute type 21 has an invalid length. [ 2075.119960][ T3490] __nla_validate_parse: 9 callbacks suppressed [ 2075.119976][ T3490] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.9675'. [ 2075.479989][ T3502] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9680'. [ 2075.516703][ T3499] netlink: 'syz.3.9679': attribute type 39 has an invalid length. [ 2075.598916][ T655] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 2075.601109][ T3511] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9683'. [ 2075.731424][ T3514] netlink: 'syz.2.9684': attribute type 3 has an invalid length. [ 2075.742060][ T3514] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9684'. [ 2075.917758][ T3519] netlink: 'syz.3.9686': attribute type 21 has an invalid length. [ 2075.925660][ T3519] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9686'. [ 2076.139262][ T3520] netlink: 'syz.1.9685': attribute type 21 has an invalid length. [ 2076.177013][ T3520] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9685'. [ 2076.884335][ T655] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 2076.892150][ T3535] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9693'. [ 2077.114369][ T3541] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.9694'. [ 2077.115334][ T3542] netlink: 'syz.1.9691': attribute type 16 has an invalid length. [ 2077.137134][ T3542] netlink: 'syz.1.9691': attribute type 3 has an invalid length. [ 2077.145046][ T3542] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9691'. [ 2077.215621][ T3544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9695'. [ 2077.707403][ T3555] netlink: 'syz.3.9699': attribute type 21 has an invalid length. [ 2078.248048][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2078.285868][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2078.301900][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2078.314650][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2078.328987][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2078.337501][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2078.386465][ T1868] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.563949][ T1868] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.403698][ T1868] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.444284][ T3558] chnl_net:caif_netlink_parms(): no params data found [ 2079.555039][ T1868] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.667611][ T3580] syzkaller0: entered promiscuous mode [ 2079.673139][ T3580] syzkaller0: entered allmulticast mode [ 2079.749535][ T3580] validate_nla: 2 callbacks suppressed [ 2079.749578][ T3580] netlink: 'syz.2.9704': attribute type 2 has an invalid length. [ 2079.789582][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.797329][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.804862][ T3558] bridge_slave_0: entered allmulticast mode [ 2079.813065][ T3558] bridge_slave_0: entered promiscuous mode [ 2079.822718][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 2079.830432][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.838029][ T3558] bridge_slave_1: entered allmulticast mode [ 2079.845315][ T3558] bridge_slave_1: entered promiscuous mode [ 2079.878675][ T3558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2079.892026][ T3558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2080.366444][ T3597] __nla_validate_parse: 5 callbacks suppressed [ 2080.366461][ T3597] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9710'. [ 2080.376949][ T655] Bluetooth: hci2: command tx timeout [ 2082.249985][ T3588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9707'. [ 2082.277247][ T3597] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9710'. [ 2082.386516][ T3558] team0: Port device team_slave_0 added [ 2082.409565][ T3558] team0: Port device team_slave_1 added [ 2082.433419][ T3604] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9711'. [ 2082.465752][ T655] Bluetooth: hci2: command tx timeout [ 2082.482252][ T3558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2082.494885][ T3607] netlink: 'syz.3.9713': attribute type 3 has an invalid length. [ 2082.506835][ T3558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2082.506905][ T3607] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9713'. [ 2082.546267][ T3558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2082.559962][ T3558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2082.569138][ T3558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2082.606951][ T3558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2082.974268][ T3558] hsr_slave_0: entered promiscuous mode [ 2082.987999][ T3558] hsr_slave_1: entered promiscuous mode [ 2082.997510][ T3558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2083.009787][ T3558] Cannot create hsr debugfs directory [ 2083.956957][ T3638] netlink: 'syz.1.9717': attribute type 21 has an invalid length. [ 2083.965531][ T3638] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9717'. [ 2084.196021][ T3652] netlink: 'syz.2.9722': attribute type 21 has an invalid length. [ 2084.217944][ T3652] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9722'. [ 2084.316065][ T3647] syzkaller0: entered promiscuous mode [ 2084.323271][ T3647] syzkaller0: entered allmulticast mode [ 2084.335026][ T3651] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9721'. [ 2084.419223][ T3652] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9722'. [ 2084.443996][ T3654] netlink: 'syz.3.9720': attribute type 2 has an invalid length. [ 2084.460741][ T3654] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9720'. [ 2084.503529][ T3657] netlink: 'syz.2.9722': attribute type 10 has an invalid length. [ 2084.514707][ T3657] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 2084.547303][ T655] Bluetooth: hci2: command tx timeout [ 2086.621196][ T655] Bluetooth: hci2: command tx timeout [ 2087.571219][ T1868] [ 2087.573605][ T1868] ====================================================== [ 2087.580634][ T1868] WARNING: possible circular locking dependency detected [ 2087.587674][ T1868] syzkaller #0 Not tainted [ 2087.592106][ T1868] ------------------------------------------------------ [ 2087.599136][ T1868] kworker/u4:3/1868 is trying to acquire lock: [ 2087.605288][ T1868] ffff888068af0d00 (team->team_lock_key#14){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 2087.614979][ T1868] [ 2087.614979][ T1868] but task is already holding lock: [ 2087.622334][ T1868] ffff88807dab8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 2087.632683][ T1868] [ 2087.632683][ T1868] which lock already depends on the new lock. [ 2087.632683][ T1868] [ 2087.643079][ T1868] [ 2087.643079][ T1868] the existing dependency chain (in reverse order) is: [ 2087.652080][ T1868] [ 2087.652080][ T1868] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 2087.659812][ T1868] __mutex_lock+0x136/0xcc0 [ 2087.664831][ T1868] ieee80211_open+0x144/0x200 [ 2087.670024][ T1868] __dev_open+0x2cb/0x430 [ 2087.674884][ T1868] dev_open+0xab/0x190 [ 2087.679466][ T1868] team_add_slave+0x75f/0x29a0 [ 2087.684751][ T1868] do_setlink+0xdfe/0x4130 [ 2087.689678][ T1868] rtnl_newlink+0x17da/0x20a0 [ 2087.694869][ T1868] rtnetlink_rcv_msg+0x869/0xfa0 [ 2087.700318][ T1868] netlink_rcv_skb+0x241/0x4d0 [ 2087.705604][ T1868] netlink_unicast+0x751/0x8d0 [ 2087.710884][ T1868] netlink_sendmsg+0x8d0/0xbf0 [ 2087.716167][ T1868] ____sys_sendmsg+0x5ba/0x960 [ 2087.721451][ T1868] ___sys_sendmsg+0x2a6/0x360 [ 2087.726640][ T1868] __se_sys_sendmsg+0x1c2/0x2b0 [ 2087.732001][ T1868] do_syscall_64+0x55/0xa0 [ 2087.736927][ T1868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2087.743337][ T1868] [ 2087.743337][ T1868] -> #0 (team->team_lock_key#14){+.+.}-{3:3}: [ 2087.751605][ T1868] __lock_acquire+0x2df1/0x7d40 [ 2087.756979][ T1868] lock_acquire+0x19e/0x420 [ 2087.761996][ T1868] __mutex_lock+0x136/0xcc0 [ 2087.767017][ T1868] team_del_slave+0x32/0x1c0 [ 2087.772126][ T1868] team_device_event+0x28d/0xa20 [ 2087.777582][ T1868] notifier_call_chain+0x197/0x380 [ 2087.783219][ T1868] unregister_netdevice_many_notify+0x100d/0x1900 [ 2087.790152][ T1868] unregister_netdevice_queue+0x32c/0x370 [ 2087.796402][ T1868] _cfg80211_unregister_wdev+0x16b/0x580 [ 2087.802546][ T1868] ieee80211_remove_interfaces+0x49e/0x690 [ 2087.808861][ T1868] ieee80211_unregister_hw+0x5d/0x2a0 [ 2087.814752][ T1868] mac80211_hwsim_del_radio+0x289/0x480 [ 2087.820810][ T1868] hwsim_exit_net+0x58d/0x650 [ 2087.826001][ T1868] cleanup_net+0x70a/0xbb0 [ 2087.830972][ T1868] process_scheduled_works+0xa5d/0x15d0 [ 2087.837033][ T1868] worker_thread+0xa55/0xfc0 [ 2087.842137][ T1868] kthread+0x2fa/0x390 [ 2087.846722][ T1868] ret_from_fork+0x48/0x80 [ 2087.851656][ T1868] ret_from_fork_asm+0x11/0x20 [ 2087.856963][ T1868] [ 2087.856963][ T1868] other info that might help us debug this: [ 2087.856963][ T1868] [ 2087.867185][ T1868] Possible unsafe locking scenario: [ 2087.867185][ T1868] [ 2087.874622][ T1868] CPU0 CPU1 [ 2087.879978][ T1868] ---- ---- [ 2087.885333][ T1868] lock(&rdev->wiphy.mtx); [ 2087.889830][ T1868] lock(team->team_lock_key#14); [ 2087.897374][ T1868] lock(&rdev->wiphy.mtx); [ 2087.904389][ T1868] lock(team->team_lock_key#14); [ 2087.909413][ T1868] [ 2087.909413][ T1868] *** DEADLOCK *** [ 2087.909413][ T1868] [ 2087.917545][ T1868] 5 locks held by kworker/u4:3/1868: [ 2087.922827][ T1868] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2087.933705][ T1868] #1: ffffc9000ff3fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2087.944229][ T1868] #2: ffffffff8e3b5ad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 2087.953640][ T1868] #3: ffffffff8e3c2b08 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 2087.963467][ T1868] #4: ffff88807dab8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 2087.974347][ T1868] [ 2087.974347][ T1868] stack backtrace: [ 2087.980234][ T1868] CPU: 1 PID: 1868 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 2087.987786][ T1868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2087.997840][ T1868] Workqueue: netns cleanup_net [ 2088.002607][ T1868] Call Trace: [ 2088.005874][ T1868] [ 2088.008794][ T1868] dump_stack_lvl+0x18c/0x250 [ 2088.013474][ T1868] ? load_image+0x420/0x420 [ 2088.018064][ T1868] ? show_regs_print_info+0x20/0x20 [ 2088.023268][ T1868] ? print_circular_bug+0x12b/0x1a0 [ 2088.028470][ T1868] check_noncircular+0x2fc/0x400 [ 2088.033406][ T1868] ? print_deadlock_bug+0x5d0/0x5d0 [ 2088.038598][ T1868] ? lockdep_lock+0xf5/0x230 [ 2088.043272][ T1868] ? __lock_acquire+0x1273/0x7d40 [ 2088.048291][ T1868] ? _find_first_zero_bit+0xd3/0x100 [ 2088.053571][ T1868] __lock_acquire+0x2df1/0x7d40 [ 2088.058518][ T1868] ? verify_lock_unused+0x140/0x140 [ 2088.063712][ T1868] ? verify_lock_unused+0x140/0x140 [ 2088.068912][ T1868] lock_acquire+0x19e/0x420 [ 2088.073411][ T1868] ? team_del_slave+0x32/0x1c0 [ 2088.078176][ T1868] ? __might_sleep+0xe0/0xe0 [ 2088.082759][ T1868] ? read_lock_is_recursive+0x20/0x20 [ 2088.088138][ T1868] __mutex_lock+0x136/0xcc0 [ 2088.092638][ T1868] ? team_del_slave+0x32/0x1c0 [ 2088.097407][ T1868] ? __lock_acquire+0x7d40/0x7d40 [ 2088.102426][ T1868] ? rcu_is_watching+0x15/0xb0 [ 2088.107185][ T1868] ? trace_contention_end+0x39/0xe0 [ 2088.112374][ T1868] ? __mutex_lock+0x315/0xcc0 [ 2088.117042][ T1868] ? team_del_slave+0x32/0x1c0 [ 2088.121802][ T1868] ? mutex_lock_nested+0x20/0x20 [ 2088.126728][ T1868] ? bond_netdev_event+0xeb/0xf20 [ 2088.131750][ T1868] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 2088.137377][ T1868] team_del_slave+0x32/0x1c0 [ 2088.141967][ T1868] team_device_event+0x28d/0xa20 [ 2088.146927][ T1868] notifier_call_chain+0x197/0x380 [ 2088.152039][ T1868] unregister_netdevice_many_notify+0x100d/0x1900 [ 2088.158445][ T1868] ? lock_chain_count+0x20/0x20 [ 2088.163291][ T1868] ? unregister_netdevice_many+0x20/0x20 [ 2088.168923][ T1868] ? kernfs_remove_by_name_ns+0x117/0x150 [ 2088.174645][ T1868] ? __lock_acquire+0x7d40/0x7d40 [ 2088.179668][ T1868] unregister_netdevice_queue+0x32c/0x370 [ 2088.185468][ T1868] ? list_netdevice+0x730/0x730 [ 2088.190312][ T1868] ? kernfs_remove_by_name_ns+0x117/0x150 [ 2088.196028][ T1868] _cfg80211_unregister_wdev+0x16b/0x580 [ 2088.201658][ T1868] ieee80211_remove_interfaces+0x49e/0x690 [ 2088.207461][ T1868] ? ieee80211_do_stop+0x1e20/0x1e20 [ 2088.212736][ T1868] ? rcu_is_watching+0x15/0xb0 [ 2088.217497][ T1868] ieee80211_unregister_hw+0x5d/0x2a0 [ 2088.222864][ T1868] mac80211_hwsim_del_radio+0x289/0x480 [ 2088.228412][ T1868] ? rhashtable_remove_fast+0xc00/0xc00 [ 2088.233958][ T1868] hwsim_exit_net+0x58d/0x650 [ 2088.238639][ T1868] ? hwsim_init_net+0x90/0x90 [ 2088.243310][ T1868] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 2088.249109][ T1868] cleanup_net+0x70a/0xbb0 [ 2088.253535][ T1868] ? ops_free_list+0x3b0/0x3b0 [ 2088.258295][ T1868] ? _raw_spin_unlock_irq+0x23/0x50 [ 2088.263484][ T1868] ? process_scheduled_works+0x96f/0x15d0 [ 2088.269228][ T1868] ? process_scheduled_works+0x96f/0x15d0 [ 2088.274939][ T1868] process_scheduled_works+0xa5d/0x15d0 [ 2088.280484][ T1868] ? worker_attach_to_pool+0x380/0x380 [ 2088.285935][ T1868] ? assign_work+0x3d2/0x5d0 [ 2088.290520][ T1868] worker_thread+0xa55/0xfc0 [ 2088.295111][ T1868] kthread+0x2fa/0x390 [ 2088.299172][ T1868] ? pr_cont_work+0x560/0x560 [ 2088.303845][ T1868] ? kthread_blkcg+0xd0/0xd0 [ 2088.308430][ T1868] ret_from_fork+0x48/0x80 [ 2088.312840][ T1868] ? kthread_blkcg+0xd0/0xd0 [ 2088.317418][ T1868] ret_from_fork_asm+0x11/0x20 [ 2088.322182][ T1868] [ 2088.329030][ T1868] mac80211_hwsim hwsim44 wlan1 (unregistering): left promiscuous mode [ 2088.340294][ T1868] mac80211_hwsim hwsim44 wlan1 (unregistering): left allmulticast mode [ 2088.380923][ T1868] team0: Port device wlan1 removed [ 2088.403933][ T3697] __nla_validate_parse: 1 callbacks suppressed [ 2088.403976][ T3697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9729'. [ 2088.431944][ T3700] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9730'. [ 2088.446718][ T3558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2088.472858][ T3558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2088.483964][ T3558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2088.494085][ T3558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2088.573563][ T3558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2088.593305][ T3558] 8021q: adding VLAN 0 to HW filter on device team0 [ 2088.605706][ T857] bridge0: port 1(bridge_slave_0) entered blocking state [ 2088.612878][ T857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2088.630746][T20649] bridge0: port 2(bridge_slave_1) entered blocking state [ 2088.637930][T20649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2088.833462][ T3558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2088.881054][ T3558] veth0_vlan: entered promiscuous mode [ 2088.894988][ T3558] veth1_vlan: entered promiscuous mode [ 2088.928747][ T3558] veth0_macvtap: entered promiscuous mode [ 2088.939236][ T3558] veth1_macvtap: entered promiscuous mode [ 2088.957317][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2088.971333][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2088.981524][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2088.992491][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.002991][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2089.013759][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.028479][ T3558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2089.041012][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2089.052353][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.062696][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2089.074863][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.084878][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2089.098431][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.110805][ T3558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2089.128313][ T3558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.138620][ T3558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.149196][ T3558] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.158329][ T3558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.191912][ T3558] ieee80211 phy63: Selected rate control algorithm 'minstrel_ht' [ 2089.222100][T12944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2089.231839][ T3558] ieee80211 phy64: Selected rate control algorithm 'minstrel_ht' [ 2089.244588][T12944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2089.274194][T20644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2089.283340][T20644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2089.902912][ T1868] hsr_slave_0: left promiscuous mode [ 2089.909096][ T1868] hsr_slave_1: left promiscuous mode [ 2089.915890][ T1868] veth0_macvtap: left promiscuous mode [ 2089.921540][ T1868] veth1_vlan: left promiscuous mode [ 2089.926940][ T1868] dú0Ù~Ô: left promiscuous mode [ 2090.103435][ T1868] team_slave_1 (unregistering): left promiscuous mode [ 2090.110919][ T1868] team_slave_1 (unregistering): left allmulticast mode [ 2090.122462][ T1868] team0 (unregistering): Port device team_slave_1 removed [ 2090.151496][ T1868] C (unregistering): left promiscuous mode [ 2090.157436][ T1868] C (unregistering): left allmulticast mode [ 2090.164427][ T1868] team0 (unregistering): Port device C removed