last executing test programs: 8.266889307s ago: executing program 3 (id=12749): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e002700100000000280000012", 0x2d}], 0x1}, 0x40000) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1ab762, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000280)={'wlan0\x00', 0x400}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000040)=r9, 0x4) sendmsg$kcm(r10, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) 5.847793283s ago: executing program 1 (id=12754): socket$kcm(0x11, 0xa, 0x300) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xfffffffd}, 0x2c) 5.82986327s ago: executing program 2 (id=12755): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x12}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000007000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="0000000000d768db718607000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x9, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001a930000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e40)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async, rerun: 64) r5 = socket$kcm(0x2b, 0x1, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c00)=""/226, 0xe9}, {&(0x7f0000000940)=""/201, 0xee}, {&(0x7f0000000a80)=""/307, 0x133}, {&(0x7f0000000bc0)=""/4155, 0x103c}], 0x4}, 0x2000) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="14000000350094fb0100fc6022f388a500000000", 0x20}], 0x1}, 0x20000020) (async) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) (async) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x24, &(0x7f0000000200)=r8, 0x4) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="021808a89032beb7b80000000100000080000080", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000500"/28], 0x50) (async, rerun: 32) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async, rerun: 32) r12 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r12, &(0x7f0000000580)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x80, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x18) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) (async, rerun: 64) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd6f1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1a, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit, @jmp={0x5, 0x0, 0x6, 0x0, 0x6, 0x8, 0x8}, @jmp={0x5, 0x1, 0xd, 0x8, 0xa, 0x8, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x70}], &(0x7f0000000200)='GPL\x00', 0x80000, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000240)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xb, 0x5, 0x80000001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r9, r10, r11, r13, r14, r15], 0x0, 0x10, 0x9}, 0x94) 5.700437926s ago: executing program 2 (id=12757): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x8, 0x1ff}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x4, 0x1}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/95, 0x5f}, {0x0}, {0x0}, {0x0}], 0x6}, 0x2040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x108) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000069100000000000006300e0ff0000000095000000000000008c44d7fba4f9ffd101fc87f7772d38ee6aefdcb55707cc"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0, 0x6}, 0x5000, 0x4, 0x0, 0x0, 0x6, 0xa, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)=0x20000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 5.654793778s ago: executing program 3 (id=12758): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x20) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9300000000000000000000000000000800"/29], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000002000000000000000000bf090000000000003609010000000000950000006c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b7000000000000009500"/161], &(0x7f0000000080)='GPL\x00', 0x7, 0xff5, &(0x7f0000000cc0)=""/4085, 0x41100, 0x20}, 0x94) 5.370553605s ago: executing program 1 (id=12759): r0 = socket$kcm(0x2, 0x922000000001, 0x106) close(r0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000000), 0xff7b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x10002) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(r0) 5.321059666s ago: executing program 3 (id=12761): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180001004e81f782db4cb904021d0800fe007c05e81556a1bc000f000200142603600e12080005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6eaa0c261210ef0a007a290457f0189b3050000002d4462d72f886bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc92954b43370e97039264bc7bb666", 0xd9}], 0x1}, 0x4) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200303a"], 0x66) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600a400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x40000000000000, 0x3fef8000}, 0x0, 0x701, 0x43a1bd76, 0x0, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4206}, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 5.015614241s ago: executing program 2 (id=12764): r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8509, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000180)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0xb6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) close(0x3) 4.410804829s ago: executing program 1 (id=12765): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0}, 0x20000) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 2.407378512s ago: executing program 1 (id=12767): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e002700100000000280000012", 0x2d}], 0x1}, 0x40000) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1ab762, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000280)={'wlan0\x00', 0x400}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000040)=r9, 0x4) sendmsg$kcm(r10, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) 2.406306612s ago: executing program 0 (id=12775): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x11efa, 0x4, 0x98, 0x0, 0x1, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r1, 0x0, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x3a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r3, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, r3}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.361712603s ago: executing program 3 (id=12768): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000b80)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRES64, @ANYRES32=r0, @ANYRES32=r0], 0xfe33) perf_event_open(&(0x7f0000000380)={0x0, 0xad, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8404, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000008000000000000000300000018110000", @ANYRES32=0x1, @ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085000000b000000072740200f6ffffffdd06300000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x80000000}, 0x0, 0x2, r2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1802000000000000950000004800000095000000000000000000000000000000802f107c6eefc99cd12c63f1059c0d423a0f9e0003628409c3e383eb6901e7d0cd1d7e429f36576bc8dfd816a157390735c8ff7fffffffffffff157a8220b67b6cc40eb50662a246c5f7ed904653b317bec368fdc8b26b706cb5d8085a791b71a9ac38af41bbd5fa9cebc525ce8c0bc88151e830f3f8b28d2ab50a169f3c44783a"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=0x1, 0x34, 0x1, 0x10001, &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0]}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xffffffffffffff69, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r5, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r6}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r5, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000009c0)={0x3, 0x80, 0x0, 0x7, 0xb, 0x2, 0x0, 0x8000, 0x10014, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0xffffffff, 0x7}, 0x8000, 0xd79a, 0x5, 0x1, 0x400, 0xd5b, 0x1, 0x0, 0xdb, 0x0, 0x1}) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32, @ANYBLOB="00000000d516a807b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1011, &(0x7f00000016c0)=""/4113}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000a40)={0x5}, 0x8) 1.986952115s ago: executing program 2 (id=12769): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x83, 0x0, 0x3, 0x0, 0x0, 0x20810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x8000, 0x1, 0x0, 0x6, 0x35, 0x0, 0x3, 0x0, 0x2ff, 0x0, 0x7}, 0x0, 0x10000002, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8) r0 = socket$kcm(0x22, 0x3, 0x0) close(r0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91824fc60100005000a000200053582c137153e37000c0680050003000300", 0x33fe0}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) 1.430304313s ago: executing program 0 (id=12770): socket$kcm(0x11, 0xa, 0x300) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xffffffff}, 0x2c) 1.167846595s ago: executing program 0 (id=12771): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000026c0)=""/4096, 0x1000}], 0x1}, 0x20) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2042) 1.157357493s ago: executing program 3 (id=12772): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000005c0)=""/249, &(0x7f0000000940), &(0x7f0000000200), 0xa79, r0}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/48, 0x1b, 0x30, 0x1, 0x529, 0x10000}, 0x28) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23004a) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5460, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffdf6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111b200000000008510000002000000850000002400000095003300000000489500a50500000000872de57e82b04a7f863d2da7a0670ce885f9bc6d7f20bb143b72f16eb3aa67b8c1d7e1d5764eb41c106a4f44c91f5becd3c6a7e7accdc8371c6260f56f925875e3ea387ab139bd2661ab99286f84e4655ae0fdda8ba382"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8901, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$sock(r5, &(0x7f0000000b80)={&(0x7f0000000400)=@hci={0x1f, 0x1, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0xc5ea}}], 0x18}, 0x20004000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230007) (async) close(0x3) 1.115484025s ago: executing program 1 (id=12773): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x8, 0x1ff}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x4, 0x1}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/95, 0x5f}, {0x0}, {0x0}, {0x0}], 0x6}, 0x2040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x108) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000069100000000000006300e0ff0000000095000000000000008c44d7fba4f9ffd101fc87f7772d38ee6aefdcb55707cc"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0, 0x6}, 0x5000, 0x4, 0x0, 0x0, 0x6, 0xa, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)=0x20000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1.072107907s ago: executing program 0 (id=12774): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000fffffff100000000000000000000000000000000000007f51052bb11e854d959cfbaf609d7b3dcf2515958b0ca665e6ffef8d5fafcd24bf963b010fbdf8edd7a1aba8e4ff28afc2d3f333ce8d5c53c975f9feb7eb3e29855477eeb3437"], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000100018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000001380)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000eb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x10001, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xa}, 0x8000, 0x0, 0x80000, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.03290247s ago: executing program 2 (id=12776): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0}, 0x20000) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 964.226117ms ago: executing program 3 (id=12777): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180001004e81f782db4cb904021d0800fe007c05e81556a1bc000f000200142603600e12080005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6eaa0c261210ef0a007a290457f0189b3050000002d4462d72f886bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc92954b43370e97039264bc7bb666", 0xd9}], 0x1}, 0x4) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200303a"], 0x66) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600a400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x40000000000000, 0x3fef8000}, 0x0, 0x701, 0x43a1bd76, 0x0, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4206}, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 963.579607ms ago: executing program 0 (id=12778): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x11efa, 0x4, 0x98, 0x0, 0x1, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r1, 0x0, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x3a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r3, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, r3}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x50) 1.361721ms ago: executing program 0 (id=12779): r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8509, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000180)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0xb6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) close(0x3) 891.761µs ago: executing program 1 (id=12780): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r2, 0x1, 0x48, &(0x7f0000000340), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2092, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r5, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x10001, @local, 0xfbfffffd}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x1f, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="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", @ANYBLOB="000040000032532754f3f55b8ca8f9c3075a254151bfa87c8100b7ba0f3a7803bcd059d8c8a7bf688403b8e470ff24311a33f7c01d22a1c2c94858f3a90b50fb472430c4327031e04bf3f78dc3e3efe15523aa8d00000000", @ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRES8=r2], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc7, &(0x7f0000000380)=""/199, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fe800000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r9, 0x10e, 0x18, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r1, 0x26, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0xec2}], 0x1}, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=12781): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x11efa, 0x4, 0x98, 0x0, 0x1, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x100000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x3a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): ly_rcv_msg_doit+0x211/0x310 [ 2212.473783][T11642] ? end_current_label_crit_section+0x170/0x170 [ 2212.480285][T11642] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2212.486183][T11642] ? bpf_lsm_capable+0x9/0x10 [ 2212.490858][T11642] ? security_capable+0x89/0xb0 [ 2212.495715][T11642] genl_rcv_msg+0x619/0x7a0 [ 2212.500243][T11642] ? genl_bind+0x360/0x360 [ 2212.504659][T11642] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2212.511011][T11642] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2212.517596][T11642] ? ref_tracker_free+0x690/0x840 [ 2212.522638][T11642] netlink_rcv_skb+0x241/0x4d0 [ 2212.527412][T11642] ? genl_bind+0x360/0x360 [ 2212.531823][T11642] ? netlink_ack+0x1180/0x1180 [ 2212.536709][T11642] ? __lock_acquire+0x7d40/0x7d40 [ 2212.541739][T11642] ? down_read+0x1ac/0x2e0 [ 2212.546159][T11642] genl_rcv+0x28/0x40 [ 2212.550144][T11642] netlink_unicast+0x751/0x8d0 [ 2212.555004][T11642] netlink_sendmsg+0x8d0/0xbf0 [ 2212.559774][T11642] ? netlink_getsockopt+0x590/0x590 [ 2212.564972][T11642] ? aa_sock_msg_perm+0x94/0x150 [ 2212.569906][T11642] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2212.575214][T11642] ? security_socket_sendmsg+0x80/0xa0 [ 2212.580687][T11642] ? netlink_getsockopt+0x590/0x590 [ 2212.585897][T11642] ____sys_sendmsg+0x5ba/0x960 [ 2212.590670][T11642] ? __asan_memset+0x22/0x40 [ 2212.595259][T11642] ? __sys_sendmsg_sock+0x30/0x30 [ 2212.600280][T11642] ? __import_iovec+0x5f2/0x850 [ 2212.605143][T11642] ? import_iovec+0x73/0xa0 [ 2212.609642][T11642] ___sys_sendmsg+0x2a6/0x360 [ 2212.614316][T11642] ? __sys_sendmsg+0x2a0/0x2a0 [ 2212.619117][T11642] __se_sys_sendmsg+0x1c2/0x2b0 [ 2212.623964][T11642] ? __x64_sys_sendmsg+0x80/0x80 [ 2212.628910][T11642] ? lockdep_hardirqs_on+0x98/0x150 [ 2212.634106][T11642] do_syscall_64+0x55/0xa0 [ 2212.638525][T11642] ? clear_bhb_loop+0x40/0x90 [ 2212.643205][T11642] ? clear_bhb_loop+0x40/0x90 [ 2212.647875][T11642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2212.653765][T11642] RIP: 0033:0x7f902719c799 [ 2212.658174][T11642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2212.677781][T11642] RSP: 002b:00007f90253d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2212.686200][T11642] RAX: ffffffffffffffda RBX: 00007f9027416090 RCX: 00007f902719c799 [ 2212.694177][T11642] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2212.702327][T11642] RBP: 00007f9027232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 2212.710298][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2212.718262][T11642] R13: 00007f9027416128 R14: 00007f9027416090 R15: 00007ffc3603d6a8 [ 2212.726246][T11642] [ 2213.172329][T11662] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.11850'. [ 2213.191841][T11662] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.11850'. [ 2213.192907][T11660] FAULT_INJECTION: forcing a failure. [ 2213.192907][T11660] name failslab, interval 1, probability 0, space 0, times 0 [ 2213.222003][T11660] CPU: 1 PID: 11660 Comm: syz.1.11849 Not tainted syzkaller #0 [ 2213.229633][T11660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2213.239712][T11660] Call Trace: [ 2213.243012][T11660] [ 2213.245966][T11660] dump_stack_lvl+0x18c/0x250 [ 2213.250684][T11660] ? show_regs_print_info+0x20/0x20 [ 2213.255902][T11660] ? load_image+0x400/0x400 [ 2213.260410][T11660] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2213.266403][T11660] should_fail_ex+0x39d/0x4d0 [ 2213.271102][T11660] should_failslab+0x9/0x20 [ 2213.275602][T11660] slab_pre_alloc_hook+0x59/0x310 [ 2213.280635][T11660] ? lockdep_hardirqs_on+0x98/0x150 [ 2213.285847][T11660] kmem_cache_alloc+0x5a/0x2d0 [ 2213.290605][T11660] ? slab_build_skb+0x2b/0x3f0 [ 2213.295372][T11660] slab_build_skb+0x2b/0x3f0 [ 2213.299970][T11660] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 2213.305335][T11660] ? __fget_files+0x28/0x4b0 [ 2213.309940][T11660] ? __fget_files+0x28/0x4b0 [ 2213.314577][T11660] ? __fget_files+0x43d/0x4b0 [ 2213.319275][T11660] ? cpu_online+0x60/0x60 [ 2213.323614][T11660] bpf_prog_test_run+0x321/0x390 [ 2213.328562][T11660] __sys_bpf+0x49d/0x890 [ 2213.332831][T11660] ? bpf_link_show_fdinfo+0x390/0x390 [ 2213.338317][T11660] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2213.344481][T11660] __x64_sys_bpf+0x7c/0x90 [ 2213.348904][T11660] do_syscall_64+0x55/0xa0 [ 2213.353353][T11660] ? clear_bhb_loop+0x40/0x90 [ 2213.358020][T11660] ? clear_bhb_loop+0x40/0x90 [ 2213.362722][T11660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2213.368622][T11660] RIP: 0033:0x7f902719c799 [ 2213.373053][T11660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2213.392686][T11660] RSP: 002b:00007f90253f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2213.401112][T11660] RAX: ffffffffffffffda RBX: 00007f9027415fa0 RCX: 00007f902719c799 [ 2213.409140][T11660] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2213.417128][T11660] RBP: 00007f90253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2213.425104][T11660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2213.433081][T11660] R13: 00007f9027416038 R14: 00007f9027415fa0 R15: 00007ffc3603d6a8 [ 2213.441094][T11660] [ 2214.086417][T11690] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.11859'. [ 2214.117575][T11690] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.11859'. [ 2214.118013][T11696] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.11859'. [ 2214.159117][T11691] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.11859'. [ 2214.379434][T11697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2214.442063][T11706] FAULT_INJECTION: forcing a failure. [ 2214.442063][T11706] name failslab, interval 1, probability 0, space 0, times 0 [ 2214.455050][T11706] CPU: 1 PID: 11706 Comm: syz.1.11861 Not tainted syzkaller #0 [ 2214.462888][T11706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2214.472969][T11706] Call Trace: [ 2214.476268][T11706] [ 2214.479232][T11706] dump_stack_lvl+0x18c/0x250 [ 2214.483949][T11706] ? show_regs_print_info+0x20/0x20 [ 2214.489183][T11706] ? load_image+0x400/0x400 [ 2214.493718][T11706] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2214.499735][T11706] ? lock_chain_count+0x20/0x20 [ 2214.504624][T11706] should_fail_ex+0x39d/0x4d0 [ 2214.509339][T11706] should_failslab+0x9/0x20 [ 2214.513881][T11706] slab_pre_alloc_hook+0x59/0x310 [ 2214.518936][T11706] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2214.525115][T11706] kmem_cache_alloc+0x5a/0x2d0 [ 2214.529883][T11706] ? skb_clone+0x1eb/0x370 [ 2214.534298][T11706] skb_clone+0x1eb/0x370 [ 2214.538544][T11706] bpf_clone_redirect+0x167/0x4a0 [ 2214.543576][T11706] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 2214.549035][T11706] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2214.555023][T11706] ? lock_chain_count+0x20/0x20 [ 2214.559909][T11706] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 2214.566165][T11706] ? lockdep_softirqs_on+0x580/0x580 [ 2214.571455][T11706] ? ktime_get+0x7f/0x280 [ 2214.575784][T11706] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 2214.582022][T11706] ? ktime_get_real_ts64+0x440/0x440 [ 2214.587302][T11706] ? __x64_sys_bpf+0x7c/0x90 [ 2214.591888][T11706] ? __local_bh_disable_ip+0x108/0x1a0 [ 2214.597337][T11706] ? __cant_sleep+0x220/0x220 [ 2214.602028][T11706] ? read_tsc+0x9/0x20 [ 2214.606091][T11706] ? ktime_get+0x24b/0x280 [ 2214.610501][T11706] ? bpf_test_run+0x174/0x870 [ 2214.615174][T11706] bpf_test_run+0x2df/0x870 [ 2214.619686][T11706] ? bpf_test_run+0x174/0x870 [ 2214.624447][T11706] ? convert___skb_to_skb+0x590/0x590 [ 2214.629816][T11706] ? eth_get_headlen+0x210/0x210 [ 2214.634750][T11706] ? slab_build_skb+0x25f/0x3f0 [ 2214.639596][T11706] ? convert___skb_to_skb+0x3d/0x590 [ 2214.644875][T11706] bpf_prog_test_run_skb+0xad2/0x12b0 [ 2214.650255][T11706] ? cpu_online+0x60/0x60 [ 2214.654580][T11706] bpf_prog_test_run+0x321/0x390 [ 2214.659516][T11706] __sys_bpf+0x49d/0x890 [ 2214.663758][T11706] ? bpf_link_show_fdinfo+0x390/0x390 [ 2214.669222][T11706] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2214.675386][T11706] __x64_sys_bpf+0x7c/0x90 [ 2214.679800][T11706] do_syscall_64+0x55/0xa0 [ 2214.684219][T11706] ? clear_bhb_loop+0x40/0x90 [ 2214.688889][T11706] ? clear_bhb_loop+0x40/0x90 [ 2214.693563][T11706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2214.699447][T11706] RIP: 0033:0x7f902719c799 [ 2214.703857][T11706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2214.723463][T11706] RSP: 002b:00007f90253f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2214.731876][T11706] RAX: ffffffffffffffda RBX: 00007f9027415fa0 RCX: 00007f902719c799 [ 2214.739841][T11706] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2214.747804][T11706] RBP: 00007f90253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2214.755772][T11706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2214.763743][T11706] R13: 00007f9027416038 R14: 00007f9027415fa0 R15: 00007ffc3603d6a8 [ 2214.771720][T11706] [ 2215.036503][T11714] tap0: tun_chr_ioctl cmd 1074025675 [ 2215.048628][T11714] tap0: persist enabled [ 2215.334293][T11723] tap1: tun_chr_ioctl cmd 1074025677 [ 2215.339968][T11723] tap1: linktype set to 778 [ 2215.346390][T11726] tap0: tun_chr_ioctl cmd 1074025675 [ 2215.352341][T11726] tap0: persist enabled [ 2215.705397][T11747] FAULT_INJECTION: forcing a failure. [ 2215.705397][T11747] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.718496][T11747] CPU: 0 PID: 11747 Comm: syz.0.11873 Not tainted syzkaller #0 [ 2215.726066][T11747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2215.736138][T11747] Call Trace: [ 2215.739428][T11747] [ 2215.742384][T11747] dump_stack_lvl+0x18c/0x250 [ 2215.747085][T11747] ? show_regs_print_info+0x20/0x20 [ 2215.752309][T11747] ? load_image+0x400/0x400 [ 2215.756828][T11747] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2215.762561][T11747] should_fail_ex+0x39d/0x4d0 [ 2215.767280][T11747] should_failslab+0x9/0x20 [ 2215.771803][T11747] slab_pre_alloc_hook+0x59/0x310 [ 2215.776853][T11747] kmem_cache_alloc+0x5a/0x2d0 [ 2215.781626][T11747] ? skb_clone+0x1eb/0x370 [ 2215.786058][T11747] skb_clone+0x1eb/0x370 [ 2215.790323][T11747] bpf_clone_redirect+0x167/0x4a0 [ 2215.795372][T11747] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 2215.800844][T11747] ? __static_call_text_end+0x109d70/0x109d70 [ 2215.806921][T11747] ? lockdep_hardirqs_on+0x98/0x150 [ 2215.812134][T11747] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2215.818305][T11747] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 2215.824557][T11747] ? lockdep_softirqs_on+0x580/0x580 [ 2215.829853][T11747] ? seqcount_lockdep_reader_access+0x19a/0x1d0 [ 2215.836114][T11747] ? ktime_get_real_ts64+0x440/0x440 [ 2215.841417][T11747] ? __local_bh_disable_ip+0x108/0x1a0 [ 2215.846884][T11747] ? __cant_sleep+0x220/0x220 [ 2215.851574][T11747] ? read_tsc+0x9/0x20 [ 2215.855642][T11747] ? ktime_get+0x24b/0x280 [ 2215.860072][T11747] ? bpf_test_run+0x174/0x870 [ 2215.864765][T11747] bpf_test_run+0x2df/0x870 [ 2215.869291][T11747] ? bpf_test_run+0x174/0x870 [ 2215.873974][T11747] ? convert___skb_to_skb+0x590/0x590 [ 2215.879358][T11747] ? eth_get_headlen+0x210/0x210 [ 2215.884312][T11747] ? slab_build_skb+0x25f/0x3f0 [ 2215.889174][T11747] ? convert___skb_to_skb+0x3d/0x590 [ 2215.894479][T11747] bpf_prog_test_run_skb+0xad2/0x12b0 [ 2215.899873][T11747] ? cpu_online+0x60/0x60 [ 2215.904213][T11747] bpf_prog_test_run+0x321/0x390 [ 2215.909173][T11747] __sys_bpf+0x49d/0x890 [ 2215.913422][T11747] ? bpf_link_show_fdinfo+0x390/0x390 [ 2215.918807][T11747] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2215.924974][T11747] __x64_sys_bpf+0x7c/0x90 [ 2215.929398][T11747] do_syscall_64+0x55/0xa0 [ 2215.933824][T11747] ? clear_bhb_loop+0x40/0x90 [ 2215.938514][T11747] ? clear_bhb_loop+0x40/0x90 [ 2215.943194][T11747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2215.949103][T11747] RIP: 0033:0x7f742219c799 [ 2215.953530][T11747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2215.973142][T11747] RSP: 002b:00007f7422fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2215.981562][T11747] RAX: ffffffffffffffda RBX: 00007f7422415fa0 RCX: 00007f742219c799 [ 2215.989545][T11747] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2215.997522][T11747] RBP: 00007f7422fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 2216.005508][T11747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2216.013485][T11747] R13: 00007f7422416038 R14: 00007f7422415fa0 R15: 00007ffe68908d08 [ 2216.021481][T11747] [ 2216.332388][T11759] netlink: 6 bytes leftover after parsing attributes in process `syz.2.11875'. [ 2216.389117][T11759] openvswitch: netlink: Flow actions attr not present in new flow. [ 2217.290223][T20814] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 2218.776249][T11779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11881'. [ 2218.797892][T11779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11881'. [ 2218.813050][T11779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11881'. [ 2218.825453][T11779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11881'. [ 2218.835149][T11779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11881'. [ 2218.892868][T11783] FAULT_INJECTION: forcing a failure. [ 2218.892868][T11783] name failslab, interval 1, probability 0, space 0, times 0 [ 2218.905763][T11783] CPU: 0 PID: 11783 Comm: syz.1.11883 Not tainted syzkaller #0 [ 2218.913339][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2218.923421][T11783] Call Trace: [ 2218.926723][T11783] [ 2218.929666][T11783] dump_stack_lvl+0x18c/0x250 [ 2218.934359][T11783] ? show_regs_print_info+0x20/0x20 [ 2218.939569][T11783] ? load_image+0x400/0x400 [ 2218.944079][T11783] should_fail_ex+0x39d/0x4d0 [ 2218.948853][T11783] should_failslab+0x9/0x20 [ 2218.953363][T11783] slab_pre_alloc_hook+0x59/0x310 [ 2218.958388][T11783] kmem_cache_alloc+0x5a/0x2d0 [ 2218.963159][T11783] ? skb_clone+0x1eb/0x370 [ 2218.967575][T11783] skb_clone+0x1eb/0x370 [ 2218.971903][T11783] ? dev_queue_xmit_nit+0x212/0xbb0 [ 2218.977098][T11783] dev_queue_xmit_nit+0x24d/0xbb0 [ 2218.982126][T11783] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 2218.987240][T11783] ? validate_xmit_skb+0x949/0xf60 [ 2218.992350][T11783] dev_hard_start_xmit+0x148/0x740 [ 2218.997466][T11783] __dev_queue_xmit+0x19a3/0x3660 [ 2219.002496][T11783] ? __dev_queue_xmit+0x265/0x3660 [ 2219.007616][T11783] ? netdev_core_pick_tx+0x340/0x340 [ 2219.012989][T11783] ? skb_release_data+0x1cf/0x800 [ 2219.018012][T11783] ? pskb_expand_head+0xbfe/0x1230 [ 2219.023140][T11783] __bpf_tx_skb+0x189/0x250 [ 2219.027696][T11783] bpf_clone_redirect+0x30f/0x4a0 [ 2219.032725][T11783] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 2219.038216][T11783] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2219.044807][T11783] ? lock_chain_count+0x20/0x20 [ 2219.049679][T11783] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 2219.056994][T11783] ? lockdep_softirqs_on+0x580/0x580 [ 2219.062277][T11783] ? ktime_get+0x7f/0x280 [ 2219.066602][T11783] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 2219.072841][T11783] ? ktime_get_real_ts64+0x440/0x440 [ 2219.078123][T11783] ? __x64_sys_bpf+0x7c/0x90 [ 2219.082711][T11783] ? __local_bh_disable_ip+0x108/0x1a0 [ 2219.088183][T11783] ? __cant_sleep+0x220/0x220 [ 2219.092871][T11783] ? read_tsc+0x9/0x20 [ 2219.097018][T11783] ? ktime_get+0x24b/0x280 [ 2219.101438][T11783] ? bpf_test_run+0x174/0x870 [ 2219.106107][T11783] bpf_test_run+0x2df/0x870 [ 2219.110613][T11783] ? bpf_test_run+0x174/0x870 [ 2219.115286][T11783] ? convert___skb_to_skb+0x590/0x590 [ 2219.120650][T11783] ? eth_get_headlen+0x210/0x210 [ 2219.125592][T11783] ? slab_build_skb+0x25f/0x3f0 [ 2219.130526][T11783] ? convert___skb_to_skb+0x3d/0x590 [ 2219.135805][T11783] bpf_prog_test_run_skb+0xad2/0x12b0 [ 2219.141181][T11783] ? cpu_online+0x60/0x60 [ 2219.145500][T11783] bpf_prog_test_run+0x321/0x390 [ 2219.150433][T11783] __sys_bpf+0x49d/0x890 [ 2219.154691][T11783] ? bpf_link_show_fdinfo+0x390/0x390 [ 2219.160067][T11783] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2219.166228][T11783] __x64_sys_bpf+0x7c/0x90 [ 2219.170638][T11783] do_syscall_64+0x55/0xa0 [ 2219.175054][T11783] ? clear_bhb_loop+0x40/0x90 [ 2219.179725][T11783] ? clear_bhb_loop+0x40/0x90 [ 2219.184396][T11783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2219.190281][T11783] RIP: 0033:0x7f902719c799 [ 2219.194686][T11783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2219.214285][T11783] RSP: 002b:00007f90253f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2219.222692][T11783] RAX: ffffffffffffffda RBX: 00007f9027415fa0 RCX: 00007f902719c799 [ 2219.230656][T11783] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2219.238625][T11783] RBP: 00007f90253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2219.246589][T11783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2219.254551][T11783] R13: 00007f9027416038 R14: 00007f9027415fa0 R15: 00007ffc3603d6a8 [ 2219.262529][T11783] [ 2219.471695][T11795] netlink: 'syz.3.11884': attribute type 10 has an invalid length. [ 2219.531143][T11795] bridge0: port 2(bridge_slave_1) entered disabled state [ 2219.550486][T11795] bridge0: left promiscuous mode [ 2219.569540][T11795] bridge0: left allmulticast mode [ 2219.634689][T11795] bridge0: port 2(bridge_slave_1) entered blocking state [ 2219.642851][T11795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2219.677896][T11795] .`: (slave bridge0): Enslaving as an active interface with an up link [ 2220.139054][T11814] netlink: 'syz.3.11891': attribute type 29 has an invalid length. [ 2220.186110][T11814] netlink: 'syz.3.11891': attribute type 29 has an invalid length. [ 2220.293232][T11819] __nla_validate_parse: 28 callbacks suppressed [ 2220.293268][T11819] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11893'. [ 2220.323666][T11819] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11893'. [ 2220.346427][T11820] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11893'. [ 2220.494237][T11819] netlink: 'syz.0.11893': attribute type 29 has an invalid length. [ 2220.517936][T11819] netlink: 'syz.0.11893': attribute type 29 has an invalid length. [ 2220.540394][T11820] netlink: 'syz.0.11893': attribute type 29 has an invalid length. [ 2220.583292][T11819] netlink: 'syz.0.11893': attribute type 29 has an invalid length. [ 2220.945938][T11831] netlink: 'syz.0.11894': attribute type 10 has an invalid length. [ 2220.958928][T11831] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11894'. [ 2221.084418][T11833] FAULT_INJECTION: forcing a failure. [ 2221.084418][T11833] name failslab, interval 1, probability 0, space 0, times 0 [ 2221.097455][T11833] CPU: 0 PID: 11833 Comm: syz.2.11896 Not tainted syzkaller #0 [ 2221.105033][T11833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2221.115134][T11833] Call Trace: [ 2221.118426][T11833] [ 2221.121379][T11833] dump_stack_lvl+0x18c/0x250 [ 2221.126085][T11833] ? fib_rules_lookup+0x9c/0xb40 [ 2221.131056][T11833] ? show_regs_print_info+0x20/0x20 [ 2221.136284][T11833] ? load_image+0x400/0x400 [ 2221.140900][T11833] ? fib_rules_lookup+0x9c/0xb40 [ 2221.145874][T11833] ? fib_rules_unregister+0x340/0x340 [ 2221.151282][T11833] should_fail_ex+0x39d/0x4d0 [ 2221.156002][T11833] should_failslab+0x9/0x20 [ 2221.160536][T11833] slab_pre_alloc_hook+0x59/0x310 [ 2221.165625][T11833] kmem_cache_alloc+0x5a/0x2d0 [ 2221.170421][T11833] ? dst_alloc+0x105/0x170 [ 2221.174880][T11833] dst_alloc+0x105/0x170 [ 2221.179160][T11833] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 2221.185357][T11833] ? ip_route_output_key_hash+0x13d/0x330 [ 2221.191154][T11833] ip_route_output_key_hash+0x1f3/0x330 [ 2221.196738][T11833] ? ip_route_input_rcu+0x30f0/0x30f0 [ 2221.202151][T11833] ? security_xfrm_decode_session+0x42/0xa0 [ 2221.208075][T11833] ? bpf_lsm_xfrm_decode_session+0x9/0x10 [ 2221.213831][T11833] vti6_tnl_xmit+0xbae/0x1910 [ 2221.218544][T11833] ? sock_def_readable+0x2ac/0x420 [ 2221.223704][T11833] ? vti6_dev_uninit+0x120/0x120 [ 2221.228695][T11833] dev_hard_start_xmit+0x246/0x740 [ 2221.233855][T11833] __dev_queue_xmit+0x19a3/0x3660 [ 2221.238924][T11833] ? __dev_queue_xmit+0x265/0x3660 [ 2221.244074][T11833] ? netdev_core_pick_tx+0x340/0x340 [ 2221.249393][T11833] ? skb_release_data+0x1cf/0x800 [ 2221.254457][T11833] ? pskb_expand_head+0xbfe/0x1230 [ 2221.259604][T11833] __bpf_tx_skb+0x189/0x250 [ 2221.264135][T11833] bpf_clone_redirect+0x30f/0x4a0 [ 2221.269203][T11833] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 2221.274691][T11833] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2221.280701][T11833] ? lock_chain_count+0x20/0x20 [ 2221.285596][T11833] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 2221.291872][T11833] ? lockdep_softirqs_on+0x580/0x580 [ 2221.297184][T11833] ? ktime_get+0x7f/0x280 [ 2221.301554][T11833] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 2221.307794][T11833] ? ktime_get_real_ts64+0x440/0x440 [ 2221.313083][T11833] ? __x64_sys_bpf+0x7c/0x90 [ 2221.317662][T11833] ? __local_bh_disable_ip+0x108/0x1a0 [ 2221.323107][T11833] ? __cant_sleep+0x220/0x220 [ 2221.327783][T11833] ? read_tsc+0x9/0x20 [ 2221.331840][T11833] ? ktime_get+0x24b/0x280 [ 2221.336249][T11833] ? bpf_test_run+0x174/0x870 [ 2221.340915][T11833] bpf_test_run+0x2df/0x870 [ 2221.345409][T11833] ? lock_chain_count+0x20/0x20 [ 2221.350261][T11833] ? bpf_test_run+0x174/0x870 [ 2221.354931][T11833] ? convert___skb_to_skb+0x590/0x590 [ 2221.360299][T11833] ? eth_get_headlen+0x210/0x210 [ 2221.365237][T11833] ? convert___skb_to_skb+0x3d/0x590 [ 2221.370521][T11833] bpf_prog_test_run_skb+0xad2/0x12b0 [ 2221.375892][T11833] ? cpu_online+0x60/0x60 [ 2221.380226][T11833] bpf_prog_test_run+0x321/0x390 [ 2221.385176][T11833] __sys_bpf+0x49d/0x890 [ 2221.389415][T11833] ? bpf_link_show_fdinfo+0x390/0x390 [ 2221.394789][T11833] ? lock_chain_count+0x20/0x20 [ 2221.399633][T11833] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2221.405624][T11833] __x64_sys_bpf+0x7c/0x90 [ 2221.410038][T11833] do_syscall_64+0x55/0xa0 [ 2221.414449][T11833] ? clear_bhb_loop+0x40/0x90 [ 2221.419118][T11833] ? clear_bhb_loop+0x40/0x90 [ 2221.423788][T11833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2221.429675][T11833] RIP: 0033:0x7f4ed9f9c799 [ 2221.434081][T11833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2221.453690][T11833] RSP: 002b:00007f4edae5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2221.462125][T11833] RAX: ffffffffffffffda RBX: 00007f4eda215fa0 RCX: 00007f4ed9f9c799 [ 2221.470085][T11833] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2221.478062][T11833] RBP: 00007f4edae5a090 R08: 0000000000000000 R09: 0000000000000000 [ 2221.486025][T11833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2221.493982][T11833] R13: 00007f4eda216038 R14: 00007f4eda215fa0 R15: 00007fff4c42c9c8 [ 2221.501974][T11833] [ 2221.864935][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11902'. [ 2222.076619][T11865] netlink: 830 bytes leftover after parsing attributes in process `syz.3.11907'. [ 2222.087034][T11865] veth0_to_bond: entered promiscuous mode [ 2222.111292][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.117663][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.146406][T11875] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11911'. [ 2223.174485][T11875] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11911'. [ 2223.192667][T11874] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11911'. [ 2223.209482][T11874] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11911'. [ 2223.454030][T11882] wg2: entered allmulticast mode [ 2223.474041][T11883] wg2: entered promiscuous mode [ 2223.808683][T11907] sit0: left promiscuous mode [ 2223.916844][T11911] sit0: entered promiscuous mode [ 2226.276221][T11921] FAULT_INJECTION: forcing a failure. [ 2226.276221][T11921] name failslab, interval 1, probability 0, space 0, times 0 [ 2226.289176][T11921] CPU: 1 PID: 11921 Comm: syz.1.11926 Not tainted syzkaller #0 [ 2226.296753][T11921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2226.307004][T11921] Call Trace: [ 2226.310309][T11921] [ 2226.313260][T11921] dump_stack_lvl+0x18c/0x250 [ 2226.317975][T11921] ? show_regs_print_info+0x20/0x20 [ 2226.323207][T11921] ? load_image+0x400/0x400 [ 2226.327740][T11921] ? perf_tp_event+0x132d/0x1450 [ 2226.332715][T11921] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2226.338563][T11921] should_fail_ex+0x39d/0x4d0 [ 2226.343266][T11921] should_failslab+0x9/0x20 [ 2226.347771][T11921] slab_pre_alloc_hook+0x59/0x310 [ 2226.352798][T11921] kmem_cache_alloc+0x5a/0x2d0 [ 2226.357559][T11921] ? skb_clone+0x1eb/0x370 [ 2226.361974][T11921] skb_clone+0x1eb/0x370 [ 2226.366302][T11921] bpf_clone_redirect+0x167/0x4a0 [ 2226.371331][T11921] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 2226.376784][T11921] ? perf_output_read+0x370/0x14c0 [ 2226.381891][T11921] ? perf_trace_preemptirq_template+0x269/0x330 [ 2226.388130][T11921] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2226.394107][T11921] ? lockdep_softirqs_on+0x580/0x580 [ 2226.399388][T11921] ? lock_chain_count+0x20/0x20 [ 2226.404245][T11921] ? __local_bh_disable_ip+0x108/0x1a0 [ 2226.409697][T11921] ? __cant_sleep+0x220/0x220 [ 2226.414370][T11921] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2226.419736][T11921] ? _local_bh_enable+0xa0/0xa0 [ 2226.424593][T11921] ? bpf_test_timer_continue+0x135/0x380 [ 2226.430228][T11921] ? bpf_test_run+0x174/0x870 [ 2226.434902][T11921] bpf_test_run+0x2df/0x870 [ 2226.439415][T11921] ? bpf_test_run+0x174/0x870 [ 2226.444089][T11921] ? convert___skb_to_skb+0x590/0x590 [ 2226.449459][T11921] ? eth_get_headlen+0x210/0x210 [ 2226.454408][T11921] ? slab_build_skb+0x25f/0x3f0 [ 2226.459257][T11921] ? convert___skb_to_skb+0x3d/0x590 [ 2226.464538][T11921] bpf_prog_test_run_skb+0xad2/0x12b0 [ 2226.469918][T11921] ? cpu_online+0x60/0x60 [ 2226.474244][T11921] bpf_prog_test_run+0x321/0x390 [ 2226.479179][T11921] __sys_bpf+0x49d/0x890 [ 2226.483421][T11921] ? bpf_link_show_fdinfo+0x390/0x390 [ 2226.488800][T11921] ? lock_chain_count+0x20/0x20 [ 2226.494165][T11921] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2226.500150][T11921] __x64_sys_bpf+0x7c/0x90 [ 2226.504652][T11921] do_syscall_64+0x55/0xa0 [ 2226.509065][T11921] ? clear_bhb_loop+0x40/0x90 [ 2226.513824][T11921] ? clear_bhb_loop+0x40/0x90 [ 2226.518502][T11921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2226.524411][T11921] RIP: 0033:0x7f902719c799 [ 2226.528822][T11921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2226.548424][T11921] RSP: 002b:00007f90253f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2226.556849][T11921] RAX: ffffffffffffffda RBX: 00007f9027415fa0 RCX: 00007f902719c799 [ 2226.564816][T11921] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2226.572781][T11921] RBP: 00007f90253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2226.580742][T11921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2226.588707][T11921] R13: 00007f9027416038 R14: 00007f9027415fa0 R15: 00007ffc3603d6a8 [ 2226.596687][T11921] [ 2226.800916][T11933] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.11929'. [ 2226.844359][T11933] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11929'. [ 2227.452813][T11946] netlink: 'syz.1.11931': attribute type 9 has an invalid length. [ 2227.478582][T11946] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.11931'. [ 2228.067728][T11961] netlink: 'syz.1.11937': attribute type 39 has an invalid length. [ 2228.533268][T11976] sock: sock_set_timeout: `syz.3.11941' (pid 11976) tries to set negative timeout [ 2228.547615][T11964] syzkaller0: entered promiscuous mode [ 2228.554198][T11964] syzkaller0: entered allmulticast mode [ 2229.372205][T11989] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.11944'. [ 2229.382282][T11989] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.11944'. [ 2231.035608][T11985] netlink: 'syz.3.11943': attribute type 10 has an invalid length. [ 2231.061184][T11985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2231.083963][T11985] .`: (slave batadv0): Enslaving as an active interface with an up link [ 2231.642620][T12012] netlink: 'syz.1.11952': attribute type 21 has an invalid length. [ 2231.654095][T12012] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11952'. [ 2231.704690][T12012] netlink: 'syz.1.11952': attribute type 10 has an invalid length. [ 2231.718735][T12012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11952'. [ 2231.736456][T12012] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2232.195846][T12022] netlink: 4091 bytes leftover after parsing attributes in process `syz.1.11956'. [ 2232.297246][T12035] FAULT_INJECTION: forcing a failure. [ 2232.297246][T12035] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.310108][T12035] CPU: 0 PID: 12035 Comm: syz.0.11960 Not tainted syzkaller #0 [ 2232.317684][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2232.327758][T12035] Call Trace: [ 2232.331052][T12035] [ 2232.333990][T12035] dump_stack_lvl+0x18c/0x250 [ 2232.338678][T12035] ? show_regs_print_info+0x20/0x20 [ 2232.343877][T12035] ? load_image+0x400/0x400 [ 2232.348464][T12035] ? perf_tp_event+0x132d/0x1450 [ 2232.353413][T12035] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2232.359211][T12035] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 2232.364668][T12035] should_fail_ex+0x39d/0x4d0 [ 2232.369349][T12035] should_failslab+0x9/0x20 [ 2232.373850][T12035] slab_pre_alloc_hook+0x59/0x310 [ 2232.378873][T12035] kmem_cache_alloc+0x5a/0x2d0 [ 2232.383633][T12035] ? skb_clone+0x1eb/0x370 [ 2232.388043][T12035] skb_clone+0x1eb/0x370 [ 2232.392287][T12035] bpf_clone_redirect+0x167/0x4a0 [ 2232.397314][T12035] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 2232.402768][T12035] ? perf_output_read+0x370/0x14c0 [ 2232.407874][T12035] ? perf_trace_preemptirq_template+0x269/0x330 [ 2232.414115][T12035] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2232.420090][T12035] ? lockdep_softirqs_on+0x580/0x580 [ 2232.425368][T12035] ? lock_chain_count+0x20/0x20 [ 2232.430208][T12035] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 2232.436448][T12035] ? __local_bh_disable_ip+0x108/0x1a0 [ 2232.441899][T12035] ? __cant_sleep+0x220/0x220 [ 2232.446571][T12035] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2232.451935][T12035] ? _local_bh_enable+0xa0/0xa0 [ 2232.456784][T12035] ? bpf_test_timer_continue+0x135/0x380 [ 2232.462412][T12035] ? bpf_test_run+0x174/0x870 [ 2232.467168][T12035] bpf_test_run+0x2df/0x870 [ 2232.471678][T12035] ? bpf_test_run+0x174/0x870 [ 2232.476350][T12035] ? convert___skb_to_skb+0x590/0x590 [ 2232.481719][T12035] ? eth_get_headlen+0x210/0x210 [ 2232.486657][T12035] ? slab_build_skb+0x25f/0x3f0 [ 2232.491505][T12035] ? convert___skb_to_skb+0x3d/0x590 [ 2232.496785][T12035] bpf_prog_test_run_skb+0xad2/0x12b0 [ 2232.502171][T12035] ? cpu_online+0x60/0x60 [ 2232.506492][T12035] bpf_prog_test_run+0x321/0x390 [ 2232.511426][T12035] __sys_bpf+0x49d/0x890 [ 2232.515662][T12035] ? bpf_link_show_fdinfo+0x390/0x390 [ 2232.521038][T12035] ? lock_chain_count+0x20/0x20 [ 2232.525918][T12035] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2232.531940][T12035] __x64_sys_bpf+0x7c/0x90 [ 2232.536351][T12035] do_syscall_64+0x55/0xa0 [ 2232.540785][T12035] ? clear_bhb_loop+0x40/0x90 [ 2232.545549][T12035] ? clear_bhb_loop+0x40/0x90 [ 2232.550219][T12035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2232.556104][T12035] RIP: 0033:0x7f742219c799 [ 2232.560521][T12035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2232.580125][T12035] RSP: 002b:00007f7422fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2232.588532][T12035] RAX: ffffffffffffffda RBX: 00007f7422415fa0 RCX: 00007f742219c799 [ 2232.596496][T12035] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2232.604547][T12035] RBP: 00007f7422fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 2232.612511][T12035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2232.620478][T12035] R13: 00007f7422416038 R14: 00007f7422415fa0 R15: 00007ffe68908d08 [ 2232.628451][T12035] [ 2233.560691][T12063] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.11969'. [ 2233.712322][T12074] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.11972'. [ 2234.262155][T12086] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.11976'. [ 2234.361326][T12088] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11975'. [ 2235.526054][T12129] netlink: 'syz.3.11990': attribute type 16 has an invalid length. [ 2235.548624][T12129] netlink: 'syz.3.11990': attribute type 3 has an invalid length. [ 2235.557954][T12126] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11989'. [ 2235.578565][T12129] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11990'. [ 2235.654021][T12135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11992'. [ 2235.782913][T12126] team0: Port device C removed [ 2235.794572][T12126] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2235.855596][T12133] syzkaller0: entered promiscuous mode [ 2235.865777][T12133] syzkaller0: entered allmulticast mode [ 2235.875425][T12135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11992'. [ 2242.986834][T12198] __sock_release: fasync list not empty! [ 2243.601959][T12207] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12013'. [ 2245.119207][T12233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2245.135789][T12233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2245.173212][T12233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2245.181553][T12233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2245.530314][T12235] netlink: 'syz.0.12021': attribute type 3 has an invalid length. [ 2245.549214][T12235] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.12021'. [ 2246.175486][T12246] netlink: 'syz.0.12024': attribute type 21 has an invalid length. [ 2246.207024][T12246] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12024'. [ 2246.249849][T12246] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12024'. [ 2246.801330][T12256] netlink: 'syz.0.12025': attribute type 29 has an invalid length. [ 2246.832072][T12256] netlink: 'syz.0.12025': attribute type 29 has an invalid length. [ 2246.841837][T12256] netlink: 'syz.0.12025': attribute type 29 has an invalid length. [ 2248.612661][T12279] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.12033'. [ 2248.692172][T12281] dummy0: entered promiscuous mode [ 2248.697569][T12281] dummy0: entered allmulticast mode [ 2249.802031][T20814] Bluetooth: hci0: command 0x0406 tx timeout [ 2251.280602][T12310] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.12042'. [ 2251.291262][T12315] netlink: 'syz.2.12044': attribute type 7 has an invalid length. [ 2251.982646][T12323] netlink: 'syz.1.12046': attribute type 2 has an invalid length. [ 2253.372275][T12357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2253.962427][T12377] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12063'. [ 2253.972831][T12377] batadv_slave_1: entered promiscuous mode [ 2256.692358][T12402] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12071'. [ 2256.724502][T12402] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12071'. [ 2256.819825][T12405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12071'. [ 2256.878274][T12411] netlink: 'syz.1.12073': attribute type 39 has an invalid length. [ 2256.890312][T12402] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12071'. [ 2257.723130][T12433] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12079'. [ 2257.989970][T12440] netlink: 'syz.3.12081': attribute type 28 has an invalid length. [ 2258.018321][T12440] netlink: 'syz.3.12081': attribute type 29 has an invalid length. [ 2258.036750][T12440] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12081'. [ 2258.515252][T12470] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12089'. [ 2258.624377][T12470] bridge0: port 1(bridge_slave_0) entered disabled state [ 2258.723030][T12470] bridge_slave_0 (unregistering): left allmulticast mode [ 2258.730757][T12470] bridge_slave_0 (unregistering): left promiscuous mode [ 2258.738218][T12470] bridge0: port 1(bridge_slave_0) entered disabled state [ 2258.795004][T12473] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.12090'. [ 2258.952639][T12482] netlink: 'syz.0.12093': attribute type 21 has an invalid length. [ 2258.961053][T12482] netlink: 164 bytes leftover after parsing attributes in process `syz.0.12093'. [ 2259.474574][T12507] netlink: 'syz.1.12100': attribute type 3 has an invalid length. [ 2259.482714][T12507] netlink: 123056 bytes leftover after parsing attributes in process `syz.1.12100'. [ 2259.532251][T12509] netlink: 'syz.1.12101': attribute type 33 has an invalid length. [ 2259.540434][T12509] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12101'. [ 2259.551202][T12509] `: renamed from team0 (while UP) [ 2259.825286][T12516] netlink: 'syz.1.12102': attribute type 41 has an invalid length. [ 2259.835064][T12516] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12102'. [ 2260.807596][T12534] netlink: 'syz.1.12109': attribute type 3 has an invalid length. [ 2260.817560][T12534] netlink: 'syz.1.12109': attribute type 1 has an invalid length. [ 2260.832338][T12534] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.12109'. [ 2260.980392][T12540] netlink: 'syz.1.12109': attribute type 1 has an invalid length. [ 2261.002627][T12540] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.12109'. [ 2261.366615][T12552] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.12112'. [ 2261.422316][T12551] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.12112'. [ 2261.775113][T20814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2261.784335][T20814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2261.794305][T20814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2261.806127][T20814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2261.817224][T20814] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2261.827226][T20814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2262.339623][T12566] chnl_net:caif_netlink_parms(): no params data found [ 2262.502144][T12566] bridge0: port 1(bridge_slave_0) entered blocking state [ 2262.509452][T12566] bridge0: port 1(bridge_slave_0) entered disabled state [ 2262.526895][T12566] bridge_slave_0: entered allmulticast mode [ 2262.540526][T12566] bridge_slave_0: entered promiscuous mode [ 2262.589311][T12566] bridge0: port 2(bridge_slave_1) entered blocking state [ 2262.603636][T12566] bridge0: port 2(bridge_slave_1) entered disabled state [ 2262.630105][T12566] bridge_slave_1: entered allmulticast mode [ 2262.649897][T12566] bridge_slave_1: entered promiscuous mode [ 2262.659850][T12601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12124'. [ 2262.673260][T12602] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12124'. [ 2262.787135][T12566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2262.799676][T12566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2262.870213][T12566] team0: Port device team_slave_0 added [ 2262.896950][T12566] team0: Port device team_slave_1 added [ 2262.917553][T12566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2262.925192][T12566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2262.953620][T12566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2262.967433][T12566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2262.975898][T12566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2263.010204][T12566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2263.094825][T12566] hsr_slave_0: entered promiscuous mode [ 2263.101594][T12566] hsr_slave_1: entered promiscuous mode [ 2263.233539][T12614] netlink: 'syz.1.12129': attribute type 21 has an invalid length. [ 2263.251835][T12614] IPv6: NLM_F_CREATE should be specified when creating new route [ 2263.264253][T12614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2263.271591][T12614] IPv6: NLM_F_CREATE should be set when creating new route [ 2263.278906][T12614] IPv6: NLM_F_CREATE should be set when creating new route [ 2263.286154][T12614] IPv6: NLM_F_CREATE should be set when creating new route [ 2263.521700][T12566] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2263.698350][T12566] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2263.724205][T12632] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.12134'. [ 2263.746267][T12639] netlink: 'syz.3.12136': attribute type 21 has an invalid length. [ 2263.870317][T20814] Bluetooth: hci0: command tx timeout [ 2263.981714][T12566] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2264.135974][T12566] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2264.478048][T12566] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2264.495168][T12566] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2264.498952][T12660] ref_ctr_offset mismatch. inode: 0x71 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 2264.516535][T12566] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2264.537206][T12566] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2264.640289][T12664] netlink: 'syz.1.12144': attribute type 17 has an invalid length. [ 2264.683236][T12566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2264.706761][T12566] 8021q: adding VLAN 0 to HW filter on device team0 [ 2264.728668][ T6942] bridge0: port 1(bridge_slave_0) entered blocking state [ 2264.735873][ T6942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2264.761714][ T6942] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.768938][ T6942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2265.314055][T12566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2265.464791][T12566] veth0_vlan: entered promiscuous mode [ 2265.516515][T12566] veth1_vlan: entered promiscuous mode [ 2265.634766][T12566] veth0_macvtap: entered promiscuous mode [ 2265.664141][T12566] veth1_macvtap: entered promiscuous mode [ 2265.716100][T12566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.741087][T12566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.769674][T12566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2265.801440][T12566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2265.840706][T12566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.921861][T12566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2265.949489][T20814] Bluetooth: hci0: command tx timeout [ 2265.958077][T12566] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2265.987642][T12566] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.006889][T12566] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.022997][T12566] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.457578][ T6938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2266.482009][ T6938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2266.742304][ T6939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2266.755268][ T6939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2268.030342][T20814] Bluetooth: hci0: command tx timeout [ 2268.187727][T12734] netlink: 'syz.0.12165': attribute type 1 has an invalid length. [ 2268.224014][T12734] __nla_validate_parse: 1 callbacks suppressed [ 2268.224046][T12734] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.12165'. [ 2268.248155][T12734] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12165'. [ 2268.683204][T12758] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12172'. [ 2268.945707][T12777] netlink: 16358 bytes leftover after parsing attributes in process `syz.3.12178'. [ 2269.905129][T12801] netlink: 'syz.3.12186': attribute type 21 has an invalid length. [ 2270.042650][T12811] netlink: 'syz.0.12191': attribute type 39 has an invalid length. [ 2270.112104][T20814] Bluetooth: hci0: command tx timeout [ 2270.390466][T12824] netlink: 'syz.0.12194': attribute type 13 has an invalid length. [ 2270.398623][T12824] netlink: 160 bytes leftover after parsing attributes in process `syz.0.12194'. [ 2270.658945][T12824] erspan0: refused to change device tx_queue_len [ 2270.670058][T12824] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2271.316706][T12844] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12198'. [ 2271.803362][T12868] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.12208'. [ 2271.847952][T12866] netlink: 'syz.2.12206': attribute type 10 has an invalid length. [ 2271.925845][T12866] team0 (unregistering): Port device C removed [ 2271.960527][T12866] team0 (unregistering): Port device team_slave_1 removed [ 2271.979497][T12866] team0 (unregistering): Port device geneve1 removed [ 2272.012500][T12874] IPv6: pim6reg1: Disabled Multicast RS [ 2272.031944][T12880] netlink: 'syz.1.12210': attribute type 3 has an invalid length. [ 2272.042392][T12880] netlink: 'syz.1.12210': attribute type 4 has an invalid length. [ 2272.051147][T12880] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.12210'. [ 2272.072126][T12874] netlink: 'syz.1.12210': attribute type 58 has an invalid length. [ 2272.080580][T12874] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12210'. [ 2272.285462][T12885] syzkaller0: entered promiscuous mode [ 2272.294305][T12885] syzkaller0: entered allmulticast mode [ 2273.263541][T12919] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12220'. [ 2275.294984][T12909] netlink: 'syz.1.12218': attribute type 4 has an invalid length. [ 2275.326584][T12919] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2275.358568][T12919] CPU: 1 PID: 12919 Comm: syz.3.12220 Not tainted syzkaller #0 [ 2275.366174][T12919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2275.376242][T12919] Call Trace: [ 2275.379522][T12919] [ 2275.382447][T12919] dump_stack_lvl+0x18c/0x250 [ 2275.387129][T12919] ? show_regs_print_info+0x20/0x20 [ 2275.392322][T12919] ? load_image+0x400/0x400 [ 2275.396826][T12919] sysfs_warn_dup+0x8e/0xa0 [ 2275.401325][T12919] sysfs_do_create_link_sd+0xc0/0x110 [ 2275.406690][T12919] device_add_class_symlinks+0x1cf/0x240 [ 2275.412324][T12919] device_add+0x507/0xc20 [ 2275.416651][T12919] wiphy_register+0x1dad/0x2ae0 [ 2275.421509][T12919] ? cfg80211_event_work+0x40/0x40 [ 2275.426609][T12919] ? minstrel_ht_alloc+0x88a/0x990 [ 2275.431723][T12919] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2275.437788][T12919] ieee80211_register_hw+0x3464/0x4250 [ 2275.443263][T12919] ? ieee80211_tasklet_handler+0x20/0x20 [ 2275.448921][T12919] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2275.454815][T12919] ? __debug_object_init+0xec/0x450 [ 2275.460013][T12919] ? __asan_memset+0x22/0x40 [ 2275.464601][T12919] ? __hrtimer_init+0x186/0x270 [ 2275.469456][T12919] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2275.475197][T12919] ? mac80211_hwsim_free+0x220/0x220 [ 2275.480496][T12919] ? rcu_is_watching+0x15/0xb0 [ 2275.485266][T12919] ? kstrndup+0xbd/0x140 [ 2275.489510][T12919] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2275.494629][T12919] ? __nla_validate+0x50/0x50 [ 2275.499311][T12919] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2275.505645][T12919] ? __nla_parse+0x40/0x50 [ 2275.510055][T12919] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2275.516380][T12919] genl_family_rcv_msg_doit+0x211/0x310 [ 2275.521924][T12919] ? end_current_label_crit_section+0x170/0x170 [ 2275.528177][T12919] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2275.534068][T12919] ? bpf_lsm_capable+0x9/0x10 [ 2275.538745][T12919] ? security_capable+0x89/0xb0 [ 2275.543597][T12919] genl_rcv_msg+0x619/0x7a0 [ 2275.548102][T12919] ? genl_bind+0x360/0x360 [ 2275.552519][T12919] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2275.558934][T12919] ? lockdep_hardirqs_on+0x98/0x150 [ 2275.564136][T12919] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2275.570291][T12919] netlink_rcv_skb+0x241/0x4d0 [ 2275.575059][T12919] ? genl_bind+0x360/0x360 [ 2275.579469][T12919] ? netlink_ack+0x1180/0x1180 [ 2275.584240][T12919] ? __lock_acquire+0x7d40/0x7d40 [ 2275.589261][T12919] ? down_read+0x1ac/0x2e0 [ 2275.593669][T12919] genl_rcv+0x28/0x40 [ 2275.597643][T12919] netlink_unicast+0x751/0x8d0 [ 2275.602428][T12919] netlink_sendmsg+0x8d0/0xbf0 [ 2275.607192][T12919] ? netlink_getsockopt+0x590/0x590 [ 2275.612404][T12919] ? perf_trace_preemptirq_template+0xac/0x330 [ 2275.618577][T12919] ? aa_sock_msg_perm+0x94/0x150 [ 2275.623515][T12919] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2275.628803][T12919] ? security_socket_sendmsg+0x80/0xa0 [ 2275.634259][T12919] ? netlink_getsockopt+0x590/0x590 [ 2275.639459][T12919] ____sys_sendmsg+0x5ba/0x960 [ 2275.644225][T12919] ? __asan_memset+0x22/0x40 [ 2275.648813][T12919] ? __sys_sendmsg_sock+0x30/0x30 [ 2275.653831][T12919] ? __import_iovec+0x5f2/0x850 [ 2275.658686][T12919] ? import_iovec+0x73/0xa0 [ 2275.663182][T12919] ___sys_sendmsg+0x2a6/0x360 [ 2275.667850][T12919] ? __sys_sendmsg+0x2a0/0x2a0 [ 2275.672619][T12919] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 2275.678877][T12919] __se_sys_sendmsg+0x1c2/0x2b0 [ 2275.683722][T12919] ? __x64_sys_sendmsg+0x80/0x80 [ 2275.688662][T12919] ? lockdep_hardirqs_on+0x98/0x150 [ 2275.693886][T12919] do_syscall_64+0x55/0xa0 [ 2275.698356][T12919] ? clear_bhb_loop+0x40/0x90 [ 2275.703039][T12919] ? clear_bhb_loop+0x40/0x90 [ 2275.707719][T12919] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2275.713627][T12919] RIP: 0033:0x7f022079c799 [ 2275.718042][T12919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2275.737905][T12919] RSP: 002b:00007f02216c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2275.746314][T12919] RAX: ffffffffffffffda RBX: 00007f0220a15fa0 RCX: 00007f022079c799 [ 2275.754279][T12919] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2275.762244][T12919] RBP: 00007f0220832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 2275.770207][T12919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2275.778171][T12919] R13: 00007f0220a16038 R14: 00007f0220a15fa0 R15: 00007ffe285365d8 [ 2275.786151][T12919] [ 2275.827863][T12924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12221'. [ 2275.838922][T12924] netlink: 'syz.1.12221': attribute type 5 has an invalid length. [ 2275.846771][T12924] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12221'. [ 2276.311246][T12951] netlink: 'syz.1.12230': attribute type 2 has an invalid length. [ 2276.328414][T12951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12230'. [ 2276.944014][T12969] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.12236'. [ 2276.965145][T12969] netlink: 'syz.1.12236': attribute type 4 has an invalid length. [ 2277.614147][T12973] netlink: 'syz.0.12239': attribute type 9 has an invalid length. [ 2277.641339][T12973] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.12239'. [ 2277.996089][T12987] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12242'. [ 2278.053492][ T8026] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2278.070605][ T8026] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2278.080617][ T8026] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2278.097655][T12987] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12242'. [ 2278.117773][ T8026] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2278.118822][T13000] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12242'. [ 2278.137260][ T8026] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2278.145285][ T8026] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2278.230391][T13005] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12242'. [ 2280.268833][ T8026] Bluetooth: hci2: command tx timeout [ 2280.711665][T13017] netlink: 'syz.3.12247': attribute type 7 has an invalid length. [ 2280.868008][T13025] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12249'. [ 2280.888370][T13025] bridge0: port 1(bridge_slave_0) entered disabled state [ 2281.140661][T13025] bridge_slave_0 (unregistering): left allmulticast mode [ 2281.148170][T13025] bridge_slave_0 (unregistering): left promiscuous mode [ 2281.156981][T13025] bridge0: port 1(bridge_slave_0) entered disabled state [ 2281.987163][T13041] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.12253'. [ 2282.137134][ T8026] Bluetooth: hci4: Malformed LE Event: 0x0b [ 2282.207817][T12996] chnl_net:caif_netlink_parms(): no params data found [ 2282.348653][ T8026] Bluetooth: hci2: command tx timeout [ 2282.355697][ T6933] tipc: Left network mode [ 2282.386813][T12996] bridge0: port 1(bridge_slave_0) entered blocking state [ 2282.394192][T12996] bridge0: port 1(bridge_slave_0) entered disabled state [ 2282.406061][T12996] bridge_slave_0: entered allmulticast mode [ 2282.413798][T12996] bridge_slave_0: entered promiscuous mode [ 2282.424164][T12996] bridge0: port 2(bridge_slave_1) entered blocking state [ 2282.431730][T12996] bridge0: port 2(bridge_slave_1) entered disabled state [ 2282.439578][T12996] bridge_slave_1: entered allmulticast mode [ 2282.447177][T12996] bridge_slave_1: entered promiscuous mode [ 2282.489240][T12996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2282.515065][T12996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2282.586721][T12996] team0: Port device team_slave_0 added [ 2282.607643][T12996] team0: Port device team_slave_1 added [ 2282.816509][T12996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2282.839620][T12996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2282.909306][T12996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2282.954896][T13074] netlink: 'syz.3.12257': attribute type 10 has an invalid length. [ 2282.970356][T13074] batman_adv: batadv0: Adding interface: netdevsim0 [ 2282.998257][T13074] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2283.095921][T12996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2283.114344][T12996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2283.177190][T12996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2283.591521][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.597884][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.846693][T13091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12262'. [ 2283.870931][T13091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12262'. [ 2284.153755][T13093] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12262'. [ 2284.188908][T13080] netlink: 'syz.1.12259': attribute type 10 has an invalid length. [ 2284.207523][T13080] `: Device ipvlan1 failed to register rx_handler [ 2284.331043][T12996] hsr_slave_0: entered promiscuous mode [ 2284.365696][T12996] hsr_slave_1: entered promiscuous mode [ 2284.389628][T12996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2284.407665][T12996] Cannot create hsr debugfs directory [ 2284.430556][ T8026] Bluetooth: hci2: command tx timeout [ 2285.053806][T13088] netlink: 'syz.0.12261': attribute type 4 has an invalid length. [ 2285.098763][T13088] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12261'. [ 2285.119204][T13108] netlink: 'syz.3.12265': attribute type 10 has an invalid length. [ 2285.208194][T13108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12265'. [ 2285.273684][T13088] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2285.445794][T13104] netlink: 'syz.3.12265': attribute type 10 has an invalid length. [ 2285.708904][T13108] netlink: 'syz.3.12265': attribute type 10 has an invalid length. [ 2285.724849][T13108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12265'. [ 2285.793067][T13117] netlink: 'syz.0.12261': attribute type 2 has an invalid length. [ 2285.805330][T13117] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12261'. [ 2285.875226][T13106] netlink: 'syz.3.12265': attribute type 10 has an invalid length. [ 2285.888785][T13106] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12265'. [ 2286.467277][T13142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12271'. [ 2286.496909][T13142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12271'. [ 2286.515559][T13142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12271'. [ 2286.517719][ T8026] Bluetooth: hci2: command tx timeout [ 2286.533363][T13142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12271'. [ 2286.887176][T13151] netlink: 'syz.3.12273': attribute type 10 has an invalid length. [ 2286.898256][T13151] .`: (slave bond_slave_0): Releasing backup interface [ 2287.153392][T12996] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2287.211825][T12996] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2287.253047][T13155] netlink: 8063 bytes leftover after parsing attributes in process `syz.0.12275'. [ 2287.379882][T12996] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2287.399434][T12996] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2287.610855][ T6933] hsr_slave_0: left promiscuous mode [ 2287.644849][ T6933] hsr_slave_1: left promiscuous mode [ 2287.664556][ T6933] veth1_macvtap: left promiscuous mode [ 2289.292037][T13202] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12285'. [ 2289.436500][T12996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2289.461544][T12996] 8021q: adding VLAN 0 to HW filter on device team0 [ 2289.502127][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 2289.509330][ T6939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2289.552039][T13211] netlink: 'syz.3.12288': attribute type 3 has an invalid length. [ 2289.580656][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state [ 2289.587893][ T6939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2289.612748][T13211] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.12288'. [ 2290.174148][T12996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2290.328819][T12996] veth0_vlan: entered promiscuous mode [ 2290.366825][T12996] veth1_vlan: entered promiscuous mode [ 2290.414225][T13248] netlink: 'syz.0.12294': attribute type 21 has an invalid length. [ 2290.430731][T13248] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12294'. [ 2290.448886][T13248] netlink: 'syz.0.12294': attribute type 5 has an invalid length. [ 2290.456769][T13248] netlink: 'syz.0.12294': attribute type 6 has an invalid length. [ 2290.468633][T13248] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12294'. [ 2290.575488][T12996] veth0_macvtap: entered promiscuous mode [ 2290.594208][T12996] veth1_macvtap: entered promiscuous mode [ 2290.656295][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2290.678604][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2290.693879][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2290.704674][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2290.730352][T12996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2290.775984][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2290.802029][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2290.826726][T12996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2290.843485][T12996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2290.860285][T12996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2290.874521][T12996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2290.895877][T12996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2290.915022][T12996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2290.928987][T12996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.111833][T13269] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12298'. [ 2291.127319][ T6933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2291.131186][T13269] openvswitch: netlink: Key type 4112 is out of range max 32 [ 2291.155895][ T6933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2291.347497][ T6939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2291.371008][ T6939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2292.290895][T13305] netlink: 'syz.2.12303': attribute type 10 has an invalid length. [ 2292.466652][T13305] team0 (unregistering): Port device team_slave_0 removed [ 2292.494575][T13305] team0 (unregistering): Port device team_slave_1 removed [ 2292.645879][T13310] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12305'. [ 2292.904001][T13318] netlink: 'syz.1.12308': attribute type 2 has an invalid length. [ 2292.915638][T13318] netlink: 'syz.1.12308': attribute type 1 has an invalid length. [ 2292.923901][T13318] netlink: 'syz.1.12308': attribute type 8 has an invalid length. [ 2292.932338][T13318] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12308'. [ 2293.524447][T13329] netlink: 'syz.0.12313': attribute type 15 has an invalid length. [ 2293.535846][T13329] netlink: 'syz.0.12313': attribute type 7 has an invalid length. [ 2293.710693][T13337] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12315'. [ 2296.105726][T13392] bridge0: port 2(bridge_slave_1) entered disabled state [ 2296.184936][T13392] bridge0: entered allmulticast mode [ 2296.287077][T13392] bridge_slave_1: left allmulticast mode [ 2296.356586][T13392] bridge_slave_1: left promiscuous mode [ 2296.415522][T13392] bridge0: port 2(bridge_slave_1) entered disabled state [ 2296.579448][T13392] bridge_slave_0: left allmulticast mode [ 2296.585151][T13392] bridge_slave_0: left promiscuous mode [ 2296.655486][T13392] bridge0: port 1(bridge_slave_0) entered disabled state [ 2297.372921][T13392] .`: (slave bridge0): Releasing backup interface [ 2298.192171][T13420] netlink: 'syz.0.12336': attribute type 5 has an invalid length. [ 2298.894951][T13434] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.12342'. [ 2298.914769][T13434] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12342'. [ 2298.927755][T13434] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.12342'. [ 2299.190604][T13445] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12344'. [ 2300.756715][T13504] netlink: 'syz.1.12365': attribute type 3 has an invalid length. [ 2300.772281][T13504] netlink: 'syz.1.12365': attribute type 1 has an invalid length. [ 2300.780949][T13504] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.12365'. [ 2300.782017][T13508] netlink: 'syz.2.12366': attribute type 3 has an invalid length. [ 2300.806113][T13508] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.12366'. [ 2300.952188][T13506] netlink: 'syz.3.12364': attribute type 10 has an invalid length. [ 2300.960962][T13506] batman_adv: batadv0: Removing interface: netdevsim0 [ 2301.075629][T13506] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 2301.115901][T13519] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.12368'. [ 2301.278979][T13523] netlink: 'syz.1.12369': attribute type 39 has an invalid length. [ 2301.549712][T13527] netlink: 'syz.3.12371': attribute type 153 has an invalid length. [ 2301.574443][T13527] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.12371'. [ 2302.283811][T13555] netlink: 'syz.2.12377': attribute type 2 has an invalid length. [ 2302.308627][T13555] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.12377'. [ 2302.321685][T13552] syzkaller0: entered promiscuous mode [ 2302.327210][T13552] syzkaller0: entered allmulticast mode [ 2307.785430][T13585] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12386'. [ 2307.795837][T13585] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12386'. [ 2307.805963][T13585] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12386'. [ 2307.816408][T13585] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12386'. [ 2307.929410][T13594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12388'. [ 2308.016780][T13601] netlink: 'syz.1.12388': attribute type 10 has an invalid length. [ 2308.024998][T13601] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12388'. [ 2308.167274][T13610] netlink: 134736 bytes leftover after parsing attributes in process `syz.3.12391'. [ 2308.184024][T13610] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12391'. [ 2308.193848][T13610] openvswitch: netlink: Key type 4112 is out of range max 32 [ 2308.795558][T13612] netlink: 'syz.1.12393': attribute type 21 has an invalid length. [ 2308.969077][T13616] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.12397'. [ 2308.995001][T13616] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.12397'. [ 2309.093072][T13620] netlink: 'syz.2.12395': attribute type 15 has an invalid length. [ 2309.523262][T13628] netlink: 'syz.2.12395': attribute type 17 has an invalid length. [ 2309.658140][T13634] hsr0: entered promiscuous mode [ 2309.667351][T13634] hsr0: entered allmulticast mode [ 2309.679115][T13634] hsr_slave_0: entered allmulticast mode [ 2309.684915][T13634] hsr_slave_1: entered allmulticast mode [ 2310.515140][T20814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2310.539168][T20814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2310.560493][T20814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2310.602385][T20814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2310.634236][T20814] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2310.641818][T20814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2312.750189][ T8026] Bluetooth: hci3: command tx timeout [ 2312.942679][T13640] IPv6: Can't replace route, no match found [ 2313.114203][T13660] __nla_validate_parse: 1 callbacks suppressed [ 2313.114222][T13660] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.12408'. [ 2313.144111][T13660] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.12408'. [ 2313.158689][T13660] tipc: Started in network mode [ 2313.163952][T13660] tipc: Node identity b, cluster identity 73 [ 2313.173699][T13660] tipc: Node number set to 11 [ 2313.271373][T13665] netlink: 'syz.2.12407': attribute type 4 has an invalid length. [ 2313.291266][T13665] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.12407'. [ 2313.307442][T13658] mac80211_hwsim hwsim186 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2313.393889][ T6939] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.707751][ T6939] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.805343][T13679] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.12406'. [ 2313.807355][ T6939] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.840676][T13646] chnl_net:caif_netlink_parms(): no params data found [ 2313.916277][ T6939] netdevsim netdevsim1 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.983789][T13646] bridge0: port 1(bridge_slave_0) entered blocking state [ 2313.998660][T13646] bridge0: port 1(bridge_slave_0) entered disabled state [ 2314.005871][T13646] bridge_slave_0: entered allmulticast mode [ 2314.018040][T13646] bridge_slave_0: entered promiscuous mode [ 2314.027962][T13646] bridge0: port 2(bridge_slave_1) entered blocking state [ 2314.035648][T13646] bridge0: port 2(bridge_slave_1) entered disabled state [ 2314.043605][T13646] bridge_slave_1: entered allmulticast mode [ 2314.051290][T13646] bridge_slave_1: entered promiscuous mode [ 2314.107809][T13688] netlink: 'syz.3.12414': attribute type 15 has an invalid length. [ 2314.151702][T13646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2314.163177][T13688] netlink: 'syz.3.12414': attribute type 17 has an invalid length. [ 2314.172785][T13688] netlink: 160 bytes leftover after parsing attributes in process `syz.3.12414'. [ 2314.220007][T13646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2314.314944][T13646] team0: Port device team_slave_0 added [ 2314.611636][T13692] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.12416'. [ 2314.829036][ T8026] Bluetooth: hci3: command tx timeout [ 2316.707458][T13646] team0: Port device team_slave_1 added [ 2316.737784][T13692] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.12416'. [ 2316.800669][ T6939] tipc: Left network mode [ 2316.847940][T13646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2316.899374][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2316.908862][ T8026] Bluetooth: hci3: command tx timeout [ 2316.949230][T13646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2317.236604][ T6944] wlan1: Trigger new scan to find an IBSS to join [ 2317.602785][T13646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2317.625814][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2317.690653][T13646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2318.005281][T13646] hsr_slave_0: entered promiscuous mode [ 2318.016394][T13646] hsr_slave_1: entered promiscuous mode [ 2318.024195][T13646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2318.039777][T13646] Cannot create hsr debugfs directory [ 2318.107080][T13723] netlink: 'syz.3.12424': attribute type 15 has an invalid length. [ 2318.274486][T13723] netlink: 'syz.3.12424': attribute type 17 has an invalid length. [ 2318.296771][T13723] netlink: 160 bytes leftover after parsing attributes in process `syz.3.12424'. [ 2318.777771][T13735] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.12425'. [ 2318.995564][ T8026] Bluetooth: hci3: command tx timeout [ 2320.843866][T13735] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.12425'. [ 2320.853417][T13735] tipc: Started in network mode [ 2320.858263][T13735] tipc: Node identity b, cluster identity 73 [ 2320.867376][T13735] tipc: Node number set to 11 [ 2321.924329][T13646] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2321.965676][T13646] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2322.018632][T13646] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2322.124064][T13646] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2322.189666][ T6941] wlan1: Trigger new scan to find an IBSS to join [ 2322.466908][ T6939] veth1_macvtap: left promiscuous mode [ 2322.473433][ T6939] veth1_vlan: left promiscuous mode [ 2322.479064][ T6939] veth0_vlan: left promiscuous mode [ 2322.832381][T13793] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.12438'. [ 2323.142468][ T6933] wlan1: Creating new IBSS network, BSSID 1a:7f:43:56:9b:dc [ 2323.186907][ T6939] ` (unregistering): Port device hsr_slave_0 removed [ 2323.738157][ T6939] ` (unregistering): Port device team_slave_1 removed [ 2323.922072][ T6939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2324.044392][ T6939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2324.475447][ T6939] bond0 (unregistering): Released all slaves [ 2324.537540][T13786] netlink: 'syz.3.12437': attribute type 15 has an invalid length. [ 2324.559293][T13790] netlink: 'syz.3.12437': attribute type 17 has an invalid length. [ 2324.568154][T13790] netlink: 160 bytes leftover after parsing attributes in process `syz.3.12437'. [ 2324.587911][T13793] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.12438'. [ 2324.696374][T13646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2324.775871][T13646] 8021q: adding VLAN 0 to HW filter on device team0 [ 2324.804456][ T6938] bridge0: port 1(bridge_slave_0) entered blocking state [ 2324.811714][ T6938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2324.853905][ T6938] bridge0: port 2(bridge_slave_1) entered blocking state [ 2324.861180][ T6938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2325.062657][ T6939] tipc: Left network mode [ 2325.371822][T13832] netlink: 'syz.2.12445': attribute type 2 has an invalid length. [ 2325.385927][T13832] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.12445'. [ 2325.678053][T13646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2326.141586][T13646] veth0_vlan: entered promiscuous mode [ 2326.605064][T13646] veth1_vlan: entered promiscuous mode [ 2326.800915][T13860] netlink: 'syz.0.12450': attribute type 4 has an invalid length. [ 2326.814324][T13862] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.12451'. [ 2326.827035][T13860] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.12450'. [ 2326.932657][T13862] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.12451'. [ 2327.012005][T13866] netlink: 'syz.2.12452': attribute type 15 has an invalid length. [ 2327.051145][T13646] veth0_macvtap: entered promiscuous mode [ 2327.167983][T13872] netlink: 'syz.2.12452': attribute type 17 has an invalid length. [ 2327.184413][T13872] netlink: 160 bytes leftover after parsing attributes in process `syz.2.12452'. [ 2327.237435][T13646] veth1_macvtap: entered promiscuous mode [ 2327.291288][T13646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2327.326007][T13646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.346569][T13646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2327.358338][T13646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.372958][T13646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2327.383597][T13646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.410245][T13646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2327.484750][T13646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2327.507226][T13646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.528790][T13646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2327.550743][T13646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.568552][T13646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2327.589935][T13646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.604034][T13646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2329.925082][T13646] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.940531][T13646] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.950387][T13646] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.960012][T13646] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2330.044176][T13915] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.12462'. [ 2330.077221][T13915] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.12462'. [ 2330.240903][ T6939] hsr_slave_0: left promiscuous mode [ 2330.259065][ T6939] hsr_slave_1: left promiscuous mode [ 2330.280460][ T6939] bridge_slave_1: left allmulticast mode [ 2330.298700][ T6939] bridge_slave_1: left promiscuous mode [ 2330.312567][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 2330.398412][ T6939] veth1_macvtap: left promiscuous mode [ 2330.404121][ T6939] veth0_macvtap: left promiscuous mode [ 2330.418765][ T6939] veth1_vlan: left promiscuous mode [ 2330.424224][ T6939] veth0_vlan: left promiscuous mode [ 2331.453320][ T6939] team0 (unregistering): Port device team_slave_1 removed [ 2331.521315][ T6939] team0 (unregistering): Port device team_slave_0 removed [ 2332.138383][T13945] netlink: 'syz.0.12471': attribute type 15 has an invalid length. [ 2332.161312][T13949] netlink: 'syz.0.12471': attribute type 17 has an invalid length. [ 2332.174356][T13949] netlink: 160 bytes leftover after parsing attributes in process `syz.0.12471'. [ 2332.292406][T13954] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.12472'. [ 2334.580035][ T6942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2334.587998][ T6942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2334.598170][T13954] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.12472'. [ 2334.697655][ T6933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2334.721521][ T6933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2335.353291][T13987] netlink: 'syz.2.12481': attribute type 15 has an invalid length. [ 2335.402812][T13987] netlink: 'syz.2.12481': attribute type 17 has an invalid length. [ 2335.410934][T13987] netlink: 160 bytes leftover after parsing attributes in process `syz.2.12481'. [ 2335.661380][T13989] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.12482'. [ 2335.914500][T13993] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12484'. [ 2338.143525][T13989] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.12482'. [ 2338.155059][T13993] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12484'. [ 2338.155112][T13995] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12484'. [ 2338.191277][T14017] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.12490'. [ 2338.595422][ T8026] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 2338.717877][T14050] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.12500'. [ 2338.735131][T14050] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.12500'. [ 2338.804862][T14052] netlink: 'syz.2.12501': attribute type 15 has an invalid length. [ 2338.851539][T14052] netlink: 'syz.2.12501': attribute type 17 has an invalid length. [ 2338.865557][T14052] netlink: 160 bytes leftover after parsing attributes in process `syz.2.12501'. [ 2341.610609][T14071] netlink: 'syz.0.12508': attribute type 10 has an invalid length. [ 2341.679239][T14077] __nla_validate_parse: 1 callbacks suppressed [ 2341.679257][T14077] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.12509'. [ 2341.698697][T14077] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.12509'. [ 2341.792254][T14081] netlink: 'syz.2.12510': attribute type 21 has an invalid length. [ 2341.808441][T14081] IPv6: NLM_F_CREATE should be specified when creating new route [ 2341.828149][T14081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2341.835448][T14081] IPv6: NLM_F_CREATE should be set when creating new route [ 2341.843202][T14081] IPv6: NLM_F_CREATE should be set when creating new route [ 2341.850535][T14081] IPv6: NLM_F_CREATE should be set when creating new route [ 2341.863433][ T8026] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 2341.870767][T14088] netlink: 10238 bytes leftover after parsing attributes in process `syz.3.12512'. [ 2342.381443][T14104] netlink: 'syz.3.12519': attribute type 15 has an invalid length. [ 2342.425854][T14104] netlink: 'syz.3.12519': attribute type 17 has an invalid length. [ 2342.434568][T14104] netlink: 160 bytes leftover after parsing attributes in process `syz.3.12519'. [ 2342.739055][T14106] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.12520'. [ 2343.873569][ T8026] Bluetooth: hci0: command tx timeout [ 2344.933346][T14106] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.12520'. [ 2344.948851][T14112] netlink: 'syz.1.12522': attribute type 11 has an invalid length. [ 2344.957210][T14112] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12522'. [ 2344.995095][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.008578][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.344692][T14127] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.12526'. [ 2345.357170][T14133] netlink: 'syz.0.12528': attribute type 29 has an invalid length. [ 2345.376698][T14134] netlink: 'syz.0.12528': attribute type 29 has an invalid length. [ 2345.423304][T14135] netlink: 'syz.2.12527': attribute type 9 has an invalid length. [ 2345.446059][T14135] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12527'. [ 2345.535354][T14133] netlink: 'syz.0.12528': attribute type 29 has an invalid length. [ 2345.814522][T14148] netlink: 'syz.1.12531': attribute type 33 has an invalid length. [ 2345.844582][T14148] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12531'. [ 2345.862578][T14148] `: renamed from ip6tnl0 (while UP) [ 2345.891071][T14148] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 2345.929420][T14153] netlink: 'syz.0.12533': attribute type 15 has an invalid length. [ 2346.024696][T14155] netlink: 'syz.0.12533': attribute type 17 has an invalid length. [ 2346.702863][T14157] __nla_validate_parse: 1 callbacks suppressed [ 2346.702879][T14157] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.12534'. [ 2347.075401][T14165] FAULT_INJECTION: forcing a failure. [ 2347.075401][T14165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2347.120823][T14165] CPU: 1 PID: 14165 Comm: syz.2.12536 Not tainted syzkaller #0 [ 2347.128438][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2347.138516][T14165] Call Trace: [ 2347.141812][T14165] [ 2347.144760][T14165] dump_stack_lvl+0x18c/0x250 [ 2347.149469][T14165] ? show_regs_print_info+0x20/0x20 [ 2347.154696][T14165] ? load_image+0x400/0x400 [ 2347.159236][T14165] ? __might_fault+0xaa/0x120 [ 2347.163934][T14165] ? __lock_acquire+0x7d40/0x7d40 [ 2347.168989][T14165] should_fail_ex+0x39d/0x4d0 [ 2347.173697][T14165] _copy_from_user+0x2f/0xe0 [ 2347.178317][T14165] __sys_bpf+0x23e/0x890 [ 2347.182581][T14165] ? bpf_link_show_fdinfo+0x390/0x390 [ 2347.187992][T14165] ? lock_chain_count+0x20/0x20 [ 2347.192874][T14165] __x64_sys_bpf+0x7c/0x90 [ 2347.197312][T14165] do_syscall_64+0x55/0xa0 [ 2347.201761][T14165] ? clear_bhb_loop+0x40/0x90 [ 2347.206455][T14165] ? clear_bhb_loop+0x40/0x90 [ 2347.211154][T14165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2347.217069][T14165] RIP: 0033:0x7ff71299c799 [ 2347.221505][T14165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2347.241138][T14165] RSP: 002b:00007ff7138d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2347.249581][T14165] RAX: ffffffffffffffda RBX: 00007ff712c16090 RCX: 00007ff71299c799 [ 2347.257579][T14165] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 2347.265576][T14165] RBP: 00007ff7138d2090 R08: 0000000000000000 R09: 0000000000000000 [ 2347.273571][T14165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2347.281564][T14165] R13: 00007ff712c16128 R14: 00007ff712c16090 R15: 00007ffc52f3be48 [ 2347.289573][T14165] [ 2349.054857][T14157] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.12534'. [ 2349.087268][T14161] netlink: 'syz.1.12535': attribute type 11 has an invalid length. [ 2349.229302][T14174] netlink: 'syz.0.12540': attribute type 3 has an invalid length. [ 2349.238716][T14174] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.12540'. [ 2349.678414][T14197] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.12547'. [ 2349.703838][T14197] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.12547'. [ 2349.820996][T14203] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.12550'. [ 2349.825372][T14204] FAULT_INJECTION: forcing a failure. [ 2349.825372][T14204] name failslab, interval 1, probability 0, space 0, times 0 [ 2349.845985][T14204] CPU: 1 PID: 14204 Comm: syz.2.12548 Not tainted syzkaller #0 [ 2349.853579][T14204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2349.863661][T14204] Call Trace: [ 2349.866962][T14204] [ 2349.869913][T14204] dump_stack_lvl+0x18c/0x250 [ 2349.874606][T14204] ? show_regs_print_info+0x20/0x20 [ 2349.879809][T14204] ? load_image+0x400/0x400 [ 2349.884332][T14204] ? __might_sleep+0xe0/0xe0 [ 2349.888938][T14204] ? __lock_acquire+0x7d40/0x7d40 [ 2349.893979][T14204] ? perf_trace_lock_acquire+0x104/0x410 [ 2349.899641][T14204] should_fail_ex+0x39d/0x4d0 [ 2349.904349][T14204] should_failslab+0x9/0x20 [ 2349.908876][T14204] slab_pre_alloc_hook+0x59/0x310 [ 2349.913920][T14204] ? perf_trace_lock_acquire+0x104/0x410 [ 2349.919578][T14204] ? bpf_prog_test_run_flow_dissector+0x259/0x640 [ 2349.926015][T14204] ? bpf_prog_test_run_flow_dissector+0x259/0x640 [ 2349.932476][T14204] __kmem_cache_alloc_node+0x53/0x250 [ 2349.937889][T14204] ? bpf_prog_test_run_flow_dissector+0x259/0x640 [ 2349.944329][T14204] __kmalloc+0xa4/0x230 [ 2349.948243][T14201] netlink: 160 bytes leftover after parsing attributes in process `syz.3.12549'. [ 2349.948506][T14204] bpf_prog_test_run_flow_dissector+0x259/0x640 [ 2349.948540][T14204] ? xdp_convert_buff_to_md+0x200/0x200 [ 2349.948561][T14204] ? __fget_files+0x28/0x4b0 [ 2349.948581][T14204] ? __fget_files+0x28/0x4b0 [ 2349.948601][T14204] ? __fget_files+0x43d/0x4b0 [ 2349.948632][T14204] ? xdp_convert_buff_to_md+0x200/0x200 [ 2349.948651][T14204] bpf_prog_test_run+0x321/0x390 [ 2349.948673][T14204] __sys_bpf+0x49d/0x890 [ 2349.998069][T14204] ? bpf_link_show_fdinfo+0x390/0x390 [ 2350.003458][T14204] ? lock_chain_count+0x20/0x20 [ 2350.008309][T14204] __x64_sys_bpf+0x7c/0x90 [ 2350.012720][T14204] do_syscall_64+0x55/0xa0 [ 2350.017131][T14204] ? clear_bhb_loop+0x40/0x90 [ 2350.021807][T14204] ? clear_bhb_loop+0x40/0x90 [ 2350.026486][T14204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2350.032380][T14204] RIP: 0033:0x7ff71299c799 [ 2350.036788][T14204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2350.056394][T14204] RSP: 002b:00007ff7138d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2350.064811][T14204] RAX: ffffffffffffffda RBX: 00007ff712c16090 RCX: 00007ff71299c799 [ 2350.072808][T14204] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 2350.080772][T14204] RBP: 00007ff7138d2090 R08: 0000000000000000 R09: 0000000000000000 [ 2350.088736][T14204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2350.096702][T14204] R13: 00007ff712c16128 R14: 00007ff712c16090 R15: 00007ffc52f3be48 [ 2350.104681][T14204] [ 2352.985593][T14218] validate_nla: 2 callbacks suppressed [ 2352.985604][T14218] netlink: 'syz.0.12555': attribute type 21 has an invalid length. [ 2353.002054][T14218] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12555'. [ 2353.110522][T14227] netlink: 'syz.0.12557': attribute type 10 has an invalid length. [ 2353.138759][T14227] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12557'. [ 2353.255793][T14235] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.12559'. [ 2353.278820][T14235] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.12559'. [ 2353.293752][T14235] tipc: Started in network mode [ 2353.299916][T14235] tipc: Node identity b, cluster identity 73 [ 2353.306046][T14235] tipc: Node number set to 11 [ 2353.343629][T14238] syzkaller0: entered promiscuous mode [ 2353.356552][T14238] syzkaller0: entered allmulticast mode [ 2353.661798][T14248] netlink: 'syz.1.12565': attribute type 29 has an invalid length. [ 2354.268386][T14256] FAULT_INJECTION: forcing a failure. [ 2354.268386][T14256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2354.290024][T14256] CPU: 1 PID: 14256 Comm: syz.3.12566 Not tainted syzkaller #0 [ 2354.297644][T14256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2354.307730][T14256] Call Trace: [ 2354.311033][T14256] [ 2354.313992][T14256] dump_stack_lvl+0x18c/0x250 [ 2354.318703][T14256] ? show_regs_print_info+0x20/0x20 [ 2354.323925][T14256] ? load_image+0x400/0x400 [ 2354.328432][T14256] ? __might_fault+0xaa/0x120 [ 2354.333112][T14256] ? __lock_acquire+0x7d40/0x7d40 [ 2354.338131][T14256] should_fail_ex+0x39d/0x4d0 [ 2354.342814][T14256] _copy_from_user+0x2f/0xe0 [ 2354.347409][T14256] bpf_prog_test_run_flow_dissector+0x281/0x640 [ 2354.353650][T14256] ? xdp_convert_buff_to_md+0x200/0x200 [ 2354.359188][T14256] ? __fget_files+0x28/0x4b0 [ 2354.363770][T14256] ? __fget_files+0x28/0x4b0 [ 2354.368353][T14256] ? __fget_files+0x43d/0x4b0 [ 2354.373035][T14256] ? xdp_convert_buff_to_md+0x200/0x200 [ 2354.378584][T14256] bpf_prog_test_run+0x321/0x390 [ 2354.383540][T14256] __sys_bpf+0x49d/0x890 [ 2354.387778][T14256] ? bpf_link_show_fdinfo+0x390/0x390 [ 2354.393153][T14256] ? lock_chain_count+0x20/0x20 [ 2354.398000][T14256] __x64_sys_bpf+0x7c/0x90 [ 2354.402413][T14256] do_syscall_64+0x55/0xa0 [ 2354.406822][T14256] ? clear_bhb_loop+0x40/0x90 [ 2354.411496][T14256] ? clear_bhb_loop+0x40/0x90 [ 2354.416184][T14256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2354.422076][T14256] RIP: 0033:0x7f022079c799 [ 2354.426485][T14256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2354.446088][T14256] RSP: 002b:00007f02216a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2354.454500][T14256] RAX: ffffffffffffffda RBX: 00007f0220a16090 RCX: 00007f022079c799 [ 2354.462460][T14256] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 2354.470428][T14256] RBP: 00007f02216a3090 R08: 0000000000000000 R09: 0000000000000000 [ 2354.478389][T14256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2354.486370][T14256] R13: 00007f0220a16128 R14: 00007f0220a16090 R15: 00007ffe285365d8 [ 2354.494388][T14256] [ 2356.374070][T14248] netlink: 'syz.1.12565': attribute type 29 has an invalid length. [ 2356.400227][T14249] netlink: 'syz.1.12565': attribute type 29 has an invalid length. [ 2356.413960][T14259] netlink: 'syz.2.12567': attribute type 15 has an invalid length. [ 2356.506792][T14263] netlink: 'syz.2.12567': attribute type 17 has an invalid length. [ 2356.522883][T14263] netlink: 160 bytes leftover after parsing attributes in process `syz.2.12567'. [ 2356.598016][T14277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12570'. [ 2357.565165][T20814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2357.575210][T20814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2357.605557][T20814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2357.625132][T20814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2357.646059][T20814] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2357.663766][T20814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2359.443675][T14277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12570'. [ 2359.542721][T14287] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.12573'. [ 2359.572904][T14287] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.12573'. [ 2359.789005][T20814] Bluetooth: hci1: command tx timeout [ 2360.074827][T14284] chnl_net:caif_netlink_parms(): no params data found [ 2360.168327][T14304] FAULT_INJECTION: forcing a failure. [ 2360.168327][T14304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2360.211254][T14304] CPU: 0 PID: 14304 Comm: syz.1.12578 Not tainted syzkaller #0 [ 2360.218860][T14304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2360.228936][T14304] Call Trace: [ 2360.232229][T14304] [ 2360.235172][T14304] dump_stack_lvl+0x18c/0x250 [ 2360.239879][T14304] ? show_regs_print_info+0x20/0x20 [ 2360.245098][T14304] ? load_image+0x400/0x400 [ 2360.249630][T14304] ? __might_fault+0xaa/0x120 [ 2360.254325][T14304] ? __lock_acquire+0x7d40/0x7d40 [ 2360.259374][T14304] should_fail_ex+0x39d/0x4d0 [ 2360.264084][T14304] _copy_to_user+0x2f/0xa0 [ 2360.268522][T14304] bpf_test_finish+0x19f/0x650 [ 2360.273315][T14304] ? convert_skb_to___skb+0x420/0x420 [ 2360.278702][T14304] ? read_tsc+0x9/0x20 [ 2360.282802][T14304] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 2360.289087][T14304] ? xdp_convert_buff_to_md+0x200/0x200 [ 2360.294654][T14304] ? lockdep_hardirqs_on+0x98/0x150 [ 2360.299879][T14304] ? bpf_prog_test_run+0x315/0x390 [ 2360.305011][T14304] ? xdp_convert_buff_to_md+0x200/0x200 [ 2360.310579][T14304] bpf_prog_test_run+0x321/0x390 [ 2360.315537][T14304] __sys_bpf+0x49d/0x890 [ 2360.319797][T14304] ? bpf_link_show_fdinfo+0x390/0x390 [ 2360.325200][T14304] ? lock_chain_count+0x20/0x20 [ 2360.330084][T14304] __x64_sys_bpf+0x7c/0x90 [ 2360.334519][T14304] do_syscall_64+0x55/0xa0 [ 2360.338969][T14304] ? clear_bhb_loop+0x40/0x90 [ 2360.343677][T14304] ? clear_bhb_loop+0x40/0x90 [ 2360.348380][T14304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2360.354394][T14304] RIP: 0033:0x7fc77b99c799 [ 2360.358828][T14304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2360.378462][T14304] RSP: 002b:00007fc77c842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2360.386959][T14304] RAX: ffffffffffffffda RBX: 00007fc77bc16090 RCX: 00007fc77b99c799 [ 2360.394950][T14304] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 2360.402951][T14304] RBP: 00007fc77c842090 R08: 0000000000000000 R09: 0000000000000000 [ 2360.410956][T14304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2360.418996][T14304] R13: 00007fc77bc16128 R14: 00007fc77bc16090 R15: 00007ffcbea675a8 [ 2360.427096][T14304] [ 2360.484290][T14284] bridge0: port 1(bridge_slave_0) entered blocking state [ 2360.491584][T14284] bridge0: port 1(bridge_slave_0) entered disabled state [ 2360.498887][T14284] bridge_slave_0: entered allmulticast mode [ 2360.506183][T14284] bridge_slave_0: entered promiscuous mode [ 2360.525193][T14284] bridge0: port 2(bridge_slave_1) entered blocking state [ 2360.534944][T14284] bridge0: port 2(bridge_slave_1) entered disabled state [ 2360.546201][T14284] bridge_slave_1: entered allmulticast mode [ 2360.560487][T14284] bridge_slave_1: entered promiscuous mode [ 2360.615987][T14284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2360.636132][T14284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2360.737334][T14284] team0: Port device team_slave_0 added [ 2360.764686][T14284] team0: Port device team_slave_1 added [ 2360.827709][T14284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2360.850178][T14284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2360.931963][T14284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2360.971548][T14284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2361.009041][T14284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2361.048913][T14284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2361.868728][T20814] Bluetooth: hci1: command tx timeout [ 2362.978143][T14284] hsr_slave_0: entered promiscuous mode [ 2362.985529][T14284] hsr_slave_1: entered promiscuous mode [ 2363.015271][T14284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2363.026648][T14284] Cannot create hsr debugfs directory [ 2363.219807][T14322] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.12584'. [ 2363.286132][T14284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2363.306643][T14320] netlink: 'syz.1.12582': attribute type 15 has an invalid length. [ 2363.315905][T14322] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.12584'. [ 2363.569486][T14284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2363.593259][T14325] netlink: 'syz.1.12582': attribute type 17 has an invalid length. [ 2363.608688][T14325] netlink: 160 bytes leftover after parsing attributes in process `syz.1.12582'. [ 2363.680347][T14284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2363.951911][T20814] Bluetooth: hci1: command tx timeout [ 2364.216944][T14338] FAULT_INJECTION: forcing a failure. [ 2364.216944][T14338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2364.239027][T14338] CPU: 0 PID: 14338 Comm: syz.2.12588 Not tainted syzkaller #0 [ 2364.246627][T14338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2364.256700][T14338] Call Trace: [ 2364.259977][T14338] [ 2364.262895][T14338] dump_stack_lvl+0x18c/0x250 [ 2364.267574][T14338] ? show_regs_print_info+0x20/0x20 [ 2364.272771][T14338] ? load_image+0x400/0x400 [ 2364.277258][T14338] ? __might_fault+0xaa/0x120 [ 2364.281920][T14338] ? __lock_acquire+0x7d40/0x7d40 [ 2364.286933][T14338] should_fail_ex+0x39d/0x4d0 [ 2364.291613][T14338] _copy_to_user+0x2f/0xa0 [ 2364.296027][T14338] bpf_test_finish+0x25a/0x650 [ 2364.300968][T14338] ? convert_skb_to___skb+0x420/0x420 [ 2364.306334][T14338] ? read_tsc+0x9/0x20 [ 2364.310406][T14338] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 2364.316743][T14338] ? xdp_convert_buff_to_md+0x200/0x200 [ 2364.322288][T14338] ? __fget_files+0x28/0x4b0 [ 2364.326877][T14338] ? __fget_files+0x28/0x4b0 [ 2364.331487][T14338] ? xdp_convert_buff_to_md+0x200/0x200 [ 2364.337030][T14338] bpf_prog_test_run+0x321/0x390 [ 2364.341991][T14338] __sys_bpf+0x49d/0x890 [ 2364.346245][T14338] ? bpf_link_show_fdinfo+0x390/0x390 [ 2364.351631][T14338] ? lock_chain_count+0x20/0x20 [ 2364.356491][T14338] __x64_sys_bpf+0x7c/0x90 [ 2364.360915][T14338] do_syscall_64+0x55/0xa0 [ 2364.365328][T14338] ? clear_bhb_loop+0x40/0x90 [ 2364.370001][T14338] ? clear_bhb_loop+0x40/0x90 [ 2364.374690][T14338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2364.380578][T14338] RIP: 0033:0x7ff71299c799 [ 2364.384986][T14338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2364.404592][T14338] RSP: 002b:00007ff7138d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2364.413090][T14338] RAX: ffffffffffffffda RBX: 00007ff712c16090 RCX: 00007ff71299c799 [ 2364.421053][T14338] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 2364.429016][T14338] RBP: 00007ff7138d2090 R08: 0000000000000000 R09: 0000000000000000 [ 2364.436979][T14338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2364.444944][T14338] R13: 00007ff712c16128 R14: 00007ff712c16090 R15: 00007ffc52f3be48 [ 2364.452924][T14338] [ 2366.032681][T20814] Bluetooth: hci1: command tx timeout [ 2366.472429][T14284] .`: (slave netdevsim0): Releasing backup interface [ 2366.481003][T14284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2366.573388][T14354] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.12593'. [ 2366.583591][T14354] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.12593'. [ 2366.835366][T14284] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2366.895885][T14284] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2366.912325][T14284] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2366.928093][T14284] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2367.022332][T14284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2367.048345][T14367] FAULT_INJECTION: forcing a failure. [ 2367.048345][T14367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2367.056892][T14284] 8021q: adding VLAN 0 to HW filter on device team0 [ 2367.061999][T14367] CPU: 0 PID: 14367 Comm: syz.1.12598 Not tainted syzkaller #0 [ 2367.075919][T14367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2367.085991][T14367] Call Trace: [ 2367.087525][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 2367.089272][T14367] [ 2367.089283][T14367] dump_stack_lvl+0x18c/0x250 [ 2367.089315][T14367] ? show_regs_print_info+0x20/0x20 [ 2367.096446][ T6939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2367.099270][T14367] ? load_image+0x400/0x400 [ 2367.099296][T14367] ? __might_fault+0xaa/0x120 [ 2367.099315][T14367] ? __lock_acquire+0x7d40/0x7d40 [ 2367.130574][T14367] should_fail_ex+0x39d/0x4d0 [ 2367.135292][T14367] _copy_to_user+0x2f/0xa0 [ 2367.139822][T14367] bpf_test_finish+0x4e7/0x650 [ 2367.145058][T14367] ? convert_skb_to___skb+0x420/0x420 [ 2367.146672][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state [ 2367.150432][T14367] ? read_tsc+0x9/0x20 [ 2367.150465][T14367] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 2367.150497][T14367] ? xdp_convert_buff_to_md+0x200/0x200 [ 2367.150519][T14367] ? lockdep_hardirqs_on+0x98/0x150 [ 2367.157624][ T6939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2367.161578][T14367] ? xdp_convert_buff_to_md+0x200/0x200 [ 2367.161600][T14367] bpf_prog_test_run+0x321/0x390 [ 2367.161624][T14367] __sys_bpf+0x49d/0x890 [ 2367.200432][T14367] ? bpf_link_show_fdinfo+0x390/0x390 [ 2367.205822][T14367] ? lock_chain_count+0x20/0x20 [ 2367.210672][T14367] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2367.216661][T14367] __x64_sys_bpf+0x7c/0x90 [ 2367.221072][T14367] do_syscall_64+0x55/0xa0 [ 2367.225491][T14367] ? clear_bhb_loop+0x40/0x90 [ 2367.230163][T14367] ? clear_bhb_loop+0x40/0x90 [ 2367.234832][T14367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2367.240731][T14367] RIP: 0033:0x7fc77b99c799 [ 2367.245140][T14367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2367.264746][T14367] RSP: 002b:00007fc77c842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2367.273158][T14367] RAX: ffffffffffffffda RBX: 00007fc77bc16090 RCX: 00007fc77b99c799 [ 2367.281125][T14367] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 2367.289087][T14367] RBP: 00007fc77c842090 R08: 0000000000000000 R09: 0000000000000000 [ 2367.297052][T14367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2367.305016][T14367] R13: 00007fc77bc16128 R14: 00007fc77bc16090 R15: 00007ffcbea675a8 [ 2367.312998][T14367] [ 2367.578127][T14376] netlink: 'syz.0.12600': attribute type 6 has an invalid length. [ 2367.613327][T14284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2367.618896][T14376] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.12600'. [ 2367.629905][T14376] netlink: zone id is out of range [ 2367.635979][T14376] netlink: zone id is out of range [ 2367.703580][T14284] veth0_vlan: entered promiscuous mode [ 2367.722620][T14284] veth1_vlan: entered promiscuous mode [ 2367.784522][T14380] netlink: 'syz.0.12602': attribute type 15 has an invalid length. [ 2367.840332][T14284] veth0_macvtap: entered promiscuous mode [ 2367.863840][T14284] veth1_macvtap: entered promiscuous mode [ 2367.876007][T14380] netlink: 'syz.0.12602': attribute type 17 has an invalid length. [ 2367.884883][T14380] netlink: 160 bytes leftover after parsing attributes in process `syz.0.12602'. [ 2367.913869][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2367.928840][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2367.948556][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2367.965989][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2367.976251][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2367.987249][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2367.997367][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2368.008129][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.019754][T14284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2368.072216][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2368.085029][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.095437][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2368.106684][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.117012][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2368.127572][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.145332][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2368.156529][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.169285][T14284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2368.189736][T14386] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.12604'. [ 2369.971990][T14399] netlink: set zone limit has 8 unknown bytes [ 2370.766938][T14284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2370.776143][T14284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2370.784895][T14284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2370.793700][T14284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2370.805049][T14386] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.12604'. [ 2371.035448][ T6938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2371.054480][ T6938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2371.084013][T14412] FAULT_INJECTION: forcing a failure. [ 2371.084013][T14412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2371.122725][T14412] CPU: 0 PID: 14412 Comm: syz.1.12611 Not tainted syzkaller #0 [ 2371.130330][T14412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2371.140411][T14412] Call Trace: [ 2371.143714][T14412] [ 2371.146543][ T6944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2371.146647][T14412] dump_stack_lvl+0x18c/0x250 [ 2371.155951][ T6944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2371.159238][T14412] ? show_regs_print_info+0x20/0x20 [ 2371.159269][T14412] ? load_image+0x400/0x400 [ 2371.159292][T14412] ? __lock_acquire+0x7d40/0x7d40 [ 2371.159313][T14412] ? snprintf+0xe9/0x140 [ 2371.185578][T14412] should_fail_ex+0x39d/0x4d0 [ 2371.190268][T14412] _copy_to_user+0x2f/0xa0 [ 2371.194685][T14412] simple_read_from_buffer+0xe7/0x150 [ 2371.200068][T14412] proc_fail_nth_read+0x1e8/0x260 [ 2371.205089][T14412] ? proc_fault_inject_write+0x360/0x360 [ 2371.210724][T14412] ? fsnotify_perm+0x271/0x5e0 [ 2371.215485][T14412] ? proc_fault_inject_write+0x360/0x360 [ 2371.221119][T14412] vfs_read+0x28b/0x970 [ 2371.225280][T14412] ? kernel_read+0x1e0/0x1e0 [ 2371.229868][T14412] ? __fget_files+0x28/0x4b0 [ 2371.234464][T14412] ? __fget_files+0x28/0x4b0 [ 2371.239056][T14412] ? __fget_files+0x43d/0x4b0 [ 2371.243738][T14412] ? __fdget_pos+0x2a3/0x330 [ 2371.248321][T14412] ? ksys_read+0x75/0x260 [ 2371.252660][T14412] ksys_read+0x150/0x260 [ 2371.256903][T14412] ? vfs_write+0x990/0x990 [ 2371.261321][T14412] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2371.267214][T14412] do_syscall_64+0x55/0xa0 [ 2371.271717][T14412] ? clear_bhb_loop+0x40/0x90 [ 2371.276389][T14412] ? clear_bhb_loop+0x40/0x90 [ 2371.281063][T14412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2371.286960][T14412] RIP: 0033:0x7fc77b95cfce [ 2371.291370][T14412] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2371.311002][T14412] RSP: 002b:00007fc77c841fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2371.319415][T14412] RAX: ffffffffffffffda RBX: 00007fc77c8426c0 RCX: 00007fc77b95cfce [ 2371.327448][T14412] RDX: 000000000000000f RSI: 00007fc77c8420a0 RDI: 000000000000000b [ 2371.335417][T14412] RBP: 00007fc77c842090 R08: 0000000000000000 R09: 0000000000000000 [ 2371.343391][T14412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2371.351384][T14412] R13: 00007fc77bc16128 R14: 00007fc77bc16090 R15: 00007ffcbea675a8 [ 2371.359639][T14412] [ 2371.956900][T14434] netlink: 'syz.2.12618': attribute type 15 has an invalid length. [ 2371.966047][T14432] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.12619'. [ 2371.975784][T14432] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.12619'. [ 2372.065468][T14439] netlink: 'syz.2.12618': attribute type 17 has an invalid length. [ 2372.074707][T14439] netlink: 160 bytes leftover after parsing attributes in process `syz.2.12618'. [ 2372.144336][T14441] netlink: 'syz.0.12622': attribute type 11 has an invalid length. [ 2372.153691][T14441] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12622'. [ 2372.303341][T14447] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12624'. [ 2372.317923][T14447] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12624'. [ 2372.324000][T14448] netlink: 'syz.1.12625': attribute type 3 has an invalid length. [ 2372.339211][T14448] netlink: 'syz.1.12625': attribute type 1 has an invalid length. [ 2372.349255][T14448] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.12625'. [ 2372.360360][T14447] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12624'. [ 2374.927992][T14447] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12624'. [ 2374.942170][T14448] netlink: 'syz.1.12625': attribute type 39 has an invalid length. [ 2375.044665][T14466] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.12630'. [ 2375.165834][T14473] netpci0: tun_chr_ioctl cmd 2147767517 [ 2375.197111][T14473] netlink: 'syz.2.12632': attribute type 21 has an invalid length. [ 2375.239888][T14474] veth0_to_bond: entered promiscuous mode [ 2376.006926][T14487] netlink: 'syz.3.12638': attribute type 3 has an invalid length. [ 2376.015037][ T6938] tipc: Left network mode [ 2376.045725][T14487] netlink: 'syz.3.12638': attribute type 1 has an invalid length. [ 2376.313271][T14496] netlink: 'syz.0.12641': attribute type 15 has an invalid length. [ 2377.188289][T14527] __nla_validate_parse: 6 callbacks suppressed [ 2377.188308][T14527] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.12651'. [ 2377.634195][T14535] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.12653'. [ 2379.253363][T14535] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.12653'. [ 2379.263070][T14535] tipc: Started in network mode [ 2379.267966][T14535] tipc: Node identity b, cluster identity 73 [ 2379.274685][T14535] tipc: Node number set to 11 [ 2379.553315][T14549] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.12654'. [ 2379.686264][T20814] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 2380.261145][T14563] wg2: entered allmulticast mode [ 2380.323473][T14563] wg2: entered promiscuous mode [ 2380.420758][T14563] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12662'. [ 2380.607491][T14572] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.12666'. [ 2380.636410][T14570] validate_nla: 1 callbacks suppressed [ 2380.636426][T14570] netlink: 'syz.2.12665': attribute type 2 has an invalid length. [ 2380.662604][T14570] netlink: 'syz.2.12665': attribute type 8 has an invalid length. [ 2380.673522][T14570] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12665'. [ 2380.687669][T14573] netlink: 'syz.1.12664': attribute type 15 has an invalid length. [ 2380.700756][T14572] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.12666'. [ 2380.778768][ T6938] hsr_slave_0: left promiscuous mode [ 2380.791217][ T6938] hsr_slave_1: left promiscuous mode [ 2380.824180][ T6938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2380.842962][T14581] netlink: 'syz.3.12668': attribute type 2 has an invalid length. [ 2380.844861][ T6938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2380.851541][T14581] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.12668'. [ 2380.869398][ T6938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2380.876856][ T6938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2380.919300][ T6938] veth1_macvtap: left promiscuous mode [ 2380.924915][ T6938] veth0_macvtap: left promiscuous mode [ 2381.976935][ T6938] team0 (unregistering): Port device team_slave_1 removed [ 2382.105817][ T6938] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2382.551478][ T6938] .` (unregistering): (slave batadv0): Releasing backup interface [ 2382.664588][ T6938] .` (unregistering): Released all slaves [ 2382.738695][T14579] netlink: 'syz.1.12664': attribute type 17 has an invalid length. [ 2382.746648][T14579] netlink: 160 bytes leftover after parsing attributes in process `syz.1.12664'. [ 2385.052231][T14590] netlink: 'syz.0.12670': attribute type 2 has an invalid length. [ 2385.061993][T14590] netlink: 119 bytes leftover after parsing attributes in process `syz.0.12670'. [ 2385.221282][T14600] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12673'. [ 2385.415625][T14615] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.12676'. [ 2385.428769][T14615] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.12676'. [ 2385.892521][T14632] netlink: 'syz.0.12683': attribute type 15 has an invalid length. [ 2385.954610][T14632] netlink: 'syz.0.12683': attribute type 17 has an invalid length. [ 2385.969159][T14632] netlink: 160 bytes leftover after parsing attributes in process `syz.0.12683'. [ 2386.994741][T14652] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.12689'. [ 2388.037721][ T8026] Bluetooth: hci0: command 0x0406 tx timeout [ 2388.668624][T14653] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.12688'. [ 2388.678054][T14652] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.12689'. [ 2389.149934][T14673] netlink: 55311 bytes leftover after parsing attributes in process `syz.1.12696'. [ 2389.552843][T14698] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.12701'. [ 2389.562464][T14698] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.12701'. [ 2389.687742][T14700] netlink: 'syz.0.12702': attribute type 15 has an invalid length. [ 2389.731826][T14700] netlink: 'syz.0.12702': attribute type 17 has an invalid length. [ 2389.739952][T14700] netlink: 160 bytes leftover after parsing attributes in process `syz.0.12702'. [ 2392.288142][T14719] netlink: 'syz.1.12708': attribute type 10 has an invalid length. [ 2392.625893][T14734] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.12713'. [ 2392.646275][T14734] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.12713'. [ 2393.413825][T14740] netlink: 'syz.0.12715': attribute type 15 has an invalid length. [ 2393.485767][T14740] netlink: 'syz.0.12715': attribute type 17 has an invalid length. [ 2393.493878][T14740] netlink: 160 bytes leftover after parsing attributes in process `syz.0.12715'. [ 2393.891597][T14755] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.12721'. [ 2395.189320][T14773] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.12725'. [ 2396.387932][T14755] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.12721'. [ 2396.408077][T14769] netlink: 'syz.1.12724': attribute type 21 has an invalid length. [ 2396.418631][T14769] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12724'. [ 2396.435862][T14773] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.12725'. [ 2396.616518][T14775] netlink: 'syz.0.12727': attribute type 4 has an invalid length. [ 2396.627015][T14775] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12727'. [ 2396.724349][T14775] .`: renamed from bond0 (while UP) [ 2396.889589][T14782] netlink: 'syz.1.12728': attribute type 21 has an invalid length. [ 2396.905693][T14782] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12728'. [ 2397.285109][T14805] syzkaller0: entered promiscuous mode [ 2397.294573][T14805] syzkaller0: entered allmulticast mode [ 2397.308834][T14810] netlink: 'syz.0.12736': attribute type 15 has an invalid length. [ 2397.378145][T14810] netlink: 'syz.0.12736': attribute type 17 has an invalid length. [ 2397.394317][T14810] netlink: 160 bytes leftover after parsing attributes in process `syz.0.12736'. [ 2397.746165][T14812] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.12737'. [ 2397.772568][T14812] netlink: zone id is out of range [ 2397.783474][T14812] netlink: zone id is out of range [ 2397.801383][T14812] netlink: zone id is out of range [ 2397.813315][T14812] netlink: zone id is out of range [ 2397.824294][T14812] netlink: zone id is out of range [ 2397.843322][T14812] netlink: zone id is out of range [ 2397.855568][T14812] netlink: zone id is out of range [ 2397.861244][T14812] netlink: zone id is out of range [ 2397.866604][T14812] netlink: zone id is out of range [ 2397.872449][T14812] netlink: zone id is out of range [ 2398.310264][T14815] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.12738'. [ 2400.153413][T14815] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.12738'. [ 2402.596673][T14829] netlink: 'syz.0.12750': attribute type 15 has an invalid length. [ 2402.719260][T14833] netlink: 'syz.0.12750': attribute type 17 has an invalid length. [ 2402.727233][T14833] netlink: 160 bytes leftover after parsing attributes in process `syz.0.12750'. [ 2402.787885][T14830] netlink: 'syz.1.12742': attribute type 4 has an invalid length. [ 2402.796798][T14830] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12742'. [ 2402.870054][T14830] .`: renamed from bond0 [ 2403.041586][T14842] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12746'. [ 2403.405704][ T8026] Bluetooth: hci2: command 0x0406 tx timeout [ 2404.222603][T14858] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.12751'. [ 2405.797656][T14858] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.12751'. [ 2406.028059][T14873] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12756'. [ 2406.266706][T14875] netlink: 'syz.2.12757': attribute type 4 has an invalid length. [ 2406.281231][T14875] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12757'. [ 2406.403315][T14875] .`: renamed from bond0 (while UP) [ 2406.446251][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.458544][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.523799][T14887] netlink: 'syz.3.12761': attribute type 15 has an invalid length. [ 2406.623140][T14887] netlink: 'syz.3.12761': attribute type 17 has an invalid length. [ 2406.634015][T14887] netlink: 160 bytes leftover after parsing attributes in process `syz.3.12761'. [ 2407.341187][T14902] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.12765'. [ 2409.245758][T14902] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.12765'. [ 2409.753969][T14917] netlink: 'syz.3.12768': attribute type 9 has an invalid length. [ 2409.785821][T14917] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.12768'. [ 2410.076565][T14916] netlink: 'syz.3.12768': attribute type 10 has an invalid length. [ 2410.471148][T14919] netlink: 'syz.3.12768': attribute type 9 has an invalid length. [ 2410.479502][T14919] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.12768'. [ 2410.492544][T14921] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12769'. [ 2410.779863][T14943] netlink: 'syz.3.12777': attribute type 15 has an invalid length. [ 2410.828757][T14936] netlink: 'syz.1.12773': attribute type 4 has an invalid length. [ 2410.837495][T14936] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12773'. [ 2410.853785][T14943] netlink: 'syz.3.12777': attribute type 17 has an invalid length. [ 2410.861039][T14946] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.12776'. [ 2410.861988][T14943] netlink: 160 bytes leftover after parsing attributes in process `syz.3.12777'. [ 2410.880692][T14946] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.12776'. [ 2411.870247][ C0] [ 2411.870257][ C0] ================================ [ 2411.870262][ C0] WARNING: inconsistent lock state [ 2411.870281][ C0] syzkaller #0 Not tainted [ 2411.870291][ C0] -------------------------------- [ 2411.870296][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 2411.870304][ C0] syz.2.12781/14951 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 2411.870323][ C0] ffff88805d53e068 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 2411.870368][ C0] {INITIAL USE} state was registered at: [ 2411.870375][ C0] lock_acquire+0x19e/0x420 [ 2411.870394][ C0] _raw_spin_lock+0x2e/0x40 [ 2411.870411][ C0] htab_lock_bucket+0x17d/0x300 [ 2411.870427][ C0] htab_lru_map_update_elem+0x2c6/0x990 [ 2411.870444][ C0] bpf_map_update_value+0x660/0x720 [ 2411.870458][ C0] generic_map_update_batch+0x5ec/0x810 [ 2411.870476][ C0] bpf_map_do_batch+0x3d7/0x610 [ 2411.870493][ C0] __sys_bpf+0x381/0x890 [ 2411.870508][ C0] __x64_sys_bpf+0x7c/0x90 [ 2411.870522][ C0] do_syscall_64+0x55/0xa0 [ 2411.870543][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2411.870561][ C0] irq event stamp: 2966 [ 2411.870567][ C0] hardirqs last enabled at (2965): [] _raw_spin_unlock_irq+0x23/0x50 [ 2411.870591][ C0] hardirqs last disabled at (2966): [] exc_debug+0x73/0x140 [ 2411.870609][ C0] softirqs last enabled at (2890): [] bpf_prog_load+0x1266/0x1670 [ 2411.870630][ C0] softirqs last disabled at (2888): [] bpf_ksym_add+0x2d/0x340 [ 2411.870652][ C0] [ 2411.870652][ C0] other info that might help us debug this: [ 2411.870658][ C0] Possible unsafe locking scenario: [ 2411.870658][ C0] [ 2411.870663][ C0] CPU0 [ 2411.870667][ C0] ---- [ 2411.870670][ C0] lock(&htab->lockdep_key); [ 2411.870681][ C0] [ 2411.870685][ C0] lock(&htab->lockdep_key); [ 2411.870696][ C0] [ 2411.870696][ C0] *** DEADLOCK *** [ 2411.870696][ C0] [ 2411.870700][ C0] 3 locks held by syz.2.12781/14951: [ 2411.870710][ C0] #0: ffff88807d8b2ac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 2411.870755][ C0] #1: ffff888041434418 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 2411.870801][ C0] #2: ffff8880587fe118 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: shmem_file_write_iter+0x82/0x120 [ 2411.870846][ C0] [ 2411.870846][ C0] stack backtrace: [ 2411.870853][ C0] CPU: 0 PID: 14951 Comm: syz.2.12781 Not tainted syzkaller #0 [ 2411.870870][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2411.870881][ C0] Call Trace: [ 2411.870888][ C0] <#DB> [ 2411.870901][ C0] dump_stack_lvl+0x18c/0x250 [ 2411.870948][ C0] ? show_regs_print_info+0x20/0x20 [ 2411.871016][ C0] ? print_usage_bug+0x475/0x690 [ 2411.871041][ C0] ? verify_lock_unused+0x18/0x140 [ 2411.871089][ C0] lock_acquire+0x2c2/0x420 [ 2411.871144][ C0] ? htab_lock_bucket+0x17d/0x300 [ 2411.871181][ C0] ? read_lock_is_recursive+0x20/0x20 [ 2411.871279][ C0] _raw_spin_lock+0x2e/0x40 [ 2411.871297][ C0] ? htab_lock_bucket+0x17d/0x300 [ 2411.871318][ C0] htab_lock_bucket+0x17d/0x300 [ 2411.871359][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 2411.871403][ C0] ? verify_lock_unused+0x18/0x140 [ 2411.871440][ C0] ? jhash+0x2e8/0x740 [ 2411.871478][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 2411.871535][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 2411.871563][ C0] ? perf_callchain+0x220/0x220 [ 2411.871630][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 2411.871667][ C0] bpf_overflow_handler+0x1fc/0x510 [ 2411.871716][ C0] ? bpf_overflow_handler+0xde/0x510 [ 2411.871745][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 2411.871765][ C0] ? rcu_is_watching+0x15/0xb0 [ 2411.871797][ C0] ? lock_release+0xb5/0x8c0 [ 2411.871840][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 2411.871882][ C0] __perf_event_overflow+0x447/0x630 [ 2411.871952][ C0] perf_swevent_event+0x324/0x630 [ 2411.871996][ C0] ? trace_call_bpf+0x5e9/0x6c0 [ 2411.872026][ C0] ? perf_tp_event+0x1450/0x1450 [ 2411.872104][ C0] perf_bp_event+0x2a7/0x380 [ 2411.872165][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 2411.872350][ C0] ? lock_acquire+0x2c2/0x420 [ 2411.872419][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 2411.872474][ C0] notifier_call_chain+0x197/0x380 [ 2411.872517][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 2411.872555][ C0] atomic_notifier_call_chain+0xda/0x180 [ 2411.872594][ C0] notify_die+0x145/0x1a0 [ 2411.872636][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 2411.872705][ C0] ? rcu_is_watching+0x15/0xb0 [ 2411.872747][ C0] notify_debug+0x2e/0x50 [ 2411.872770][ C0] exc_debug+0xde/0x140 [ 2411.872811][ C0] asm_exc_debug+0x1e/0x40 [ 2411.872829][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 2411.872855][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 2411.872871][ C0] RSP: 0018:ffffc9000ffef9b8 EFLAGS: 00050206 [ 2411.872886][ C0] RAX: ffffffff8427cb01 RBX: 1ffff92001ffdfb7 RCX: 0000000000000cc0 [ 2411.872899][ C0] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffff888074251340 [ 2411.872911][ C0] RBP: ffffc9000ffefb50 R08: ffff888074251fff R09: 1ffff1100e84a3ff [ 2411.872924][ C0] R10: dffffc0000000000 R11: ffffed100e84a400 R12: ffff888074251000 [ 2411.872937][ C0] R13: 0000200000000000 R14: 0000200000001000 R15: 0000000000001000 [ 2411.872987][ C0] ? copy_page_from_iter_atomic+0x261/0x1580 [ 2411.873048][ C0] [ 2411.873053][ C0] [ 2411.873058][ C0] copy_page_from_iter_atomic+0x30a/0x1580 [ 2411.873085][ C0] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 2411.873198][ C0] ? iov_iter_zero+0x1170/0x1170 [ 2411.873273][ C0] ? shmem_write_begin+0x1cf/0x420 [ 2411.873325][ C0] generic_perform_write+0x353/0x5c0 [ 2411.873425][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 2411.873496][ C0] ? file_update_time+0x192/0x1a0 [ 2411.873537][ C0] shmem_file_write_iter+0xfb/0x120 [ 2411.873578][ C0] vfs_write+0x46c/0x990 [ 2411.873636][ C0] ? file_end_write+0x250/0x250 [ 2411.873690][ C0] ? __fget_files+0x43d/0x4b0 [ 2411.873763][ C0] ? __fdget_pos+0x2a3/0x330 [ 2411.873783][ C0] ? ksys_write+0x75/0x260 [ 2411.873825][ C0] ksys_write+0x150/0x260 [ 2411.873868][ C0] ? __ia32_sys_read+0x90/0x90 [ 2411.873918][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2411.873962][ C0] do_syscall_64+0x55/0xa0 [ 2411.873984][ C0] ? clear_bhb_loop+0x40/0x90 [ 2411.874002][ C0] ? clear_bhb_loop+0x40/0x90 [ 2411.874035][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2411.874054][ C0] RIP: 0033:0x7ff71299c799 [ 2411.874075][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2411.874090][ C0] RSP: 002b:00007ff7138f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2411.874108][ C0] RAX: ffffffffffffffda RBX: 00007ff712c15fa0 RCX: 00007ff71299c799 [ 2411.874126][ C0] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 000000000000000e [ 2411.874138][ C0] RBP: 00007ff712a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 2411.874149][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2411.874160][ C0] R13: 00007ff712c16038 R14: 00007ff712c15fa0 R15: 00007ffc52f3be48 [ 2411.874253][ C0] [ 2414.196605][T14952] netlink: 'syz.1.12780': attribute type 7 has an invalid length.