last executing test programs: 3.110257689s ago: executing program 1 (id=3858): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8422, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x8c088, 0xca, 0x7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x800000008}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0xd, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfffffffffffffffa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000040001000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r7, r5}, 0xc) 2.947773918s ago: executing program 1 (id=3860): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0400000009000000020000000100000020900000", @ANYRES32, @ANYBLOB="feffffff00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000100"/20, @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu<=0||!') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30c) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = getpid() sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee01}}}], 0x20, 0x10}, 0x4ccd4) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x200}) 2.940632739s ago: executing program 0 (id=3862): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000003100)=""/4059, 0xfdb}, {&(0x7f0000000380)=""/206, 0xce}, {&(0x7f0000000f00)=""/188, 0xbc}, {&(0x7f0000000240)=""/238, 0xee}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000700)=""/108, 0x6c}], 0x8}, 0x40012100) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0xd, 0x8, 0x2, 0x18}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffb}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x9, 0x10000, 0x94a2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0xffffffffffffffff], &(0x7f0000000200)=[{0x3, 0x3, 0xf, 0x8}, {0x2, 0x2, 0x6, 0x9}, {0x5, 0x4, 0x1, 0x6}, {0x1, 0x1, 0xd, 0xa}, {0x4, 0x3, 0x1, 0x8}, {0x5, 0x4, 0x4, 0xb}, {0x5, 0x2, 0xa, 0xb}], 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x86, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x40000052, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 2.805796266s ago: executing program 4 (id=3864): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x56}, 0x28) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8932, &(0x7f0000000000)={'bridge_slave_0\x00', @random="0000cb97f60d"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb5}, [@exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x47, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 2.659768905s ago: executing program 0 (id=3866): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0x2a, 0x0, &(0x7f00000020c0)="b9ff03316844268cb89e14f0080047e0ffff00124000632f0100000000000000030a07080403fe800000", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040001, 0x45040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x2}, 0x8018, 0x1ffffffffffff, 0x8, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x4) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5452, 0x0) r8 = syz_clone(0x0, &(0x7f0000000000)="2eb8bb506b2da17ee34503cb398f86e065c69e24f83e014307b3baa3967ef5b9b7def3b35e1fe063beb1a62ce9cc2bf70c7d5bcc58c9e44f06eb2747d6917014d1ef141d124dd4b7902e13220b27fdce83535f5569bc6f5a4b0aafdca1e78a9ba8568b79a9624ccca2d28284eec1ce95a15e3198be95cddc3460d7a85947727dd8b0e76c0b2972c7", 0x88, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000380)="a2e6e67c887acf2de077133a8a205f7609b5b50dd658776a98b6c48a267181c8bfec6b30f7b1badf9b50cd06a8a797699ed4f3c9452284edf580d6f8475e099b39d2ced5ed33eb0ef0d785834a1ca1f0cc40cb419b1242d9521f2a01ca302ce584cdfa66004fbd") syz_open_procfs$namespace(r8, &(0x7f00000001c0)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x8, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r9, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) 2.57719543s ago: executing program 1 (id=3868): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001680)=ANY=[@ANYBLOB="0d0000e60900000030bfee780200001208010000199ea7559ae29e6c56dc9077fe56917d78ffea00e46a6b3e13ff5a89119d1eaa0f09", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES16=0x0, @ANYRES32, @ANYRES32], 0x48) r0 = socket$kcm(0x2, 0x3, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8919, &(0x7f0000000040)={r0}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001640)={'veth1_virt_wifi\x00', @link_local}) socket$kcm(0x2, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xe5}, 0x224, 0x1, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) 2.505797154s ago: executing program 3 (id=3869): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x56}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8932, &(0x7f0000000000)={'bridge_slave_0\x00', @random="0000cb97f60d"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb5}, [@exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x47, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 2.447479458s ago: executing program 2 (id=3870): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8422, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x8c088, 0xca, 0x7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x800000008}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0xd, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfffffffffffffffa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000090000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000040001000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r7, r5}, 0xc) 2.425391409s ago: executing program 4 (id=3871): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320088a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.100124978s ago: executing program 0 (id=3872): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x0) 2.05965057s ago: executing program 2 (id=3873): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xd, &(0x7f0000002c00)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x31}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @generic={0xf, 0x8, 0x1, 0x8, 0x9}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x84, &(0x7f0000000000), 0x90) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.0590254s ago: executing program 3 (id=3874): socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000740)=""/56, 0x38}, 0x10001) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0x7, 0x3, 0xa, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0xffffffff7fffffff, 0x2}, 0x100608, 0xffffffffffffffff, 0x2, 0x8, 0x10001, 0x80000003, 0xdb7d, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xd) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) mkdir(0x0, 0x8) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1ff}, 0x100c, 0x7, 0x0, 0x2, 0x0, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000ffff0000000000006112040000000000950e000000000000e1b4a87525623f2a911d3a73a14060965b98e9d173b5642e1d5a9dcac0fdd0a9e73c11aeaf9c1e5ff0bacb88af60bf64ed0a8887d5c30949e59e1ac6179b04f3fcfaf9cebc03e57eca3bb6cad64c27cd3aaede9d9da9aace459b323ef80a050042fcddff6fb2ef1dad5174fd33f7675b18b15871b3e39a18cc93dcef26154881b2aa6abfa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_clone(0x10000000, &(0x7f00000008c0)="20dad91e8d26351cbfd829ba8f3832fb49d7951547d36a31c6f8b0ba0fcd1fac713f26c797ff1d379cb14fc53592bfa3102f5c7b3fed7ce1f69f5c28c3355561c389572ad5491d", 0x47, 0x0, &(0x7f0000000980), &(0x7f0000001780)="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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000007000000691168000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x12000) sendmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="00000010"], 0x18}, 0x41) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90324fc602f1b01000a740100053582c137153e370248018000f01700", 0x2c}], 0x1}, 0x0) close(r3) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c0000001e006bcd9e3fe3dc6e08000007000000000000007ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000240)=""/11, 0xb}, 0x2001) r4 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000001200)={&(0x7f00000002c0)=@abs={0x1}, 0x3, 0x0, 0x0, &(0x7f00000011c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0xb, 0x81400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xff}, 0x0, 0xa, 0x0, 0x8, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.028948462s ago: executing program 4 (id=3875): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)="f8c450", &(0x7f0000000280), 0xce}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000bc0)={0x0, &(0x7f0000000a00)=""/89, &(0x7f0000000a80), &(0x7f0000000b40), 0x3}, 0x38) 1.864046402s ago: executing program 0 (id=3876): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfc, 0xa, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'veth0_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x8, &(0x7f0000000000)=r3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000340)=r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYRESOCT=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=r4, 0xf, 0x1, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0]}, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.861758932s ago: executing program 1 (id=3877): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.688740081s ago: executing program 4 (id=3878): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 7) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.662111323s ago: executing program 0 (id=3879): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000050000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000681ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0400000009000000020000000100000020900000", @ANYRES32, @ANYBLOB="feffffff00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000100"/20, @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu<=0||!') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30c) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = getpid() sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee01}}}], 0x20, 0x10}, 0x4ccd4) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x200}) 1.569065188s ago: executing program 2 (id=3880): close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 1.254305117s ago: executing program 4 (id=3881): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x56}, 0x28) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8932, &(0x7f0000000000)={'bridge_slave_0\x00', @random="0000cb97f60d"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb5}, [@exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x47, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 1.152348233s ago: executing program 2 (id=3882): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000a80)={0x3c40e4a138c3cfa2, 0x80, 0x0, 0x5, 0x8, 0x7, 0x0, 0xbfc, 0x10000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xb, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x18c, 0x10001, 0x81, 0x0, 0xb, 0x3, 0xcc, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x2) r2 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xe3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x2, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, r1, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000024c0)={&(0x7f0000000280)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, 0x0}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000600), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000001f80)=r6, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40305829, &(0x7f0000000040)=0x10000) 972.485033ms ago: executing program 3 (id=3883): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8422, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x8c088, 0xca, 0x7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x800000008}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0xd, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfffffffffffffffa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000090000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000040001000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r7, r5}, 0xc) 792.133954ms ago: executing program 1 (id=3884): bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)="f8c450", &(0x7f0000000280), 0xce, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000bc0)={0x0, &(0x7f0000000a00)=""/89, &(0x7f0000000a80), &(0x7f0000000b40), 0x3, r0}, 0x38) (fail_nth: 9) 755.132776ms ago: executing program 2 (id=3885): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x56}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8932, &(0x7f0000000000)={'bridge_slave_0\x00', @random="0000cb97f60d"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb5}, [@exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x47, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 730.422898ms ago: executing program 3 (id=3886): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x0) 481.344762ms ago: executing program 4 (id=3887): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001680)=ANY=[@ANYBLOB="0d0000e60900000030bfee780200001208010000199ea7559ae29e6c56dc9077fe56917d78ffea00e46a6b3e13ff5a89119d1eaa0f09", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES16=0x0, @ANYRES32, @ANYRES32], 0x48) r0 = socket$kcm(0x2, 0x3, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8919, &(0x7f0000000040)={r0}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001640)={'veth1_virt_wifi\x00', @link_local}) socket$kcm(0x2, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xe5}, 0x224, 0x1, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) 371.944159ms ago: executing program 3 (id=3888): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)="f8c450", &(0x7f0000000280), 0xce, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000bc0)={0x0, &(0x7f0000000a00)=""/89, &(0x7f0000000a80), &(0x7f0000000b40), 0x3, r4}, 0x38) 208.113138ms ago: executing program 0 (id=3889): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r1 = perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 66.786436ms ago: executing program 2 (id=3890): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="7a0a00ff0000000071103f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000240)=""/194, 0x42, 0xc2, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 60.994987ms ago: executing program 3 (id=3891): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xd, &(0x7f0000002c00)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x31}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @generic={0xf, 0x8, 0x1, 0x8, 0x9}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x84, &(0x7f0000000000), 0x90) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=3892): close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): bond_slave_0): Releasing backup interface [ 452.845093][ T4295] device bond_slave_0 left promiscuous mode [ 453.077176][ T4295] bond0 (unregistering): Released all slaves [ 453.161980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 453.169976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 453.210054][T12985] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.238570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 453.253549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 453.298453][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.305618][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.353051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 453.378061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 453.409986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 453.425159][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.432333][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.476549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 453.485412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 453.516929][T13198] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3013'. [ 453.564804][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 453.591283][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 453.608959][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 453.629613][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 453.642849][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 453.653152][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 453.664549][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 453.707748][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 453.733507][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 453.748399][T13203] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3014'. [ 453.762551][T13203] team0: default FDB implementation only supports local addresses [ 453.778941][T12985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 453.792927][T13205] netlink: 'syz.0.3015': attribute type 4 has an invalid length. [ 453.802253][T13205] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3015'. [ 454.279162][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 454.292893][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 454.398352][T12985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.434498][T13221] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 454.499777][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 454.515015][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 454.550565][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 454.569214][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 454.597638][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 454.618312][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 454.642614][T12985] device veth0_vlan entered promiscuous mode [ 454.688880][T12985] device veth1_vlan entered promiscuous mode [ 454.708712][T13230] netlink: 'syz.4.3021': attribute type 25 has an invalid length. [ 454.741202][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 454.759799][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 454.778349][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 454.797581][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 454.822392][T12985] device veth0_macvtap entered promiscuous mode [ 454.856717][T12985] device veth1_macvtap entered promiscuous mode [ 454.910384][T12985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.919171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 454.928845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 454.939286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 454.950333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 454.965705][T12985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.976971][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 454.992620][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 455.005656][T12985] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.026998][T12985] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.045787][T12985] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.055528][T12985] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.133319][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.142747][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.163417][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 455.217474][T12563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.225647][T12563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.242807][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 455.709985][T13249] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2976'. [ 455.763154][T13249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.808976][T13249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.898346][T13259] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3031'. [ 456.129472][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 456.141544][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 456.152372][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 456.179754][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 456.201713][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 456.215242][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 456.280501][T13249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.296502][T13249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.723175][T13269] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 456.882316][T13261] chnl_net:caif_netlink_parms(): no params data found [ 457.005292][T13281] netlink: 'syz.2.3036': attribute type 25 has an invalid length. [ 457.031551][T13261] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.046881][T13261] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.064285][T13261] device bridge_slave_0 entered promiscuous mode [ 457.086498][T13261] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.093722][T13261] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.109516][T13261] device bridge_slave_1 entered promiscuous mode [ 457.177453][ T4295] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.196073][T13261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.212091][T13261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.281084][T13289] FAULT_INJECTION: forcing a failure. [ 457.281084][T13289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.295219][T13289] CPU: 1 PID: 13289 Comm: syz.4.3039 Not tainted syzkaller #0 [ 457.300806][ T4295] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.302778][T13289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 457.302790][T13289] Call Trace: [ 457.302797][T13289] [ 457.302804][T13289] dump_stack_lvl+0x188/0x24e [ 457.334041][T13289] ? show_regs_print_info+0x12/0x12 [ 457.339336][T13289] ? load_image+0x400/0x400 [ 457.343842][T13289] ? __might_fault+0xa6/0x120 [ 457.348523][T13289] should_fail_ex+0x399/0x4d0 [ 457.353203][T13289] copyin+0x1b/0x120 [ 457.357096][T13289] _copy_from_iter+0x447/0x1130 [ 457.361951][T13289] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 457.367319][T13289] ? copyout_mc+0x110/0x110 [ 457.371815][T13289] ? __virt_addr_valid+0x188/0x540 [ 457.376921][T13289] ? __virt_addr_valid+0x188/0x540 [ 457.382027][T13289] ? __virt_addr_valid+0x465/0x540 [ 457.387134][T13289] ? __check_object_size+0x500/0xa40 [ 457.392414][T13289] skb_copy_datagram_from_iter+0xef/0x690 [ 457.398150][T13289] ? skb_put+0x117/0x210 [ 457.402392][T13289] packet_sendmsg+0x3727/0x4e60 [ 457.407251][T13289] ? __might_sleep+0xd0/0xd0 [ 457.411828][T13289] ? verify_lock_unused+0x140/0x140 [ 457.417032][T13289] ? aa_sk_perm+0x81f/0x950 [ 457.421530][T13289] ? packet_getsockopt+0x9a0/0x9a0 [ 457.426639][T13289] ? aa_sock_msg_perm+0x94/0x150 [ 457.431562][T13289] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 457.436839][T13289] ? security_socket_sendmsg+0x7c/0xa0 [ 457.442296][T13289] ? packet_getsockopt+0x9a0/0x9a0 [ 457.447406][T13289] ____sys_sendmsg+0x5be/0x970 [ 457.452170][T13289] ? __sys_sendmsg_sock+0x30/0x30 [ 457.457208][T13289] ? __import_iovec+0x315/0x500 [ 457.462076][T13289] ? import_iovec+0x6f/0xa0 [ 457.466584][T13289] ___sys_sendmsg+0x2a2/0x360 [ 457.471267][T13289] ? __sys_sendmsg+0x290/0x290 [ 457.476041][T13289] ? __lock_acquire+0x7d10/0x7d10 [ 457.481077][T13289] __se_sys_sendmsg+0x1bb/0x2a0 [ 457.485924][T13289] ? __x64_sys_sendmsg+0x80/0x80 [ 457.490871][T13289] ? lockdep_hardirqs_on+0x94/0x140 [ 457.496070][T13289] do_syscall_64+0x4c/0xa0 [ 457.500478][T13289] ? clear_bhb_loop+0x60/0xb0 [ 457.505151][T13289] ? clear_bhb_loop+0x60/0xb0 [ 457.509818][T13289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.515705][T13289] RIP: 0033:0x7f8a33b9aeb9 [ 457.520110][T13289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.539708][T13289] RSP: 002b:00007f8a34a28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.548112][T13289] RAX: ffffffffffffffda RBX: 00007f8a33e15fa0 RCX: 00007f8a33b9aeb9 [ 457.556077][T13289] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 457.564037][T13289] RBP: 00007f8a34a28090 R08: 0000000000000000 R09: 0000000000000000 [ 457.571994][T13289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.579952][T13289] R13: 00007f8a33e16038 R14: 00007f8a33e15fa0 R15: 00007ffd4c69d3f8 [ 457.587927][T13289] [ 457.663175][T13261] team0: Port device team_slave_0 added [ 457.705080][T13295] FAULT_INJECTION: forcing a failure. [ 457.705080][T13295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.710962][ T4295] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.729189][T13295] CPU: 0 PID: 13295 Comm: syz.4.3042 Not tainted syzkaller #0 [ 457.736681][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 457.746745][T13295] Call Trace: [ 457.750016][T13295] [ 457.752935][T13295] dump_stack_lvl+0x188/0x24e [ 457.757611][T13295] ? show_regs_print_info+0x12/0x12 [ 457.762890][T13295] ? load_image+0x400/0x400 [ 457.767388][T13295] ? __lock_acquire+0x7d10/0x7d10 [ 457.772441][T13295] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 457.778448][T13295] ? rcu_read_unlock_special+0x510/0x510 [ 457.784074][T13295] should_fail_ex+0x399/0x4d0 [ 457.788750][T13295] _copy_to_user+0x2c/0x130 [ 457.793248][T13295] bpf_test_finish+0x266/0x600 [ 457.798009][T13295] ? convert_skb_to___skb+0x420/0x420 [ 457.803377][T13295] ? __rcu_read_unlock+0x78/0xd0 [ 457.808319][T13295] bpf_prog_test_run_flow_dissector+0x4c5/0x640 [ 457.814559][T13295] ? xdp_convert_buff_to_md+0x200/0x200 [ 457.820101][T13295] ? __fget_files+0x28/0x4b0 [ 457.824684][T13295] ? __fget_files+0x28/0x4b0 [ 457.829279][T13295] ? xdp_convert_buff_to_md+0x200/0x200 [ 457.834831][T13295] bpf_prog_test_run+0x31e/0x390 [ 457.839773][T13295] __sys_bpf+0x62b/0x780 [ 457.844029][T13295] ? bpf_link_show_fdinfo+0x380/0x380 [ 457.849421][T13295] ? lock_chain_count+0x20/0x20 [ 457.854298][T13295] __x64_sys_bpf+0x78/0x90 [ 457.858721][T13295] do_syscall_64+0x4c/0xa0 [ 457.863134][T13295] ? clear_bhb_loop+0x60/0xb0 [ 457.867840][T13295] ? clear_bhb_loop+0x60/0xb0 [ 457.872546][T13295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.878435][T13295] RIP: 0033:0x7f8a33b9aeb9 [ 457.882841][T13295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.902561][T13295] RSP: 002b:00007f8a34a28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.910998][T13295] RAX: ffffffffffffffda RBX: 00007f8a33e15fa0 RCX: 00007f8a33b9aeb9 [ 457.918964][T13295] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 457.926928][T13295] RBP: 00007f8a34a28090 R08: 0000000000000000 R09: 0000000000000000 [ 457.934890][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.942851][T13295] R13: 00007f8a33e16038 R14: 00007f8a33e15fa0 R15: 00007ffd4c69d3f8 [ 457.950830][T13295] [ 457.980176][T13261] team0: Port device team_slave_1 added [ 458.068337][ T4295] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.138941][T13304] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3044'. [ 458.307352][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 458.350122][T13261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.369577][T13261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.405845][T13261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.428339][T13261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.435313][T13261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.464326][T13261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.600762][T13261] device hsr_slave_0 entered promiscuous mode [ 458.608438][T13261] device hsr_slave_1 entered promiscuous mode [ 458.615403][T13261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.637925][T13261] Cannot create hsr debugfs directory [ 458.713443][ T4295] device 0 left promiscuous mode [ 458.819019][ T4295] device 1 left promiscuous mode [ 458.951120][ T4295] device 2 left promiscuous mode [ 458.987832][T13320] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3047'. [ 459.041154][T13322] netlink: 'syz.2.3048': attribute type 25 has an invalid length. [ 459.152997][ T4295] device 3 left promiscuous mode [ 459.196988][ T4295] device 4 left promiscuous mode [ 459.276467][ T4295] device 5 left promiscuous mode [ 459.372089][ T4295] device 6 left promiscuous mode [ 459.447720][ T4295] device 7 left promiscuous mode [ 459.586381][ T4295] device 8 left promiscuous mode [ 459.627801][T13338] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3060'. [ 459.658018][ T4295] device 9 left promiscuous mode [ 459.712521][ T4295] device 10 left promiscuous mode [ 459.777684][ T4295] device 11 left promiscuous mode [ 459.812281][T13261] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 459.847511][T13261] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 459.886752][T13261] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 459.937395][T13261] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 460.157678][T13359] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3062'. [ 460.367738][T13357] netlink: 'syz.0.3052': attribute type 25 has an invalid length. [ 460.386392][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 460.434698][T13374] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3057'. [ 461.092869][T13261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.128777][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 461.147355][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 461.210452][T13261] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.222136][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 461.240487][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.278303][T12575] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.285487][T12575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.416718][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 461.436872][T13402] netlink: 'syz.4.3064': attribute type 25 has an invalid length. [ 461.477234][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.487399][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.498477][T12575] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.505644][T12575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.564886][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 461.579505][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 461.601612][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 461.633500][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 461.665968][T13261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 461.680269][T13261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.725508][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 461.733588][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 461.744701][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 461.763132][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 461.806857][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 461.818198][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 461.827963][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.865112][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 462.037741][ T4295] device wlan1 left promiscuous mode [ 462.078095][ T4295] team0: Port device wlan1 removed [ 462.203882][T13427] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3072'. [ 462.476731][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 462.552961][T13421] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3071'. [ 462.833985][ T4295] device hsr_slave_0 left promiscuous mode [ 462.849467][ T4295] device hsr_slave_1 left promiscuous mode [ 462.865939][ T4295] bridge0: port 3(team0) entered disabled state [ 462.877671][ T4295] device bridge_slave_1 left promiscuous mode [ 462.906342][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.941109][ T4295] device bridge_slave_0 left promiscuous mode [ 462.977748][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.067594][ T4295] device veth0_macvtap left promiscuous mode [ 463.099693][ T4295] device veth1_vlan left promiscuous mode [ 463.105675][ T4295] device veth0_vlan left promiscuous mode [ 463.777272][ T4295] device team_slave_1 left promiscuous mode [ 463.784068][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 463.851137][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.860353][ T4295] device bond_slave_1 left promiscuous mode [ 463.901619][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.911208][ T4295] device bond_slave_0 left promiscuous mode [ 464.115530][ T4295] device dummy0 left promiscuous mode [ 464.121998][ T4295] team0 (unregistering): Port device dummy0 removed [ 464.166701][ T4295] bond0 (unregistering): Released all slaves [ 464.273477][T13443] device veth1_macvtap left promiscuous mode [ 464.293844][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.303382][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.332425][T13261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.428751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 464.450985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.550672][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 464.605100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 464.636698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.677453][T13261] device veth0_vlan entered promiscuous mode [ 464.758454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 464.771249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 464.808940][T13456] netlink: 'syz.0.3078': attribute type 25 has an invalid length. [ 464.844373][T13261] device veth1_vlan entered promiscuous mode [ 464.908616][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 464.927097][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 464.947087][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 464.970144][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 464.993095][T13261] device veth0_macvtap entered promiscuous mode [ 465.019043][T13261] device veth1_macvtap entered promiscuous mode [ 465.098733][T13261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.115881][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 465.129321][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 465.147396][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 465.165334][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.193922][T13261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.210361][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 465.245008][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 465.309602][T13261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.346232][T13261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.365523][T13261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.380628][T13261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.461810][T13473] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3085'. [ 465.537097][T13468] netlink: 'syz.0.3084': attribute type 25 has an invalid length. [ 465.947277][T12563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.955416][T12563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.983285][T12573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.006656][T12573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.018847][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 466.047527][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 466.102340][T13486] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3088'. [ 466.409378][T13483] device veth1_macvtap left promiscuous mode [ 466.581645][T13495] netlink: 'syz.1.3092': attribute type 3 has an invalid length. [ 466.608479][T13495] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3092'. [ 467.049385][T13506] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3097'. [ 467.240166][T13515] netlink: 'syz.3.3098': attribute type 25 has an invalid length. [ 467.262171][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 467.272459][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 467.283553][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 467.295377][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 467.306380][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 467.324061][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 467.458464][T12573] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.576688][T13520] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3100'. [ 468.709058][T12573] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.787569][T13522] netlink: 'syz.1.3101': attribute type 21 has an invalid length. [ 469.092881][T12573] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.125130][T13516] chnl_net:caif_netlink_parms(): no params data found [ 469.155293][T13545] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3105'. [ 469.207860][T13536] device veth1_macvtap left promiscuous mode [ 469.287804][T12573] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.347882][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 469.517513][T13516] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.527011][T13516] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.535413][T13516] device bridge_slave_0 entered promiscuous mode [ 469.612641][T13564] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3110'. [ 469.656158][T13516] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.663839][T13516] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.677262][T13516] device bridge_slave_1 entered promiscuous mode [ 469.744845][T13516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.786325][T13516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.866426][T12573] device 0 left promiscuous mode [ 469.898938][T13516] team0: Port device team_slave_0 added [ 469.915145][T13516] team0: Port device team_slave_1 added [ 469.931650][T12573] device 1 left promiscuous mode [ 470.032942][T12573] device 2 left promiscuous mode [ 470.072767][T13577] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3113'. [ 470.503998][T13574] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3112'. [ 470.533117][T13516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.546456][T13516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.605689][T13516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.649133][T13570] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3112'. [ 470.686251][T12573] device 3 left promiscuous mode [ 470.712307][T13516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.722346][T13516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.825830][T13516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.897039][T13589] netlink: 'syz.1.3115': attribute type 21 has an invalid length. [ 470.932436][T12573] device 4 left promiscuous mode [ 471.426615][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 471.548527][T12573] device 5 left promiscuous mode [ 471.571866][T13604] device veth1_macvtap left promiscuous mode [ 471.682147][T13516] device hsr_slave_0 entered promiscuous mode [ 471.815505][T13516] device hsr_slave_1 entered promiscuous mode [ 471.824895][T12573] device 6 left promiscuous mode [ 471.845816][T13611] netlink: 'syz.0.3122': attribute type 2 has an invalid length. [ 471.857240][T13611] netlink: 'syz.0.3122': attribute type 8 has an invalid length. [ 471.870486][T13611] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3122'. [ 471.920088][T12573] device 7 left promiscuous mode [ 472.006736][T12573] device 8 left promiscuous mode [ 472.093967][T12573] device 9 left promiscuous mode [ 472.162642][T12573] device 10 left promiscuous mode [ 472.361876][T13630] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3127'. [ 473.506295][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 473.665586][T13651] netlink: 'syz.0.3129': attribute type 25 has an invalid length. [ 474.109558][T13673] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3137'. [ 474.115426][T13677] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3139'. [ 474.774878][T13516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 474.800055][T13516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 474.948058][T13516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 475.075041][T12573] device wlan1 left promiscuous mode [ 475.118561][T12573] team0: Port device wlan1 removed [ 475.185470][T13516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 475.429428][T13716] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3146'. [ 475.462509][T13707] netlink: 'syz.2.3145': attribute type 25 has an invalid length. [ 475.477925][T13706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.485872][T13706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.525488][T13706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.542525][T13706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.586359][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 475.970384][T13516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.022742][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 476.042796][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 476.058357][T13516] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.113735][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 476.125574][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 476.146871][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.154130][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.162660][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 476.174143][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.185281][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.192501][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.220885][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 476.237175][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 476.298390][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 476.310989][T13744] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3152'. [ 476.323266][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 476.354317][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 476.379075][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 476.409838][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 476.853386][T13516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 476.886587][T13516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.908210][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 476.948336][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 476.967623][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.999802][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 477.018351][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 477.047702][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 477.220099][T13779] netlink: 'syz.1.3160': attribute type 25 has an invalid length. [ 477.660849][T12573] device hsr_slave_0 left promiscuous mode [ 477.678044][T12573] device hsr_slave_1 left promiscuous mode [ 477.685276][T12573] device bridge_slave_1 left promiscuous mode [ 477.692592][T12573] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.701690][T12573] device bridge_slave_0 left promiscuous mode [ 477.708109][T12573] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.727604][T12573] device veth0_macvtap left promiscuous mode [ 477.733697][T12573] device veth1_vlan left promiscuous mode [ 477.739777][T12573] device veth0_vlan left promiscuous mode [ 477.959941][T13807] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3169'. [ 478.670948][T12573] device team_slave_1 left promiscuous mode [ 478.681669][T12573] team0 (unregistering): Port device team_slave_1 removed [ 478.717897][T12573] device team_slave_0 left promiscuous mode [ 478.725091][T12573] team0 (unregistering): Port device team_slave_0 removed [ 478.761816][T12573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.770640][T12573] device bond_slave_1 left promiscuous mode [ 478.805915][T12573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.814750][T12573] device bond_slave_0 left promiscuous mode [ 479.025275][T12573] bond0 (unregistering): (slave team0): Releasing backup interface [ 479.034650][T12573] device team0 left promiscuous mode [ 479.060637][T12573] bond0 (unregistering): Released all slaves [ 479.137688][T13796] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3164'. [ 479.166511][T13813] netlink: 'syz.3.3172': attribute type 10 has an invalid length. [ 479.184751][T13813] team0: Device ipvlan1 failed to register rx_handler [ 479.230366][T12577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 479.239841][T12577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.265458][T13516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.470331][T13828] netlink: 'syz.2.3177': attribute type 7 has an invalid length. [ 479.881419][T13832] netlink: 'syz.2.3177': attribute type 10 has an invalid length. [ 479.989075][T13832] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3177'. [ 480.187731][T13832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.243877][T13832] bridge0: port 4(bond0) entered blocking state [ 480.266549][T13832] bridge0: port 4(bond0) entered disabled state [ 480.282904][T13832] bridge0: port 4(bond0) entered blocking state [ 480.289655][T13832] bridge0: port 4(bond0) entered forwarding state [ 480.520703][T13850] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3181'. [ 480.537018][T13850] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3181'. [ 480.558675][T13850] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3181'. [ 480.589242][T13852] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3182'. [ 480.631653][T13854] netlink: 'syz.0.3183': attribute type 21 has an invalid length. [ 480.724464][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 480.739739][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 480.784947][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 480.822201][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 480.860163][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 480.894502][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 480.925653][T13516] device veth0_vlan entered promiscuous mode [ 480.947827][T13516] device veth1_vlan entered promiscuous mode [ 480.981843][T12577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 480.991955][T12577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 481.003047][T12577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 481.013157][T12577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.027786][T13516] device veth0_macvtap entered promiscuous mode [ 481.051557][T13516] device veth1_macvtap entered promiscuous mode [ 481.077677][T13516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.086616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 481.103624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 481.113019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 481.122992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 481.138715][T13516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.155092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 481.169879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 481.183467][T13516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.195114][T13516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.204658][T13516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.218502][T13516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.121081][T12569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.134776][T12569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.161387][T12570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 482.209588][T13863] netlink: 'syz.2.3184': attribute type 25 has an invalid length. [ 482.282285][T12569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.299564][T12569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.364810][T13869] netlink: 'syz.0.3185': attribute type 21 has an invalid length. [ 482.390834][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 482.410250][T13875] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3186'. [ 483.695185][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 483.747270][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 483.763801][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 483.772741][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 483.781241][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 483.788989][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 483.941629][T13903] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 484.104547][T13897] netlink: 'syz.1.3193': attribute type 21 has an invalid length. [ 484.312764][T13910] netlink: 'syz.3.3196': attribute type 21 has an invalid length. [ 484.421044][T13898] chnl_net:caif_netlink_parms(): no params data found [ 484.671119][T13898] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.697999][T13898] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.718417][T13898] device bridge_slave_0 entered promiscuous mode [ 484.740994][T13928] FAULT_INJECTION: forcing a failure. [ 484.740994][T13928] name failslab, interval 1, probability 0, space 0, times 0 [ 484.754123][T13928] CPU: 1 PID: 13928 Comm: syz.4.3200 Not tainted syzkaller #0 [ 484.761623][T13928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 484.771713][T13928] Call Trace: [ 484.775015][T13928] [ 484.777961][T13928] dump_stack_lvl+0x188/0x24e [ 484.782681][T13928] ? show_regs_print_info+0x12/0x12 [ 484.787927][T13928] ? load_image+0x400/0x400 [ 484.792464][T13928] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 484.798134][T13928] should_fail_ex+0x399/0x4d0 [ 484.802848][T13928] should_failslab+0x5/0x20 [ 484.807378][T13928] slab_pre_alloc_hook+0x59/0x310 [ 484.812425][T13928] ? verify_lock_unused+0x140/0x140 [ 484.817655][T13928] kmem_cache_alloc+0x56/0x2f0 [ 484.822453][T13928] ? dst_alloc+0x101/0x160 [ 484.826912][T13928] dst_alloc+0x101/0x160 [ 484.831206][T13928] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 484.837336][T13928] ? ip_route_output_key_hash+0x139/0x330 [ 484.843173][T13928] ip_route_output_key_hash+0x1ef/0x330 [ 484.848760][T13928] ? ip_route_input_rcu+0x3160/0x3160 [ 484.854168][T13928] ? __xfrm_decode_session+0xe8b/0x2010 [ 484.859751][T13928] ? l3mdev_fib_table+0x18/0x160 [ 484.864711][T13928] ? l3mdev_fib_table+0x18/0x160 [ 484.869671][T13928] ip_route_output_flow+0x26/0x150 [ 484.874820][T13928] icmp_route_lookup+0x58a/0x940 [ 484.879789][T13928] ? rcu_read_unlock+0xa0/0xa0 [ 484.884612][T13928] ? __icmp_send+0x212/0x1410 [ 484.889315][T13928] __icmp_send+0xeeb/0x1410 [ 484.893843][T13928] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 484.899595][T13928] ? __icmp_send+0x212/0x1410 [ 484.904309][T13928] ? icmp_out_count+0x90/0x90 [ 484.909042][T13928] ? ipv4_link_failure+0x390/0xa20 [ 484.914188][T13928] ? ip_options_fragment+0x290/0x290 [ 484.919485][T13928] ? xfrm_expand_policies+0xc7/0x690 [ 484.924802][T13928] ? ipv4_link_failure+0x390/0xa20 [ 484.929923][T13928] ipv4_link_failure+0x667/0xa20 [ 484.934896][T13928] ? ipv4_negative_advice+0x1a0/0x1a0 [ 484.940296][T13928] ? skb_crc32c_csum_help+0x520/0x520 [ 484.945686][T13928] ? bpf_lsm_xfrm_decode_session+0x5/0x10 [ 484.951447][T13928] ? ipv4_negative_advice+0x1a0/0x1a0 [ 484.956876][T13928] xfrmi_xmit+0xb85/0x15e0 [ 484.961370][T13928] ? xfrmi_dev_uninit+0x1f0/0x1f0 [ 484.966475][T13928] dev_hard_start_xmit+0x262/0x870 [ 484.971657][T13928] __dev_queue_xmit+0x1a7f/0x37f0 [ 484.976729][T13928] ? __dev_queue_xmit+0x26b/0x37f0 [ 484.981887][T13928] ? netdev_core_pick_tx+0x340/0x340 [ 484.987205][T13928] ? packet_parse_headers+0x7b8/0xab0 [ 484.992611][T13928] ? packet_parse_headers+0x7c9/0xab0 [ 484.998021][T13928] ? __virt_addr_valid+0x188/0x540 [ 485.003173][T13928] ? __check_object_size+0x500/0xa40 [ 485.008484][T13928] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 485.011881][T13898] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.014039][T13928] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 485.027226][T13928] ? skb_put+0x117/0x210 [ 485.031507][T13928] packet_sendmsg+0x3bc3/0x4e60 [ 485.035131][T13898] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.036399][T13928] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 485.036430][T13928] ? __might_sleep+0xd0/0xd0 [ 485.036449][T13928] ? verify_lock_unused+0x140/0x140 [ 485.036493][T13928] ? aa_sk_perm+0x81f/0x950 [ 485.036526][T13928] ? packet_getsockopt+0x9a0/0x9a0 [ 485.036571][T13928] ? aa_sock_msg_perm+0x94/0x150 [ 485.036595][T13928] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 485.036615][T13928] ? security_socket_sendmsg+0x7c/0xa0 [ 485.049930][T13898] device bridge_slave_1 entered promiscuous mode [ 485.050293][T13928] ? packet_getsockopt+0x9a0/0x9a0 [ 485.096996][T13928] ____sys_sendmsg+0x5be/0x970 [ 485.101818][T13928] ? __sys_sendmsg_sock+0x30/0x30 [ 485.106879][T13928] ? __import_iovec+0x315/0x500 [ 485.111791][T13928] ? import_iovec+0x6f/0xa0 [ 485.116325][T13928] ___sys_sendmsg+0x2a2/0x360 [ 485.118891][T13898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.121024][T13928] ? __sys_sendmsg+0x290/0x290 [ 485.134863][T13928] ? __lock_acquire+0x7d10/0x7d10 [ 485.139954][T13928] __se_sys_sendmsg+0x1bb/0x2a0 [ 485.144903][T13928] ? ct_nmi_exit+0x145/0x1c0 [ 485.149497][T13928] ? __x64_sys_sendmsg+0x80/0x80 [ 485.154458][T13928] ? lockdep_hardirqs_on+0x94/0x140 [ 485.159670][T13928] do_syscall_64+0x4c/0xa0 [ 485.164093][T13928] ? clear_bhb_loop+0x60/0xb0 [ 485.168769][T13928] ? clear_bhb_loop+0x60/0xb0 [ 485.173443][T13928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.179342][T13928] RIP: 0033:0x7faf2779aeb9 [ 485.183777][T13928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.203392][T13928] RSP: 002b:00007faf2858a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.211810][T13928] RAX: ffffffffffffffda RBX: 00007faf27a15fa0 RCX: 00007faf2779aeb9 [ 485.219788][T13928] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000004 [ 485.227753][T13928] RBP: 00007faf2858a090 R08: 0000000000000000 R09: 0000000000000000 [ 485.235718][T13928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.243686][T13928] R13: 00007faf27a16038 R14: 00007faf27a15fa0 R15: 00007ffe1dff4188 [ 485.251690][T13928] [ 485.285488][T13927] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3199'. [ 485.299786][T13898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.358694][T13898] team0: Port device team_slave_0 added [ 485.384323][T13898] team0: Port device team_slave_1 added [ 485.435154][T13898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.442317][T13898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.469148][T13898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.482328][T13898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.506257][T13898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.535868][T13898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.600862][T13898] device hsr_slave_0 entered promiscuous mode [ 485.611210][T13898] device hsr_slave_1 entered promiscuous mode [ 485.619902][T13898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.627788][T13898] Cannot create hsr debugfs directory [ 485.684100][T13933] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3202'. [ 485.826217][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 485.907722][T13898] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.130089][T13898] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.153571][T13946] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 486.329884][T13898] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.528147][T13898] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.576311][T13951] netlink: 'syz.3.3207': attribute type 25 has an invalid length. [ 486.815662][T13898] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 486.864866][T13898] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 486.893334][T13898] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.919479][T13967] netlink: 'syz.4.3210': attribute type 25 has an invalid length. [ 486.953352][T13966] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 486.972378][T13898] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 487.343835][T13982] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3213'. [ 487.422285][T13984] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3214'. [ 487.483062][T13898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.523460][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 487.536598][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.562941][T13898] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.580657][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 487.599748][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.613056][T12569] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.620293][T12569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.649741][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 487.670197][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.679387][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.708757][T12573] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.715892][T12573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.734196][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 487.763238][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 487.783883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 487.799437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 487.823114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 487.857087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 487.877432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 487.903734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 487.919169][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 487.925990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 487.961364][T13898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.983035][T13898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 487.996911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.005676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.077251][T14000] netlink: 'syz.0.3222': attribute type 2 has an invalid length. [ 488.325373][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 488.348623][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 488.362483][T13898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.370608][T14006] netlink: 'syz.0.3223': attribute type 25 has an invalid length. [ 488.399613][T14009] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3224'. [ 488.402427][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 488.421310][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 488.445300][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 488.455048][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 488.467178][T13898] device veth0_vlan entered promiscuous mode [ 488.482656][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 488.495400][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 488.511223][T13898] device veth1_vlan entered promiscuous mode [ 488.568990][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 488.578267][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 488.600311][T13898] device veth0_macvtap entered promiscuous mode [ 488.614529][T13898] device veth1_macvtap entered promiscuous mode [ 488.702030][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.730895][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.769282][T13898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.791690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 488.819818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 488.840459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 488.883865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 488.902426][T14015] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 488.915285][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.946617][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.978496][T13898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.041788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.052650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.071386][T14017] netlink: 'syz.1.3227': attribute type 21 has an invalid length. [ 489.087142][T13898] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.109139][T13898] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.119333][T13898] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.128412][T13898] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.987258][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 491.219684][T14020] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3228'. [ 491.383447][T12563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.402515][T14029] IPv6: NLM_F_REPLACE set, but no existing node found! [ 491.410037][T12563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.442891][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 491.490664][T14034] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3233'. [ 491.503011][T12570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.518166][T12570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.554406][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 491.744274][T14046] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3235'. [ 491.885681][T14046] FAULT_INJECTION: forcing a failure. [ 491.885681][T14046] name failslab, interval 1, probability 0, space 0, times 0 [ 491.925450][T14046] CPU: 0 PID: 14046 Comm: syz.3.3235 Not tainted syzkaller #0 [ 491.932996][T14046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.943096][T14046] Call Trace: [ 491.946414][T14046] [ 491.949372][T14046] dump_stack_lvl+0x188/0x24e [ 491.954101][T14046] ? show_regs_print_info+0x12/0x12 [ 491.959339][T14046] ? load_image+0x400/0x400 [ 491.963888][T14046] ? __might_sleep+0xd0/0xd0 [ 491.968513][T14046] ? __lock_acquire+0x7d10/0x7d10 [ 491.973580][T14046] should_fail_ex+0x399/0x4d0 [ 491.978351][T14046] should_failslab+0x5/0x20 [ 491.982888][T14046] slab_pre_alloc_hook+0x59/0x310 [ 491.987963][T14046] kmem_cache_alloc+0x56/0x2f0 [ 491.992768][T14046] ? getname_flags+0xb7/0x500 [ 491.997516][T14046] getname_flags+0xb7/0x500 [ 492.002083][T14046] __x64_sys_mkdirat+0x78/0x90 [ 492.006895][T14046] do_syscall_64+0x4c/0xa0 [ 492.011350][T14046] ? clear_bhb_loop+0x60/0xb0 [ 492.016144][T14046] ? clear_bhb_loop+0x60/0xb0 [ 492.020861][T14046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.026790][T14046] RIP: 0033:0x7fc85db9aeb9 [ 492.031234][T14046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.050889][T14046] RSP: 002b:00007fc85eacd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 492.059443][T14046] RAX: ffffffffffffffda RBX: 00007fc85de15fa0 RCX: 00007fc85db9aeb9 [ 492.067446][T14046] RDX: 00000000000001ff RSI: 0000200000000340 RDI: 0000000000000013 [ 492.075441][T14046] RBP: 00007fc85eacd090 R08: 0000000000000000 R09: 0000000000000000 [ 492.083436][T14046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.091563][T14046] R13: 00007fc85de16038 R14: 00007fc85de15fa0 R15: 00007ffd4f850d58 [ 492.099602][T14046] [ 492.122299][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 492.638401][T14055] netlink: 'syz.1.3236': attribute type 25 has an invalid length. [ 492.782467][T14062] netlink: 'syz.2.3240': attribute type 21 has an invalid length. [ 493.270669][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 493.282267][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 493.291356][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 493.318257][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 493.330481][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 493.342620][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 493.748773][T14088] netlink: 26 bytes leftover after parsing attributes in process `syz.3.3246'. [ 493.864559][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.012862][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.342876][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.509308][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.615503][T14112] netlink: 'syz.4.3252': attribute type 25 has an invalid length. [ 494.809650][T14073] chnl_net:caif_netlink_parms(): no params data found [ 495.000324][ T11] device 0 left promiscuous mode [ 495.036216][T14127] netlink: 'syz.4.3258': attribute type 21 has an invalid length. [ 495.082647][ T11] device 1 left promiscuous mode [ 495.151582][T14073] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.242381][T14073] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.282197][T14073] device bridge_slave_0 entered promiscuous mode [ 495.321288][ T11] device 2 left promiscuous mode [ 495.349542][T14073] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.363872][T14073] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.383369][T14073] device bridge_slave_1 entered promiscuous mode [ 495.398413][ T11] device 3 left promiscuous mode [ 495.426659][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 495.452582][T14073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.462134][ T11] device 4 left promiscuous mode [ 495.495614][T14073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.537443][ T11] device 5 left promiscuous mode [ 495.591918][ T11] device 6 left promiscuous mode [ 495.618492][T14073] team0: Port device team_slave_0 added [ 495.632786][ T11] device 7 left promiscuous mode [ 495.646983][T14073] team0: Port device team_slave_1 added [ 495.710463][ T11] device 8 left promiscuous mode [ 495.764987][T14073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.806676][T14073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.927287][T14073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.968974][ T11] device 9 left promiscuous mode [ 496.011873][T14073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.029731][T14073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.186079][T14073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.633651][T14073] device hsr_slave_0 entered promiscuous mode [ 496.642222][T14073] device hsr_slave_1 entered promiscuous mode [ 496.655578][T14073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.666593][T14173] FAULT_INJECTION: forcing a failure. [ 496.666593][T14173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 496.682956][T14073] Cannot create hsr debugfs directory [ 496.689550][T14173] CPU: 0 PID: 14173 Comm: syz.4.3268 Not tainted syzkaller #0 [ 496.697063][T14173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.707243][T14173] Call Trace: [ 496.710545][T14173] [ 496.713508][T14173] dump_stack_lvl+0x188/0x24e [ 496.718233][T14173] ? show_regs_print_info+0x12/0x12 [ 496.723559][T14173] ? load_image+0x400/0x400 [ 496.728103][T14173] ? __lock_acquire+0x7d10/0x7d10 [ 496.733169][T14173] should_fail_ex+0x399/0x4d0 [ 496.737892][T14173] prepare_alloc_pages+0x1e2/0x5f0 [ 496.743049][T14173] __alloc_pages+0x130/0x4f0 [ 496.747688][T14173] ? zone_statistics+0x170/0x170 [ 496.752688][T14173] ? trace_event_raw_event_lock+0x250/0x250 [ 496.758634][T14173] __folio_alloc+0xe/0x30 [ 496.763003][T14173] vma_alloc_folio+0x4a3/0x900 [ 496.767819][T14173] wp_page_copy+0x28b/0x1680 [ 496.772448][T14173] ? do_wp_page+0x67f/0x1680 [ 496.777099][T14173] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 496.782837][T14173] handle_mm_fault+0x1d19/0x3ee0 [ 496.787835][T14173] ? numa_migrate_prep+0x250/0x250 [ 496.792979][T14173] ? lock_chain_count+0x20/0x20 [ 496.797846][T14173] ? lock_mm_and_find_vma+0xae/0x2f0 [ 496.803135][T14173] do_user_addr_fault+0x51f/0xb10 [ 496.808184][T14173] exc_page_fault+0x60/0x100 [ 496.812793][T14173] asm_exc_page_fault+0x22/0x30 [ 496.817642][T14173] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 496.824269][T14173] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 496.843871][T14173] RSP: 0018:ffffc90003547cd0 EFLAGS: 00050206 [ 496.849943][T14173] RAX: ffffffff8410d901 RBX: 000000000000b161 RCX: 00000000000078a1 [ 496.858006][T14173] RDX: 000000000000b161 RSI: ffff8880632438c0 RDI: 0000200000005000 [ 496.865976][T14173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 496.873949][T14173] R10: dffffc0000000000 R11: ffffed100c64962c R12: 00007fffffff3e9f [ 496.882111][T14173] R13: 0000000000000000 R14: 0000200000001740 R15: ffff888063240000 [ 496.890098][T14173] ? _copy_to_user+0xd1/0x130 [ 496.894818][T14173] _copy_to_user+0xea/0x130 [ 496.899365][T14173] map_lookup_and_delete_elem+0x705/0x840 [ 496.905132][T14173] __sys_bpf+0x5cc/0x780 [ 496.909394][T14173] ? bpf_link_show_fdinfo+0x380/0x380 [ 496.914829][T14173] ? lock_chain_count+0x20/0x20 [ 496.919707][T14173] __x64_sys_bpf+0x78/0x90 [ 496.924130][T14173] do_syscall_64+0x4c/0xa0 [ 496.928553][T14173] ? clear_bhb_loop+0x60/0xb0 [ 496.933227][T14173] ? clear_bhb_loop+0x60/0xb0 [ 496.937906][T14173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.943800][T14173] RIP: 0033:0x7faf2779aeb9 [ 496.948214][T14173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.967830][T14173] RSP: 002b:00007faf2858a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 496.976247][T14173] RAX: ffffffffffffffda RBX: 00007faf27a15fa0 RCX: 00007faf2779aeb9 [ 496.984247][T14173] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000015 [ 496.992240][T14173] RBP: 00007faf2858a090 R08: 0000000000000000 R09: 0000000000000000 [ 497.000224][T14173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.008220][T14173] R13: 00007faf27a16038 R14: 00007faf27a15fa0 R15: 00007ffe1dff4188 [ 497.016226][T14173] [ 497.099908][T14171] netlink: 'syz.3.3267': attribute type 25 has an invalid length. [ 497.506634][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 498.249728][T14224] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3278'. [ 498.580117][T14230] IPv6: NLM_F_REPLACE set, but no existing node found! [ 498.614716][ T11] device hsr_slave_0 left promiscuous mode [ 498.635353][ T11] device hsr_slave_1 left promiscuous mode [ 498.643612][ T11] device bridge_slave_1 left promiscuous mode [ 498.650188][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.660513][ T11] device bridge_slave_0 left promiscuous mode [ 498.667008][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.691186][ T11] device veth0_macvtap left promiscuous mode [ 499.283074][ T11] device team_slave_1 left promiscuous mode [ 499.295852][ T11] team0 (unregistering): Port device team_slave_1 removed [ 499.339983][ T11] device team_slave_0 left promiscuous mode [ 499.352841][ T11] team0 (unregistering): Port device team_slave_0 removed [ 499.397990][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.407129][ T11] device bond_slave_1 left promiscuous mode [ 499.447838][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.457835][ T11] device bond_slave_0 left promiscuous mode [ 499.591923][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 499.764478][ T11] team0 (unregistering): Port device bridge0 removed [ 499.802548][ T11] bond0 (unregistering): Released all slaves [ 499.963585][T14073] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 499.979395][T14073] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 500.047418][T14073] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 500.088939][T14073] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 500.098684][T14256] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.3287'. [ 500.213716][T14256] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3287'. [ 500.431919][T14260] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3289'. [ 500.593561][T14073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.615064][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 500.635910][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 500.650860][T14073] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.663574][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 500.682633][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 500.732511][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.739754][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.771350][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 500.803869][T12577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 500.825257][T12577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 500.854108][T12577] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.861486][T12577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.946917][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 500.972727][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 501.017254][T14287] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3294'. [ 501.053345][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 501.084542][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 501.120302][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 501.141986][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 501.158174][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 501.179754][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 501.206596][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 501.244255][T14073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.264445][T14073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 501.291095][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 501.302492][T12573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 501.363197][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.369649][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.676085][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 501.799945][T14298] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3296'. [ 502.214127][T14308] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3297'. [ 502.368086][T14306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.427182][T14306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.521087][T14306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.544214][T14306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.134513][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 503.149289][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 503.194310][T14073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.251977][T14323] IPv6: NLM_F_REPLACE set, but no existing node found! [ 503.350158][T12577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 503.397318][T12577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 503.505210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 503.535209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 503.588170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 503.630227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 503.665497][T14073] device veth0_vlan entered promiscuous mode [ 503.735182][T14331] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3304'. [ 503.790324][T14073] device veth1_vlan entered promiscuous mode [ 503.950069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 503.979339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 504.037910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 504.103522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 504.149486][T14073] device veth0_macvtap entered promiscuous mode [ 504.215811][T14073] device veth1_macvtap entered promiscuous mode [ 504.339734][T14073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.386882][T14073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.439008][T14073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.463603][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 504.483213][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 504.515801][T14073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.543241][T14073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.588186][T14073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.614168][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 504.635857][T12569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 504.687792][T14073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.712157][T14073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.741206][T14073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.779919][T14073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.230800][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.316634][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.392377][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 505.457190][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.487415][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.543293][T12577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 506.586991][T14368] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 507.983928][T14386] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3315'. [ 508.037094][T14386] net_ratelimit: 6 callbacks suppressed [ 508.037120][T14386] openvswitch: netlink: Flow key attr not present in new flow. [ 508.612998][T14401] FAULT_INJECTION: forcing a failure. [ 508.612998][T14401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.686871][T14401] CPU: 1 PID: 14401 Comm: syz.2.3320 Not tainted syzkaller #0 [ 508.694418][T14401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 508.704523][T14401] Call Trace: [ 508.707828][T14401] [ 508.710768][T14401] dump_stack_lvl+0x188/0x24e [ 508.715469][T14401] ? show_regs_print_info+0x12/0x12 [ 508.720680][T14401] ? load_image+0x400/0x400 [ 508.725246][T14401] ? __lock_acquire+0x7d10/0x7d10 [ 508.730316][T14401] should_fail_ex+0x399/0x4d0 [ 508.735047][T14401] _copy_from_user+0x2c/0x170 [ 508.739764][T14401] iovec_from_user+0x143/0x360 [ 508.744557][T14401] __import_iovec+0x6d/0x500 [ 508.749185][T14401] import_iovec+0x6f/0xa0 [ 508.753535][T14401] ___sys_sendmsg+0x252/0x360 [ 508.758241][T14401] ? __sys_sendmsg+0x290/0x290 [ 508.763057][T14401] ? __lock_acquire+0x7d10/0x7d10 [ 508.768161][T14401] __se_sys_sendmsg+0x1bb/0x2a0 [ 508.773032][T14401] ? ct_nmi_exit+0x145/0x1c0 [ 508.777632][T14401] ? __x64_sys_sendmsg+0x80/0x80 [ 508.782610][T14401] ? lockdep_hardirqs_on+0x94/0x140 [ 508.787872][T14401] do_syscall_64+0x4c/0xa0 [ 508.792297][T14401] ? clear_bhb_loop+0x60/0xb0 [ 508.796977][T14401] ? clear_bhb_loop+0x60/0xb0 [ 508.801663][T14401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.807560][T14401] RIP: 0033:0x7f210cf9aeb9 [ 508.811991][T14401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.831628][T14401] RSP: 002b:00007f210dde8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.840324][T14401] RAX: ffffffffffffffda RBX: 00007f210d215fa0 RCX: 00007f210cf9aeb9 [ 508.848305][T14401] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000009 [ 508.856287][T14401] RBP: 00007f210dde8090 R08: 0000000000000000 R09: 0000000000000000 [ 508.864264][T14401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.872336][T14401] R13: 00007f210d216038 R14: 00007f210d215fa0 R15: 00007fffec1a8c78 [ 508.880355][T14401] [ 509.067783][T14404] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3319'. [ 509.864745][T14418] netlink: 65173 bytes leftover after parsing attributes in process `syz.1.3323'. [ 512.962904][T14457] netlink: 'syz.3.3338': attribute type 2 has an invalid length. [ 512.983804][T14456] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 513.032982][T14457] netlink: 'syz.3.3338': attribute type 1 has an invalid length. [ 513.063758][T14457] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.3338'. [ 513.292966][T14459] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3337'. [ 514.338465][T14472] netlink: 'syz.2.3341': attribute type 25 has an invalid length. [ 514.579205][T14479] netlink: 65173 bytes leftover after parsing attributes in process `syz.4.3345'. [ 515.412565][T14490] FAULT_INJECTION: forcing a failure. [ 515.412565][T14490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.512849][T14490] CPU: 0 PID: 14490 Comm: syz.2.3349 Not tainted syzkaller #0 [ 515.520429][T14490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 515.530558][T14490] Call Trace: [ 515.533895][T14490] [ 515.536886][T14490] dump_stack_lvl+0x188/0x24e [ 515.541652][T14490] ? show_regs_print_info+0x12/0x12 [ 515.546929][T14490] ? load_image+0x400/0x400 [ 515.551516][T14490] ? __lock_acquire+0x7d10/0x7d10 [ 515.556614][T14490] ? snprintf+0xe5/0x140 [ 515.560934][T14490] should_fail_ex+0x399/0x4d0 [ 515.565709][T14490] _copy_to_user+0x2c/0x130 [ 515.570293][T14490] simple_read_from_buffer+0xe3/0x150 [ 515.575762][T14490] proc_fail_nth_read+0x1a6/0x220 [ 515.580871][T14490] ? proc_fault_inject_write+0x310/0x310 [ 515.586600][T14490] ? fsnotify_perm+0x248/0x550 [ 515.591437][T14490] ? proc_fault_inject_write+0x310/0x310 [ 515.597493][T14490] vfs_read+0x2de/0xa00 [ 515.601754][T14490] ? kernel_read+0x1e0/0x1e0 [ 515.606414][T14490] ? __fget_files+0x28/0x4b0 [ 515.611056][T14490] ? __fget_files+0x28/0x4b0 [ 515.615714][T14490] ? __fget_files+0x43d/0x4b0 [ 515.620506][T14490] ? __fdget_pos+0x2ae/0x360 [ 515.625158][T14490] ? ksys_read+0x71/0x250 [ 515.629573][T14490] ksys_read+0x14c/0x250 [ 515.633893][T14490] ? vfs_write+0xa30/0xa30 [ 515.638408][T14490] ? lockdep_hardirqs_on+0x94/0x140 [ 515.643812][T14490] do_syscall_64+0x4c/0xa0 [ 515.648315][T14490] ? clear_bhb_loop+0x60/0xb0 [ 515.653156][T14490] ? clear_bhb_loop+0x60/0xb0 [ 515.657915][T14490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.663898][T14490] RIP: 0033:0x7f210cf5b78e [ 515.668382][T14490] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 515.688056][T14490] RSP: 002b:00007f210dde7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 515.696640][T14490] RAX: ffffffffffffffda RBX: 00007f210dde86c0 RCX: 00007f210cf5b78e [ 515.704686][T14490] RDX: 000000000000000f RSI: 00007f210dde80a0 RDI: 0000000000000004 [ 515.712809][T14490] RBP: 00007f210dde8090 R08: 0000000000000000 R09: 0000000000000000 [ 515.720850][T14490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.728886][T14490] R13: 00007f210d216038 R14: 00007f210d215fa0 R15: 00007fffec1a8c78 [ 515.737041][T14490] [ 517.175035][T14513] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 518.540458][T14534] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3363'. [ 518.768231][T14544] netlink: 'syz.2.3366': attribute type 2 has an invalid length. [ 518.787098][T14544] netlink: 'syz.2.3366': attribute type 1 has an invalid length. [ 518.800604][T14544] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.3366'. [ 519.391234][T14564] netlink: 'syz.2.3373': attribute type 10 has an invalid length. [ 519.421371][T14564] team0: Device ip6_vti0 is of different type [ 520.273842][T14581] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3378'. [ 520.433629][T14578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.458058][T14578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.502112][T14578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.536601][T14578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.849849][T14622] netlink: 'syz.4.3395': attribute type 25 has an invalid length. [ 522.118469][T14629] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3398'. [ 522.166245][T14629] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3398'. [ 522.176529][T14630] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3398'. [ 522.298071][T14632] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3399'. [ 522.350160][T14636] netlink: 'syz.0.3401': attribute type 21 has an invalid length. [ 523.499876][T14669] FAULT_INJECTION: forcing a failure. [ 523.499876][T14669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.523109][T14670] netlink: 'syz.3.3411': attribute type 25 has an invalid length. [ 523.547646][T14669] CPU: 0 PID: 14669 Comm: syz.4.3413 Not tainted syzkaller #0 [ 523.555168][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 523.565220][T14669] Call Trace: [ 523.568496][T14669] [ 523.571432][T14669] dump_stack_lvl+0x188/0x24e [ 523.576110][T14669] ? lockdep_hardirqs_on+0x94/0x140 [ 523.581302][T14669] ? show_regs_print_info+0x12/0x12 [ 523.586553][T14669] ? audit_tree_destroy_watch+0x20/0x20 [ 523.592353][T14669] should_fail_ex+0x399/0x4d0 [ 523.597127][T14669] _copy_from_user+0x2c/0x170 [ 523.601808][T14669] __copy_msghdr+0x3b7/0x580 [ 523.606399][T14669] ___sys_sendmsg+0x210/0x360 [ 523.611077][T14669] ? __sys_sendmsg+0x290/0x290 [ 523.615831][T14669] ? perf_trace_preemptirq_template+0xa8/0x320 [ 523.621986][T14669] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 523.627976][T14669] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 523.634127][T14669] ? lockdep_hardirqs_on+0x94/0x140 [ 523.639341][T14669] ? __se_sys_sendmsg+0xf4/0x2a0 [ 523.644289][T14669] ? kasan_check_range+0x84/0x290 [ 523.649315][T14669] __se_sys_sendmsg+0x1bb/0x2a0 [ 523.654256][T14669] ? __x64_sys_sendmsg+0x80/0x80 [ 523.659305][T14669] ? lockdep_hardirqs_on+0x94/0x140 [ 523.664511][T14669] do_syscall_64+0x4c/0xa0 [ 523.668920][T14669] ? clear_bhb_loop+0x60/0xb0 [ 523.673587][T14669] ? clear_bhb_loop+0x60/0xb0 [ 523.678259][T14669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.684142][T14669] RIP: 0033:0x7faf2779aeb9 [ 523.688550][T14669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.708157][T14669] RSP: 002b:00007faf2858a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.716566][T14669] RAX: ffffffffffffffda RBX: 00007faf27a15fa0 RCX: 00007faf2779aeb9 [ 523.724525][T14669] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 000000000000000b [ 523.732518][T14669] RBP: 00007faf2858a090 R08: 0000000000000000 R09: 0000000000000000 [ 523.740508][T14669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.748475][T14669] R13: 00007faf27a16038 R14: 00007faf27a15fa0 R15: 00007ffe1dff4188 [ 523.756469][T14669] [ 524.323820][T14689] netlink: 'syz.0.3421': attribute type 21 has an invalid length. [ 526.430103][T14715] netlink: 'syz.1.3429': attribute type 25 has an invalid length. [ 526.780805][T14732] netlink: 'syz.1.3436': attribute type 21 has an invalid length. [ 527.597681][T14755] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3440'. [ 527.646980][T14750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.655514][T14750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.673952][T14750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.692926][T14750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.999609][T14764] FAULT_INJECTION: forcing a failure. [ 527.999609][T14764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.020582][T14764] CPU: 1 PID: 14764 Comm: syz.4.3446 Not tainted syzkaller #0 [ 528.028120][T14764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.038208][T14764] Call Trace: [ 528.041505][T14764] [ 528.044461][T14764] dump_stack_lvl+0x188/0x24e [ 528.049166][T14764] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 528.055344][T14764] ? show_regs_print_info+0x12/0x12 [ 528.060655][T14764] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 528.066840][T14764] ? dump_stack+0x5/0x12 [ 528.071125][T14764] should_fail_ex+0x399/0x4d0 [ 528.075841][T14764] strncpy_from_user+0x32/0x350 [ 528.080726][T14764] bpf_prog_load+0x1f3/0x1560 [ 528.085422][T14764] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 528.091421][T14764] ? lock_chain_count+0x20/0x20 [ 528.096291][T14764] ? map_freeze+0x390/0x390 [ 528.100810][T14764] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 528.106975][T14764] ? lockdep_hardirqs_on+0x94/0x140 [ 528.112229][T14764] ? security_bpf+0x33/0xa0 [ 528.116760][T14764] ? bpf_lsm_bpf+0x5/0x10 [ 528.121118][T14764] ? security_bpf+0x7a/0xa0 [ 528.125654][T14764] __sys_bpf+0x5b8/0x780 [ 528.129936][T14764] ? bpf_link_show_fdinfo+0x380/0x380 [ 528.135352][T14764] ? __sys_bpf+0x1/0x780 [ 528.139624][T14764] __x64_sys_bpf+0x78/0x90 [ 528.144065][T14764] do_syscall_64+0x4c/0xa0 [ 528.148503][T14764] ? clear_bhb_loop+0x60/0xb0 [ 528.153279][T14764] ? clear_bhb_loop+0x60/0xb0 [ 528.157974][T14764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.163892][T14764] RIP: 0033:0x7faf2779aeb9 [ 528.168325][T14764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.187954][T14764] RSP: 002b:00007faf2858a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 528.196395][T14764] RAX: ffffffffffffffda RBX: 00007faf27a15fa0 RCX: 00007faf2779aeb9 [ 528.204398][T14764] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 528.212388][T14764] RBP: 00007faf2858a090 R08: 0000000000000000 R09: 0000000000000000 [ 528.220469][T14764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.228451][T14764] R13: 00007faf27a16038 R14: 00007faf27a15fa0 R15: 00007ffe1dff4188 [ 528.236440][T14764] [ 528.357755][T14770] netlink: 'syz.1.3448': attribute type 21 has an invalid length. [ 528.960148][T14801] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.3460'. [ 529.309884][T14810] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3464'. [ 529.465600][T14816] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 529.480930][T14818] netlink: 'syz.0.3468': attribute type 21 has an invalid length. [ 530.056436][ T4283] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 530.713982][T14843] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 531.141659][T14855] FAULT_INJECTION: forcing a failure. [ 531.141659][T14855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.165572][T14855] CPU: 1 PID: 14855 Comm: syz.1.3480 Not tainted syzkaller #0 [ 531.173377][T14855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 531.183470][T14855] Call Trace: [ 531.186769][T14855] [ 531.189720][T14855] dump_stack_lvl+0x188/0x24e [ 531.194436][T14855] ? show_regs_print_info+0x12/0x12 [ 531.199675][T14855] ? load_image+0x400/0x400 [ 531.204211][T14855] ? __lock_acquire+0x7d10/0x7d10 [ 531.209264][T14855] ? lockdep_hardirqs_on+0x94/0x140 [ 531.214493][T14855] should_fail_ex+0x399/0x4d0 [ 531.219206][T14855] strncpy_from_user+0x32/0x350 [ 531.224097][T14855] bpf_prog_load+0x1f3/0x1560 [ 531.228819][T14855] ? map_freeze+0x390/0x390 [ 531.233354][T14855] ? __might_fault+0xa6/0x120 [ 531.238079][T14855] ? __might_fault+0xa6/0x120 [ 531.242954][T14855] ? __might_fault+0xc2/0x120 [ 531.247659][T14855] ? __might_fault+0xa6/0x120 [ 531.252375][T14855] ? bpf_lsm_bpf+0x5/0x10 [ 531.256728][T14855] ? security_bpf+0x7a/0xa0 [ 531.261256][T14855] __sys_bpf+0x5b8/0x780 [ 531.265520][T14855] ? bpf_link_show_fdinfo+0x380/0x380 [ 531.270909][T14855] ? lock_chain_count+0x20/0x20 [ 531.275760][T14855] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 531.281740][T14855] __x64_sys_bpf+0x78/0x90 [ 531.286156][T14855] do_syscall_64+0x4c/0xa0 [ 531.290586][T14855] ? clear_bhb_loop+0x60/0xb0 [ 531.295263][T14855] ? clear_bhb_loop+0x60/0xb0 [ 531.299930][T14855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.305816][T14855] RIP: 0033:0x7fda5139aeb9 [ 531.310228][T14855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.329835][T14855] RSP: 002b:00007fda522dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 531.338248][T14855] RAX: ffffffffffffffda RBX: 00007fda51615fa0 RCX: 00007fda5139aeb9 [ 531.346301][T14855] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 531.354257][T14855] RBP: 00007fda522dd090 R08: 0000000000000000 R09: 0000000000000000 [ 531.362217][T14855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.370178][T14855] R13: 00007fda51616038 R14: 00007fda51615fa0 R15: 00007ffdf224a458 [ 531.378153][T14855] [ 531.667421][T14866] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3484'. [ 531.686462][T14870] netlink: 'syz.1.3486': attribute type 21 has an invalid length. [ 531.743493][T14873] netlink: 'syz.0.3488': attribute type 27 has an invalid length. [ 531.753028][T14875] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 531.761633][T14873] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3488'. [ 531.953246][T14883] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 532.067832][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 532.296421][T14895] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3494'. [ 532.318769][T14891] netlink: 'syz.2.3495': attribute type 6 has an invalid length. [ 532.328325][T14891] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3495'. [ 532.844033][T14916] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3503'. [ 533.013529][T14925] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 533.383750][T14930] netlink: 'syz.3.3508': attribute type 21 has an invalid length. [ 534.013166][ T4282] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 534.054637][T14955] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3518'. [ 534.115204][T14959] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 534.533093][T14970] FAULT_INJECTION: forcing a failure. [ 534.533093][T14970] name failslab, interval 1, probability 0, space 0, times 0 [ 534.552301][T14970] CPU: 0 PID: 14970 Comm: syz.3.3526 Not tainted syzkaller #0 [ 534.559847][T14970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 534.569932][T14970] Call Trace: [ 534.573231][T14970] [ 534.576181][T14970] dump_stack_lvl+0x188/0x24e [ 534.580913][T14970] ? show_regs_print_info+0x12/0x12 [ 534.586228][T14970] ? load_image+0x400/0x400 [ 534.590750][T14970] ? __might_sleep+0xd0/0xd0 [ 534.595344][T14970] ? __lock_acquire+0x7d10/0x7d10 [ 534.600373][T14970] should_fail_ex+0x399/0x4d0 [ 534.605057][T14970] should_failslab+0x5/0x20 [ 534.609561][T14970] slab_pre_alloc_hook+0x59/0x310 [ 534.614584][T14970] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 534.620303][T14970] __kmem_cache_alloc_node+0x4f/0x260 [ 534.625672][T14970] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 534.631480][T14970] __kmalloc+0xa0/0x240 [ 534.635631][T14970] tomoyo_realpath_from_path+0xdf/0x5d0 [ 534.641260][T14970] ? tomoyo_path_number_perm+0x205/0x650 [ 534.646897][T14970] tomoyo_path_number_perm+0x22f/0x650 [ 534.652352][T14970] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 534.657803][T14970] ? ksys_write+0x1c0/0x250 [ 534.662302][T14970] ? common_file_perm+0x171/0x1c0 [ 534.667351][T14970] ? __fget_files+0x28/0x4b0 [ 534.671953][T14970] ? __fget_files+0x28/0x4b0 [ 534.676891][T14970] security_file_ioctl+0x6c/0xa0 [ 534.681825][T14970] __se_sys_ioctl+0x48/0x170 [ 534.686412][T14970] do_syscall_64+0x4c/0xa0 [ 534.690824][T14970] ? clear_bhb_loop+0x60/0xb0 [ 534.695491][T14970] ? clear_bhb_loop+0x60/0xb0 [ 534.700160][T14970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.706044][T14970] RIP: 0033:0x7fc85db9aeb9 [ 534.710472][T14970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.730213][T14970] RSP: 002b:00007fc85eacd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.738635][T14970] RAX: ffffffffffffffda RBX: 00007fc85de15fa0 RCX: 00007fc85db9aeb9 [ 534.746613][T14970] RDX: 0000000000000000 RSI: 0000000000008902 RDI: 0000000000000003 [ 534.754599][T14970] RBP: 00007fc85eacd090 R08: 0000000000000000 R09: 0000000000000000 [ 534.762560][T14970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.770524][T14970] R13: 00007fc85de16038 R14: 00007fc85de15fa0 R15: 00007ffd4f850d58 [ 534.778639][T14970] [ 534.810228][T14970] ERROR: Out of memory at tomoyo_realpath_from_path. [ 534.932184][T14981] netlink: 'syz.2.3529': attribute type 29 has an invalid length. [ 534.942393][T14979] netlink: 'syz.3.3528': attribute type 21 has an invalid length. [ 534.968669][T14981] netlink: 'syz.2.3529': attribute type 29 has an invalid length. [ 534.988191][T14986] netlink: 'syz.2.3529': attribute type 29 has an invalid length. [ 535.132792][ T4283] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 535.202828][T14994] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3533'. [ 535.445129][T15007] netlink: 'syz.3.3537': attribute type 10 has an invalid length. [ 535.599153][T15007] team0: Device hsr_slave_0 failed to register rx_handler [ 535.873560][T15025] netlink: 'syz.1.3545': attribute type 21 has an invalid length. [ 536.066212][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 536.082364][ T4283] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 536.148836][T15037] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3549'. [ 536.397613][T15045] netlink: 'syz.4.3552': attribute type 10 has an invalid length. [ 536.592105][T15045] team0: Device hsr_slave_0 failed to register rx_handler [ 537.334967][T15070] netlink: 'syz.0.3560': attribute type 21 has an invalid length. [ 537.716669][T15080] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3562'. [ 538.146153][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 538.316363][T15101] netlink: 'syz.0.3567': attribute type 10 has an invalid length. [ 538.360109][T15101] team0: Device hsr_slave_0 failed to register rx_handler [ 538.599875][T15115] netlink: 'syz.1.3575': attribute type 21 has an invalid length. [ 539.677824][T15145] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 539.687360][ T4282] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 540.004259][T15156] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3586'. [ 540.134756][T15169] netlink: 'syz.1.3590': attribute type 21 has an invalid length. [ 540.720653][T15183] netlink: 'syz.0.3595': attribute type 25 has an invalid length. [ 540.878047][T15188] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 541.273667][T15196] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 541.394983][T15201] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.3602'. [ 541.485181][T15204] netlink: 'syz.2.3604': attribute type 10 has an invalid length. [ 541.524268][T15204] team0: Device hsr_slave_0 failed to register rx_handler [ 541.570903][T15205] netlink: 'syz.0.3603': attribute type 21 has an invalid length. [ 541.746492][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 541.790610][T15218] FAULT_INJECTION: forcing a failure. [ 541.790610][T15218] name failslab, interval 1, probability 0, space 0, times 0 [ 541.858565][T15219] netlink: 'syz.3.3607': attribute type 25 has an invalid length. [ 541.866764][T15218] CPU: 0 PID: 15218 Comm: syz.1.3609 Not tainted syzkaller #0 [ 541.874253][T15218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.884341][T15218] Call Trace: [ 541.887642][T15218] [ 541.890596][T15218] dump_stack_lvl+0x188/0x24e [ 541.895316][T15218] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 541.901513][T15218] ? show_regs_print_info+0x12/0x12 [ 541.906742][T15218] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 541.912933][T15218] should_fail_ex+0x399/0x4d0 [ 541.917647][T15218] should_failslab+0x5/0x20 [ 541.922222][T15218] slab_pre_alloc_hook+0x59/0x310 [ 541.927279][T15218] ? ip_options_get+0x4c/0x430 [ 541.932083][T15218] __kmem_cache_alloc_node+0x4f/0x260 [ 541.937483][T15218] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 541.943665][T15218] ? ip_options_get+0x4c/0x430 [ 541.948461][T15218] __kmalloc+0xa0/0x240 [ 541.952657][T15218] ip_options_get+0x4c/0x430 [ 541.957273][T15218] ip_cmsg_send+0x4fc/0xa50 [ 541.961817][T15218] raw_sendmsg+0x573/0x1b20 [ 541.966346][T15218] ? compat_raw_ioctl+0x60/0x60 [ 541.971341][T15218] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 541.977499][T15218] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 541.983925][T15218] ? sock_rps_record_flow+0x19/0x3f0 [ 541.989226][T15218] ? inet_sendmsg+0x78/0x2f0 [ 541.993812][T15218] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 541.999095][T15218] ? security_socket_sendmsg+0x7c/0xa0 [ 542.004551][T15218] ? inet_send_prepare+0x260/0x260 [ 542.009657][T15218] ____sys_sendmsg+0x5be/0x970 [ 542.014424][T15218] ? __sys_sendmsg_sock+0x30/0x30 [ 542.019525][T15218] ? __import_iovec+0x315/0x500 [ 542.024368][T15218] ? import_iovec+0x6f/0xa0 [ 542.028876][T15218] ___sys_sendmsg+0x2a2/0x360 [ 542.033569][T15218] ? __sys_sendmsg+0x290/0x290 [ 542.038358][T15218] ? ktime_get_real_ts64+0x440/0x440 [ 542.043668][T15218] __se_sys_sendmsg+0x1bb/0x2a0 [ 542.048520][T15218] ? ct_nmi_exit+0x145/0x1c0 [ 542.053106][T15218] ? __x64_sys_sendmsg+0x80/0x80 [ 542.058047][T15218] ? lockdep_hardirqs_on+0x94/0x140 [ 542.063244][T15218] do_syscall_64+0x4c/0xa0 [ 542.067660][T15218] ? clear_bhb_loop+0x60/0xb0 [ 542.072324][T15218] ? clear_bhb_loop+0x60/0xb0 [ 542.076998][T15218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.082885][T15218] RIP: 0033:0x7fda5139aeb9 [ 542.087376][T15218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.106997][T15218] RSP: 002b:00007fda522dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.115414][T15218] RAX: ffffffffffffffda RBX: 00007fda51615fa0 RCX: 00007fda5139aeb9 [ 542.123381][T15218] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 000000000000000f [ 542.131347][T15218] RBP: 00007fda522dd090 R08: 0000000000000000 R09: 0000000000000000 [ 542.139309][T15218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.147267][T15218] R13: 00007fda51616038 R14: 00007fda51615fa0 R15: 00007ffdf224a458 [ 542.155247][T15218] [ 542.932880][T15232] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 543.551807][T15253] FAULT_INJECTION: forcing a failure. [ 543.551807][T15253] name failslab, interval 1, probability 0, space 0, times 0 [ 543.571707][T15253] CPU: 1 PID: 15253 Comm: syz.4.3624 Not tainted syzkaller #0 [ 543.579240][T15253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 543.589332][T15253] Call Trace: [ 543.592627][T15253] [ 543.595576][T15253] dump_stack_lvl+0x188/0x24e [ 543.600299][T15253] ? sctp_sendmsg+0x15b0/0x2940 [ 543.605184][T15253] ? ___sys_sendmsg+0x2a2/0x360 [ 543.610071][T15253] ? show_regs_print_info+0x12/0x12 [ 543.615316][T15253] ? load_image+0x400/0x400 [ 543.619867][T15253] should_fail_ex+0x399/0x4d0 [ 543.624591][T15253] should_failslab+0x5/0x20 [ 543.629138][T15253] slab_pre_alloc_hook+0x59/0x310 [ 543.634193][T15253] ? sctp_add_bind_addr+0x89/0x350 [ 543.639352][T15253] __kmem_cache_alloc_node+0x4f/0x260 [ 543.644764][T15253] ? sctp_add_bind_addr+0x89/0x350 [ 543.649923][T15253] kmalloc_trace+0x26/0xe0 [ 543.654387][T15253] sctp_add_bind_addr+0x89/0x350 [ 543.659373][T15253] sctp_copy_local_addr_list+0x311/0x4e0 [ 543.665049][T15253] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 543.670822][T15253] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 543.676939][T15253] ? sctp_v4_is_any+0x31/0x50 [ 543.681658][T15253] ? sctp_copy_one_addr+0x93/0x660 [ 543.686823][T15253] sctp_bind_addr_copy+0xaf/0x3c0 [ 543.691885][T15253] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 543.698275][T15253] sctp_connect_new_asoc+0x2f5/0x6a0 [ 543.703620][T15253] ? __sctp_connect+0xd80/0xd80 [ 543.708591][T15253] ? __local_bh_enable_ip+0x136/0x1c0 [ 543.714081][T15253] ? _local_bh_enable+0xa0/0xa0 [ 543.718960][T15253] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 543.724801][T15253] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 543.730662][T15253] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 543.736271][T15253] ? security_sctp_bind_connect+0x85/0xb0 [ 543.742034][T15253] sctp_sendmsg+0x15b0/0x2940 [ 543.746761][T15253] ? trace_event_raw_event_lock+0x250/0x250 [ 543.752708][T15253] ? aa_sk_perm+0x7e1/0x950 [ 543.757262][T15253] ? sctp_getsockopt+0x8a0/0x8a0 [ 543.762253][T15253] ? __might_fault+0xa6/0x120 [ 543.766960][T15253] ? aa_af_perm+0x340/0x340 [ 543.771489][T15253] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 543.777962][T15253] ? inet_sendmsg+0x78/0x2f0 [ 543.782584][T15253] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 543.787891][T15253] ? security_socket_sendmsg+0x7c/0xa0 [ 543.793384][T15253] ? inet_send_prepare+0x260/0x260 [ 543.798520][T15253] ____sys_sendmsg+0x5be/0x970 [ 543.803326][T15253] ? __sys_sendmsg_sock+0x30/0x30 [ 543.808373][T15253] ? __import_iovec+0x315/0x500 [ 543.813270][T15253] ? import_iovec+0x6f/0xa0 [ 543.817801][T15253] ___sys_sendmsg+0x2a2/0x360 [ 543.822526][T15253] ? __sys_sendmsg+0x290/0x290 [ 543.827360][T15253] ? __lock_acquire+0x7d10/0x7d10 [ 543.832452][T15253] __se_sys_sendmsg+0x1bb/0x2a0 [ 543.837326][T15253] ? __x64_sys_sendmsg+0x80/0x80 [ 543.842307][T15253] ? lockdep_hardirqs_on+0x94/0x140 [ 543.847526][T15253] do_syscall_64+0x4c/0xa0 [ 543.851950][T15253] ? clear_bhb_loop+0x60/0xb0 [ 543.856629][T15253] ? clear_bhb_loop+0x60/0xb0 [ 543.861314][T15253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.867209][T15253] RIP: 0033:0x7faf2779aeb9 [ 543.871631][T15253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.891244][T15253] RSP: 002b:00007faf2858a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.899660][T15253] RAX: ffffffffffffffda RBX: 00007faf27a15fa0 RCX: 00007faf2779aeb9 [ 543.907637][T15253] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 543.915605][T15253] RBP: 00007faf2858a090 R08: 0000000000000000 R09: 0000000000000000 [ 543.923575][T15253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 543.931636][T15253] R13: 00007faf27a16038 R14: 00007faf27a15fa0 R15: 00007ffe1dff4188 [ 543.939627][T15253] [ 543.955258][T15261] netlink: 'syz.1.3627': attribute type 25 has an invalid length. [ 544.030364][T15262] netlink: 'syz.0.3625': attribute type 21 has an invalid length. [ 544.167611][T15268] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.3628'. [ 544.945816][T15278] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 545.027561][T15284] netlink: 'syz.4.3634': attribute type 25 has an invalid length. [ 545.593123][T15306] netlink: 'syz.2.3641': attribute type 3 has an invalid length. [ 545.602041][T15306] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.3641'. [ 545.812175][T15312] FAULT_INJECTION: forcing a failure. [ 545.812175][T15312] name failslab, interval 1, probability 0, space 0, times 0 [ 545.837774][T15312] CPU: 1 PID: 15312 Comm: syz.2.3643 Not tainted syzkaller #0 [ 545.845276][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 545.855452][T15312] Call Trace: [ 545.858739][T15312] [ 545.861678][T15312] dump_stack_lvl+0x188/0x24e [ 545.866420][T15312] ? show_regs_print_info+0x12/0x12 [ 545.871713][T15312] ? load_image+0x400/0x400 [ 545.876258][T15312] ? __might_sleep+0xd0/0xd0 [ 545.880878][T15312] ? __lock_acquire+0x7d10/0x7d10 [ 545.885943][T15312] should_fail_ex+0x399/0x4d0 [ 545.890662][T15312] should_failslab+0x5/0x20 [ 545.895199][T15312] slab_pre_alloc_hook+0x59/0x310 [ 545.900426][T15312] ? tomoyo_encode+0x27e/0x540 [ 545.905227][T15312] __kmem_cache_alloc_node+0x4f/0x260 [ 545.910630][T15312] ? tomoyo_encode+0x27e/0x540 [ 545.915407][T15312] __kmalloc+0xa0/0x240 [ 545.919588][T15312] tomoyo_encode+0x27e/0x540 [ 545.924215][T15312] tomoyo_realpath_from_path+0x58e/0x5d0 [ 545.929888][T15312] ? tomoyo_path_number_perm+0x205/0x650 [ 545.935566][T15312] tomoyo_path_number_perm+0x22f/0x650 [ 545.941055][T15312] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 545.946620][T15312] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 545.952415][T15312] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 545.958414][T15312] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 545.964595][T15312] ? tomoyo_file_ioctl+0xd/0x30 [ 545.969498][T15312] security_file_ioctl+0x6c/0xa0 [ 545.974497][T15312] __se_sys_ioctl+0x48/0x170 [ 545.979111][T15312] do_syscall_64+0x4c/0xa0 [ 545.983551][T15312] ? clear_bhb_loop+0x60/0xb0 [ 545.988239][T15312] ? clear_bhb_loop+0x60/0xb0 [ 545.992921][T15312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.998814][T15312] RIP: 0033:0x7f210cf9aeb9 [ 546.003225][T15312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.022922][T15312] RSP: 002b:00007f210dde8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.031346][T15312] RAX: ffffffffffffffda RBX: 00007f210d215fa0 RCX: 00007f210cf9aeb9 [ 546.039325][T15312] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000006 [ 546.047296][T15312] RBP: 00007f210dde8090 R08: 0000000000000000 R09: 0000000000000000 [ 546.055347][T15312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.063411][T15312] R13: 00007f210d216038 R14: 00007f210d215fa0 R15: 00007fffec1a8c78 [ 546.071408][T15312] [ 546.082540][T15312] ERROR: Out of memory at tomoyo_realpath_from_path. [ 546.248087][T15320] netlink: 'syz.4.3645': attribute type 21 has an invalid length. [ 546.780918][T15334] netlink: 'syz.4.3649': attribute type 10 has an invalid length. [ 546.791173][T15334] team0: Device hsr_slave_0 failed to register rx_handler [ 547.214074][T15352] netlink: 'syz.4.3658': attribute type 10 has an invalid length. [ 547.225484][T15352] team0: Device hsr_slave_0 failed to register rx_handler [ 547.320603][T15354] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3657'. [ 547.363062][ T4283] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 547.384039][T15358] netlink: 'syz.0.3660': attribute type 21 has an invalid length. [ 547.765134][T15372] netlink: 'syz.2.3664': attribute type 25 has an invalid length. [ 547.888310][T15376] netlink: 'syz.0.3667': attribute type 10 has an invalid length. [ 547.902716][T15376] team0: Device hsr_slave_0 failed to register rx_handler [ 548.097684][ T4283] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 548.108982][T15386] netlink: 'syz.0.3669': attribute type 10 has an invalid length. [ 548.138264][T15386] team0: Device hsr_slave_0 failed to register rx_handler [ 548.222334][T15391] netlink: 'syz.3.3673': attribute type 21 has an invalid length. [ 548.371815][T15397] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 548.988693][T15420] netlink: 'syz.3.3683': attribute type 25 has an invalid length. [ 549.283688][ T4282] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 549.505552][T15438] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 550.146612][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 550.497107][T15463] team0: Device hsr_slave_0 failed to register rx_handler [ 550.545508][ T4282] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 550.652746][T15471] validate_nla: 2 callbacks suppressed [ 550.652783][T15471] netlink: 'syz.4.3698': attribute type 25 has an invalid length. [ 550.781863][T15478] netlink: 'syz.3.3702': attribute type 16 has an invalid length. [ 550.804515][T15478] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3702'. [ 550.943685][T15486] FAULT_INJECTION: forcing a failure. [ 550.943685][T15486] name failslab, interval 1, probability 0, space 0, times 0 [ 550.960344][T15484] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 550.969093][T15486] CPU: 1 PID: 15486 Comm: syz.0.3706 Not tainted syzkaller #0 [ 550.977100][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.987215][T15486] Call Trace: [ 550.990553][T15486] [ 550.993521][T15486] dump_stack_lvl+0x188/0x24e [ 550.998276][T15486] ? show_regs_print_info+0x12/0x12 [ 551.003531][T15486] ? load_image+0x400/0x400 [ 551.008107][T15486] ? __might_sleep+0xd0/0xd0 [ 551.012744][T15486] ? __lock_acquire+0x7d10/0x7d10 [ 551.017836][T15486] should_fail_ex+0x399/0x4d0 [ 551.022553][T15486] should_failslab+0x5/0x20 [ 551.027092][T15486] slab_pre_alloc_hook+0x59/0x310 [ 551.032271][T15486] ? sk_prot_alloc+0xe7/0x210 [ 551.036983][T15486] __kmem_cache_alloc_node+0x4f/0x260 [ 551.042415][T15486] ? sk_prot_alloc+0xe7/0x210 [ 551.047111][T15486] __kmalloc+0xa0/0x240 [ 551.051565][T15486] sk_prot_alloc+0xe7/0x210 [ 551.056086][T15486] ? sk_alloc+0x20/0x340 [ 551.060356][T15486] sk_alloc+0x36/0x340 [ 551.064436][T15486] ? bpf_ctx_init+0x163/0x1a0 [ 551.069134][T15486] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 551.074698][T15486] bpf_prog_test_run_skb+0x35e/0x12a0 [ 551.080077][T15486] ? lockdep_hardirqs_on+0x94/0x140 [ 551.085339][T15486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 551.091548][T15486] ? cpu_online+0xa0/0xa0 [ 551.096075][T15486] bpf_prog_test_run+0x31e/0x390 [ 551.101054][T15486] __sys_bpf+0x62b/0x780 [ 551.105316][T15486] ? bpf_link_show_fdinfo+0x380/0x380 [ 551.110734][T15486] ? lock_chain_count+0x20/0x20 [ 551.115618][T15486] __x64_sys_bpf+0x78/0x90 [ 551.120264][T15486] do_syscall_64+0x4c/0xa0 [ 551.124737][T15486] ? clear_bhb_loop+0x60/0xb0 [ 551.129452][T15486] ? clear_bhb_loop+0x60/0xb0 [ 551.134155][T15486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.140062][T15486] RIP: 0033:0x7f17bf99aeb9 [ 551.144491][T15486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.164139][T15486] RSP: 002b:00007f17c0833028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 551.172571][T15486] RAX: ffffffffffffffda RBX: 00007f17bfc15fa0 RCX: 00007f17bf99aeb9 [ 551.181001][T15486] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 551.188981][T15486] RBP: 00007f17c0833090 R08: 0000000000000000 R09: 0000000000000000 [ 551.196962][T15486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.204966][T15486] R13: 00007f17bfc16038 R14: 00007f17bfc15fa0 R15: 00007ffd2a3ffb88 [ 551.212997][T15486] [ 551.885422][ T4282] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 552.426617][T15519] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 553.275251][T15524] netlink: 177 bytes leftover after parsing attributes in process `syz.3.3719'. [ 553.323502][T15530] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3720'. [ 553.504551][T15539] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 553.524935][T15542] netlink: 'syz.3.3724': attribute type 21 has an invalid length. [ 553.785707][ T4282] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 554.053028][T15560] netlink: 'syz.2.3731': attribute type 21 has an invalid length. [ 554.698991][T15578] netlink: 177 bytes leftover after parsing attributes in process `syz.0.3735'. [ 555.177474][T15583] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3737'. [ 555.203186][T15585] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 555.229467][T15587] netlink: 'syz.0.3750': attribute type 21 has an invalid length. [ 555.506323][ T4282] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 556.054919][T15620] netlink: 177 bytes leftover after parsing attributes in process `syz.4.3751'. [ 556.414340][T15627] netlink: 'syz.0.3749': attribute type 25 has an invalid length. [ 556.719250][T15631] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 557.021403][ T4282] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 557.112504][T15648] netlink: 'syz.2.3761': attribute type 21 has an invalid length. [ 557.729304][T15673] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 558.111222][T15681] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3770'. [ 558.261429][T15689] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 558.436838][T15695] netlink: 'syz.4.3776': attribute type 21 has an invalid length. [ 558.720637][T15709] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 559.280910][T15725] FAULT_INJECTION: forcing a failure. [ 559.280910][T15725] name failslab, interval 1, probability 0, space 0, times 0 [ 559.303079][T15725] CPU: 1 PID: 15725 Comm: syz.4.3787 Not tainted syzkaller #0 [ 559.310602][T15725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 559.320727][T15725] Call Trace: [ 559.324030][T15725] [ 559.326996][T15725] dump_stack_lvl+0x188/0x24e [ 559.331699][T15725] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 559.337880][T15725] ? show_regs_print_info+0x12/0x12 [ 559.343160][T15725] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 559.349344][T15725] ? dump_stack+0x5/0x12 [ 559.353655][T15725] should_fail_ex+0x399/0x4d0 [ 559.358379][T15725] should_failslab+0x5/0x20 [ 559.362919][T15725] slab_pre_alloc_hook+0x59/0x310 [ 559.367977][T15725] ? sctp_add_bind_addr+0x89/0x350 [ 559.373107][T15725] __kmem_cache_alloc_node+0x4f/0x260 [ 559.378572][T15725] ? sctp_add_bind_addr+0x89/0x350 [ 559.383690][T15725] kmalloc_trace+0x26/0xe0 [ 559.388119][T15725] sctp_add_bind_addr+0x89/0x350 [ 559.393131][T15725] sctp_copy_local_addr_list+0x311/0x4e0 [ 559.398797][T15725] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 559.404538][T15725] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 559.410667][T15725] ? sctp_v4_is_any+0x31/0x50 [ 559.415349][T15725] ? sctp_copy_one_addr+0x93/0x660 [ 559.420469][T15725] sctp_bind_addr_copy+0xaf/0x3c0 [ 559.425527][T15725] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 559.431864][T15725] sctp_connect_new_asoc+0x2f5/0x6a0 [ 559.437156][T15725] ? __sctp_connect+0xd80/0xd80 [ 559.442011][T15725] ? __local_bh_enable_ip+0x136/0x1c0 [ 559.447386][T15725] ? _local_bh_enable+0xa0/0xa0 [ 559.452260][T15725] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 559.458073][T15725] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 559.463890][T15725] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 559.469608][T15725] ? security_sctp_bind_connect+0x85/0xb0 [ 559.475326][T15725] sctp_sendmsg+0x15b0/0x2940 [ 559.480020][T15725] ? aa_sk_perm+0x7e1/0x950 [ 559.484532][T15725] ? sctp_getsockopt+0x8a0/0x8a0 [ 559.489475][T15725] ? __might_fault+0xa6/0x120 [ 559.494150][T15725] ? aa_af_perm+0x340/0x340 [ 559.498653][T15725] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 559.505108][T15725] ? inet_sendmsg+0x78/0x2f0 [ 559.509715][T15725] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 559.515102][T15725] ? security_socket_sendmsg+0x7c/0xa0 [ 559.520568][T15725] ? inet_send_prepare+0x260/0x260 [ 559.525767][T15725] ____sys_sendmsg+0x5be/0x970 [ 559.530554][T15725] ? __sys_sendmsg_sock+0x30/0x30 [ 559.535580][T15725] ? __import_iovec+0x315/0x500 [ 559.540465][T15725] ? import_iovec+0x6f/0xa0 [ 559.544988][T15725] ___sys_sendmsg+0x2a2/0x360 [ 559.549703][T15725] ? __sys_sendmsg+0x290/0x290 [ 559.554491][T15725] ? ktime_get_real_ts64+0x440/0x440 [ 559.559782][T15725] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 559.566048][T15725] __se_sys_sendmsg+0x1bb/0x2a0 [ 559.570997][T15725] ? __x64_sys_sendmsg+0x80/0x80 [ 559.576098][T15725] ? lockdep_hardirqs_on+0x94/0x140 [ 559.581304][T15725] do_syscall_64+0x4c/0xa0 [ 559.585716][T15725] ? clear_bhb_loop+0x60/0xb0 [ 559.590408][T15725] ? clear_bhb_loop+0x60/0xb0 [ 559.595112][T15725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.601102][T15725] RIP: 0033:0x7faf2779aeb9 [ 559.605516][T15725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.625122][T15725] RSP: 002b:00007faf2858a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.633546][T15725] RAX: ffffffffffffffda RBX: 00007faf27a15fa0 RCX: 00007faf2779aeb9 [ 559.641780][T15725] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 559.649785][T15725] RBP: 00007faf2858a090 R08: 0000000000000000 R09: 0000000000000000 [ 559.657762][T15725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 559.665735][T15725] R13: 00007faf27a16038 R14: 00007faf27a15fa0 R15: 00007ffe1dff4188 [ 559.673719][T15725] [ 559.810802][T15730] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3788'. [ 559.875130][T15735] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 560.205479][T15747] netlink: 'syz.1.3796': attribute type 21 has an invalid length. [ 560.317104][T15751] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 561.012134][T15774] netlink: 'syz.1.3804': attribute type 10 has an invalid length. [ 561.044650][T15774] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.052243][T15774] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.104934][T15774] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.112748][T15774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.122710][T15774] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.130096][T15774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.193034][T15774] team0: Port device bridge0 added [ 561.259059][T15779] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3805'. [ 561.290876][T15775] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 561.478205][T15787] netlink: 177 bytes leftover after parsing attributes in process `syz.4.3808'. [ 561.624595][T15793] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3819'. [ 561.739106][T15796] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 561.753741][T15800] netlink: 177 bytes leftover after parsing attributes in process `syz.2.3823'. [ 561.974744][T15805] netlink: 'syz.4.3814': attribute type 21 has an invalid length. [ 562.403195][T15824] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 562.496500][T15830] netlink: 'syz.4.3824': attribute type 10 has an invalid length. [ 562.559103][T15830] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.566695][T15830] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.623325][T15830] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.630973][T15830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.641016][T15830] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.649455][T15830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.666992][T15836] netlink: 16247 bytes leftover after parsing attributes in process `syz.0.3825'. [ 562.685960][T15830] team0: Port device bridge0 added [ 562.789424][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.795837][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.831138][T15837] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3826'. [ 562.858686][T15840] netlink: 177 bytes leftover after parsing attributes in process `syz.4.3827'. [ 562.881405][T15841] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 563.277342][T15854] netlink: 'syz.3.3834': attribute type 21 has an invalid length. [ 563.317439][T15855] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 563.735486][T15878] netlink: 177 bytes leftover after parsing attributes in process `syz.0.3840'. [ 563.831977][T15880] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 563.935267][T15884] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3841'. [ 564.196308][T15896] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 564.533584][T15915] netlink: 'syz.0.3854': attribute type 21 has an invalid length. [ 564.664211][T15921] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 564.944145][T15929] netlink: 177 bytes leftover after parsing attributes in process `syz.2.3859'. [ 565.010972][ T4282] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 565.060360][T15936] netlink: 'syz.0.3862': attribute type 29 has an invalid length. [ 565.101067][T15936] netlink: 'syz.0.3862': attribute type 29 has an invalid length. [ 565.138411][T15936] netlink: 'syz.0.3862': attribute type 29 has an invalid length. [ 565.158747][T15936] netlink: 'syz.0.3862': attribute type 29 has an invalid length. [ 565.178217][T15939] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 565.584241][T15958] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 565.929983][T15969] netlink: 'syz.2.3873': attribute type 21 has an invalid length. [ 566.280979][T15983] FAULT_INJECTION: forcing a failure. [ 566.280979][T15983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.304594][T15983] CPU: 1 PID: 15983 Comm: syz.4.3878 Not tainted syzkaller #0 [ 566.312106][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 566.322184][T15983] Call Trace: [ 566.325481][T15983] [ 566.328423][T15983] dump_stack_lvl+0x188/0x24e [ 566.333138][T15983] ? show_regs_print_info+0x12/0x12 [ 566.338386][T15983] ? load_image+0x400/0x400 [ 566.342925][T15983] ? __lock_acquire+0x7d10/0x7d10 [ 566.347979][T15983] should_fail_ex+0x399/0x4d0 [ 566.352743][T15983] _copy_to_user+0x2c/0x130 [ 566.357281][T15983] bpf_test_finish+0x198/0x600 [ 566.362084][T15983] ? convert___skb_to_skb+0x580/0x580 [ 566.367489][T15983] ? convert_skb_to___skb+0x420/0x420 [ 566.372897][T15983] ? __build_skb+0x257/0x3c0 [ 566.377518][T15983] bpf_prog_test_run_skb+0xc99/0x12a0 [ 566.382916][T15983] ? cpu_online+0xa0/0xa0 [ 566.387254][T15983] bpf_prog_test_run+0x31e/0x390 [ 566.392218][T15983] __sys_bpf+0x62b/0x780 [ 566.396483][T15983] ? bpf_link_show_fdinfo+0x380/0x380 [ 566.401981][T15983] ? lock_chain_count+0x20/0x20 [ 566.407040][T15983] __x64_sys_bpf+0x78/0x90 [ 566.411482][T15983] do_syscall_64+0x4c/0xa0 [ 566.415918][T15983] ? clear_bhb_loop+0x60/0xb0 [ 566.420622][T15983] ? clear_bhb_loop+0x60/0xb0 [ 566.425319][T15983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.431226][T15983] RIP: 0033:0x7faf2779aeb9 [ 566.435639][T15983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.455267][T15983] RSP: 002b:00007faf2858a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 566.463705][T15983] RAX: ffffffffffffffda RBX: 00007faf27a15fa0 RCX: 00007faf2779aeb9 [ 566.471670][T15983] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 000000000000000a [ 566.479638][T15983] RBP: 00007faf2858a090 R08: 0000000000000000 R09: 0000000000000000 [ 566.487603][T15983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.495564][T15983] R13: 00007faf27a16038 R14: 00007faf27a15fa0 R15: 00007ffe1dff4188 [ 566.503547][T15983] [ 566.845184][T15986] __nla_validate_parse: 2 callbacks suppressed [ 566.845293][T15986] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3879'. [ 567.022977][T15994] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 567.102482][T16000] FAULT_INJECTION: forcing a failure. [ 567.102482][T16000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.174872][T16000] CPU: 0 PID: 16000 Comm: syz.1.3884 Not tainted syzkaller #0 [ 567.182405][T16000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 567.192491][T16000] Call Trace: [ 567.195782][T16000] [ 567.198724][T16000] dump_stack_lvl+0x188/0x24e [ 567.203420][T16000] ? show_regs_print_info+0x12/0x12 [ 567.208624][T16000] ? load_image+0x400/0x400 [ 567.213171][T16000] ? __lock_acquire+0x7d10/0x7d10 [ 567.218215][T16000] should_fail_ex+0x399/0x4d0 [ 567.222899][T16000] _copy_to_user+0x2c/0x130 [ 567.227435][T16000] __htab_map_lookup_and_delete_batch+0x1cea/0x2060 [ 567.234048][T16000] ? lookup_nulls_elem_raw+0x160/0x160 [ 567.239593][T16000] ? __fdget+0x17c/0x200 [ 567.243839][T16000] ? htab_lru_percpu_map_lookup_and_delete_elem+0x40/0x40 [ 567.251030][T16000] bpf_map_do_batch+0x466/0x600 [ 567.255883][T16000] __sys_bpf+0x6f7/0x780 [ 567.260119][T16000] ? bpf_link_show_fdinfo+0x380/0x380 [ 567.265503][T16000] ? lock_chain_count+0x20/0x20 [ 567.270365][T16000] __x64_sys_bpf+0x78/0x90 [ 567.274875][T16000] do_syscall_64+0x4c/0xa0 [ 567.279291][T16000] ? clear_bhb_loop+0x60/0xb0 [ 567.283957][T16000] ? clear_bhb_loop+0x60/0xb0 [ 567.288633][T16000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.294526][T16000] RIP: 0033:0x7fda5139aeb9 [ 567.298940][T16000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.318544][T16000] RSP: 002b:00007fda522dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 567.327041][T16000] RAX: ffffffffffffffda RBX: 00007fda51615fa0 RCX: 00007fda5139aeb9 [ 567.335007][T16000] RDX: 0000000000000038 RSI: 0000200000000bc0 RDI: 0000000000000019 [ 567.342969][T16000] RBP: 00007fda522dd090 R08: 0000000000000000 R09: 0000000000000000 [ 567.350958][T16000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.358921][T16000] R13: 00007fda51616038 R14: 00007fda51615fa0 R15: 00007ffdf224a458 [ 567.366902][T16000] [ 567.540825][T16011] netlink: 177 bytes leftover after parsing attributes in process `syz.3.3888'. [ 567.604955][T16002] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 567.910610][ T4282] ------------[ cut here ]------------ [ 567.916714][ T4282] WARNING: CPU: 0 PID: 4282 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 567.926772][ T4282] Modules linked in: [ 567.930787][ T4282] CPU: 0 PID: 4282 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 567.938418][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 567.948570][ T4282] Workqueue: hci1 hci_conn_timeout [ 567.953820][ T4282] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 567.959547][ T4282] Code: 1f 8e e8 04 96 9f f8 48 8b 35 f5 fb eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 85 20 f8 e8 f1 aa 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 567.979351][ T4282] RSP: 0000:ffffc90004377c08 EFLAGS: 00010293 [ 567.985578][ T4282] RAX: ffffffff8933c77f RBX: ffff88807c332330 RCX: ffff888027978000 [ 567.993651][ T4282] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 568.001735][ T4282] RBP: 00000000ffffffff R08: ffff88807c332013 R09: 1ffff1100f866402 [ 568.009790][ T4282] R10: dffffc0000000000 R11: ffffed100f866403 R12: dffffc0000000000 [ 568.017865][ T4282] R13: dffffc0000000000 R14: ffff88807c332000 R15: ffff88807c332010 [ 568.025971][ T4282] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 568.035075][ T4282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.041769][ T4282] CR2: 0000000000000000 CR3: 0000000051b82000 CR4: 00000000003506f0 [ 568.049825][ T4282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 568.057900][ T4282] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 568.065902][ T4282] Call Trace: [ 568.069287][ T4282] [ 568.072250][ T4282] ? process_one_work+0x7b0/0x1160 [ 568.077489][ T4282] process_one_work+0x8a2/0x1160 [ 568.082476][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 568.088219][ T4282] ? _raw_spin_lock_irq+0x86/0xf0 [ 568.093304][ T4282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 568.098425][ T4282] ? _raw_spin_lock_irqsave+0x100/0x100 [ 568.104008][ T4282] ? kthread_data+0x4b/0xc0 [ 568.108622][ T4282] worker_thread+0xaa2/0x1270 [ 568.113347][ T4282] kthread+0x29d/0x330 [ 568.117591][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 568.122660][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 568.127375][ T4282] ret_from_fork+0x1f/0x30 [ 568.131925][ T4282] [ 568.134968][ T4282] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 568.142261][ T4282] CPU: 0 PID: 4282 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 568.149824][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.159895][ T4282] Workqueue: hci1 hci_conn_timeout [ 568.165036][ T4282] Call Trace: [ 568.168339][ T4282] [ 568.171283][ T4282] dump_stack_lvl+0x188/0x24e [ 568.175981][ T4282] ? memcpy+0x3c/0x60 [ 568.179978][ T4282] ? show_regs_print_info+0x12/0x12 [ 568.185208][ T4282] ? load_image+0x400/0x400 [ 568.189749][ T4282] panic+0x2e5/0x730 [ 568.193679][ T4282] ? bpf_jit_dump+0xd0/0xd0 [ 568.198216][ T4282] ? ret_from_fork+0x1f/0x30 [ 568.202835][ T4282] __warn+0x2f8/0x4f0 [ 568.206840][ T4282] ? hci_conn_timeout+0x24f/0x450 [ 568.211881][ T4282] ? hci_conn_timeout+0x24f/0x450 [ 568.216940][ T4282] report_bug+0x2ba/0x4f0 [ 568.221301][ T4282] ? hci_conn_timeout+0x24f/0x450 [ 568.226448][ T4282] handle_bug+0x3a/0x70 [ 568.230648][ T4282] exc_invalid_op+0x16/0x40 [ 568.235180][ T4282] asm_exc_invalid_op+0x16/0x20 [ 568.240056][ T4282] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 568.245721][ T4282] Code: 1f 8e e8 04 96 9f f8 48 8b 35 f5 fb eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 85 20 f8 e8 f1 aa 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 568.265359][ T4282] RSP: 0000:ffffc90004377c08 EFLAGS: 00010293 [ 568.271456][ T4282] RAX: ffffffff8933c77f RBX: ffff88807c332330 RCX: ffff888027978000 [ 568.279456][ T4282] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 568.287454][ T4282] RBP: 00000000ffffffff R08: ffff88807c332013 R09: 1ffff1100f866402 [ 568.295454][ T4282] R10: dffffc0000000000 R11: ffffed100f866403 R12: dffffc0000000000 [ 568.303546][ T4282] R13: dffffc0000000000 R14: ffff88807c332000 R15: ffff88807c332010 [ 568.311813][ T4282] ? hci_conn_timeout+0x24f/0x450 [ 568.316886][ T4282] ? hci_conn_timeout+0x24f/0x450 [ 568.321952][ T4282] ? process_one_work+0x7b0/0x1160 [ 568.327100][ T4282] process_one_work+0x8a2/0x1160 [ 568.332083][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 568.337757][ T4282] ? _raw_spin_lock_irq+0x86/0xf0 [ 568.342848][ T4282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 568.347919][ T4282] ? _raw_spin_lock_irqsave+0x100/0x100 [ 568.353534][ T4282] ? kthread_data+0x4b/0xc0 [ 568.358078][ T4282] worker_thread+0xaa2/0x1270 [ 568.362820][ T4282] kthread+0x29d/0x330 [ 568.366920][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 568.371976][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 568.376597][ T4282] ret_from_fork+0x1f/0x30 [ 568.381054][ T4282] [ 568.384409][ T4282] Kernel Offset: disabled [ 568.388810][ T4282] Rebooting in 86400 seconds..