last executing test programs: 2.597876583s ago: executing program 3 (id=2076): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x74, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f53cf8b", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x0, 0x6, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x56, 0x60, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x4000001) sendmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) 2.350054988s ago: executing program 3 (id=2079): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600003000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) 2.175787312s ago: executing program 3 (id=2083): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff00faff0000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x8450, 0xac5a}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000002e00"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400009, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 1.542620326s ago: executing program 2 (id=2089): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="050000000000000063110800000000008510000002000000850000000500000095000000000000009500a5050000000087a45f2f52cef602ee26b815b347e4ed1026ee3b8abcd838b31a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x4d}, 0x70) 1.450096298s ago: executing program 2 (id=2091): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xaa}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000010000000000000000000000370001000000000095002b43990800125e00000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="3200000000000000000000000300009fa9ccd0fd6c50fac1f25a1298bf7798c50002d3bc298bc35c91d1fa4889979f0e6e3fb876e34a8b7f5a05ba93c159c586f94658442fd16e700896d3af110c168fcf05535bab17a71a3adcf275a83dfb676ff8d221a3cd6e29d59c16dbf08bbab17d7bb2dff40d343bfb4dbd733df4", @ANYRES32=r0, @ANYBLOB="5c7b02466c85b564170b4ed55747a5e46337b849987e3081f2a81e98ff59f0d0a1d11e3874cc6fb054b7905b7cae9cb4e8ad3a0a9e88d5f9bb82d54bb0af857b4866a8fe021d18aec129216d96936d9b2c5d", @ANYRES32, @ANYBLOB="0100000003000000040000001000"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'bridge0\x00', 0x2}) recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="f7280200e700"}) recvmsg(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000000000020000000000000000d78d67de305ac7d3d24eddd36c7e29037c085e93aad139433f3bac604d59123f0e1f0103204000000000000000497017eda3591162593db8bb383a4eb36b43be499f617b1fcf04c3a1653211ea53783d629603bb5d5d76f432d797084f7033a898ed62eaddab35611ead21e3e3f5667007971e09eee9bf0e33ea3c8d2fbb313bff49dde45e460756381bbede966e418fdf51c454c5e593b3aecfe63e91bc04b1d8880c3bbaa75de816e82868215d6fabe8146ced7ec71b56c70d8214dbceaac135139f7199c67ca81c6784b5bd6d3190fb33f9a9bb4776a4961b97", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='syzkaller\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.275860501s ago: executing program 1 (id=2093): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600003800000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) 1.211949763s ago: executing program 0 (id=2095): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB='>', @ANYRES8=r4], 0x9a) 1.193933623s ago: executing program 3 (id=2096): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x2e, 0x0, 0x108) r1 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1, 0x60, 0x0, 0x0, 0x2b}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd00, 0x88be, 0x0, 0xfffffffffffffdd5, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="160000000000000006000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xcb) r5 = getpid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x200000000000005, 0x43a1bd76, 0x7, 0x9, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x2009}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f00000000c0), 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r8) 1.193610554s ago: executing program 1 (id=2097): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x886f5cad098fbc1) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'pim6reg\x00', @broadcast}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8901, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800005, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5f, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3abd}}], 0x18}, 0x48000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.098709245s ago: executing program 2 (id=2098): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x80d1) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) 961.429059ms ago: executing program 0 (id=2099): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x74, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f53cf8b", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x0, 0x6, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x56, 0x60, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330057ac14142c88a8a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x4000001) sendmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) 789.267572ms ago: executing program 0 (id=2100): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='syzkaller\x00') r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x5f, 0x5f, 0x2e]}}, &(0x7f0000000900), 0x1d, 0x0, 0x0, 0x35}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1f, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x77e5}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x93e}}, @ldst={0x0, 0x2, 0x0, 0x1, 0x9, 0x100, 0x10}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x7c, &(0x7f0000000280)=""/124, 0x40f00, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xc, 0x9, 0x113}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r1, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0x67b}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000007c0)={r6, r1}, 0xc) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x5c8, 0x29, 0x3, "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"}], 0x5c8}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f00000006c0)="9daaac999f69c48373a1ee570000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x0, 0x8d, 0x72, &(0x7f0000000980)="14df5cc80d179506abed6f8881b1bf2a52bb9eadc85ef4c1c101dd04850ad728d20b21b1a9da46a51da56661517319363303d647768e27831efbe3dbc9c0346bb816ea6a21d9fe77cdf835b6af6ffc8d8105a81402f4b7b885f3bfc6343e5c0011c274e0d30e86ab5a8c144b9cdfffb61a449beb470002504982d22825c75d77f5182c4828a08e780eb6111200", &(0x7f0000000a40)=""/114, 0x400, 0x0, 0x7f, 0xb, &(0x7f0000000ac0)="7c17c5d41daf7849df5610d9102847d2eec569cff2a94b1264a19023babb681db3438fb904e2e1ef0e874f8c6e225d0f71fa70bafc799a1cbc766c08fae93542a704ffad01f7a4231b35b9658331a5b8583db099351461e2f7a3511f5c5ac2d47c328b919ccdf66baba2d742652b6e0cccdc628933e32c75d9f880142cf0f2", &(0x7f0000000b40)="cb404284f69ed2750ba9e6", 0x3, 0x0, 0x4}, 0x50) 703.924765ms ago: executing program 1 (id=2101): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="050000000000000063110800000000008510000002000000850000000500000095000000000000009500a5050000000087a45f2f52cef602ee26b815b347e4ed1026ee3b8abcd838b31a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x64}, 0x70) 703.000925ms ago: executing program 2 (id=2102): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x900}, 0x63) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="02000000050000000500"/28], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x101a0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random}) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000980)=ANY=[@ANYBLOB], 0xfdef) socketpair(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee61c00bf050000000000004e350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48) recvmsg(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x40) 670.055255ms ago: executing program 3 (id=2103): r0 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x29, 0xf, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x2f, 0x0, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@ptr={0x6, 0x0, 0x0, 0x2, 0x2}, @enum={0xb, 0x5, 0x0, 0x6, 0x4, [{0xb, 0x413}, {0x8, 0x800}, {0xc, 0x2}, {0xd, 0xffff}, {0x1, 0x5f1}]}]}, {0x0, [0x61, 0x61, 0x30, 0x0]}}, &(0x7f0000000180)=""/147, 0x5e, 0x93, 0x0, 0x10, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x20, 0x4, 0x4, 0x401, 0x8100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x18, 0x0, 0x0, @value=r1}, 0x50) 584.369007ms ago: executing program 1 (id=2104): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="109ba5d0a437d4f023982cfda7ff0400"/42], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001821ffff", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c900000095", @ANYRES64=r2, @ANYRES8=r2], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x3f) 535.935868ms ago: executing program 0 (id=2105): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 477.590209ms ago: executing program 0 (id=2106): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xaa}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000010000000000000000000000370001000000000095002b43990800125e00000000"], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'bridge0\x00', 0x2}) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="f7280200e700"}) recvmsg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000000000020000000000000000d78d67de305ac7d3d24eddd36c7e29037c085e93aad139433f3bac604d59123f0e1f0103204000000000000000497017eda3591162593db8bb383a4eb36b43be499f617b1fcf04c3a1653211ea53783d629603bb5d5d76f432d797084f7033a898ed62eaddab35611ead21e3e3f5667007971e09eee9bf0e33ea3c8d2fbb313bff49dde45e460756381bbede966e418fdf51c454c5e593b3aecfe63e91bc04b1d8880c3bbaa75de816e82868215d6fabe8146ced7ec71b56c70d8214dbceaac135139f7199c67ca81c6784b5bd6d3190fb33f9a9bb4776a4961b97", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='syzkaller\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 437.7131ms ago: executing program 2 (id=2107): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB='>', @ANYRES8=r4], 0x9a) 331.040062ms ago: executing program 1 (id=2108): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x74, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f53cf8b", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x0, 0x6, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x56, 0x60, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330057ac14142c88a8a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x4000001) sendmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) 151.647357ms ago: executing program 2 (id=2109): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe04a1190008800d00000003600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f00a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000", 0x62}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='cpu&20\t&&') ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x1c, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x630c, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_fd={0x18, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @map_fd, @tail_call, @ringbuf_query]}, &(0x7f0000000340)='syzkaller\x00', 0x7fff, 0x87, &(0x7f0000000380)=""/135, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000500)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x1, 0x1, 0xb, 0x3}, {0x5, 0x2, 0xf, 0xa}, {0x5, 0x5, 0x6, 0x5}], 0x10, 0x5}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) (async) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) recvmsg$kcm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000030c0)=""/4055, 0xfd7}, {&(0x7f00000007c0)=""/87, 0x57}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000dc0)=""/160, 0xa0}, {&(0x7f0000000940)=""/207, 0xcf}, {&(0x7f0000000a40)}], 0x7}, 0x2000) recvmsg$kcm(r6, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99}, 0x0) recvmsg$kcm(r6, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40002020) (async) recvmsg$kcm(r6, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40002020) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000640)={r3, r5}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000640)={r3, r5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x74, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f53cf8b", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x74, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f53cf8b", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x0, 0x6, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x0, 0x6, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 132.096857ms ago: executing program 1 (id=2110): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600003f00000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) 43.899089ms ago: executing program 3 (id=2111): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61123400000000006113500000000000bf200000000000001500000008ffffffbd0301000000000095000007000000006916320000000000bf67000000000000a406000007ff07006706000002000000070600000ee60000bf050000000000002e720000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf736f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000b542a536559eed87b58edcfee83a50077ee0e8fb6e787cb3076dfeeb79f55927fef9651e176b40e64740a01944577caea4ceb9e907cec36a8429445c833b9d24d53dc91f15af1f4a1db9fa452fa3f0b812355aab5b58659ffd56034fdbb169f3e86660acdc65dc699d3e6364a80f45e54d6efcb99b41a080494f842706f3c1716d2e252bf89663393356296d89fbf95aa7966fa700b710008311d6f25e05f77d68799e671d90cb04131742790941d83ffdfa857e9e085a59a78e7a17f008ce55866fcc4de388f270a1ba675f43481bd2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x886f5cad098fbc1) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'pim6reg\x00', @broadcast}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8901, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800005, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5f, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3abd}}], 0x18}, 0x48000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 0 (id=2112): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x0, 0x98, &(0x7f0000000900)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xfa, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x13, 0x1f, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @alu={0x7, 0x0, 0xd, 0x2, 0x1, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000c40)='syzkaller\x00', 0x9, 0x7e, &(0x7f0000000c80)=""/126, 0x41100, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00)={0x3, 0x2, 0x8, 0x401}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000d40)=[r0], &(0x7f0000000d80)=[{0x2, 0x3, 0xa, 0x6}], 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x13, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="18160000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\f'], &(0x7f0000000140)='GPL\x00', 0x3, 0x13, &(0x7f0000000180)=""/19, 0x1b5842b77f6af9f1, 0xa, '\x00', r2, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0xa, 0x0, 0xfff}, 0x10, r4, r5, 0x1, 0x0, &(0x7f0000000e80)=[{0x2, 0x3, 0xa, 0x1}], 0x10, 0x8001}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r7}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x4582, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$LINK_DETACH(0x22, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000040000000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r11, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f00000002c0)={0x0, 0x80, 0x9, 0x2, 0xc, 0x1, 0x0, 0x4, 0x5054b, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x522d, 0xfffffffffffffff9}, 0x108, 0x7, 0x3, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10001}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ] active_anon:5733 inactive_anon:0 isolated_anon:0 [ 184.891494][ T7126] active_file:12872 inactive_file:39989 isolated_file:0 [ 184.891494][ T7126] unevictable:768 dirty:126 writeback:0 [ 184.891494][ T7126] slab_reclaimable:10027 slab_unreclaimable:93971 [ 184.891494][ T7126] mapped:25135 shmem:1361 pagetables:556 [ 184.891494][ T7126] sec_pagetables:0 bounce:0 [ 184.891494][ T7126] kernel_misc_reclaimable:0 [ 184.891494][ T7126] free:1353032 free_pcp:7789 free_cma:0 [ 184.990353][ T7131] netlink: 6 bytes leftover after parsing attributes in process `syz.0.377'. [ 184.997323][ T7126] Node 0 active_anon:22532kB inactive_anon:0kB active_file:51488kB inactive_file:159752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96640kB dirty:504kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10684kB pagetables:2224kB sec_pagetables:0kB all_unreclaimable? no [ 185.010847][ T7131] openvswitch: netlink: Flow actions attr not present in new flow. [ 185.095659][ T7126] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 185.158124][ T7126] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 185.224290][ T7126] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 185.230859][ T7126] Node 0 DMA32 free:1493632kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22592kB inactive_anon:0kB active_file:51488kB inactive_file:158928kB unevictable:1536kB writepending:504kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:17464kB local_pcp:14716kB free_cma:0kB [ 185.262121][ T7126] lowmem_reserve[]: 0 0 0 0 0 [ 185.267205][ T7126] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 185.294384][ T7126] lowmem_reserve[]: 0 0 0 0 0 [ 185.303131][ T7126] Node 1 Normal free:3900616kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18120kB local_pcp:8964kB free_cma:0kB [ 185.347034][ T7126] lowmem_reserve[]: 0 0 0 0 0 [ 185.351977][ T7126] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 185.395588][ T7126] Node 0 DMA32: 1116*4kB (UME) 284*8kB (UME) 1001*16kB (UME) 1326*32kB (UME) 422*64kB (UME) 43*128kB (UME) 20*256kB (UM) 10*512kB (UME) 5*1024kB (UME) 6*2048kB (UM) 334*4096kB (UM) = 1493408kB [ 185.455506][ T7126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 185.496390][ T7126] Node 1 Normal: 138*4kB (UME) 58*8kB (UME) 35*16kB (UME) 41*32kB (UME) 8*64kB (UE) 5*128kB (UME) 1*256kB (U) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 950*4096kB (M) = 3900616kB [ 185.564517][ T7126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.592036][ T7126] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.625682][ T7126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.665832][ T7126] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.700196][ T7126] 54224 total pagecache pages [ 185.705018][ T7126] 0 pages in swap cache [ 185.720262][ T7126] Free swap = 124996kB [ 185.724551][ T7126] Total swap = 124996kB [ 185.743836][ T7126] 2097051 pages RAM [ 185.748715][ T7126] 0 pages HighMem/MovableOnly [ 185.753495][ T7126] 416953 pages reserved [ 185.762122][ T7126] 0 pages cma reserved [ 185.977889][ T7141] validate_nla: 5 callbacks suppressed [ 185.977912][ T7141] netlink: 'syz.3.379': attribute type 9 has an invalid length. [ 185.992150][ T7141] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.379'. [ 186.196355][ T7142] netlink: 'syz.3.379': attribute type 9 has an invalid length. [ 186.216240][ T7142] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.379'. [ 186.350038][ T7149] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 186.837941][ T7155] netlink: 'syz.0.383': attribute type 10 has an invalid length. [ 187.175068][ T7160] netlink: 'syz.1.392': attribute type 10 has an invalid length. [ 188.284579][ T7189] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 189.258328][ T7210] netlink: 'syz.1.398': attribute type 12 has an invalid length. [ 189.300455][ T7210] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.398'. [ 189.619125][ T7221] netlink: 'syz.2.401': attribute type 9 has an invalid length. [ 189.638345][ T7221] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.401'. [ 190.054338][ T7224] netlink: 'syz.2.401': attribute type 9 has an invalid length. [ 190.101343][ T7224] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.401'. [ 190.193176][ T7234] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 191.264824][ T7264] netlink: 'syz.3.416': attribute type 9 has an invalid length. [ 191.279820][ T7264] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.416'. [ 191.727370][ T7270] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 192.115661][ T7265] netlink: 'syz.3.416': attribute type 9 has an invalid length. [ 192.172203][ T7265] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.416'. [ 192.323801][ T7274] can: request_module (can-proto-0) failed. [ 193.042175][ T7301] netlink: 'syz.3.426': attribute type 10 has an invalid length. [ 193.100402][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.136208][ T7301] bridge_slave_1: left allmulticast mode [ 193.141938][ T7301] bridge_slave_1: left promiscuous mode [ 193.176984][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.209724][ T7301] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 193.369043][ T7305] netlink: 48 bytes leftover after parsing attributes in process `syz.0.430'. [ 193.398588][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 193.533779][ T7312] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.431'. [ 193.584844][ T7310] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 193.831464][ T7314] netlink: 'syz.3.432': attribute type 9 has an invalid length. [ 193.845691][ T7314] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.432'. [ 194.077724][ T7318] netlink: 'syz.1.441': attribute type 1 has an invalid length. [ 194.115726][ T7318] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.441'. [ 194.228636][ T7327] netlink: 'syz.0.435': attribute type 5 has an invalid length. [ 194.541829][ T7319] netlink: 'syz.3.432': attribute type 9 has an invalid length. [ 194.610299][ T7319] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.432'. [ 194.792179][ T7340] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 194.816720][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.823356][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.070107][ T5784] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 195.113546][ T7353] netlink: 'syz.1.446': attribute type 7 has an invalid length. [ 195.706153][ T7369] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 195.854545][ T7375] netlink: 'syz.0.455': attribute type 9 has an invalid length. [ 195.868879][ T7375] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.455'. [ 196.087476][ T7381] netlink: 'syz.2.456': attribute type 29 has an invalid length. [ 196.226836][ T7385] netlink: 188 bytes leftover after parsing attributes in process `syz.3.458'. [ 196.707222][ T7376] validate_nla: 4 callbacks suppressed [ 196.707240][ T7376] netlink: 'syz.0.455': attribute type 9 has an invalid length. [ 196.727694][ T7393] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.460'. [ 196.741634][ T7376] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.455'. [ 197.138720][ T7407] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.465'. [ 197.285936][ T7409] netlink: 'syz.1.466': attribute type 9 has an invalid length. [ 197.303247][ T7409] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.466'. [ 197.518963][ T7417] netlink: 'syz.3.468': attribute type 29 has an invalid length. [ 197.670308][ T7417] netlink: 'syz.3.468': attribute type 29 has an invalid length. [ 197.698017][ T7425] netlink: 6 bytes leftover after parsing attributes in process `syz.2.469'. [ 197.707424][ T7425] openvswitch: netlink: Flow actions attr not present in new flow. [ 197.786359][ T7420] netlink: 'syz.3.468': attribute type 29 has an invalid length. [ 197.796201][ T7422] netlink: 'syz.3.468': attribute type 29 has an invalid length. [ 197.820826][ T7412] netlink: 'syz.1.466': attribute type 9 has an invalid length. [ 197.839706][ T7412] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.466'. [ 197.873675][ T7417] netlink: 'syz.3.468': attribute type 29 has an invalid length. [ 198.042016][ T7423] netlink: 'syz.2.469': attribute type 33 has an invalid length. [ 198.071385][ T7423] netlink: 184220 bytes leftover after parsing attributes in process `syz.2.469'. [ 198.110574][ T7419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.569121][ T7445] syzkaller0: create flow: hash 3100658751 index 0 [ 198.633600][ T7441] syzkaller0: entered promiscuous mode [ 198.660871][ T7441] syzkaller0: entered allmulticast mode [ 198.672203][ T7445] netlink: 'syz.1.475': attribute type 22 has an invalid length. [ 198.701544][ T7444] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 200.558507][ T7441] syzkaller0 (unregistered): delete flow: hash 3100658751 index 0 [ 200.789422][ T7457] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.479'. [ 201.252121][ T7473] FAULT_INJECTION: forcing a failure. [ 201.252121][ T7473] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 201.266424][ T7473] CPU: 0 PID: 7473 Comm: syz.0.491 Not tainted syzkaller #0 [ 201.273784][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 201.283918][ T7473] Call Trace: [ 201.287247][ T7473] [ 201.290223][ T7473] dump_stack_lvl+0x18c/0x250 [ 201.294963][ T7473] ? show_regs_print_info+0x20/0x20 [ 201.300225][ T7473] ? load_image+0x420/0x420 [ 201.304793][ T7473] ? __might_fault+0xaa/0x120 [ 201.309536][ T7473] ? __lock_acquire+0x7d80/0x7d80 [ 201.314618][ T7473] should_fail_ex+0x394/0x4c0 [ 201.319370][ T7473] _copy_from_user+0x2f/0xe0 [ 201.324008][ T7473] ___sys_sendmsg+0x1c7/0x360 [ 201.328749][ T7473] ? get_pid_task+0x20/0x1e0 [ 201.333413][ T7473] ? __sys_sendmsg+0x2b0/0x2b0 [ 201.338285][ T7473] ? __lock_acquire+0x7d80/0x7d80 [ 201.343394][ T7473] __se_sys_sendmsg+0x1d0/0x2c0 [ 201.348307][ T7473] ? __x64_sys_sendmsg+0x80/0x80 [ 201.353324][ T7473] ? lockdep_hardirqs_on+0x98/0x150 [ 201.358583][ T7473] do_syscall_64+0x55/0xb0 [ 201.363077][ T7473] ? clear_bhb_loop+0x40/0x90 [ 201.367827][ T7473] ? clear_bhb_loop+0x40/0x90 [ 201.372579][ T7473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.378538][ T7473] RIP: 0033:0x7ff65599de59 [ 201.383117][ T7473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.402812][ T7473] RSP: 002b:00007ff656957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.411287][ T7473] RAX: ffffffffffffffda RBX: 00007ff655c25fa0 RCX: 00007ff65599de59 [ 201.419315][ T7473] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000004 [ 201.427443][ T7473] RBP: 00007ff656957090 R08: 0000000000000000 R09: 0000000000000000 [ 201.435468][ T7473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.443578][ T7473] R13: 00007ff655c26038 R14: 00007ff655c25fa0 R15: 00007ffe75c98ed8 [ 201.451632][ T7473] [ 201.519781][ T7461] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.479'. [ 201.729559][ T7474] validate_nla: 7 callbacks suppressed [ 201.729605][ T7474] netlink: 'syz.2.483': attribute type 9 has an invalid length. [ 201.771253][ T7474] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.483'. [ 201.934671][ T7483] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.486'. [ 202.078775][ T7475] netlink: 'syz.2.483': attribute type 9 has an invalid length. [ 202.091207][ T7475] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.483'. [ 202.462484][ T7485] netlink: 'syz.0.487': attribute type 9 has an invalid length. [ 202.478865][ T7485] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.487'. [ 202.739995][ T7501] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.492'. [ 202.913162][ T7505] FAULT_INJECTION: forcing a failure. [ 202.913162][ T7505] name failslab, interval 1, probability 0, space 0, times 1 [ 202.965665][ T7505] CPU: 0 PID: 7505 Comm: syz.0.494 Not tainted syzkaller #0 [ 202.973056][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.983161][ T7505] Call Trace: [ 202.986580][ T7505] [ 202.989563][ T7505] dump_stack_lvl+0x18c/0x250 [ 202.994317][ T7505] ? show_regs_print_info+0x20/0x20 [ 202.999585][ T7505] ? load_image+0x420/0x420 [ 203.004152][ T7505] ? __might_sleep+0xe0/0xe0 [ 203.008875][ T7505] ? __lock_acquire+0x7d80/0x7d80 [ 203.014051][ T7505] should_fail_ex+0x394/0x4c0 [ 203.018827][ T7505] should_failslab+0x9/0x20 [ 203.023424][ T7505] slab_pre_alloc_hook+0x59/0x300 [ 203.028495][ T7505] ? __lock_acquire+0x7d80/0x7d80 [ 203.033558][ T7505] kmem_cache_alloc_node+0x5e/0x310 [ 203.038812][ T7505] ? __alloc_skb+0x103/0x2c0 [ 203.043447][ T7505] __alloc_skb+0x103/0x2c0 [ 203.047908][ T7505] netlink_sendmsg+0x66a/0xbf0 [ 203.052720][ T7505] ? netlink_getsockopt+0x590/0x590 [ 203.057964][ T7505] ? aa_sock_msg_perm+0x94/0x150 [ 203.062945][ T7505] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 203.068306][ T7505] ? security_socket_sendmsg+0x80/0xa0 [ 203.073806][ T7505] ? netlink_getsockopt+0x590/0x590 [ 203.079046][ T7505] ____sys_sendmsg+0x61b/0x980 [ 203.083853][ T7505] ? __asan_memset+0x22/0x40 [ 203.088474][ T7505] ? __sys_sendmsg_sock+0x30/0x30 [ 203.093542][ T7505] ? __import_iovec+0x5f2/0x850 [ 203.098433][ T7505] ? import_iovec+0x73/0xa0 [ 203.102988][ T7505] ___sys_sendmsg+0x2a6/0x360 [ 203.107761][ T7505] ? get_pid_task+0x20/0x1e0 [ 203.112390][ T7505] ? __sys_sendmsg+0x2b0/0x2b0 [ 203.117208][ T7505] ? __lock_acquire+0x7d80/0x7d80 [ 203.122279][ T7505] __se_sys_sendmsg+0x1d0/0x2c0 [ 203.127175][ T7505] ? __x64_sys_sendmsg+0x80/0x80 [ 203.132173][ T7505] ? lockdep_hardirqs_on+0x98/0x150 [ 203.137499][ T7505] do_syscall_64+0x55/0xb0 [ 203.141970][ T7505] ? clear_bhb_loop+0x40/0x90 [ 203.146678][ T7505] ? clear_bhb_loop+0x40/0x90 [ 203.151464][ T7505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.157393][ T7505] RIP: 0033:0x7ff65599de59 [ 203.161839][ T7505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.182087][ T7505] RSP: 002b:00007ff656957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.190548][ T7505] RAX: ffffffffffffffda RBX: 00007ff655c25fa0 RCX: 00007ff65599de59 [ 203.198576][ T7505] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000004 [ 203.206580][ T7505] RBP: 00007ff656957090 R08: 0000000000000000 R09: 0000000000000000 [ 203.214583][ T7505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.222607][ T7505] R13: 00007ff655c26038 R14: 00007ff655c25fa0 R15: 00007ffe75c98ed8 [ 203.230631][ T7505] [ 203.328184][ T7507] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.495'. [ 203.386321][ T7507] bridge_slave_1: entered promiscuous mode [ 203.412019][ T7507] syz.3.495 uses obsolete (PF_INET,SOCK_PACKET) [ 203.621044][ T7507] raw_sendmsg: syz.3.495 forgot to set AF_INET. Fix it! [ 203.997628][ T7535] netlink: 830 bytes leftover after parsing attributes in process `syz.3.504'. [ 204.032270][ T7534] netlink: 'syz.1.503': attribute type 9 has an invalid length. [ 204.041258][ T7534] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.503'. [ 204.289279][ T7541] netlink: 'syz.3.505': attribute type 1 has an invalid length. [ 204.305619][ T7541] netlink: 'syz.3.505': attribute type 3 has an invalid length. [ 204.341862][ T7541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.505'. [ 204.397973][ T7538] netlink: 'syz.1.503': attribute type 9 has an invalid length. [ 204.411220][ T7538] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.503'. [ 205.003763][ T7572] syzkaller0: create flow: hash 3100658751 index 0 [ 205.083112][ T7571] syzkaller0: entered promiscuous mode [ 205.091568][ T7571] syzkaller0: entered allmulticast mode [ 205.098708][ T7573] netlink: 'syz.2.512': attribute type 21 has an invalid length. [ 205.106854][ T7572] netlink: 'syz.0.513': attribute type 22 has an invalid length. [ 206.022210][ T7591] FAULT_INJECTION: forcing a failure. [ 206.022210][ T7591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.038819][ T7591] CPU: 1 PID: 7591 Comm: syz.2.518 Not tainted syzkaller #0 [ 206.046199][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 206.056325][ T7591] Call Trace: [ 206.059663][ T7591] [ 206.062690][ T7591] dump_stack_lvl+0x18c/0x250 [ 206.067508][ T7591] ? show_regs_print_info+0x20/0x20 [ 206.072974][ T7591] ? load_image+0x420/0x420 [ 206.077626][ T7591] ? __might_fault+0xaa/0x120 [ 206.082361][ T7591] ? __lock_acquire+0x7d80/0x7d80 [ 206.087433][ T7591] should_fail_ex+0x394/0x4c0 [ 206.092169][ T7591] _copy_from_iter+0x1cd/0x1290 [ 206.097088][ T7591] ? rcu_is_watching+0x15/0xb0 [ 206.101892][ T7591] ? copyout_mc+0x70/0x70 [ 206.106260][ T7591] ? __virt_addr_valid+0x10c/0x380 [ 206.111435][ T7591] ? __virt_addr_valid+0x10c/0x380 [ 206.116633][ T7591] ? __virt_addr_valid+0x10c/0x380 [ 206.121793][ T7591] ? __check_object_size+0x4fc/0xa40 [ 206.127108][ T7591] netlink_sendmsg+0x76b/0xbf0 [ 206.131940][ T7591] ? netlink_getsockopt+0x590/0x590 [ 206.137210][ T7591] ? aa_sock_msg_perm+0x94/0x150 [ 206.142232][ T7591] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 206.147640][ T7591] ? security_socket_sendmsg+0x80/0xa0 [ 206.153139][ T7591] ? netlink_getsockopt+0x590/0x590 [ 206.158388][ T7591] ____sys_sendmsg+0x61b/0x980 [ 206.163196][ T7591] ? __asan_memset+0x22/0x40 [ 206.167829][ T7591] ? __sys_sendmsg_sock+0x30/0x30 [ 206.172892][ T7591] ? __import_iovec+0x5f2/0x850 [ 206.177975][ T7591] ? import_iovec+0x73/0xa0 [ 206.182527][ T7591] ___sys_sendmsg+0x2a6/0x360 [ 206.187258][ T7591] ? get_pid_task+0x20/0x1e0 [ 206.191889][ T7591] ? __sys_sendmsg+0x2b0/0x2b0 [ 206.196709][ T7591] ? __lock_acquire+0x7d80/0x7d80 [ 206.201782][ T7591] __se_sys_sendmsg+0x1d0/0x2c0 [ 206.206679][ T7591] ? __x64_sys_sendmsg+0x80/0x80 [ 206.211664][ T7591] ? lockdep_hardirqs_on+0x98/0x150 [ 206.216893][ T7591] do_syscall_64+0x55/0xb0 [ 206.221359][ T7591] ? clear_bhb_loop+0x40/0x90 [ 206.226068][ T7591] ? clear_bhb_loop+0x40/0x90 [ 206.230768][ T7591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.236696][ T7591] RIP: 0033:0x7fd1a259de59 [ 206.241663][ T7591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.261991][ T7591] RSP: 002b:00007fd1a3392028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.270490][ T7591] RAX: ffffffffffffffda RBX: 00007fd1a2825fa0 RCX: 00007fd1a259de59 [ 206.278527][ T7591] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000004 [ 206.286539][ T7591] RBP: 00007fd1a3392090 R08: 0000000000000000 R09: 0000000000000000 [ 206.294543][ T7591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.302556][ T7591] R13: 00007fd1a2826038 R14: 00007fd1a2825fa0 R15: 00007ffe0286ea28 [ 206.310699][ T7591] [ 206.843035][ T7604] netlink: 'syz.3.522': attribute type 9 has an invalid length. [ 206.851907][ T7604] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.522'. [ 207.917440][ T7571] syzkaller0 (unregistered): delete flow: hash 3100658751 index 0 [ 208.085130][ T7609] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.523'. [ 208.565733][ T7605] netlink: 'syz.3.522': attribute type 9 has an invalid length. [ 208.596008][ T7605] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.522'. [ 208.646294][ T7614] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.878958][ T7622] netlink: 'syz.0.527': attribute type 29 has an invalid length. [ 208.946692][ T7622] netlink: 'syz.0.527': attribute type 29 has an invalid length. [ 208.974052][ T7625] netlink: 'syz.0.527': attribute type 29 has an invalid length. [ 208.986206][ T7622] netlink: 'syz.0.527': attribute type 29 has an invalid length. [ 208.996311][ T7622] netlink: 'syz.0.527': attribute type 29 has an invalid length. [ 209.973679][ T7636] netlink: 128 bytes leftover after parsing attributes in process `syz.1.531'. [ 209.999402][ T7636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.367312][ T7641] FAULT_INJECTION: forcing a failure. [ 210.367312][ T7641] name failslab, interval 1, probability 0, space 0, times 0 [ 210.415221][ T7641] CPU: 0 PID: 7641 Comm: syz.1.534 Not tainted syzkaller #0 [ 210.422622][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 210.432737][ T7641] Call Trace: [ 210.436074][ T7641] [ 210.439086][ T7641] dump_stack_lvl+0x18c/0x250 [ 210.443842][ T7641] ? show_regs_print_info+0x20/0x20 [ 210.449200][ T7641] ? load_image+0x420/0x420 [ 210.453776][ T7641] ? __might_sleep+0xe0/0xe0 [ 210.458623][ T7641] ? __lock_acquire+0x7d80/0x7d80 [ 210.463727][ T7641] should_fail_ex+0x394/0x4c0 [ 210.468481][ T7641] should_failslab+0x9/0x20 [ 210.473051][ T7641] slab_pre_alloc_hook+0x59/0x300 [ 210.478155][ T7641] kmem_cache_alloc_node+0x5e/0x310 [ 210.483531][ T7641] ? __alloc_skb+0x103/0x2c0 [ 210.488206][ T7641] __alloc_skb+0x103/0x2c0 [ 210.492719][ T7641] netlink_dump+0x1ee/0xec0 [ 210.497331][ T7641] ? rcu_is_watching+0x15/0xb0 [ 210.502183][ T7641] ? __mutex_lock+0x30d/0xc80 [ 210.506917][ T7641] ? netlink_lookup+0x200/0x200 [ 210.511859][ T7641] ? netlink_lookup+0x30/0x200 [ 210.516699][ T7641] ? netlink_lookup+0x30/0x200 [ 210.521531][ T7641] __netlink_dump_start+0x57c/0x7a0 [ 210.526820][ T7641] rtnetlink_rcv_msg+0xe19/0xf90 [ 210.531820][ T7641] ? rtnetlink_rcv_msg+0x220/0xf90 [ 210.536988][ T7641] ? rtnl_getlink+0xd20/0xd20 [ 210.541739][ T7641] ? rtnetlink_bind+0x80/0x80 [ 210.546558][ T7641] ? rtnl_getlink+0xd20/0xd20 [ 210.551303][ T7641] ? ref_tracker_free+0x686/0x830 [ 210.556412][ T7641] netlink_rcv_skb+0x235/0x4c0 [ 210.561309][ T7641] ? rtnetlink_bind+0x80/0x80 [ 210.566032][ T7641] ? netlink_ack+0x1160/0x1160 [ 210.570872][ T7641] ? __lock_acquire+0x7d80/0x7d80 [ 210.575961][ T7641] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.581232][ T7641] netlink_unicast+0x7b1/0x930 [ 210.586074][ T7641] netlink_sendmsg+0x8d0/0xbf0 [ 210.591082][ T7641] ? netlink_getsockopt+0x590/0x590 [ 210.596348][ T7641] ? aa_sock_msg_perm+0x94/0x150 [ 210.601341][ T7641] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 210.606684][ T7641] ? security_socket_sendmsg+0x80/0xa0 [ 210.612283][ T7641] ? netlink_getsockopt+0x590/0x590 [ 210.617546][ T7641] ____sys_sendmsg+0x61b/0x980 [ 210.622390][ T7641] ? __asan_memset+0x22/0x40 [ 210.627041][ T7641] ? __sys_sendmsg_sock+0x30/0x30 [ 210.632133][ T7641] ? __import_iovec+0x5f2/0x850 [ 210.637058][ T7641] ? import_iovec+0x73/0xa0 [ 210.641630][ T7641] ___sys_sendmsg+0x2a6/0x360 [ 210.646373][ T7641] ? get_pid_task+0x20/0x1e0 [ 210.651029][ T7641] ? __sys_sendmsg+0x2b0/0x2b0 [ 210.655883][ T7641] ? __lock_acquire+0x7d80/0x7d80 [ 210.661179][ T7641] __se_sys_sendmsg+0x1d0/0x2c0 [ 210.666194][ T7641] ? __x64_sys_sendmsg+0x80/0x80 [ 210.671218][ T7641] ? lockdep_hardirqs_on+0x98/0x150 [ 210.676485][ T7641] do_syscall_64+0x55/0xb0 [ 210.680962][ T7641] ? clear_bhb_loop+0x40/0x90 [ 210.685689][ T7641] ? clear_bhb_loop+0x40/0x90 [ 210.690426][ T7641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.696388][ T7641] RIP: 0033:0x7fb3f5f9de59 [ 210.700863][ T7641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.720526][ T7641] RSP: 002b:00007fb3f6dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.729023][ T7641] RAX: ffffffffffffffda RBX: 00007fb3f6225fa0 RCX: 00007fb3f5f9de59 [ 210.737059][ T7641] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000004 [ 210.745195][ T7641] RBP: 00007fb3f6dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 210.753264][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.761368][ T7641] R13: 00007fb3f6226038 R14: 00007fb3f6225fa0 R15: 00007fffe883c2a8 [ 210.769405][ T7641] [ 210.924894][ T7649] C: renamed from team_slave_0 (while UP) [ 211.007946][ T7649] netlink: 'syz.3.536': attribute type 3 has an invalid length. [ 211.055589][ T7648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.536'. [ 211.119553][ T7649] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.536'. [ 211.161169][ T7649] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 211.264155][ T7653] netlink: 'syz.2.538': attribute type 29 has an invalid length. [ 211.349320][ T7653] netlink: 'syz.2.538': attribute type 29 has an invalid length. [ 211.732596][ T7666] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.543'. [ 211.973580][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 212.019451][ T7675] FAULT_INJECTION: forcing a failure. [ 212.019451][ T7675] name failslab, interval 1, probability 0, space 0, times 0 [ 212.063559][ T7675] CPU: 0 PID: 7675 Comm: syz.0.546 Not tainted syzkaller #0 [ 212.070948][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.081064][ T7675] Call Trace: [ 212.084400][ T7675] [ 212.087556][ T7675] dump_stack_lvl+0x18c/0x250 [ 212.092309][ T7675] ? show_regs_print_info+0x20/0x20 [ 212.097577][ T7675] ? load_image+0x420/0x420 [ 212.102192][ T7675] ? __might_sleep+0xe0/0xe0 [ 212.106861][ T7675] ? __lock_acquire+0x7d80/0x7d80 [ 212.111967][ T7675] should_fail_ex+0x394/0x4c0 [ 212.116716][ T7675] should_failslab+0x9/0x20 [ 212.121369][ T7675] slab_pre_alloc_hook+0x59/0x300 [ 212.126498][ T7675] kmem_cache_alloc_node+0x5e/0x310 [ 212.131774][ T7675] ? __alloc_skb+0x103/0x2c0 [ 212.136445][ T7675] __alloc_skb+0x103/0x2c0 [ 212.140935][ T7675] netlink_dump+0x1ee/0xec0 [ 212.145514][ T7675] ? rcu_is_watching+0x15/0xb0 [ 212.150329][ T7675] ? __mutex_lock+0x30d/0xc80 [ 212.155047][ T7675] ? netlink_lookup+0x200/0x200 [ 212.159955][ T7675] ? netlink_lookup+0x30/0x200 [ 212.164850][ T7675] ? netlink_lookup+0x30/0x200 [ 212.169656][ T7675] __netlink_dump_start+0x57c/0x7a0 [ 212.174924][ T7675] rtnetlink_rcv_msg+0xe19/0xf90 [ 212.179924][ T7675] ? rtnetlink_rcv_msg+0x220/0xf90 [ 212.185074][ T7675] ? rtnl_getlink+0xd20/0xd20 [ 212.189801][ T7675] ? rtnetlink_bind+0x80/0x80 [ 212.194649][ T7675] ? rtnl_getlink+0xd20/0xd20 [ 212.199373][ T7675] ? ref_tracker_free+0x686/0x830 [ 212.204475][ T7675] netlink_rcv_skb+0x235/0x4c0 [ 212.209320][ T7675] ? rtnetlink_bind+0x80/0x80 [ 212.214038][ T7675] ? netlink_ack+0x1160/0x1160 [ 212.218861][ T7675] ? __lock_acquire+0x7d80/0x7d80 [ 212.223945][ T7675] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.229212][ T7675] netlink_unicast+0x7b1/0x930 [ 212.234082][ T7675] netlink_sendmsg+0x8d0/0xbf0 [ 212.238913][ T7675] ? netlink_getsockopt+0x590/0x590 [ 212.244173][ T7675] ? aa_sock_msg_perm+0x94/0x150 [ 212.249162][ T7675] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 212.254763][ T7675] ? security_socket_sendmsg+0x80/0xa0 [ 212.260260][ T7675] ? netlink_getsockopt+0x590/0x590 [ 212.265517][ T7675] ____sys_sendmsg+0x61b/0x980 [ 212.270358][ T7675] ? __asan_memset+0x22/0x40 [ 212.275163][ T7675] ? __sys_sendmsg_sock+0x30/0x30 [ 212.280245][ T7675] ? __import_iovec+0x5f2/0x850 [ 212.285220][ T7675] ? import_iovec+0x73/0xa0 [ 212.289762][ T7675] ___sys_sendmsg+0x2a6/0x360 [ 212.294484][ T7675] ? get_pid_task+0x20/0x1e0 [ 212.299121][ T7675] ? __sys_sendmsg+0x2b0/0x2b0 [ 212.303934][ T7675] ? __lock_acquire+0x7d80/0x7d80 [ 212.309103][ T7675] __se_sys_sendmsg+0x1d0/0x2c0 [ 212.313994][ T7675] ? __x64_sys_sendmsg+0x80/0x80 [ 212.318982][ T7675] ? lockdep_hardirqs_on+0x98/0x150 [ 212.324224][ T7675] do_syscall_64+0x55/0xb0 [ 212.328693][ T7675] ? clear_bhb_loop+0x40/0x90 [ 212.333570][ T7675] ? clear_bhb_loop+0x40/0x90 [ 212.338275][ T7675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.344226][ T7675] RIP: 0033:0x7ff65599de59 [ 212.348674][ T7675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.368319][ T7675] RSP: 002b:00007ff656957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.376767][ T7675] RAX: ffffffffffffffda RBX: 00007ff655c25fa0 RCX: 00007ff65599de59 [ 212.384767][ T7675] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000004 [ 212.392769][ T7675] RBP: 00007ff656957090 R08: 0000000000000000 R09: 0000000000000000 [ 212.400771][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.408771][ T7675] R13: 00007ff655c26038 R14: 00007ff655c25fa0 R15: 00007ffe75c98ed8 [ 212.416790][ T7675] [ 212.420570][ T5090] Bluetooth: hci0: command 0x0406 tx timeout [ 212.445676][ T5090] Bluetooth: hci1: command 0x0406 tx timeout [ 212.454515][ T5090] Bluetooth: hci2: command 0x0406 tx timeout [ 212.460793][ T5090] Bluetooth: hci3: command 0x0406 tx timeout [ 212.560980][ T7670] validate_nla: 4 callbacks suppressed [ 212.561001][ T7670] netlink: 'syz.1.543': attribute type 9 has an invalid length. [ 212.582631][ T7670] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.543'. [ 212.871766][ T7685] netlink: 'syz.3.550': attribute type 29 has an invalid length. [ 212.926802][ T7685] netlink: 'syz.3.550': attribute type 29 has an invalid length. [ 212.967569][ T7685] netlink: 'syz.3.550': attribute type 29 has an invalid length. [ 213.026754][ T7685] netlink: 'syz.3.550': attribute type 29 has an invalid length. [ 213.096560][ T7691] netlink: 'syz.3.550': attribute type 29 has an invalid length. [ 213.707168][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 214.182840][ T7717] netlink: 'syz.0.563': attribute type 29 has an invalid length. [ 214.203860][ T7717] netlink: 'syz.0.563': attribute type 29 has an invalid length. [ 214.214378][ T7722] netlink: 'syz.1.566': attribute type 4 has an invalid length. [ 214.227237][ T7717] netlink: 'syz.0.563': attribute type 29 has an invalid length. [ 214.319049][ T7726] FAULT_INJECTION: forcing a failure. [ 214.319049][ T7726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.333940][ T7726] CPU: 0 PID: 7726 Comm: syz.2.567 Not tainted syzkaller #0 [ 214.341297][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.351404][ T7726] Call Trace: [ 214.354729][ T7726] [ 214.357706][ T7726] dump_stack_lvl+0x18c/0x250 [ 214.362442][ T7726] ? show_regs_print_info+0x20/0x20 [ 214.367697][ T7726] ? load_image+0x420/0x420 [ 214.372253][ T7726] ? __lock_acquire+0x7d80/0x7d80 [ 214.377329][ T7726] ? snprintf+0xe9/0x140 [ 214.381628][ T7726] should_fail_ex+0x394/0x4c0 [ 214.386366][ T7726] _copy_to_user+0x2f/0xa0 [ 214.390836][ T7726] simple_read_from_buffer+0xe7/0x150 [ 214.396280][ T7726] proc_fail_nth_read+0x1e8/0x260 [ 214.401365][ T7726] ? proc_fault_inject_write+0x360/0x360 [ 214.407058][ T7726] ? fsnotify_perm+0x271/0x5e0 [ 214.411870][ T7726] ? proc_fault_inject_write+0x360/0x360 [ 214.417558][ T7726] vfs_read+0x298/0x990 [ 214.421783][ T7726] ? kernel_read+0x1e0/0x1e0 [ 214.426424][ T7726] ? __fget_files+0x28/0x460 [ 214.431091][ T7726] ? __fget_files+0x3fc/0x460 [ 214.435826][ T7726] ? __fdget_pos+0x2a3/0x330 [ 214.440584][ T7726] ? ksys_read+0x74/0x260 [ 214.444977][ T7726] ksys_read+0x151/0x260 [ 214.449277][ T7726] ? vfs_write+0x9a0/0x9a0 [ 214.453749][ T7726] ? lockdep_hardirqs_on+0x98/0x150 [ 214.459042][ T7726] do_syscall_64+0x55/0xb0 [ 214.463527][ T7726] ? clear_bhb_loop+0x40/0x90 [ 214.468260][ T7726] ? clear_bhb_loop+0x40/0x90 [ 214.472988][ T7726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.478955][ T7726] RIP: 0033:0x7fd1a255e68e [ 214.483420][ T7726] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 214.503079][ T7726] RSP: 002b:00007fd1a3391fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.511552][ T7726] RAX: ffffffffffffffda RBX: 00007fd1a33926c0 RCX: 00007fd1a255e68e [ 214.519576][ T7726] RDX: 000000000000000f RSI: 00007fd1a33920a0 RDI: 0000000000000005 [ 214.527610][ T7726] RBP: 00007fd1a3392090 R08: 0000000000000000 R09: 0000000000000000 [ 214.535637][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.543657][ T7726] R13: 00007fd1a2826038 R14: 00007fd1a2825fa0 R15: 00007ffe0286ea28 [ 214.551702][ T7726] [ 215.094127][ T7743] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.574'. [ 215.118681][ T7744] delete_channel: no stack [ 216.999678][ T7763] sctp: [Deprecated]: syz.3.578 (pid 7763) Use of int in maxseg socket option. [ 216.999678][ T7763] Use struct sctp_assoc_value instead [ 217.432735][ T7746] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.574'. [ 217.573006][ T7766] validate_nla: 5 callbacks suppressed [ 217.573025][ T7766] netlink: 'syz.1.579': attribute type 29 has an invalid length. [ 217.612587][ T7753] netlink: 'syz.2.576': attribute type 9 has an invalid length. [ 217.624258][ T7753] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.576'. [ 217.643063][ T7769] netlink: 'syz.1.579': attribute type 29 has an invalid length. [ 217.655178][ T7766] netlink: 'syz.1.579': attribute type 29 has an invalid length. [ 217.679810][ T7766] netlink: 'syz.1.579': attribute type 29 has an invalid length. [ 218.699135][ T7776] netlink: 'syz.3.582': attribute type 2 has an invalid length. [ 218.713078][ T7776] netlink: 'syz.3.582': attribute type 8 has an invalid length. [ 218.721444][ T7776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.582'. [ 219.134296][ T7791] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.589'. [ 219.664376][ T7800] netlink: 'syz.2.593': attribute type 29 has an invalid length. [ 219.680828][ T7800] netlink: 'syz.2.593': attribute type 29 has an invalid length. [ 219.715760][ T7803] netlink: 'syz.2.593': attribute type 29 has an invalid length. [ 220.041466][ T7815] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.598'. [ 220.206457][ T7817] sctp: [Deprecated]: syz.1.599 (pid 7817) Use of int in maxseg socket option. [ 220.206457][ T7817] Use struct sctp_assoc_value instead [ 220.283073][ T7819] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.600'. [ 221.490291][ T7820] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.600'. [ 221.623582][ T7841] syzkaller0: entered promiscuous mode [ 221.629481][ T7841] syzkaller0: entered allmulticast mode [ 221.637275][ T7837] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 223.719945][ T7852] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.608'. [ 223.918470][ T7859] netlink: 64 bytes leftover after parsing attributes in process `syz.1.611'. [ 224.680791][ T7877] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 224.949006][ T7883] netlink: 64 bytes leftover after parsing attributes in process `syz.0.621'. [ 224.995981][ T5789] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 225.274952][ T7893] netlink: 76 bytes leftover after parsing attributes in process `syz.0.624'. [ 225.326505][ T7893] validate_nla: 4 callbacks suppressed [ 225.326522][ T7893] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 225.423440][ T7896] netlink: 'syz.3.625': attribute type 9 has an invalid length. [ 225.451682][ T7896] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.625'. [ 225.772141][ T7898] netlink: 'syz.0.626': attribute type 9 has an invalid length. [ 225.802374][ T7898] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.626'. [ 226.077037][ T7907] sctp: [Deprecated]: syz.3.628 (pid 7907) Use of int in maxseg socket option. [ 226.077037][ T7907] Use struct sctp_assoc_value instead [ 226.381985][ T7899] netlink: 'syz.0.626': attribute type 9 has an invalid length. [ 226.391454][ T7913] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 226.430176][ T7899] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.626'. [ 226.460942][ T7915] netlink: 64 bytes leftover after parsing attributes in process `syz.2.632'. [ 226.488092][ T5789] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 226.934603][ T7932] netlink: 'syz.1.637': attribute type 2 has an invalid length. [ 226.980385][ T7932] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.637'. [ 227.174446][ T7932] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.637'. [ 227.878242][ T7943] netlink: 'syz.1.640': attribute type 29 has an invalid length. [ 227.892002][ T7943] netlink: 'syz.1.640': attribute type 29 has an invalid length. [ 228.068151][ T5789] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 228.144546][ T7950] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 228.812007][ T7979] __nla_validate_parse: 5 callbacks suppressed [ 228.812025][ T7979] netlink: 180 bytes leftover after parsing attributes in process `syz.2.651'. [ 229.198698][ T7985] netlink: 64 bytes leftover after parsing attributes in process `syz.1.654'. [ 229.227026][ T7987] netlink: 'syz.0.653': attribute type 9 has an invalid length. [ 229.245059][ T7987] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.653'. [ 229.261158][ T5789] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 229.606965][ T7994] netlink: 6 bytes leftover after parsing attributes in process `syz.1.656'. [ 229.627370][ T7994] openvswitch: netlink: Flow key attr not present in new flow. [ 229.900342][ T7990] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 230.093221][ T7988] netlink: 'syz.0.653': attribute type 9 has an invalid length. [ 230.106624][ T7988] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.653'. [ 230.257286][ T8001] netlink: 'syz.2.659': attribute type 21 has an invalid length. [ 230.287740][ T8001] netlink: 156 bytes leftover after parsing attributes in process `syz.2.659'. [ 230.322196][ T8001] sit0: entered allmulticast mode [ 230.413814][ T8004] sit0: entered promiscuous mode [ 231.009824][ T8021] netlink: 64 bytes leftover after parsing attributes in process `syz.0.664'. [ 231.065172][ T5789] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 231.756138][ T8038] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.904990][ T8046] netlink: 'syz.2.671': attribute type 2 has an invalid length. [ 231.920225][ T8031] delete_channel: no stack [ 232.130007][ T8048] netlink: 'syz.1.673': attribute type 9 has an invalid length. [ 232.147379][ T8048] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.673'. [ 232.402027][ T5789] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 233.168130][ T8050] netlink: 'syz.1.673': attribute type 9 has an invalid length. [ 233.215749][ T8050] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.673'. [ 233.225285][ T8056] netlink: 64 bytes leftover after parsing attributes in process `syz.2.676'. [ 233.659442][ T8072] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 234.244703][ T8090] netlink: 64 bytes leftover after parsing attributes in process `syz.0.687'. [ 234.342585][ T5789] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 234.723853][ T8102] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.692'. [ 234.978159][ T8104] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 235.239667][ T8113] netlink: 64 bytes leftover after parsing attributes in process `syz.1.697'. [ 235.322354][ T5789] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 235.534469][ T8118] netlink: 'syz.2.698': attribute type 9 has an invalid length. [ 235.576054][ T8118] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.698'. [ 235.924682][ T8122] netlink: 'syz.2.698': attribute type 9 has an invalid length. [ 235.976988][ T8122] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.698'. [ 236.311015][ T8135] netlink: 180 bytes leftover after parsing attributes in process `syz.0.703'. [ 236.453732][ T8138] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.704'. [ 237.124067][ T8147] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 237.245126][ T8157] netlink: 'syz.0.708': attribute type 29 has an invalid length. [ 237.298253][ T8157] netlink: 'syz.0.708': attribute type 29 has an invalid length. [ 237.334462][ T8160] netlink: 'syz.0.708': attribute type 29 has an invalid length. [ 237.403220][ T8157] netlink: 'syz.0.708': attribute type 29 has an invalid length. [ 237.919583][ T8157] netlink: 'syz.0.708': attribute type 29 has an invalid length. [ 238.737610][ T8180] netlink: 'syz.3.713': attribute type 9 has an invalid length. [ 238.760840][ T8180] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.713'. [ 238.830968][ T8183] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.715'. [ 239.374806][ T8201] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 239.395538][ T8191] netlink: 'syz.3.713': attribute type 9 has an invalid length. [ 239.415202][ T8191] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.713'. [ 239.530711][ T8206] netlink: 'syz.2.720': attribute type 29 has an invalid length. [ 239.591122][ T8206] netlink: 'syz.2.720': attribute type 29 has an invalid length. [ 239.607074][ T8208] netlink: 'syz.2.720': attribute type 29 has an invalid length. [ 240.501149][ T8226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.519523][ T8226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.536791][ T8226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.554627][ T8226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.753950][ T8225] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.728'. [ 241.320757][ T8240] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 242.184687][ T8264] FAULT_INJECTION: forcing a failure. [ 242.184687][ T8264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.208007][ T8263] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.744'. [ 242.234762][ T8264] CPU: 0 PID: 8264 Comm: syz.2.742 Not tainted syzkaller #0 [ 242.242140][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 242.252264][ T8264] Call Trace: [ 242.255606][ T8264] [ 242.258581][ T8264] dump_stack_lvl+0x18c/0x250 [ 242.263321][ T8264] ? show_regs_print_info+0x20/0x20 [ 242.268579][ T8264] ? load_image+0x420/0x420 [ 242.273158][ T8264] ? __might_fault+0xaa/0x120 [ 242.277889][ T8264] ? __lock_acquire+0x7d80/0x7d80 [ 242.282974][ T8264] should_fail_ex+0x394/0x4c0 [ 242.287713][ T8264] _copy_from_user+0x2f/0xe0 [ 242.292380][ T8264] ___sys_recvmsg+0x174/0x590 [ 242.297132][ T8264] ? __sys_recvmsg+0x2a0/0x2a0 [ 242.301981][ T8264] ? __fget_files+0x3fc/0x460 [ 242.306733][ T8264] __x64_sys_recvmsg+0x21e/0x2f0 [ 242.311740][ T8264] ? ___sys_recvmsg+0x590/0x590 [ 242.316673][ T8264] ? syscall_enter_from_user_mode+0x2e/0x80 [ 242.322623][ T8264] do_syscall_64+0x55/0xb0 [ 242.327104][ T8264] ? clear_bhb_loop+0x40/0x90 [ 242.331830][ T8264] ? clear_bhb_loop+0x40/0x90 [ 242.336554][ T8264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.342505][ T8264] RIP: 0033:0x7fd1a259de59 [ 242.346973][ T8264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.366633][ T8264] RSP: 002b:00007fd1a3392028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 242.375111][ T8264] RAX: ffffffffffffffda RBX: 00007fd1a2825fa0 RCX: 00007fd1a259de59 [ 242.383133][ T8264] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 242.391165][ T8264] RBP: 00007fd1a3392090 R08: 0000000000000000 R09: 0000000000000000 [ 242.399180][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.407294][ T8264] R13: 00007fd1a2826038 R14: 00007fd1a2825fa0 R15: 00007ffe0286ea28 [ 242.415334][ T8264] [ 242.910482][ T8260] mac80211_hwsim hwsim8 ..ãc¤±: renamed from wlan1 [ 242.944262][ T8266] validate_nla: 4 callbacks suppressed [ 242.944284][ T8266] netlink: 'syz.0.744': attribute type 9 has an invalid length. [ 243.016933][ T8266] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.744'. [ 243.322160][ T8282] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.747'. [ 243.466002][ T8267] netlink: 'syz.2.742': attribute type 9 has an invalid length. [ 243.490748][ T8286] netlink: 'syz.3.748': attribute type 29 has an invalid length. [ 243.500629][ T8267] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.742'. [ 243.528571][ T8286] netlink: 'syz.3.748': attribute type 29 has an invalid length. [ 243.579549][ T8286] netlink: 'syz.3.748': attribute type 29 has an invalid length. [ 243.633486][ T8286] netlink: 'syz.3.748': attribute type 29 has an invalid length. [ 243.724445][ T8286] netlink: 'syz.3.748': attribute type 29 has an invalid length. [ 243.739587][ T8268] netlink: 'syz.2.742': attribute type 9 has an invalid length. [ 243.827675][ T8268] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.742'. [ 245.689235][ T8321] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.757'. [ 245.781752][ T8319] netlink: 668 bytes leftover after parsing attributes in process `syz.3.756'. [ 245.816527][ T8319] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 245.835833][ T8319] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 246.077747][ T8332] netlink: 'syz.1.761': attribute type 17 has an invalid length. [ 246.091125][ T8332] netlink: 160 bytes leftover after parsing attributes in process `syz.1.761'. [ 246.422416][ T8338] netlink: 'syz.1.771': attribute type 9 has an invalid length. [ 246.445525][ T8338] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.771'. [ 247.195224][ T8339] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 (while UP) [ 247.215511][ T8342] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.771'. [ 247.557868][ T8350] netlink: 10 bytes leftover after parsing attributes in process `syz.0.765'. [ 247.792847][ T8351] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.765'. [ 247.925167][ T8352] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.765'. [ 248.234254][ T8357] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.768'. [ 248.254562][ T8359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.767'. [ 248.710890][ T8371] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 248.725038][ T8371] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 248.833974][ T5789] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 249.119174][ T8373] mac80211_hwsim hwsim3 ..ãc¤±: renamed from wlan1 [ 250.814548][ T8386] __nla_validate_parse: 3 callbacks suppressed [ 250.814564][ T8386] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.778'. [ 250.973475][ T8395] validate_nla: 3 callbacks suppressed [ 250.973516][ T8395] netlink: 'syz.1.780': attribute type 9 has an invalid length. [ 250.999125][ T8395] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.780'. [ 251.388797][ T5789] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 251.457446][ T8397] netlink: 'syz.1.780': attribute type 9 has an invalid length. [ 251.475531][ T8397] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.780'. [ 251.618053][ T8405] netlink: 'syz.2.784': attribute type 9 has an invalid length. [ 251.646766][ T8405] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.784'. [ 252.020400][ T8406] netlink: 'syz.2.784': attribute type 9 has an invalid length. [ 252.028836][ T8406] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.784'. [ 252.235792][ T8425] netlink: 'syz.0.789': attribute type 10 has an invalid length. [ 252.307838][ T8444] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.792'. [ 252.440423][ T8447] netlink: 'syz.2.793': attribute type 19 has an invalid length. [ 252.459686][ T8447] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.793'. [ 252.545685][ T8448] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.793'. [ 252.843996][ T5789] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 253.575170][ T8465] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.803'. [ 253.661661][ T8469] netlink: 'syz.1.802': attribute type 9 has an invalid length. [ 253.685499][ T8469] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.802'. [ 253.950874][ T5789] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 254.147049][ T8474] netlink: 'syz.1.802': attribute type 9 has an invalid length. [ 255.121607][ T8509] netlink: 'syz.2.819': attribute type 29 has an invalid length. [ 255.132029][ T8509] netlink: 'syz.2.819': attribute type 29 has an invalid length. [ 256.250963][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.257691][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.275322][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.302735][ T8537] bridge_slave_1: left allmulticast mode [ 256.315664][ T8537] bridge_slave_1: left promiscuous mode [ 256.326518][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.345290][ T8537] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 256.368442][ T8539] validate_nla: 9 callbacks suppressed [ 256.368464][ T8539] netlink: 'syz.1.833': attribute type 9 has an invalid length. [ 256.406881][ T8539] __nla_validate_parse: 7 callbacks suppressed [ 256.406921][ T8539] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.833'. [ 256.587231][ T8547] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 256.687855][ T8543] netlink: 'syz.1.833': attribute type 9 has an invalid length. [ 256.705452][ T8543] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.833'. [ 257.090544][ T8562] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.840'. [ 257.352958][ T8570] netlink: 'syz.3.842': attribute type 29 has an invalid length. [ 257.363036][ T8570] netlink: 'syz.3.842': attribute type 29 has an invalid length. [ 257.372524][ T8570] netlink: 'syz.3.842': attribute type 29 has an invalid length. [ 257.384581][ T8570] netlink: 'syz.3.842': attribute type 29 has an invalid length. [ 257.398849][ T8570] netlink: 'syz.3.842': attribute type 29 has an invalid length. [ 258.712445][ T8593] netlink: 'syz.3.848': attribute type 9 has an invalid length. [ 258.723066][ T8593] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.848'. [ 259.026183][ T8606] netlink: 'syz.1.853': attribute type 29 has an invalid length. [ 259.112522][ T8606] netlink: 'syz.1.853': attribute type 29 has an invalid length. [ 259.493809][ T8610] netlink: 10 bytes leftover after parsing attributes in process `syz.2.854'. [ 259.526656][ T8595] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.848'. [ 261.994213][ T8681] validate_nla: 9 callbacks suppressed [ 261.994233][ T8681] netlink: 'syz.2.877': attribute type 29 has an invalid length. [ 262.076143][ T8681] netlink: 'syz.2.877': attribute type 29 has an invalid length. [ 262.102627][ T8684] netlink: 'syz.2.877': attribute type 29 has an invalid length. [ 262.183958][ T8681] netlink: 'syz.2.877': attribute type 29 has an invalid length. [ 262.229497][ T8681] netlink: 'syz.2.877': attribute type 29 has an invalid length. [ 262.804656][ T8692] netlink: 'syz.3.878': attribute type 9 has an invalid length. [ 262.818561][ T8692] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.878'. [ 263.236672][ T8693] netlink: 'syz.3.878': attribute type 9 has an invalid length. [ 263.270343][ T8693] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.878'. [ 263.673480][ T8721] netlink: 'syz.2.889': attribute type 29 has an invalid length. [ 263.769991][ T8721] netlink: 'syz.2.889': attribute type 29 has an invalid length. [ 263.794212][ T8721] netlink: 'syz.2.889': attribute type 29 has an invalid length. [ 264.126111][ T8728] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.891'. [ 264.524597][ T5789] Bluetooth: hci0: ISO packet for unknown connection handle 62 [ 264.937397][ T8758] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.899'. [ 264.973425][ T8755] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.899'. [ 266.262889][ T8770] bridge0: port 3(team0) entered disabled state [ 266.269962][ T8770] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.278442][ T8770] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.336153][ T8770] bridge0: port 3(team0) entered blocking state [ 266.342636][ T8770] bridge0: port 3(team0) entered forwarding state [ 266.349618][ T8770] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.356911][ T8770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.364519][ T8770] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.371855][ T8770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.399872][ T8770] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 267.570279][ T8802] validate_nla: 16 callbacks suppressed [ 267.570300][ T8802] netlink: 'syz.0.912': attribute type 29 has an invalid length. [ 267.596033][ T8802] netlink: 'syz.0.912': attribute type 29 has an invalid length. [ 267.645196][ T8802] netlink: 'syz.0.912': attribute type 29 has an invalid length. [ 267.673844][ T8802] netlink: 'syz.0.912': attribute type 29 has an invalid length. [ 267.703436][ T8802] netlink: 'syz.0.912': attribute type 29 has an invalid length. [ 267.812998][ T5789] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 268.139589][ T8811] netlink: 'syz.0.915': attribute type 9 has an invalid length. [ 268.154625][ T8811] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.915'. [ 269.103871][ T8814] netlink: 'syz.0.915': attribute type 9 has an invalid length. [ 269.111807][ T8814] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.915'. [ 269.731698][ T8839] netlink: 'syz.2.921': attribute type 9 has an invalid length. [ 269.772618][ T8839] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.921'. [ 270.790525][ T8848] netlink: 'syz.3.923': attribute type 29 has an invalid length. [ 270.863146][ T8848] netlink: 'syz.3.923': attribute type 29 has an invalid length. [ 273.091881][ T8888] validate_nla: 3 callbacks suppressed [ 273.091920][ T8888] netlink: 'syz.1.937': attribute type 9 has an invalid length. [ 273.125482][ T8888] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.937'. [ 273.682626][ T8890] netlink: 'syz.1.937': attribute type 9 has an invalid length. [ 273.700111][ T8890] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.937'. [ 273.909813][ T8902] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 274.211063][ T8910] netlink: 'syz.0.943': attribute type 29 has an invalid length. [ 274.239888][ T8910] netlink: 'syz.0.943': attribute type 29 has an invalid length. [ 274.276239][ T8915] netlink: 'syz.0.943': attribute type 29 has an invalid length. [ 274.336684][ T8910] netlink: 'syz.0.943': attribute type 29 has an invalid length. [ 274.455505][ T8915] netlink: 'syz.0.943': attribute type 29 has an invalid length. [ 278.513480][ T8953] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 278.539378][ T8953] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.956'. [ 278.809547][ T5789] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 278.893245][ T8964] netlink: 'syz.2.957': attribute type 29 has an invalid length. [ 278.922401][ T8964] netlink: 'syz.2.957': attribute type 29 has an invalid length. [ 278.957577][ T8964] netlink: 'syz.2.957': attribute type 29 has an invalid length. [ 278.984284][ T8964] netlink: 'syz.2.957': attribute type 29 has an invalid length. [ 279.011232][ T8964] netlink: 'syz.2.957': attribute type 29 has an invalid length. [ 281.013306][ T5789] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 281.515170][ T9020] FAULT_INJECTION: forcing a failure. [ 281.515170][ T9020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.531934][ T9020] CPU: 0 PID: 9020 Comm: syz.1.974 Not tainted syzkaller #0 [ 281.539303][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 281.549422][ T9020] Call Trace: [ 281.552755][ T9020] [ 281.555736][ T9020] dump_stack_lvl+0x18c/0x250 [ 281.560498][ T9020] ? show_regs_print_info+0x20/0x20 [ 281.565872][ T9020] ? load_image+0x420/0x420 [ 281.570441][ T9020] ? __might_fault+0xaa/0x120 [ 281.575176][ T9020] ? __lock_acquire+0x7d80/0x7d80 [ 281.580289][ T9020] should_fail_ex+0x394/0x4c0 [ 281.585040][ T9020] _copy_from_iter+0x1cd/0x1290 [ 281.589954][ T9020] ? rcu_is_watching+0x15/0xb0 [ 281.594831][ T9020] ? copyout_mc+0x70/0x70 [ 281.599239][ T9020] ? __virt_addr_valid+0x10c/0x380 [ 281.604443][ T9020] ? __virt_addr_valid+0x10c/0x380 [ 281.609624][ T9020] ? __virt_addr_valid+0x10c/0x380 [ 281.614803][ T9020] ? __check_object_size+0x4fc/0xa40 [ 281.620157][ T9020] netlink_sendmsg+0x76b/0xbf0 [ 281.624994][ T9020] ? netlink_getsockopt+0x590/0x590 [ 281.630257][ T9020] ? aa_sock_msg_perm+0x94/0x150 [ 281.635260][ T9020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 281.640617][ T9020] ? security_socket_sendmsg+0x80/0xa0 [ 281.646152][ T9020] ? netlink_getsockopt+0x590/0x590 [ 281.651431][ T9020] ____sys_sendmsg+0x61b/0x980 [ 281.656288][ T9020] ? __asan_memset+0x22/0x40 [ 281.660961][ T9020] ? __sys_sendmsg_sock+0x30/0x30 [ 281.666152][ T9020] ? __import_iovec+0x5f2/0x850 [ 281.671084][ T9020] ? import_iovec+0x73/0xa0 [ 281.675665][ T9020] ___sys_sendmsg+0x2a6/0x360 [ 281.680421][ T9020] ? get_pid_task+0x20/0x1e0 [ 281.685092][ T9020] ? __sys_sendmsg+0x2b0/0x2b0 [ 281.689951][ T9020] ? __lock_acquire+0x7d80/0x7d80 [ 281.695074][ T9020] __se_sys_sendmsg+0x1d0/0x2c0 [ 281.700013][ T9020] ? __x64_sys_sendmsg+0x80/0x80 [ 281.705130][ T9020] ? lockdep_hardirqs_on+0x98/0x150 [ 281.710404][ T9020] do_syscall_64+0x55/0xb0 [ 281.714875][ T9020] ? clear_bhb_loop+0x40/0x90 [ 281.719630][ T9020] ? clear_bhb_loop+0x40/0x90 [ 281.724362][ T9020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.730316][ T9020] RIP: 0033:0x7fb3f5f9de59 [ 281.734777][ T9020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.754798][ T9020] RSP: 002b:00007fb3f6dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.763282][ T9020] RAX: ffffffffffffffda RBX: 00007fb3f6225fa0 RCX: 00007fb3f5f9de59 [ 281.771303][ T9020] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 281.779339][ T9020] RBP: 00007fb3f6dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.787408][ T9020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.795441][ T9020] R13: 00007fb3f6226038 R14: 00007fb3f6225fa0 R15: 00007fffe883c2a8 [ 281.803496][ T9020] [ 283.202269][ T5789] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 283.287006][ T9060] FAULT_INJECTION: forcing a failure. [ 283.287006][ T9060] name failslab, interval 1, probability 0, space 0, times 0 [ 283.300118][ T9060] CPU: 1 PID: 9060 Comm: syz.1.984 Not tainted syzkaller #0 [ 283.307516][ T9060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 283.317632][ T9060] Call Trace: [ 283.320942][ T9060] [ 283.323908][ T9060] dump_stack_lvl+0x18c/0x250 [ 283.328761][ T9060] ? show_regs_print_info+0x20/0x20 [ 283.334015][ T9060] ? load_image+0x420/0x420 [ 283.338566][ T9060] ? verify_lock_unused+0x140/0x140 [ 283.343808][ T9060] should_fail_ex+0x394/0x4c0 [ 283.348525][ T9060] should_failslab+0x9/0x20 [ 283.353172][ T9060] slab_pre_alloc_hook+0x59/0x300 [ 283.358253][ T9060] kmem_cache_alloc+0x5a/0x2c0 [ 283.363071][ T9060] ? skb_clone+0x1eb/0x370 [ 283.367529][ T9060] skb_clone+0x1eb/0x370 [ 283.371816][ T9060] __netlink_deliver_tap+0x411/0x7f0 [ 283.377149][ T9060] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.382384][ T9060] netlink_deliver_tap+0x19c/0x1b0 [ 283.387543][ T9060] netlink_unicast+0x77b/0x930 [ 283.392354][ T9060] netlink_sendmsg+0x8d0/0xbf0 [ 283.397162][ T9060] ? netlink_getsockopt+0x590/0x590 [ 283.402399][ T9060] ? aa_sock_msg_perm+0x94/0x150 [ 283.407379][ T9060] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 283.412719][ T9060] ? security_socket_sendmsg+0x80/0xa0 [ 283.418231][ T9060] ? netlink_getsockopt+0x590/0x590 [ 283.423481][ T9060] ____sys_sendmsg+0x61b/0x980 [ 283.428302][ T9060] ? __asan_memset+0x22/0x40 [ 283.432977][ T9060] ? __sys_sendmsg_sock+0x30/0x30 [ 283.438066][ T9060] ? __import_iovec+0x5f2/0x850 [ 283.442997][ T9060] ? import_iovec+0x73/0xa0 [ 283.447562][ T9060] ___sys_sendmsg+0x2a6/0x360 [ 283.452294][ T9060] ? get_pid_task+0x20/0x1e0 [ 283.456946][ T9060] ? __sys_sendmsg+0x2b0/0x2b0 [ 283.461783][ T9060] ? __lock_acquire+0x7d80/0x7d80 [ 283.466888][ T9060] __se_sys_sendmsg+0x1d0/0x2c0 [ 283.471916][ T9060] ? __x64_sys_sendmsg+0x80/0x80 [ 283.476942][ T9060] ? lockdep_hardirqs_on+0x98/0x150 [ 283.482199][ T9060] do_syscall_64+0x55/0xb0 [ 283.486682][ T9060] ? clear_bhb_loop+0x40/0x90 [ 283.491387][ T9060] ? clear_bhb_loop+0x40/0x90 [ 283.496099][ T9060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.502037][ T9060] RIP: 0033:0x7fb3f5f9de59 [ 283.506487][ T9060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.526475][ T9060] RSP: 002b:00007fb3f6dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.534944][ T9060] RAX: ffffffffffffffda RBX: 00007fb3f6225fa0 RCX: 00007fb3f5f9de59 [ 283.542984][ T9060] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 283.550992][ T9060] RBP: 00007fb3f6dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 283.559013][ T9060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.567016][ T9060] R13: 00007fb3f6226038 R14: 00007fb3f6225fa0 R15: 00007fffe883c2a8 [ 283.575034][ T9060] [ 283.853895][ T9075] netlink: 'syz.0.990': attribute type 29 has an invalid length. [ 283.865986][ T9075] netlink: 'syz.0.990': attribute type 29 has an invalid length. [ 283.877639][ T9075] netlink: 'syz.0.990': attribute type 29 has an invalid length. [ 283.898644][ T9075] netlink: 'syz.0.990': attribute type 29 has an invalid length. [ 283.981418][ T9078] netlink: 'syz.1.991': attribute type 29 has an invalid length. [ 284.010672][ T9078] netlink: 'syz.1.991': attribute type 29 has an invalid length. [ 284.045318][ T9082] netlink: 'syz.1.991': attribute type 29 has an invalid length. [ 284.077357][ T9078] netlink: 'syz.1.991': attribute type 29 has an invalid length. [ 284.106192][ T9078] netlink: 'syz.1.991': attribute type 29 has an invalid length. [ 284.944994][ T9085] netlink: 10 bytes leftover after parsing attributes in process `syz.0.993'. [ 285.255446][ T5789] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 285.338601][ T9101] FAULT_INJECTION: forcing a failure. [ 285.338601][ T9101] name failslab, interval 1, probability 0, space 0, times 0 [ 285.354681][ T9101] CPU: 1 PID: 9101 Comm: syz.0.997 Not tainted syzkaller #0 [ 285.362085][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.372178][ T9101] Call Trace: [ 285.375489][ T9101] [ 285.378455][ T9101] dump_stack_lvl+0x18c/0x250 [ 285.383175][ T9101] ? show_regs_print_info+0x20/0x20 [ 285.388513][ T9101] ? load_image+0x420/0x420 [ 285.393057][ T9101] ? __lock_acquire+0x7d80/0x7d80 [ 285.398201][ T9101] ? trace_raw_output_contention_end+0xd0/0xd0 [ 285.404653][ T9101] ? __lock_acquire+0x1262/0x7d80 [ 285.409711][ T9101] should_fail_ex+0x394/0x4c0 [ 285.414428][ T9101] should_failslab+0x9/0x20 [ 285.418975][ T9101] slab_pre_alloc_hook+0x59/0x300 [ 285.424045][ T9101] ? __inet_diag_dump_start+0x8b/0x9f0 [ 285.429546][ T9101] __kmem_cache_alloc_node+0x53/0x250 [ 285.434970][ T9101] ? __inet_diag_dump_start+0x8b/0x9f0 [ 285.440474][ T9101] kmalloc_trace+0x2a/0xe0 [ 285.444934][ T9101] __inet_diag_dump_start+0x8b/0x9f0 [ 285.450264][ T9101] ? netlink_lookup+0x30/0x200 [ 285.455068][ T9101] ? netlink_lookup+0x30/0x200 [ 285.459889][ T9101] __netlink_dump_start+0x43c/0x7a0 [ 285.465166][ T9101] inet_diag_rcv_msg_compat+0x215/0x440 [ 285.470763][ T9101] ? __inet_diag_dump+0x380/0x380 [ 285.476279][ T9101] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 285.481359][ T9101] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 285.487129][ T9101] ? inet_diag_dump_start_compat+0x20/0x20 [ 285.492982][ T9101] ? inet_diag_dump+0x50/0x50 [ 285.497710][ T9101] ? __inet_diag_dump+0x380/0x380 [ 285.502770][ T9101] sock_diag_rcv_msg+0x3d3/0x5f0 [ 285.507778][ T9101] netlink_rcv_skb+0x235/0x4c0 [ 285.512616][ T9101] ? sock_diag_bind+0xb0/0xb0 [ 285.517375][ T9101] ? netlink_ack+0x1160/0x1160 [ 285.522446][ T9101] ? __lock_acquire+0x7d80/0x7d80 [ 285.527515][ T9101] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.532764][ T9101] sock_diag_rcv+0x2a/0x40 [ 285.537224][ T9101] netlink_unicast+0x7b1/0x930 [ 285.542039][ T9101] netlink_sendmsg+0x8d0/0xbf0 [ 285.546846][ T9101] ? netlink_getsockopt+0x590/0x590 [ 285.552085][ T9101] ? aa_sock_msg_perm+0x94/0x150 [ 285.557059][ T9101] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 285.562396][ T9101] ? security_socket_sendmsg+0x80/0xa0 [ 285.567892][ T9101] ? netlink_getsockopt+0x590/0x590 [ 285.573161][ T9101] ____sys_sendmsg+0x61b/0x980 [ 285.577979][ T9101] ? __asan_memset+0x22/0x40 [ 285.582628][ T9101] ? __sys_sendmsg_sock+0x30/0x30 [ 285.587694][ T9101] ? __import_iovec+0x5f2/0x850 [ 285.592600][ T9101] ? import_iovec+0x73/0xa0 [ 285.597339][ T9101] ___sys_sendmsg+0x2a6/0x360 [ 285.602058][ T9101] ? get_pid_task+0x20/0x1e0 [ 285.606701][ T9101] ? __sys_sendmsg+0x2b0/0x2b0 [ 285.611620][ T9101] ? __lock_acquire+0x7d80/0x7d80 [ 285.616724][ T9101] __se_sys_sendmsg+0x1d0/0x2c0 [ 285.621914][ T9101] ? __x64_sys_sendmsg+0x80/0x80 [ 285.626956][ T9101] ? lockdep_hardirqs_on+0x98/0x150 [ 285.632202][ T9101] do_syscall_64+0x55/0xb0 [ 285.636672][ T9101] ? clear_bhb_loop+0x40/0x90 [ 285.641383][ T9101] ? clear_bhb_loop+0x40/0x90 [ 285.646099][ T9101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.652039][ T9101] RIP: 0033:0x7ff65599de59 [ 285.656493][ T9101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.676132][ T9101] RSP: 002b:00007ff656957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.684605][ T9101] RAX: ffffffffffffffda RBX: 00007ff655c25fa0 RCX: 00007ff65599de59 [ 285.692628][ T9101] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 285.700633][ T9101] RBP: 00007ff656957090 R08: 0000000000000000 R09: 0000000000000000 [ 285.709289][ T9101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.717356][ T9101] R13: 00007ff655c26038 R14: 00007ff655c25fa0 R15: 00007ffe75c98ed8 [ 285.725390][ T9101] [ 285.959356][ T9109] netlink: 'syz.2.1002': attribute type 29 has an invalid length. [ 286.368839][ T9126] FAULT_INJECTION: forcing a failure. [ 286.368839][ T9126] name failslab, interval 1, probability 0, space 0, times 0 [ 286.371746][ T5789] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 286.384275][ T9126] CPU: 0 PID: 9126 Comm: syz.2.1009 Not tainted syzkaller #0 [ 286.396625][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 286.406735][ T9126] Call Trace: [ 286.410064][ T9126] [ 286.413068][ T9126] dump_stack_lvl+0x18c/0x250 [ 286.417848][ T9126] ? show_regs_print_info+0x20/0x20 [ 286.423140][ T9126] ? load_image+0x420/0x420 [ 286.427808][ T9126] ? __might_sleep+0xe0/0xe0 [ 286.432466][ T9126] ? __lock_acquire+0x7d80/0x7d80 [ 286.437565][ T9126] ? stack_trace_save+0xaa/0x100 [ 286.442578][ T9126] ? stack_trace_snprint+0xf0/0xf0 [ 286.447765][ T9126] should_fail_ex+0x394/0x4c0 [ 286.452517][ T9126] should_failslab+0x9/0x20 [ 286.457082][ T9126] slab_pre_alloc_hook+0x59/0x300 [ 286.462272][ T9126] ? __kasan_kmalloc+0x8f/0xa0 [ 286.467092][ T9126] ? __inet_diag_dump_start+0x8b/0x9f0 [ 286.472618][ T9126] ? __netlink_dump_start+0x43c/0x7a0 [ 286.478062][ T9126] kmem_cache_alloc_node+0x5e/0x310 [ 286.483328][ T9126] ? ___sys_sendmsg+0x2a6/0x360 [ 286.488244][ T9126] ? __alloc_skb+0x103/0x2c0 [ 286.492904][ T9126] __alloc_skb+0x103/0x2c0 [ 286.497399][ T9126] netlink_dump+0x1ee/0xec0 [ 286.502013][ T9126] ? end_current_label_crit_section+0x170/0x170 [ 286.508320][ T9126] ? end_current_label_crit_section+0x170/0x170 [ 286.514636][ T9126] ? netlink_lookup+0x200/0x200 [ 286.519570][ T9126] ? ns_capable+0x89/0xe0 [ 286.523965][ T9126] ? __inet_diag_dump_start+0x886/0x9f0 [ 286.529596][ T9126] __netlink_dump_start+0x57c/0x7a0 [ 286.534900][ T9126] inet_diag_rcv_msg_compat+0x215/0x440 [ 286.540555][ T9126] ? __inet_diag_dump+0x380/0x380 [ 286.545682][ T9126] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 286.550879][ T9126] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 286.556867][ T9126] ? inet_diag_dump_start_compat+0x20/0x20 [ 286.562775][ T9126] ? inet_diag_dump+0x50/0x50 [ 286.567560][ T9126] ? __inet_diag_dump+0x380/0x380 [ 286.572658][ T9126] sock_diag_rcv_msg+0x3d3/0x5f0 [ 286.577673][ T9126] netlink_rcv_skb+0x235/0x4c0 [ 286.582551][ T9126] ? sock_diag_bind+0xb0/0xb0 [ 286.587302][ T9126] ? netlink_ack+0x1160/0x1160 [ 286.592145][ T9126] ? __lock_acquire+0x7d80/0x7d80 [ 286.597326][ T9126] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.602600][ T9126] sock_diag_rcv+0x2a/0x40 [ 286.607074][ T9126] netlink_unicast+0x7b1/0x930 [ 286.611918][ T9126] netlink_sendmsg+0x8d0/0xbf0 [ 286.616811][ T9126] ? netlink_getsockopt+0x590/0x590 [ 286.622073][ T9126] ? aa_sock_msg_perm+0x94/0x150 [ 286.627438][ T9126] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 286.632856][ T9126] ? security_socket_sendmsg+0x80/0xa0 [ 286.638563][ T9126] ? netlink_getsockopt+0x590/0x590 [ 286.643830][ T9126] ____sys_sendmsg+0x61b/0x980 [ 286.648680][ T9126] ? __asan_memset+0x22/0x40 [ 286.653338][ T9126] ? __sys_sendmsg_sock+0x30/0x30 [ 286.658435][ T9126] ? __import_iovec+0x5f2/0x850 [ 286.663362][ T9126] ? import_iovec+0x73/0xa0 [ 286.667946][ T9126] ___sys_sendmsg+0x2a6/0x360 [ 286.672686][ T9126] ? get_pid_task+0x20/0x1e0 [ 286.677386][ T9126] ? __sys_sendmsg+0x2b0/0x2b0 [ 286.682335][ T9126] ? __lock_acquire+0x7d80/0x7d80 [ 286.687447][ T9126] __se_sys_sendmsg+0x1d0/0x2c0 [ 286.692379][ T9126] ? __x64_sys_sendmsg+0x80/0x80 [ 286.697414][ T9126] ? lockdep_hardirqs_on+0x98/0x150 [ 286.702861][ T9126] do_syscall_64+0x55/0xb0 [ 286.707347][ T9126] ? clear_bhb_loop+0x40/0x90 [ 286.712169][ T9126] ? clear_bhb_loop+0x40/0x90 [ 286.716918][ T9126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.722903][ T9126] RIP: 0033:0x7fd1a259de59 [ 286.727372][ T9126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.747038][ T9126] RSP: 002b:00007fd1a3392028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.755875][ T9126] RAX: ffffffffffffffda RBX: 00007fd1a2825fa0 RCX: 00007fd1a259de59 [ 286.763906][ T9126] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 286.771938][ T9126] RBP: 00007fd1a3392090 R08: 0000000000000000 R09: 0000000000000000 [ 286.780017][ T9126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.788293][ T9126] R13: 00007fd1a2826038 R14: 00007fd1a2825fa0 R15: 00007ffe0286ea28 [ 286.796606][ T9126] [ 287.272309][ T9143] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1014'. [ 287.546921][ T5789] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 287.743748][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.770443][ T9158] bridge0: entered allmulticast mode [ 288.393268][ T9175] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1027'. [ 288.802014][ T9185] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1031'. [ 289.042803][ T9188] validate_nla: 5 callbacks suppressed [ 289.042823][ T9188] netlink: 'syz.3.1031': attribute type 9 has an invalid length. [ 289.187419][ T9188] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1031'. [ 289.583469][ T9194] netlink: 'syz.0.1033': attribute type 9 has an invalid length. [ 289.630167][ T9194] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1033'. [ 290.038935][ T9205] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1037'. [ 292.769390][ T9239] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.1047'. [ 292.802622][ T9239] openvswitch: netlink: IP tunnel dst address not specified [ 292.844210][ T9246] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 293.093013][ T9248] syz.1.1049[9248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.093295][ T9248] syz.1.1049[9248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.148221][ T9251] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1051'. [ 293.203601][ T9252] netlink: 'syz.2.1050': attribute type 29 has an invalid length. [ 293.237380][ T9252] netlink: 'syz.2.1050': attribute type 29 has an invalid length. [ 293.316321][ T9256] netlink: 'syz.2.1050': attribute type 29 has an invalid length. [ 293.357344][ T9257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.447956][ T9252] netlink: 'syz.2.1050': attribute type 29 has an invalid length. [ 293.514178][ T9256] netlink: 'syz.2.1050': attribute type 29 has an invalid length. [ 293.859254][ T9266] FAULT_INJECTION: forcing a failure. [ 293.859254][ T9266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.925556][ T9266] CPU: 0 PID: 9266 Comm: syz.2.1055 Not tainted syzkaller #0 [ 293.933029][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 293.943327][ T9266] Call Trace: [ 293.946666][ T9266] [ 293.949835][ T9266] dump_stack_lvl+0x18c/0x250 [ 293.954607][ T9266] ? show_regs_print_info+0x20/0x20 [ 293.959894][ T9266] ? load_image+0x420/0x420 [ 293.964486][ T9266] ? __might_fault+0xaa/0x120 [ 293.969253][ T9266] ? __lock_acquire+0x7d80/0x7d80 [ 293.974354][ T9266] should_fail_ex+0x394/0x4c0 [ 293.979541][ T9266] _copy_from_user+0x2f/0xe0 [ 293.984191][ T9266] ___sys_recvmsg+0x174/0x590 [ 293.988946][ T9266] ? __sys_recvmsg+0x2a0/0x2a0 [ 293.993786][ T9266] ? ksys_write+0x1d2/0x260 [ 293.998453][ T9266] ? __fget_files+0x3fc/0x460 [ 294.003220][ T9266] __x64_sys_recvmsg+0x21e/0x2f0 [ 294.008231][ T9266] ? ___sys_recvmsg+0x590/0x590 [ 294.013183][ T9266] ? lockdep_hardirqs_on+0x98/0x150 [ 294.018450][ T9266] do_syscall_64+0x55/0xb0 [ 294.022941][ T9266] ? clear_bhb_loop+0x40/0x90 [ 294.027703][ T9266] ? clear_bhb_loop+0x40/0x90 [ 294.032435][ T9266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.038394][ T9266] RIP: 0033:0x7fd1a259de59 [ 294.042920][ T9266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.062942][ T9266] RSP: 002b:00007fd1a3392028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 294.071455][ T9266] RAX: ffffffffffffffda RBX: 00007fd1a2825fa0 RCX: 00007fd1a259de59 [ 294.079682][ T9266] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000010 [ 294.087711][ T9266] RBP: 00007fd1a3392090 R08: 0000000000000000 R09: 0000000000000000 [ 294.095872][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.103901][ T9266] R13: 00007fd1a2826038 R14: 00007fd1a2825fa0 R15: 00007ffe0286ea28 [ 294.112047][ T9266] [ 294.509809][ T9287] netlink: 'syz.1.1059': attribute type 9 has an invalid length. [ 294.573456][ T9287] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1059'. [ 294.625964][ T9284] netlink: 'syz.1.1059': attribute type 9 has an invalid length. [ 294.684932][ T9284] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1059'. [ 295.329522][ T9294] netlink: 'syz.3.1063': attribute type 29 has an invalid length. [ 295.394422][ T9294] netlink: 'syz.3.1063': attribute type 29 has an invalid length. [ 295.420931][ T9295] netlink: 'syz.3.1063': attribute type 29 has an invalid length. [ 295.679029][ T9294] netlink: 'syz.3.1063': attribute type 29 has an invalid length. [ 295.706609][ T9295] netlink: 'syz.3.1063': attribute type 29 has an invalid length. [ 295.845295][ T9307] netlink: 'syz.3.1067': attribute type 5 has an invalid length. [ 296.344551][ T9323] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1072'. [ 297.530290][ T9339] netlink: 'syz.3.1075': attribute type 10 has an invalid length. [ 297.539363][ T9339] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1075'. [ 297.680694][ T9342] netlink: 'syz.1.1076': attribute type 29 has an invalid length. [ 298.081145][ T9348] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1079'. [ 298.243636][ T9360] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1084'. [ 300.205716][ T9397] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1096'. [ 301.438931][ T9412] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1101'. [ 301.464429][ T9415] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.1101'. [ 304.691685][ T9419] validate_nla: 10 callbacks suppressed [ 304.691697][ T9419] netlink: 'syz.2.1103': attribute type 10 has an invalid length. [ 304.705758][ T9419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1103'. [ 304.719487][ T9419] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 304.955202][ T9447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 304.962941][ T9447] IPv6: NLM_F_CREATE should be set when creating new route [ 304.970332][ T9447] IPv6: NLM_F_CREATE should be set when creating new route [ 304.977718][ T9447] IPv6: NLM_F_CREATE should be set when creating new route [ 305.054429][ T9448] netlink: 'syz.1.1110': attribute type 9 has an invalid length. [ 305.071429][ T9448] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1110'. [ 305.082236][ T9445] netlink: 'syz.1.1110': attribute type 9 has an invalid length. [ 305.093030][ T9445] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1110'. [ 305.141981][ T9454] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1111'. [ 305.294508][ T9461] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.1112'. [ 305.327381][ T9459] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1112'. [ 305.730663][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1116'. [ 305.878854][ T9476] netlink: 'syz.2.1118': attribute type 9 has an invalid length. [ 305.897873][ T9476] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1118'. [ 306.463277][ T9480] netlink: 'syz.2.1118': attribute type 9 has an invalid length. [ 306.505501][ T9480] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1118'. [ 306.526192][ T9493] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1122'. [ 306.678356][ T9498] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 306.901996][ T9500] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1124'. [ 306.934202][ T9500] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.1124'. [ 307.491605][ T9515] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1130'. [ 307.806906][ T9523] sit0: entered allmulticast mode [ 308.399972][ T9539] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1139'. [ 308.737424][ T9551] netlink: 'syz.2.1141': attribute type 9 has an invalid length. [ 308.757136][ T9551] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1141'. [ 309.187952][ T9553] netlink: 'syz.2.1141': attribute type 9 has an invalid length. [ 309.208649][ T9553] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1141'. [ 309.601299][ T9566] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1144'. [ 310.328933][ T9589] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 311.525125][ T9596] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.1156'. [ 311.630874][ T9596] openvswitch: netlink: IP tunnel dst address not specified [ 311.692171][ T9607] syz.2.1160[9607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.692440][ T9607] syz.2.1160[9607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.802827][ T9608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.909310][ T9610] netlink: 'syz.1.1161': attribute type 28 has an invalid length. [ 312.083190][ T9615] netlink: 'syz.3.1163': attribute type 29 has an invalid length. [ 312.117371][ T9615] netlink: 'syz.3.1163': attribute type 29 has an invalid length. [ 312.148204][ T9621] netlink: 'syz.3.1163': attribute type 29 has an invalid length. [ 312.176035][ T9615] netlink: 'syz.3.1163': attribute type 29 has an invalid length. [ 312.197799][ T9615] netlink: 'syz.3.1163': attribute type 29 has an invalid length. [ 312.423063][ T9624] netlink: 'syz.1.1166': attribute type 9 has an invalid length. [ 312.444378][ T9624] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1166'. [ 312.602256][ T9626] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1167'. [ 312.911828][ T9629] netlink: 'syz.1.1166': attribute type 9 has an invalid length. [ 312.951306][ T9629] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1166'. [ 314.046728][ T9663] netlink: 'syz.0.1177': attribute type 29 has an invalid length. [ 314.098533][ T9663] netlink: 'syz.0.1177': attribute type 29 has an invalid length. [ 314.406812][ T9673] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 316.038536][ T9709] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1197'. [ 317.693332][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.706247][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.431219][ T9730] validate_nla: 8 callbacks suppressed [ 319.431259][ T9730] netlink: 'syz.3.1203': attribute type 9 has an invalid length. [ 319.462685][ T9730] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1203'. [ 319.662338][ T9736] netlink: 'syz.2.1205': attribute type 29 has an invalid length. [ 319.718390][ T9736] netlink: 'syz.2.1205': attribute type 29 has an invalid length. [ 319.752447][ T9735] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 319.796268][ T9739] netlink: 'syz.2.1205': attribute type 29 has an invalid length. [ 319.906353][ T9736] netlink: 'syz.2.1205': attribute type 29 has an invalid length. [ 319.956111][ T9739] netlink: 'syz.2.1205': attribute type 29 has an invalid length. [ 320.113882][ T9731] netlink: 'syz.3.1203': attribute type 9 has an invalid length. [ 320.135394][ T9731] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1203'. [ 320.913132][ T9757] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1212'. [ 321.113839][ T9775] netlink: 'syz.1.1218': attribute type 29 has an invalid length. [ 321.191454][ T9775] netlink: 'syz.1.1218': attribute type 29 has an invalid length. [ 321.225872][ T9779] netlink: 'syz.1.1218': attribute type 29 has an invalid length. [ 321.609905][ T9788] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1222'. [ 321.662028][ T9785] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1221'. [ 322.576537][ T9812] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 322.846898][ T9819] netlink: set zone limit has 8 unknown bytes [ 323.242439][ T9832] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1234'. [ 323.279401][ T9828] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1234'. [ 324.613226][ T9851] validate_nla: 14 callbacks suppressed [ 324.613251][ T9851] netlink: 'syz.3.1242': attribute type 29 has an invalid length. [ 324.627961][ T9851] netlink: 'syz.3.1242': attribute type 29 has an invalid length. [ 324.638341][ T9851] netlink: 'syz.3.1242': attribute type 29 has an invalid length. [ 324.649005][ T9851] netlink: 'syz.3.1242': attribute type 29 has an invalid length. [ 324.660017][ T9851] netlink: 'syz.3.1242': attribute type 29 has an invalid length. [ 324.920555][ T9853] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1243'. [ 326.046666][ T9879] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 326.093094][ T9882] netlink: 'syz.1.1253': attribute type 29 has an invalid length. [ 326.108249][ T9882] netlink: 'syz.1.1253': attribute type 29 has an invalid length. [ 326.129047][ T9882] netlink: 'syz.1.1253': attribute type 29 has an invalid length. [ 326.147967][ T9882] netlink: 'syz.1.1253': attribute type 29 has an invalid length. [ 326.171700][ T9882] netlink: 'syz.1.1253': attribute type 29 has an invalid length. [ 327.258831][ T9919] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1266'. [ 327.693215][ T9927] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1269'. [ 328.187952][ T9930] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1269'. [ 328.818665][ T9953] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 329.484443][ T9970] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1288'. [ 329.650659][ T9975] validate_nla: 12 callbacks suppressed [ 329.650682][ T9975] netlink: 'syz.2.1289': attribute type 29 has an invalid length. [ 329.673178][ T9974] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1290'. [ 329.684906][ T9975] netlink: 'syz.2.1289': attribute type 29 has an invalid length. [ 329.695083][ T9974] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1290'. [ 329.707836][ T9978] netlink: 'syz.2.1289': attribute type 29 has an invalid length. [ 329.755912][ T9975] netlink: 'syz.2.1289': attribute type 29 has an invalid length. [ 329.806237][ T9975] netlink: 'syz.2.1289': attribute type 29 has an invalid length. [ 329.829376][ T9982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1290'. [ 331.387305][T10006] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 331.548442][T10010] netlink: 'syz.1.1303': attribute type 29 has an invalid length. [ 331.577992][T10010] netlink: 'syz.1.1303': attribute type 29 has an invalid length. [ 331.604771][T10014] netlink: 'syz.1.1303': attribute type 29 has an invalid length. [ 331.628503][T10010] netlink: 'syz.1.1303': attribute type 29 has an invalid length. [ 331.650443][T10010] netlink: 'syz.1.1303': attribute type 29 has an invalid length. [ 332.542251][T10035] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1312'. [ 332.592571][T10035] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1312'. [ 333.220640][T10038] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1313'. [ 334.013731][T10064] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1324'. [ 334.155269][T10068] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 334.882684][T10069] validate_nla: 6 callbacks suppressed [ 334.882704][T10069] netlink: 'syz.1.1324': attribute type 9 has an invalid length. [ 334.926072][T10069] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1324'. [ 335.222644][T10084] netlink: 'syz.1.1330': attribute type 29 has an invalid length. [ 335.267185][T10084] netlink: 'syz.1.1330': attribute type 29 has an invalid length. [ 335.304979][T10089] netlink: 'syz.1.1330': attribute type 29 has an invalid length. [ 335.337679][T10084] netlink: 'syz.1.1330': attribute type 29 has an invalid length. [ 335.355967][T10084] netlink: 'syz.1.1330': attribute type 29 has an invalid length. [ 335.652864][T10103] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1339'. [ 335.718797][T10109] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 335.728947][T10109] bridge0: port 4(gretap0) entered disabled state [ 335.735746][T10109] bridge0: port 3(team0) entered disabled state [ 335.742577][T10109] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.807719][T10109] bridge0: port 4(gretap0) entered blocking state [ 335.814415][T10109] bridge0: port 4(gretap0) entered forwarding state [ 335.821504][T10109] bridge0: port 3(team0) entered blocking state [ 335.828117][T10109] bridge0: port 3(team0) entered forwarding state [ 335.834892][T10109] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.842202][T10109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.899105][T10109] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 336.033083][T10115] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1344'. [ 336.146733][T10117] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 336.255676][T10121] netlink: 'syz.1.1347': attribute type 29 has an invalid length. [ 336.263965][T10121] netlink: 'syz.1.1347': attribute type 29 has an invalid length. [ 336.280782][T10121] netlink: 'syz.1.1347': attribute type 29 has an invalid length. [ 337.503877][T10168] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1360'. [ 337.701461][T10173] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1361'. [ 337.715733][T10172] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1361'. [ 337.973204][T10184] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 339.380515][T10203] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1371'. [ 339.390650][T10203] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1371'. [ 339.690297][T10220] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1376'. [ 339.798483][T10223] team0: Device ipvlan1 failed to register rx_handler [ 340.016624][T10232] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1381'. [ 340.252010][T10237] validate_nla: 16 callbacks suppressed [ 340.252030][T10237] netlink: 'syz.0.1383': attribute type 29 has an invalid length. [ 340.277244][T10237] netlink: 'syz.0.1383': attribute type 29 has an invalid length. [ 340.288057][T10237] netlink: 'syz.0.1383': attribute type 29 has an invalid length. [ 340.318010][T10237] netlink: 'syz.0.1383': attribute type 29 has an invalid length. [ 340.357311][T10237] netlink: 'syz.0.1383': attribute type 29 has an invalid length. [ 340.613344][T10246] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 340.836132][T10249] netlink: 'syz.2.1389': attribute type 3 has an invalid length. [ 340.843982][T10249] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1389'. [ 341.854722][T10270] netlink: 'syz.0.1397': attribute type 29 has an invalid length. [ 341.872716][T10270] netlink: 'syz.0.1397': attribute type 29 has an invalid length. [ 341.883203][T10270] netlink: 'syz.0.1397': attribute type 29 has an invalid length. [ 341.894313][T10270] netlink: 'syz.0.1397': attribute type 29 has an invalid length. [ 342.057837][T10279] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1401'. [ 342.451962][T10290] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 344.146876][T10338] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1422'. [ 344.317004][T10343] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 345.082339][T10360] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1431'. [ 345.380292][T10368] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1434'. [ 345.410649][T10370] validate_nla: 12 callbacks suppressed [ 345.410669][T10370] netlink: 'syz.2.1436': attribute type 29 has an invalid length. [ 345.444516][T10370] netlink: 'syz.2.1436': attribute type 29 has an invalid length. [ 345.455011][T10370] netlink: 'syz.2.1436': attribute type 29 has an invalid length. [ 345.464785][T10370] netlink: 'syz.2.1436': attribute type 29 has an invalid length. [ 345.474298][T10370] netlink: 'syz.2.1436': attribute type 29 has an invalid length. [ 345.955653][T10386] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1442'. [ 346.047581][T10388] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 346.631109][T10398] netlink: 'syz.3.1446': attribute type 29 has an invalid length. [ 346.667690][T10398] netlink: 'syz.3.1446': attribute type 29 has an invalid length. [ 346.691987][T10402] netlink: 'syz.3.1446': attribute type 29 has an invalid length. [ 346.719884][T10398] netlink: 'syz.3.1446': attribute type 29 has an invalid length. [ 346.742927][T10398] netlink: 'syz.3.1446': attribute type 29 has an invalid length. [ 347.495810][T10426] tun0: tun_chr_ioctl cmd 2147767507 [ 348.411746][T10431] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1458'. [ 348.871871][T10444] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 352.951985][T10481] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1477'. [ 353.042983][T10484] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1478'. [ 353.063872][T10485] validate_nla: 10 callbacks suppressed [ 353.063889][T10485] netlink: 'syz.3.1479': attribute type 10 has an invalid length. [ 353.339220][T10494] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 353.627618][T10497] netlink: 'syz.2.1483': attribute type 29 has an invalid length. [ 353.707546][T10497] netlink: 'syz.2.1483': attribute type 29 has an invalid length. [ 353.736619][T10500] netlink: 'syz.2.1483': attribute type 29 has an invalid length. [ 353.788446][T10503] netlink: 'syz.2.1483': attribute type 29 has an invalid length. [ 353.819913][T10497] netlink: 'syz.2.1483': attribute type 29 has an invalid length. [ 353.951188][T10505] netlink: 'syz.1.1486': attribute type 1 has an invalid length. [ 353.981222][T10505] netlink: 'syz.1.1486': attribute type 10 has an invalid length. [ 354.025867][T10505] team0: Device ipvlan1 failed to register rx_handler [ 354.810739][T10526] netlink: 'syz.1.1496': attribute type 29 has an invalid length. [ 354.821661][T10526] netlink: 'syz.1.1496': attribute type 29 has an invalid length. [ 355.274106][T10535] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1499'. [ 355.727172][T10543] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 356.703828][T10572] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1515'. [ 357.393012][T10597] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 357.762663][T10602] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1526'. [ 357.963243][T10607] netlink: 4091 bytes leftover after parsing attributes in process `syz.3.1528'. [ 358.626383][T10618] validate_nla: 13 callbacks suppressed [ 358.626403][T10618] netlink: 'syz.1.1532': attribute type 6 has an invalid length. [ 358.670787][T10618] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1532'. [ 358.771382][T10620] netlink: 'syz.0.1533': attribute type 29 has an invalid length. [ 358.811485][T10620] netlink: 'syz.0.1533': attribute type 29 has an invalid length. [ 358.833492][T10625] netlink: 'syz.0.1533': attribute type 29 has an invalid length. [ 358.864021][T10620] netlink: 'syz.0.1533': attribute type 29 has an invalid length. [ 358.880166][T10620] netlink: 'syz.0.1533': attribute type 29 has an invalid length. [ 359.046534][T10629] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1537'. [ 359.214969][T10632] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 359.382833][T10628] netlink: 'syz.1.1536': attribute type 2 has an invalid length. [ 359.392269][T10628] netlink: 'syz.1.1536': attribute type 8 has an invalid length. [ 359.400764][T10628] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1536'. [ 359.419446][T10635] netlink: 'syz.1.1536': attribute type 11 has an invalid length. [ 359.920657][T10659] netlink: 'syz.0.1547': attribute type 29 has an invalid length. [ 360.324513][T10680] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1554'. [ 360.844317][T10686] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 361.782604][T10715] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1570'. [ 362.112136][T10725] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 364.044424][T10767] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 364.209015][T10770] validate_nla: 21 callbacks suppressed [ 364.209042][T10770] netlink: 'syz.3.1592': attribute type 29 has an invalid length. [ 364.229285][T10770] netlink: 'syz.3.1592': attribute type 29 has an invalid length. [ 364.240479][T10770] netlink: 'syz.3.1592': attribute type 29 has an invalid length. [ 364.250454][T10770] netlink: 'syz.3.1592': attribute type 29 has an invalid length. [ 364.259978][T10770] netlink: 'syz.3.1592': attribute type 29 has an invalid length. [ 365.099299][T10796] netlink: 'syz.2.1605': attribute type 29 has an invalid length. [ 365.124144][T10794] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 365.155065][T10796] netlink: 'syz.2.1605': attribute type 29 has an invalid length. [ 365.179976][T10798] netlink: 'syz.2.1605': attribute type 29 has an invalid length. [ 365.202526][T10796] netlink: 'syz.2.1605': attribute type 29 has an invalid length. [ 365.222310][T10796] netlink: 'syz.2.1605': attribute type 29 has an invalid length. [ 365.470276][T10782] delete_channel: no stack [ 366.345658][T10826] delete_channel: no stack [ 366.877372][T10835] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 367.714747][T10855] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1626'. [ 368.903229][T10883] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 369.889905][T10899] validate_nla: 10 callbacks suppressed [ 369.889927][T10899] netlink: 'syz.2.1642': attribute type 29 has an invalid length. [ 370.291684][T10899] netlink: 'syz.2.1642': attribute type 29 has an invalid length. [ 370.317705][T10900] netlink: 'syz.2.1642': attribute type 29 has an invalid length. [ 370.346933][T10901] netlink: 'syz.2.1642': attribute type 29 has an invalid length. [ 370.358980][T10902] netlink: 'syz.2.1642': attribute type 29 has an invalid length. [ 370.506530][T10909] netlink: 'syz.0.1645': attribute type 21 has an invalid length. [ 370.515213][T10909] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1645'. [ 370.808284][T10922] netlink: 'syz.1.1649': attribute type 5 has an invalid length. [ 370.835486][T10922] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 370.845697][T10922] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1649'. [ 370.899991][T10921] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 371.034784][T10927] netlink: 94908 bytes leftover after parsing attributes in process `syz.3.1652'. [ 371.054935][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1652'. [ 371.572295][T10939] netlink: 'syz.2.1657': attribute type 29 has an invalid length. [ 371.593079][T10939] netlink: 'syz.2.1657': attribute type 29 has an invalid length. [ 372.283955][T10957] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 373.916549][T11005] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 374.683022][T11040] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 375.087526][T11050] validate_nla: 18 callbacks suppressed [ 375.087644][T11050] netlink: 'syz.3.1702': attribute type 2 has an invalid length. [ 375.120570][T11050] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1702'. [ 375.193446][T11056] netlink: 'syz.1.1705': attribute type 29 has an invalid length. [ 375.217422][T11056] netlink: 'syz.1.1705': attribute type 29 has an invalid length. [ 375.246812][T11056] netlink: 'syz.1.1705': attribute type 29 has an invalid length. [ 375.266496][T11056] netlink: 'syz.1.1705': attribute type 29 has an invalid length. [ 375.293580][T11056] netlink: 'syz.1.1705': attribute type 29 has an invalid length. [ 375.570036][T11069] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 375.749319][T11073] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1712'. [ 375.782757][T11072] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1712'. [ 376.312564][T11090] netlink: 'syz.3.1719': attribute type 29 has an invalid length. [ 376.331423][T11090] netlink: 'syz.3.1719': attribute type 29 has an invalid length. [ 376.357297][T11090] netlink: 'syz.3.1719': attribute type 29 has an invalid length. [ 376.378939][T11090] netlink: 'syz.3.1719': attribute type 29 has an invalid length. [ 376.780483][T11101] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 377.841169][T11121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.127396][T11138] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 378.929163][T11173] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 379.058033][T11176] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1755'. [ 379.074607][T11176] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 379.090320][T11176] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 379.133180][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.140977][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.862994][T11216] tap0: tun_chr_ioctl cmd 1074025694 [ 379.973198][T11218] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 380.177781][T11228] validate_nla: 19 callbacks suppressed [ 380.177803][T11228] netlink: 'syz.1.1772': attribute type 29 has an invalid length. [ 380.242833][T11228] netlink: 'syz.1.1772': attribute type 29 has an invalid length. [ 380.300333][T11234] netlink: 'syz.1.1772': attribute type 29 has an invalid length. [ 380.311559][T11236] netlink: 'syz.1.1772': attribute type 29 has an invalid length. [ 380.347110][T11228] netlink: 'syz.1.1772': attribute type 29 has an invalid length. [ 381.022325][T11257] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 381.336751][T11272] netlink: 'syz.3.1788': attribute type 29 has an invalid length. [ 381.356074][T11272] netlink: 'syz.3.1788': attribute type 29 has an invalid length. [ 381.368884][T11272] netlink: 'syz.3.1788': attribute type 29 has an invalid length. [ 381.387854][T11272] netlink: 'syz.3.1788': attribute type 29 has an invalid length. [ 381.399002][T11272] netlink: 'syz.3.1788': attribute type 29 has an invalid length. [ 381.552075][T11283] FAULT_INJECTION: forcing a failure. [ 381.552075][T11283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.584562][T11283] CPU: 1 PID: 11283 Comm: syz.1.1792 Not tainted syzkaller #0 [ 381.592164][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.602285][T11283] Call Trace: [ 381.605610][T11283] [ 381.608585][T11283] dump_stack_lvl+0x18c/0x250 [ 381.613310][T11283] ? show_regs_print_info+0x20/0x20 [ 381.618559][T11283] ? load_image+0x420/0x420 [ 381.623102][T11283] ? __might_fault+0xaa/0x120 [ 381.627813][T11283] ? __lock_acquire+0x7d80/0x7d80 [ 381.632867][T11283] should_fail_ex+0x394/0x4c0 [ 381.637578][T11283] _copy_from_user+0x2f/0xe0 [ 381.642199][T11283] ___sys_sendmsg+0x1c7/0x360 [ 381.646912][T11283] ? get_pid_task+0x20/0x1e0 [ 381.651543][T11283] ? __sys_sendmsg+0x2b0/0x2b0 [ 381.656358][T11283] ? __lock_acquire+0x7d80/0x7d80 [ 381.661531][T11283] __se_sys_sendmsg+0x1d0/0x2c0 [ 381.666430][T11283] ? perf_trace_preemptirq_template+0x269/0x330 [ 381.672710][T11283] ? __x64_sys_sendmsg+0x80/0x80 [ 381.677703][T11283] ? lockdep_hardirqs_on+0x98/0x150 [ 381.682941][T11283] do_syscall_64+0x55/0xb0 [ 381.687403][T11283] ? clear_bhb_loop+0x40/0x90 [ 381.692195][T11283] ? clear_bhb_loop+0x40/0x90 [ 381.696903][T11283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.702840][T11283] RIP: 0033:0x7fb3f5f9de59 [ 381.707381][T11283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.727046][T11283] RSP: 002b:00007fb3f6dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.735528][T11283] RAX: ffffffffffffffda RBX: 00007fb3f6225fa0 RCX: 00007fb3f5f9de59 [ 381.743535][T11283] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000004 [ 381.751535][T11283] RBP: 00007fb3f6dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 381.759537][T11283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.767535][T11283] R13: 00007fb3f6226038 R14: 00007fb3f6225fa0 R15: 00007fffe883c2a8 [ 381.775560][T11283] [ 381.902145][T11287] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1794'. [ 382.045596][T11287] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1794'. [ 382.111369][T11294] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1797'. [ 382.145800][T11294] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.1797'. [ 382.161048][T11294] tipc: Started in network mode [ 382.187001][T11294] tipc: Node identity b, cluster identity 73 [ 382.200879][T11294] tipc: Node number set to 11 [ 382.558924][T11310] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 382.720070][T11318] FAULT_INJECTION: forcing a failure. [ 382.720070][T11318] name failslab, interval 1, probability 0, space 0, times 0 [ 382.733703][T11318] CPU: 1 PID: 11318 Comm: syz.0.1808 Not tainted syzkaller #0 [ 382.741232][T11318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 382.751428][T11318] Call Trace: [ 382.754756][T11318] [ 382.757739][T11318] dump_stack_lvl+0x18c/0x250 [ 382.762489][T11318] ? show_regs_print_info+0x20/0x20 [ 382.767759][T11318] ? load_image+0x420/0x420 [ 382.772360][T11318] ? __lock_acquire+0x7d80/0x7d80 [ 382.777477][T11318] ? perf_tp_event+0x13f5/0x1550 [ 382.782652][T11318] should_fail_ex+0x394/0x4c0 [ 382.787398][T11318] should_failslab+0x9/0x20 [ 382.791963][T11318] slab_pre_alloc_hook+0x59/0x300 [ 382.797073][T11318] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 382.802502][T11318] __kmem_cache_alloc_node+0x53/0x250 [ 382.808073][T11318] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 382.813504][T11318] kmalloc_trace+0x2a/0xe0 [ 382.818023][T11318] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 382.823298][T11318] tcp_sendmsg_locked+0x44ee/0x4ab0 [ 382.828582][T11318] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 382.834364][T11318] ? mark_lock+0x94/0x320 [ 382.838748][T11318] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 382.844785][T11318] ? lock_chain_count+0x20/0x20 [ 382.849694][T11318] ? tcp_set_state+0x6c0/0x6c0 [ 382.854549][T11318] tcp_sendmsg+0x2f/0x50 [ 382.858865][T11318] ? inet_send_prepare+0x250/0x250 [ 382.864054][T11318] ____sys_sendmsg+0x61b/0x980 [ 382.868901][T11318] ? __asan_memset+0x22/0x40 [ 382.873562][T11318] ? __sys_sendmsg_sock+0x30/0x30 [ 382.878649][T11318] ? __import_iovec+0x3fa/0x850 [ 382.883671][T11318] ? import_iovec+0x73/0xa0 [ 382.888240][T11318] ___sys_sendmsg+0x2a6/0x360 [ 382.892984][T11318] ? get_pid_task+0x20/0x1e0 [ 382.897649][T11318] ? __sys_sendmsg+0x2b0/0x2b0 [ 382.902578][T11318] ? __lock_acquire+0x7d80/0x7d80 [ 382.907782][T11318] __se_sys_sendmsg+0x1d0/0x2c0 [ 382.912699][T11318] ? perf_trace_preemptirq_template+0x269/0x330 [ 382.919012][T11318] ? __x64_sys_sendmsg+0x80/0x80 [ 382.924055][T11318] ? lockdep_hardirqs_on+0x98/0x150 [ 382.929332][T11318] do_syscall_64+0x55/0xb0 [ 382.933864][T11318] ? clear_bhb_loop+0x40/0x90 [ 382.938601][T11318] ? clear_bhb_loop+0x40/0x90 [ 382.943342][T11318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.949301][T11318] RIP: 0033:0x7ff65599de59 [ 382.953771][T11318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.973525][T11318] RSP: 002b:00007ff656957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.982065][T11318] RAX: ffffffffffffffda RBX: 00007ff655c25fa0 RCX: 00007ff65599de59 [ 382.990105][T11318] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000004 [ 382.998179][T11318] RBP: 00007ff656957090 R08: 0000000000000000 R09: 0000000000000000 [ 383.006656][T11318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.014679][T11318] R13: 00007ff655c26038 R14: 00007ff655c25fa0 R15: 00007ffe75c98ed8 [ 383.022722][T11318] [ 383.089975][T11321] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1806'. [ 383.102225][T11321] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 383.112634][T11323] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1810'. [ 383.141692][T11323] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1810'. [ 383.301821][T11330] team0: Port device ..ãc¤± added [ 383.601962][ T5789] Bluetooth: hci3: ISO packet for unknown connection handle 5 [ 384.404565][T11354] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 384.592564][T11363] FAULT_INJECTION: forcing a failure. [ 384.592564][T11363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.606093][T11363] CPU: 0 PID: 11363 Comm: syz.0.1825 Not tainted syzkaller #0 [ 384.613618][T11363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 384.623737][T11363] Call Trace: [ 384.627076][T11363] [ 384.630049][T11363] dump_stack_lvl+0x18c/0x250 [ 384.634797][T11363] ? show_regs_print_info+0x20/0x20 [ 384.640070][T11363] ? load_image+0x420/0x420 [ 384.644642][T11363] ? __lock_acquire+0x7d80/0x7d80 [ 384.649731][T11363] ? snprintf+0xe9/0x140 [ 384.654210][T11363] should_fail_ex+0x394/0x4c0 [ 384.658984][T11363] _copy_to_user+0x2f/0xa0 [ 384.663634][T11363] simple_read_from_buffer+0xe7/0x150 [ 384.669085][T11363] proc_fail_nth_read+0x1e8/0x260 [ 384.674181][T11363] ? proc_fault_inject_write+0x360/0x360 [ 384.679894][T11363] ? fsnotify_perm+0x271/0x5e0 [ 384.684758][T11363] ? proc_fault_inject_write+0x360/0x360 [ 384.690440][T11363] vfs_read+0x298/0x990 [ 384.694640][T11363] ? kernel_read+0x1e0/0x1e0 [ 384.699270][T11363] ? __fget_files+0x28/0x460 [ 384.703902][T11363] ? __fget_files+0x3fc/0x460 [ 384.708628][T11363] ? __fdget_pos+0x2a3/0x330 [ 384.713258][T11363] ? ksys_read+0x74/0x260 [ 384.717632][T11363] ksys_read+0x151/0x260 [ 384.721921][T11363] ? vfs_write+0x9a0/0x9a0 [ 384.726380][T11363] ? lockdep_hardirqs_on+0x98/0x150 [ 384.731612][T11363] do_syscall_64+0x55/0xb0 [ 384.736062][T11363] ? clear_bhb_loop+0x40/0x90 [ 384.740765][T11363] ? clear_bhb_loop+0x40/0x90 [ 384.745642][T11363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.751582][T11363] RIP: 0033:0x7ff65595e68e [ 384.756055][T11363] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 384.775781][T11363] RSP: 002b:00007ff656956fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 384.784310][T11363] RAX: ffffffffffffffda RBX: 00007ff6569576c0 RCX: 00007ff65595e68e [ 384.792323][T11363] RDX: 000000000000000f RSI: 00007ff6569570a0 RDI: 0000000000000005 [ 384.800351][T11363] RBP: 00007ff656957090 R08: 0000000000000000 R09: 0000000000000000 [ 384.808367][T11363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.816367][T11363] R13: 00007ff655c26038 R14: 00007ff655c25fa0 R15: 00007ffe75c98ed8 [ 384.824380][T11363] [ 385.250292][T11375] validate_nla: 15 callbacks suppressed [ 385.250314][T11375] netlink: 'syz.1.1831': attribute type 29 has an invalid length. [ 385.273989][T11376] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1829'. [ 385.284850][T11375] netlink: 'syz.1.1831': attribute type 29 has an invalid length. [ 385.313309][T11375] netlink: 'syz.1.1831': attribute type 29 has an invalid length. [ 385.357356][T11375] netlink: 'syz.1.1831': attribute type 29 has an invalid length. [ 385.377001][T11375] netlink: 'syz.1.1831': attribute type 29 has an invalid length. [ 385.944040][T11394] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 386.361179][T11411] netlink: 'syz.3.1846': attribute type 29 has an invalid length. [ 386.395850][T11411] netlink: 'syz.3.1846': attribute type 29 has an invalid length. [ 386.426611][T11411] netlink: 'syz.3.1846': attribute type 29 has an invalid length. [ 386.446892][T11411] netlink: 'syz.3.1846': attribute type 29 has an invalid length. [ 386.463780][T11411] netlink: 'syz.3.1846': attribute type 29 has an invalid length. [ 386.625565][T11423] bridge0: port 3(team0) entered disabled state [ 386.632327][T11423] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.639951][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.648722][T11423] bridge0: entered allmulticast mode [ 386.964282][T11431] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 387.001891][T11435] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1857'. [ 387.753019][T11447] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1862'. [ 388.579621][T11464] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1868'. [ 388.618652][T11464] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 388.998724][T11468] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 389.897022][T11503] Ÿë: port 1(veth0_to_team) entered blocking state [ 389.904011][T11503] Ÿë: port 1(veth0_to_team) entered disabled state [ 389.912244][T11503] veth0_to_team: entered allmulticast mode [ 389.920142][T11503] veth0_to_team: entered promiscuous mode [ 390.178802][T11509] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 390.811131][T11525] validate_nla: 14 callbacks suppressed [ 390.811145][T11525] netlink: 'syz.2.1893': attribute type 29 has an invalid length. [ 390.826438][T11525] netlink: 'syz.2.1893': attribute type 29 has an invalid length. [ 390.836207][T11525] netlink: 'syz.2.1893': attribute type 29 has an invalid length. [ 390.846869][T11525] netlink: 'syz.2.1893': attribute type 29 has an invalid length. [ 390.857081][T11525] netlink: 'syz.2.1893': attribute type 29 has an invalid length. [ 391.024002][T11531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.173546][T11540] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 393.494689][T11557] netlink: 'syz.1.1906': attribute type 6 has an invalid length. [ 393.516034][T11557] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1906'. [ 393.534279][T11560] netlink: 'syz.2.1907': attribute type 29 has an invalid length. [ 393.543258][T11560] netlink: 'syz.2.1907': attribute type 29 has an invalid length. [ 393.557256][T11560] netlink: 'syz.2.1907': attribute type 29 has an invalid length. [ 393.579474][T11560] netlink: 'syz.2.1907': attribute type 29 has an invalid length. [ 393.731436][T11567] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1911'. [ 394.219387][T11571] team0: Device ipvlan1 failed to register rx_handler [ 394.338179][T11584] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 395.455201][T11618] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 396.174459][T11628] validate_nla: 9 callbacks suppressed [ 396.174479][T11628] netlink: 'syz.2.1934': attribute type 29 has an invalid length. [ 396.239051][T11628] netlink: 'syz.2.1934': attribute type 29 has an invalid length. [ 396.258707][T11633] netlink: 'syz.2.1934': attribute type 29 has an invalid length. [ 396.295179][T11628] netlink: 'syz.2.1934': attribute type 29 has an invalid length. [ 396.316893][T11628] netlink: 'syz.2.1934': attribute type 29 has an invalid length. [ 396.867700][T11656] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 397.091914][T11662] netlink: 'syz.3.1949': attribute type 29 has an invalid length. [ 397.102865][T11662] netlink: 'syz.3.1949': attribute type 29 has an invalid length. [ 397.112720][T11662] netlink: 'syz.3.1949': attribute type 29 has an invalid length. [ 397.122880][T11662] netlink: 'syz.3.1949': attribute type 29 has an invalid length. [ 397.134248][T11662] netlink: 'syz.3.1949': attribute type 29 has an invalid length. [ 397.846960][T11685] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 398.558041][T11714] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1971'. [ 398.824235][T11722] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 399.009638][T11730] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 399.969362][T11744] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1981'. [ 400.046245][T11743] delete_channel: no stack [ 400.704465][T11766] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1988'. [ 400.733018][T11766] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 401.012350][T11773] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 401.802963][T11801] validate_nla: 17 callbacks suppressed [ 401.802989][T11801] netlink: 'syz.2.2001': attribute type 29 has an invalid length. [ 401.845900][T11801] netlink: 'syz.2.2001': attribute type 29 has an invalid length. [ 401.873836][T11802] netlink: 'syz.2.2001': attribute type 29 has an invalid length. [ 401.899501][T11801] netlink: 'syz.2.2001': attribute type 29 has an invalid length. [ 401.918559][T11801] netlink: 'syz.2.2001': attribute type 29 has an invalid length. [ 402.072134][T11806] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 402.700214][T11822] netlink: 199800 bytes leftover after parsing attributes in process `syz.1.2008'. [ 402.944216][T11831] netlink: 'syz.0.2013': attribute type 29 has an invalid length. [ 402.974170][T11831] netlink: 'syz.0.2013': attribute type 29 has an invalid length. [ 403.003985][T11833] netlink: 'syz.0.2013': attribute type 29 has an invalid length. [ 403.027397][T11831] netlink: 'syz.0.2013': attribute type 29 has an invalid length. [ 403.045808][T11831] netlink: 'syz.0.2013': attribute type 29 has an invalid length. [ 403.079590][T11834] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2014'. [ 403.500196][T11844] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 403.708176][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 403.741056][T11846] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2020'. [ 404.958022][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 404.969275][T11884] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 406.016363][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 406.211032][T11914] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 406.243806][T11915] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2048'. [ 406.271284][T11915] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 406.848526][T11935] can: request_module (can-proto-0) failed. [ 406.923823][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 407.318113][T11951] validate_nla: 18 callbacks suppressed [ 407.318135][T11951] netlink: 'syz.3.2063': attribute type 29 has an invalid length. [ 407.348854][T11951] netlink: 'syz.3.2063': attribute type 29 has an invalid length. [ 407.358933][T11951] netlink: 'syz.3.2063': attribute type 29 has an invalid length. [ 407.373985][T11951] netlink: 'syz.3.2063': attribute type 29 has an invalid length. [ 407.383912][T11951] netlink: 'syz.3.2063': attribute type 29 has an invalid length. [ 407.744198][T11957] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 407.768235][ T5789] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 407.778007][ T5789] Bluetooth: hci3: Injecting HCI hardware error event [ 407.786898][ T5789] Bluetooth: hci3: hardware error 0x00 [ 407.898485][T11964] netlink: 'syz.1.2068': attribute type 29 has an invalid length. [ 407.909700][T11964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2068'. [ 408.231393][ T51] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 408.416983][T11978] netlink: 'syz.0.2075': attribute type 29 has an invalid length. [ 408.441401][T11978] netlink: 'syz.0.2075': attribute type 29 has an invalid length. [ 408.460452][T11981] netlink: 'syz.0.2075': attribute type 29 has an invalid length. [ 408.479810][T11978] netlink: 'syz.0.2075': attribute type 29 has an invalid length. [ 408.712028][ T51] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 408.805147][T11992] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 408.964434][ T5784] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 409.856082][ T5789] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 409.890869][T12030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2096'. [ 409.930572][T12028] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 410.805427][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 410.965641][ T5789] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 410.975066][ T5789] Bluetooth: hci0: Injecting HCI hardware error event [ 410.985032][ T5784] Bluetooth: hci0: hardware error 0x00 [ 410.991148][T12058] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 411.014804][ C0] [ 411.014811][ C0] ================================ [ 411.014816][ C0] WARNING: inconsistent lock state [ 411.014837][ C0] syzkaller #0 Not tainted [ 411.014845][ C0] -------------------------------- [ 411.014849][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 411.014857][ C0] syz.0.2112/12062 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 411.014875][ C0] ffffffff8d2974d8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x88/0xbd0 [ 411.014929][ C0] {INITIAL USE} state was registered at: [ 411.014937][ C0] lock_acquire+0x19e/0x420 [ 411.014959][ C0] _raw_write_lock_irq+0xaf/0xf0 [ 411.014985][ C0] kernfs_rename_ns+0x5e4/0x830 [ 411.015011][ C0] sysfs_rename_link_ns+0x175/0x1b0 [ 411.015029][ C0] device_rename+0x110/0x1e0 [ 411.015048][ C0] dev_change_name+0x308/0x8e0 [ 411.015066][ C0] do_setlink+0x925/0x3f40 [ 411.015082][ C0] rtnl_newlink+0x1848/0x2170 [ 411.015109][ C0] rtnetlink_rcv_msg+0x843/0xf90 [ 411.015126][ C0] netlink_rcv_skb+0x235/0x4c0 [ 411.015151][ C0] netlink_unicast+0x7b1/0x930 [ 411.015175][ C0] netlink_sendmsg+0x8d0/0xbf0 [ 411.015200][ C0] __sys_sendto+0x4a9/0x6b0 [ 411.015225][ C0] __x64_sys_sendto+0xde/0xf0 [ 411.015250][ C0] do_syscall_64+0x55/0xb0 [ 411.015281][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.015314][ C0] irq event stamp: 478 [ 411.015320][ C0] hardirqs last enabled at (477): [] do_syscall_64+0x61/0xb0 [ 411.015353][ C0] hardirqs last disabled at (478): [] noist_exc_debug+0x4d/0x120 [ 411.015375][ C0] softirqs last enabled at (342): [] bpf_prog_load+0x1204/0x1610 [ 411.015401][ C0] softirqs last disabled at (340): [] bpf_ksym_add+0x2c/0x330 [ 411.015428][ C0] [ 411.015428][ C0] other info that might help us debug this: [ 411.015433][ C0] Possible unsafe locking scenario: [ 411.015433][ C0] [ 411.015438][ C0] CPU0 [ 411.015442][ C0] ---- [ 411.015445][ C0] lock(kernfs_rename_lock); [ 411.015458][ C0] [ 411.015461][ C0] lock(kernfs_rename_lock); [ 411.015479][ C0] [ 411.015479][ C0] *** DEADLOCK *** [ 411.015479][ C0] [ 411.015483][ C0] 2 locks held by syz.0.2112/12062: [ 411.015494][ C0] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: atomic_notifier_call_chain+0x26/0x180 [ 411.015548][ C0] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xb9/0x3e0 [ 411.015595][ C0] [ 411.015595][ C0] stack backtrace: [ 411.015601][ C0] CPU: 0 PID: 12062 Comm: syz.0.2112 Not tainted syzkaller #0 [ 411.015620][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.015632][ C0] Call Trace: [ 411.015639][ C0] <#DB> [ 411.015647][ C0] dump_stack_lvl+0x18c/0x250 [ 411.015679][ C0] ? show_regs_print_info+0x20/0x20 [ 411.015720][ C0] ? print_usage_bug+0x43d/0x6a0 [ 411.015743][ C0] ? verify_lock_unused+0x15/0x140 [ 411.015768][ C0] lock_acquire+0x2c2/0x420 [ 411.015793][ C0] ? kernfs_path_from_node+0x88/0xbd0 [ 411.015821][ C0] ? read_lock_is_recursive+0x20/0x20 [ 411.015844][ C0] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 411.015875][ C0] ? cmp_ex_search+0x1e/0x80 [ 411.015896][ C0] ? bsearch+0x8a/0xb0 [ 411.015920][ C0] ? look_up_lock_class+0x75/0x140 [ 411.015946][ C0] _raw_read_lock_irqsave+0xbc/0x100 [ 411.015973][ C0] ? kernfs_path_from_node+0x88/0xbd0 [ 411.016000][ C0] ? _raw_read_lock+0x50/0x50 [ 411.016023][ C0] ? rcu_is_watching+0x15/0xb0 [ 411.016051][ C0] ? lock_release+0xb5/0x8c0 [ 411.016073][ C0] ? percpu_ref_tryget+0x15/0x180 [ 411.016099][ C0] kernfs_path_from_node+0x88/0xbd0 [ 411.016127][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 411.016171][ C0] ? kernfs_name+0x140/0x140 [ 411.016198][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 411.016219][ C0] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 411.016242][ C0] get_mm_memcg_path+0xb9/0x360 [ 411.016273][ C0] __mmap_lock_do_trace_start_locking+0xe6/0x2f0 [ 411.016305][ C0] ? __bpf_trace_mmap_lock_acquire_returned+0x230/0x230 [ 411.016351][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 411.016380][ C0] ? _raw_spin_unlock+0x28/0x40 [ 411.016407][ C0] stack_map_get_build_id_offset+0x5d3/0x720 [ 411.016438][ C0] ? pcpu_freelist_pop+0x12a/0x190 [ 411.016476][ C0] ? __bpf_get_stackid+0x900/0x900 [ 411.016500][ C0] ? perf_prepare_sample+0x1558/0x1db0 [ 411.016528][ C0] __bpf_get_stackid+0x564/0x900 [ 411.016561][ C0] bpf_prog_12712c88fd19bd5b+0x29/0x2d [ 411.016581][ C0] bpf_overflow_handler+0x1fc/0x510 [ 411.016609][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 411.016635][ C0] ? bpf_overflow_handler+0xde/0x510 [ 411.016662][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 411.016695][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 411.016721][ C0] __perf_event_overflow+0x461/0x660 [ 411.016750][ C0] perf_swevent_event+0x319/0x570 [ 411.016775][ C0] ? perf_tp_event+0x1550/0x1550 [ 411.016807][ C0] perf_bp_event+0x319/0x430 [ 411.016830][ C0] ? look_up_lock_class+0x75/0x140 [ 411.016856][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 411.016879][ C0] ? rcu_is_watching+0x15/0xb0 [ 411.016926][ C0] ? lock_acquire+0x2c2/0x420 [ 411.016949][ C0] hw_breakpoint_exceptions_notify+0x2fb/0x670 [ 411.016978][ C0] notifier_call_chain+0x18f/0x380 [ 411.017005][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 411.017029][ C0] atomic_notifier_call_chain+0xda/0x180 [ 411.017055][ C0] notify_die+0x145/0x1a0 [ 411.017080][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 411.017114][ C0] notify_debug+0x2e/0x50 [ 411.017132][ C0] exc_debug+0xde/0x140 [ 411.017151][ C0] asm_exc_debug+0x1e/0x40 [ 411.017178][ C0] RIP: 0010:__get_user_nocheck_8+0xd/0x20 [ 411.017200][ C0] Code: fa 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 ca [ 411.017217][ C0] RSP: 0000:ffffc90005367560 EFLAGS: 00040802 [ 411.017231][ C0] RAX: 0000200000000300 RBX: 00000000ffffffff RCX: 1ffff92000a6ceca [ 411.017244][ C0] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 0000000000000000 [ 411.017254][ C0] RBP: 0000200000000300 R08: 000000000000007f R09: 0000000000000000 [ 411.017264][ C0] R10: dffffc0000000000 R11: fffffbfff223cea1 R12: 0000000000000001 [ 411.017275][ C0] R13: 1ffff92000a6cec8 R14: 000000000000007f R15: dffffc0000000000 [ 411.017298][ C0] [ 411.017305][ C0] [ 411.017310][ C0] perf_callchain_user+0xbdd/0x15d0 [ 411.017348][ C0] ? get_callchain_entry+0x185/0x3c0 [ 411.017372][ C0] get_perf_callchain+0x394/0x510 [ 411.017395][ C0] ? put_callchain_entry+0xb0/0xb0 [ 411.017421][ C0] ? __perf_event_header__init_id+0x3b0/0x470 [ 411.017445][ C0] perf_prepare_sample+0x3c7/0x1db0 [ 411.017479][ C0] ? read_lock_is_recursive+0x20/0x20 [ 411.017501][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 411.017524][ C0] ? perf_callchain+0x220/0x220 [ 411.017545][ C0] ? lock_chain_count+0x20/0x20 [ 411.017572][ C0] perf_event_output_forward+0x187/0x3e0 [ 411.017595][ C0] ? perf_event_output_forward+0xb9/0x3e0 [ 411.017617][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 411.017642][ C0] ? __schedule+0x15b6/0x4660 [ 411.017667][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 411.017692][ C0] __perf_event_overflow+0x461/0x660 [ 411.017720][ C0] perf_swevent_overflow+0x274/0x340 [ 411.017751][ C0] ? perf_event_switch_output+0x790/0x790 [ 411.017786][ C0] perf_swevent_event+0x45c/0x570 [ 411.017810][ C0] ? perf_tp_event+0x1550/0x1550 [ 411.017840][ C0] perf_bp_event+0x319/0x430 [ 411.017863][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 411.017891][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 411.017915][ C0] ? verify_lock_unused+0x140/0x140 [ 411.017965][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 411.017994][ C0] notifier_call_chain+0x18f/0x380 [ 411.018022][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 411.018050][ C0] atomic_notifier_call_chain+0xda/0x180 [ 411.018077][ C0] notify_die+0x145/0x1a0 [ 411.018104][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 411.018139][ C0] notify_debug+0x2e/0x50 [ 411.018157][ C0] noist_exc_debug+0x77/0x120 [ 411.018175][ C0] ? clear_bhb_loop+0x40/0x90 [ 411.018196][ C0] asm_exc_debug+0x33/0x40 [ 411.018223][ C0] RIP: 0033:0x7ff65597cbfd [ 411.018239][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 411.018256][ C0] RSP: 002b:00007ff6569568a8 EFLAGS: 00000283 [ 411.018274][ C0] RAX: 0000000000000300 RBX: 00007ff656956de0 RCX: 2f666c65732f636f [ 411.018288][ C0] RDX: 0000200000000300 RSI: 00007ff655a5e580 RDI: 0000200000000300 [ 411.018302][ C0] RBP: 0000200000000300 R08: 00007ff656957010 R09: 00000000ffffffff [ 411.018315][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 411.018327][ C0] R13: 0000000000000073 R14: 00007ff655a331dd R15: 00007ff656956ea0 [ 411.018352][ C0] [ 413.045450][ T5784] Bluetooth: hci0: Opcode 0x0c03 failed: -110