last executing test programs: 3.586930219s ago: executing program 3 (id=3997): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x38000, 0x9e4, 0x5, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x5d}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) close(r0) 2.483334823s ago: executing program 3 (id=4005): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/447], 0x1c8}, 0x4000c010) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x1e, 0x1, 0x0) recvmsg(r0, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f00000024c0)=""/4096, 0x1000}, 0x100) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005200)={0x1d, 0x19, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000100000000000000e2d4000018110000", @ANYRES32=r3, @ANYBLOB="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"], 0x0, 0xffffff80, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xc1b3a6caf9398824, r2, 0x8, &(0x7f0000005100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000005140)={0x0, 0x7, 0xfffffffc, 0x7}, 0x10, 0x0, r1, 0x0, &(0x7f0000005180)=[r2, 0x1], &(0x7f00000051c0), 0x10, 0x6}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}, 0x10002) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r4], 0x12) 2.277750089s ago: executing program 2 (id=4008): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 2.197663851s ago: executing program 3 (id=4009): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x5d}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001f40)={0xffffffffffffffff, 0x20, &(0x7f0000001f00)={&(0x7f0000000e40)=""/4096, 0x1000, 0x0, &(0x7f0000001e40)=""/148, 0x94}}, 0x10) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000)=r7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x13, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0x0, 0x301}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2c, r7, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.796058374s ago: executing program 0 (id=4012): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x25, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000600", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 1.793828274s ago: executing program 2 (id=4013): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x38000, 0x9e4, 0x5, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x5d}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) close(r0) 1.597880471s ago: executing program 0 (id=4015): socket$kcm(0xa, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0600000000000000000000000000000000000000a5f4fe5bf070d9cc80f37cd5acf87f5401ac1ff06b4ea71d1dff520e336f7e83a19c1d9ab164c4f603", @ANYRES32], 0x50) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000001300)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x1, @remote, 'bridge_slave_1\x00'}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000840)="7e50ad76cccbee03a4bd8da085f1f9e1696c390d596a10e25839e0d94818674f069dd677f8972d672aa0cb4c837381b6612ffad4179e6c5e2469aa0bb60c230af567a521615a8792d0802d8876423ae5c2327c1e76a72e63acc2dca6584cdfd88081b9951b173ec5da866637af4ffc8bd801c80b0ab0b45460cc4244247b5a3d96c9075a51e791dab6342ed5ee3870156bde41ea9d51579266037683ae413da130a249056f1d4e6cad5d5a68117dcd784b1ac68c956c1c0c683c364dba1f1ccbf0360cdae5c197bd561a2964499248c7a4053a864a7b783b08a9a8a875848ca2f4e771", 0xe3}, {&(0x7f0000000940)="c80e40ab95022f73e4ce4934b1215100e94db5c994e2966d89f5e88fa3a24a24fe5539de8469da78c96cd4409e1c155e5d323516b6a3ce588f0c2aac34b28d6b200026e74f65663e205ffdbabb215b8fc58e046a1d15347dc873d9c7c91db63104ed93ca2761798ab73c4cfcce2a8827ac4c9d6cb50a5e5f1ad1ca3f44db5b02d9ee716af70b9d361d0f14bdc0b5c616241005d8984464aebc7ab24ccad8ebdd9b949de0575888bb6e40ec", 0xab}, {&(0x7f0000000a00)="033caa3f7ecf587e7077b2456625f2681490ce99d27de2662200dd33301bb24dcad1a104b364af65b6e07d978ac7aeaad9cc36b6fd7e531bdc5dcaf2548eded6639d1cfc71e7ddedcc1d13c81933b45898e9cdef77db504b4f2ab1a14fd8e282a5a09e45e3eca31556312004bffa5652b1fb02a430e83813663709a79099f468994d1dc6771de99ae1039adcdb7a9f8380520f403d1389d9aef9e6881867cb7752aa1085d0f73d0320d4c43bbce0abb705421916dd5deabd466e8b59180c8099d02c3ce7f430c03dfa5d0908eac2c999188ccb69d93ef2a70440c8860ad798aeeb3e5a12ce4bb21073ec3dbbe58cb557e22e41c4db515c0cc5", 0xf9}, {&(0x7f0000000b00)="74876468454901043ea896647c92b0d6e60e726b80960c2a6c07459ab85639e4c1859c9a97783d907679d52e46fa805fecc536c98b90ac276aea14ff6142b97e6096d25f5e2e2c02f842a2ce751af393f9aedfc5683e54512b47d5165de288f20903d006b02b4fd065fb899188f15a54ea5448ffd1124efca04cfe20e2cf7c3aca4c90c36ebd633fda7da25730322740b36b7fb60057a438efdc667ce2a8a89f1662c51afcbb5ab9e8e6880d6651eecef9c141eb221ab8513165f96c7705a30e6f6d01fdb7ee8fcedf723f802ad06474e8bcaecbbecf8275c5789a9bb6c4c9dd4989dfdef875be01808fe1c0", 0xec}], 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x2c8}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000700000045c80024577d750000000000000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) sendmsg(r4, 0x0, 0x40001) recvmsg$kcm(r4, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/231, 0xe7}, 0x100) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 1.27520457s ago: executing program 0 (id=4017): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/447], 0x1c8}, 0x4000c010) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x1e, 0x1, 0x0) recvmsg(r0, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f00000024c0)=""/4096, 0x1000}, 0x100) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005200)={0x1d, 0x19, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000100000000000000e2d4000018110000", @ANYRES32=r3, @ANYBLOB="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"], 0x0, 0xffffff80, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xc1b3a6caf9398824, r2, 0x8, &(0x7f0000005100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000005140)={0x0, 0x7, 0xfffffffc, 0x7}, 0x10, 0x0, r1, 0x0, &(0x7f0000005180)=[r2, 0x1], &(0x7f00000051c0), 0x10, 0x6}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}, 0x10002) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r4], 0x12) 1.234742592s ago: executing program 3 (id=4018): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1", 0x15}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) 1.202920982s ago: executing program 1 (id=4019): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, 0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd70700002000000095000000000000002ba72804605789bfbc7174159805d30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc162619b3af8a4e825d922c65e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bf3d6b2e28f90c52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d350100c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64dc4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a7e008f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d054c744fd06a57f7bcb8fb58c512d0884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637c335892b420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072da00f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce6459200000067c38a656d326cff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b52f79a3f7306436762dd1a08ce023e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac3ffff1ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d0dbaec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f6eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032bd2649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a604e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b0104000000000000a4c0a1d44d9dfd82896f5623e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f330a5e05b59db781cf9cf33752836fff6fcbf379332357c47f3597e084d0779b3cbfb312925a8151e338eca2c80600000000ac5992a4c7ec0b741f117f628562c3b27483ad6d733ffcbfca0ba805af95f8985901b0b8f918efa139e984fe872f22f5f094e3fbdf45ec2076710d8c787156b3e05774ac977c3db6288d252b2a73c84a07d73f9721e52f5b5d331ebb7db0a03be93fd96d7355405e954b8d6d0efcd6c37d869086efe15e30b7b6b2b37647e265a62fccfeb16f12f109dc5e405b53d1737b7a2620943affaa2eb07585e23e0513df2f83218f9f3ed9ba3026bcfbe5e9b36ab5b052886227827b983c0fe8da495f1ea7b5c35e42ff83f6e5e5a71ba3000000000000000000f73ffcd0c92a30304d5142441978012e2e6e1c45c28713fa5354f1fd124598688dffa0890dc8c6b4d9732347896d17d4efe12c20c706dcd4601135c553713cc4000a6690a2eed2e680db50589a659a240afc2c1eaa381a4135933a8d7abff2a7882ff50eabbe493ae54f71473eb65fe8e850f36d096a9c7dfd8fd2a35234bef2ba4755e10489b2508e4a9d911135b6c802e16e23fc7a3c3c0f5939b842bca82db931e5ba180f1eed5f539371105aee1d06af045892e18eb5dfd361f6d89fff0b82da98fa7aa90fe92b59887fda0ed8d375ba13fe3f63e69e417c89e31fdf55b9c2e9e0398c661d4c4ce0804971f3"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 1.041633458s ago: executing program 0 (id=4020): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000001b40), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x19, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYRESOCT=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000062007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002a500060020000000950000000000000000000000000000f731f698"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b07, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r12}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r9}, 0x20) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0xfe, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) 1.004541039s ago: executing program 1 (id=4021): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) recvmsg$kcm(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000001b40), 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x19, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYRESOCT=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000062007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002a500060020000000950000000000000000000000000000f731f698"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b07, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r12}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r9}, 0x20) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0xfe, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) 866.936233ms ago: executing program 0 (id=4022): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 831.529484ms ago: executing program 2 (id=4023): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x25, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a3038"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000600", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 791.830735ms ago: executing program 1 (id=4024): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000003000000850000007b00000018110000", @ANYRES32, @ANYBLOB="00f5f89ff700000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x2, 0x4, 0x2, 0x0, 0x0, 0xfffffffffffffffb, 0xd84, 0x10, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000140)}, 0x4940, 0x2c0000000, 0xffffffff, 0x4, 0x5, 0x2, 0x8, 0x0, 0xfff, 0x0, 0x15a8}, 0x0, 0xe, 0xffffffffffffffff, 0x9) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce00013000020", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000230000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 643.01062ms ago: executing program 1 (id=4025): socket$kcm(0xa, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0600000000000000000000000000000000000000a5f4fe5bf070d9cc80f37cd5acf87f5401ac1ff06b4ea71d1dff520e336f7e83a19c1d9ab164c4f603", @ANYRES32], 0x50) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000001300)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x1, @remote, 'bridge_slave_1\x00'}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000840)="7e50ad76cccbee03a4bd8da085f1f9e1696c390d596a10e25839e0d94818674f069dd677f8972d672aa0cb4c837381b6612ffad4179e6c5e2469aa0bb60c230af567a521615a8792d0802d8876423ae5c2327c1e76a72e63acc2dca6584cdfd88081b9951b173ec5da866637af4ffc8bd801c80b0ab0b45460cc4244247b5a3d96c9075a51e791dab6342ed5ee3870156bde41ea9d51579266037683ae413da130a249056f1d4e6cad5d5a68117dcd784b1ac68c956c1c0c683c364dba1f1ccbf0360cdae5c197bd561a2964499248c7a4053a864a7b783b08a9a8a875848ca2f4e771a8", 0xe4}, {&(0x7f0000000940)="c80e40ab95022f73e4ce4934b1215100e94db5c994e2966d89f5e88fa3a24a24fe5539de8469da78c96cd4409e1c155e5d323516b6a3ce588f0c2aac34b28d6b200026e74f65663e205ffdbabb215b8fc58e046a1d15347dc873d9c7c91db63104ed93ca2761798ab73c4cfcce2a8827ac4c9d6cb50a5e5f1ad1ca3f44db5b02d9ee716af70b9d361d0f14bdc0b5c616241005d8984464aebc7ab24ccad8ebdd9b949de0575888bb6e40ec", 0xab}, {&(0x7f0000000a00)="033caa3f7ecf587e7077b2456625f2681490ce99d27de2662200dd33301bb24dcad1a104b364af65b6e07d978ac7aeaad9cc36b6fd7e531bdc5dcaf2548eded6639d1cfc71e7ddedcc1d13c81933b45898e9cdef77db504b4f2ab1a14fd8e282a5a09e45e3eca31556312004bffa5652b1fb02a430e83813663709a79099f468994d1dc6771de99ae1039adcdb7a9f8380520f403d1389d9aef9e6881867cb7752aa1085d0f73d0320d4c43bbce0abb705421916dd5deabd466e8b59180c8099d02c3ce7f430c03dfa5d0908eac2c999188ccb69d93ef2a70440c8860ad798aeeb3e5a12ce4bb21073ec3dbbe58cb557e22e41c4db515c0cc5", 0xf9}, {&(0x7f0000000b00)="74876468454901043ea896647c92b0d6e60e726b80960c2a6c07459ab85639e4c1859c9a97783d907679d52e46fa805fecc536c98b90ac276aea14ff6142b97e6096d25f5e2e2c02f842a2ce751af393f9aedfc5683e54512b47d5165de288f20903d006b02b4fd065fb899188f15a54ea5448ffd1124efca04cfe20e2cf7c3aca4c90c36ebd633fda7da25730322740b36b7fb60057a438efdc667ce2a8a89f1662c51afcbb5ab9e8e6880d6651eecef9c141eb221ab8513165f96c7705a30e6f6d01fdb7ee8fcedf723f802ad06474e8bcaecbbecf8275c5789a9bb6c4c9dd4989dfdef875be01808fe1c0", 0xec}], 0x4, 0x0, 0x2c8}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000700000045c80024577d750000000000000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) sendmsg(r4, 0x0, 0x40001) recvmsg$kcm(r4, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/231, 0xe7}, 0x100) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 642.01273ms ago: executing program 0 (id=4026): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x38000, 0x9e4, 0x5, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x5d}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001f40)={0xffffffffffffffff, 0x20, &(0x7f0000001f00)={&(0x7f0000000e40)=""/4096, 0x1000, 0x0, &(0x7f0000001e40)=""/148, 0x94}}, 0x10) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000)=r7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x13, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0x0, 0x301}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2c, r7, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 628.100391ms ago: executing program 2 (id=4027): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 422.797057ms ago: executing program 1 (id=4028): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/447], 0x1c8}, 0x4000c010) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x1e, 0x1, 0x0) recvmsg(r0, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f00000024c0)=""/4096, 0x1000}, 0x100) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000005200)={0x1d, 0x19, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000100000000000000e2d4000018110000", @ANYRES32=r3, @ANYBLOB="000000000000fcffb702000014000000b7030000000000008500000083000000bf0902000000000055090100000000009500000000000000184700000700000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800e3ffb6030000020006000000000000000000bf91000000000000b702feff000000008500000085000000b70000000000000095000000000000001848315f3873d026731378018d157df76d280efab9713419b0a4dc25c8f886ec05207b6e48ae467d77a1210a68a219885e36be51b9578412261f941d92338ac89b6f7619799fca4362a61ef86008f972bccc0cd3ecd475e7ffb0be6f8a7daa38d07b872205b6dbf1af3304d49508ae8f1e6300ab95cf832b7cc0e29bb30aedd87b581dbf56102569b07303ee47329a7969d60d7504d7ade977d324fd115b494e78d86f69e73dec497c988efd71f5c69e0c912b62e36bf6a352ecda6a94b7553ba558bfe3cf27ff1098e175bea48345b1c7d2f48aa6688b6d25bf277ed3acb273737090941ca7091fb75c65739a983e909776d12dbed3a29054fa38ff3360956133cca821"], 0x0, 0xffffff80, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xc1b3a6caf9398824, r2, 0x8, &(0x7f0000005100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000005140)={0x0, 0x7, 0xfffffffc, 0x7}, 0x10, 0x0, r1, 0x0, &(0x7f0000005180)=[r2, 0x1], &(0x7f00000051c0), 0x10, 0x6}, 0x94) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}, 0x10002) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r4], 0x12) 354.618479ms ago: executing program 2 (id=4029): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, 0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 199.277384ms ago: executing program 3 (id=4030): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4014) 61.133268ms ago: executing program 3 (id=4031): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x38000, 0x9e4, 0x5, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x5d}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) close(r0) 24.17935ms ago: executing program 1 (id=4032): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) recvmsg$kcm(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000001b40), 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x19, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYRESOCT=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000062007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002a500060020000000950000000000000000000000000000f731f698"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b07, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r12}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r9}, 0x20) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0xfe, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) 0s ago: executing program 2 (id=4033): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001980)=""/4093, 0xffd}], 0x1}, 0x40000042) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x400}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r1) r5 = socket$kcm(0xa, 0x7, 0x106) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x378f}, 0x1, 0xfffffffffffffffe, 0x4, 0x6, 0xfffffffffffffffe, 0x2080000a, 0xfffb, 0x0, 0x5}, 0x0, 0x8004, 0xffffffffffffffff, 0xd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a40001", 0x37}], 0x1}, 0x20004000) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0x80, 0x0}, 0xe07e872420dfcfca) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESDEC=r6, @ANYRES32=r5, @ANYRES8, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd"], 0xfdef) kernel console output (not intermixed with test programs): 5360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.603235][T11747] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 587.609125][T11747] Node 0 DMA32 free:1481916kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21148kB inactive_anon:0kB active_file:69572kB inactive_file:159520kB unevictable:1536kB writepending:1176kB present:3129332kB managed:2586944kB mlocked:0kB bounce:0kB free_pcp:28404kB local_pcp:7644kB free_cma:0kB [ 587.664725][T11747] lowmem_reserve[]: 0 0 0 0 0 [ 587.669542][T11747] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 587.696652][T11747] lowmem_reserve[]: 0 0 0 0 0 [ 587.704140][T11747] Node 1 Normal free:3898304kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11776kB local_pcp:4704kB free_cma:0kB [ 587.744968][T11759] validate_nla: 5 callbacks suppressed [ 587.745007][T11759] netlink: 'syz.2.2207': attribute type 29 has an invalid length. [ 587.768520][T11759] netlink: 'syz.2.2207': attribute type 29 has an invalid length. [ 587.777087][T11747] lowmem_reserve[]: 0 0 0 0 0 [ 587.785616][T11747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 587.798714][T11760] netlink: 'syz.2.2207': attribute type 29 has an invalid length. [ 587.808485][T11763] netlink: 'syz.2.2207': attribute type 29 has an invalid length. [ 587.818885][T11747] Node 0 DMA32: 3844*4kB (UME) 2334*8kB (UME) 2082*16kB (UME) 1125*32kB (UM) 198*64kB (UME) 85*128kB (UME) 126*256kB (UME) 71*512kB (UME) 52*1024kB (UM) 12*2048kB (UME) 295*4096kB (UM) = 1481664kB [ 587.842223][T11747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 587.854882][T11747] Node 1 Normal: 228*4kB (UME) 46*8kB (UME) 34*16kB (UME) 139*32kB (UME) 39*64kB (UE) 7*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3898304kB [ 587.874807][T11747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.884672][T11747] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 587.896091][T11762] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2208'. [ 587.908064][T11747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.921311][T11747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 587.934859][T11759] netlink: 'syz.2.2207': attribute type 29 has an invalid length. [ 587.945624][T11747] 58909 total pagecache pages [ 587.952432][T11747] 0 pages in swap cache [ 587.956611][T11747] Free swap = 124996kB [ 587.970822][T11747] Total swap = 124996kB [ 587.975312][T11747] 2097051 pages RAM [ 587.979369][T11747] 0 pages HighMem/MovableOnly [ 587.984778][T11747] 416929 pages reserved [ 587.989089][T11747] 0 pages cma reserved [ 588.165106][T11771] netlink: 'syz.2.2212': attribute type 33 has an invalid length. [ 588.194328][T11771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2212'. [ 588.393873][T11776] netlink: 'syz.0.2214': attribute type 10 has an invalid length. [ 588.499943][T11780] netlink: 'syz.2.2216': attribute type 10 has an invalid length. [ 589.255782][T11784] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2217'. [ 589.415219][T11786] netlink: 'syz.2.2218': attribute type 29 has an invalid length. [ 589.440276][T11786] netlink: 'syz.2.2218': attribute type 29 has an invalid length. [ 589.762057][T11801] FAULT_INJECTION: forcing a failure. [ 589.762057][T11801] name failslab, interval 1, probability 0, space 0, times 0 [ 589.802411][T11801] CPU: 0 PID: 11801 Comm: syz.1.2223 Not tainted syzkaller #0 [ 589.809977][T11801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 589.820112][T11801] Call Trace: [ 589.823465][T11801] [ 589.826478][T11801] dump_stack_lvl+0x18c/0x250 [ 589.831255][T11801] ? show_regs_print_info+0x20/0x20 [ 589.836536][T11801] ? load_image+0x420/0x420 [ 589.841161][T11801] ? __might_sleep+0xe0/0xe0 [ 589.845835][T11801] ? __lock_acquire+0x7d40/0x7d40 [ 589.850964][T11801] should_fail_ex+0x39d/0x4d0 [ 589.855755][T11801] should_failslab+0x9/0x20 [ 589.860350][T11801] slab_pre_alloc_hook+0x59/0x310 [ 589.865476][T11801] ? __get_vm_area_node+0x125/0x370 [ 589.870759][T11801] __kmem_cache_alloc_node+0x53/0x250 [ 589.876229][T11801] ? __get_vm_area_node+0x125/0x370 [ 589.881522][T11801] kmalloc_node_trace+0x26/0xe0 [ 589.886473][T11801] __get_vm_area_node+0x125/0x370 [ 589.891610][T11801] __vmalloc_node_range+0x36e/0x1330 [ 589.896990][T11801] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 589.902625][T11801] ? __lock_acquire+0x7d40/0x7d40 [ 589.907729][T11801] ? mark_lock+0x94/0x320 [ 589.912189][T11801] ? trace_call_bpf+0xc3/0x6c0 [ 589.917072][T11801] ? free_vm_area+0x50/0x50 [ 589.921669][T11801] ? end_current_label_crit_section+0x170/0x170 [ 589.928020][T11801] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 589.933658][T11801] __vmalloc+0x7a/0x90 [ 589.937805][T11801] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 589.943432][T11801] bpf_prog_alloc_no_stats+0x47/0x440 [ 589.948884][T11801] ? bpf_prog_alloc+0x2b/0x1a0 [ 589.953737][T11801] bpf_prog_alloc+0x3d/0x1a0 [ 589.958426][T11801] bpf_prog_load+0x6eb/0x1670 [ 589.963260][T11801] ? map_freeze+0x420/0x420 [ 589.967874][T11801] ? __might_fault+0xaa/0x120 [ 589.972642][T11801] ? __lock_acquire+0x7d40/0x7d40 [ 589.977757][T11801] ? file_end_write+0x159/0x250 [ 589.982723][T11801] ? __might_fault+0xaa/0x120 [ 589.987479][T11801] ? __might_fault+0xc6/0x120 [ 589.992248][T11801] ? __might_fault+0xaa/0x120 [ 589.997011][T11801] ? bpf_lsm_bpf+0x9/0x10 [ 590.001427][T11801] ? security_bpf+0x7e/0xa0 [ 590.006026][T11801] __sys_bpf+0x5ba/0x890 [ 590.010359][T11801] ? bpf_link_show_fdinfo+0x390/0x390 [ 590.015867][T11801] ? lock_chain_count+0x20/0x20 [ 590.020835][T11801] __x64_sys_bpf+0x7c/0x90 [ 590.025341][T11801] do_syscall_64+0x55/0xb0 [ 590.029827][T11801] ? clear_bhb_loop+0x40/0x90 [ 590.034604][T11801] ? clear_bhb_loop+0x40/0x90 [ 590.039376][T11801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 590.045353][T11801] RIP: 0033:0x7f5909f9ce59 [ 590.049850][T11801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.069549][T11801] RSP: 002b:00007f590af12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 590.078152][T11801] RAX: ffffffffffffffda RBX: 00007f590a215fa0 RCX: 00007f5909f9ce59 [ 590.086237][T11801] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 590.094286][T11801] RBP: 00007f590af12090 R08: 0000000000000000 R09: 0000000000000000 [ 590.102331][T11801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.110386][T11801] R13: 00007f590a216038 R14: 00007f590a215fa0 R15: 00007ffd363e8338 [ 590.118503][T11801] [ 590.660332][T11819] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2229'. [ 592.058092][T11854] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2244'. [ 592.589701][T11869] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2250'. [ 592.642073][T11869] hsr_slave_0: left promiscuous mode [ 593.276420][T11869] hsr_slave_1: left promiscuous mode [ 593.362839][T11874] validate_nla: 22 callbacks suppressed [ 593.362856][T11874] netlink: 'syz.3.2251': attribute type 21 has an invalid length. [ 593.379207][T11875] netlink: 'syz.3.2251': attribute type 10 has an invalid length. [ 593.577694][T11884] netlink: 'syz.3.2254': attribute type 10 has an invalid length. [ 593.718346][T11892] netlink: 'syz.3.2258': attribute type 29 has an invalid length. [ 593.741900][T11892] netlink: 'syz.3.2258': attribute type 29 has an invalid length. [ 593.763094][T11899] netlink: 'syz.3.2258': attribute type 29 has an invalid length. [ 593.775151][T11892] netlink: 'syz.3.2258': attribute type 29 has an invalid length. [ 593.815171][T11892] netlink: 'syz.3.2258': attribute type 29 has an invalid length. [ 593.877287][T11900] netlink: 'syz.0.2260': attribute type 10 has an invalid length. [ 594.171306][T11912] netlink: 'syz.1.2262': attribute type 21 has an invalid length. [ 596.234802][T11962] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2283'. [ 596.947196][T11962] erspan0: refused to change device tx_queue_len [ 596.961121][T11962] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 597.033109][T11965] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2283'. [ 599.107035][T11968] validate_nla: 15 callbacks suppressed [ 599.107069][T11968] netlink: 'syz.1.2284': attribute type 10 has an invalid length. [ 599.158667][T11970] netlink: 'syz.3.2285': attribute type 29 has an invalid length. [ 599.185877][T11970] netlink: 'syz.3.2285': attribute type 29 has an invalid length. [ 599.195819][T11973] netlink: 'syz.3.2285': attribute type 29 has an invalid length. [ 599.234526][T11970] netlink: 'syz.3.2285': attribute type 29 has an invalid length. [ 599.267655][T11970] netlink: 'syz.3.2285': attribute type 29 has an invalid length. [ 599.280287][T11975] netlink: 'syz.1.2288': attribute type 10 has an invalid length. [ 599.371818][T11977] netlink: 'syz.2.2287': attribute type 29 has an invalid length. [ 599.398811][T11977] netlink: 'syz.2.2287': attribute type 29 has an invalid length. [ 599.413250][T11979] netlink: 'syz.2.2287': attribute type 29 has an invalid length. [ 599.655197][T11986] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2292'. [ 599.714601][T11986] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2292'. [ 600.912872][T11996] FAULT_INJECTION: forcing a failure. [ 600.912872][T11996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.951166][T11996] CPU: 1 PID: 11996 Comm: syz.2.2296 Not tainted syzkaller #0 [ 600.958730][T11996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 600.968851][T11996] Call Trace: [ 600.972181][T11996] [ 600.975152][T11996] dump_stack_lvl+0x18c/0x250 [ 600.979889][T11996] ? show_regs_print_info+0x20/0x20 [ 600.985147][T11996] ? load_image+0x420/0x420 [ 600.989725][T11996] ? __lock_acquire+0x7d40/0x7d40 [ 600.994800][T11996] ? snprintf+0xe9/0x140 [ 600.999127][T11996] should_fail_ex+0x39d/0x4d0 [ 601.003899][T11996] _copy_to_user+0x2f/0xa0 [ 601.008368][T11996] simple_read_from_buffer+0xe7/0x150 [ 601.013815][T11996] proc_fail_nth_read+0x1e8/0x260 [ 601.018932][T11996] ? proc_fault_inject_write+0x360/0x360 [ 601.024633][T11996] ? fsnotify_perm+0x271/0x5e0 [ 601.029440][T11996] ? proc_fault_inject_write+0x360/0x360 [ 601.035130][T11996] vfs_read+0x28b/0x970 [ 601.039355][T11996] ? kernel_read+0x1e0/0x1e0 [ 601.044091][T11996] ? __fget_files+0x28/0x4b0 [ 601.048730][T11996] ? __fget_files+0x28/0x4b0 [ 601.053370][T11996] ? __fget_files+0x43d/0x4b0 [ 601.058126][T11996] ? __fdget_pos+0x2a3/0x330 [ 601.062767][T11996] ? ksys_read+0x75/0x260 [ 601.067172][T11996] ksys_read+0x150/0x260 [ 601.071478][T11996] ? vfs_write+0x990/0x990 [ 601.075955][T11996] ? lockdep_hardirqs_on+0x98/0x150 [ 601.081218][T11996] do_syscall_64+0x55/0xb0 [ 601.085674][T11996] ? clear_bhb_loop+0x40/0x90 [ 601.090396][T11996] ? clear_bhb_loop+0x40/0x90 [ 601.095127][T11996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.101073][T11996] RIP: 0033:0x7f3ea395d68e [ 601.105625][T11996] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 601.125278][T11996] RSP: 002b:00007f3ea4835fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 601.133747][T11996] RAX: ffffffffffffffda RBX: 00007f3ea48366c0 RCX: 00007f3ea395d68e [ 601.141765][T11996] RDX: 000000000000000f RSI: 00007f3ea48360a0 RDI: 0000000000000006 [ 601.149775][T11996] RBP: 00007f3ea4836090 R08: 0000000000000000 R09: 0000000000000000 [ 601.157784][T11996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.165800][T11996] R13: 00007f3ea3c16038 R14: 00007f3ea3c15fa0 R15: 00007ffd7414e798 [ 601.173861][T11996] [ 601.907229][T12016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2305'. [ 601.935997][T12016] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2305'. [ 602.733100][T12029] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 602.743249][T12029] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 602.751393][T12029] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 602.759854][T12029] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 602.781371][T12029] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 602.788824][T12029] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 604.841003][T12029] Bluetooth: hci4: command tx timeout [ 605.192692][T12034] validate_nla: 12 callbacks suppressed [ 605.192726][T12034] netlink: 'syz.1.2312': attribute type 10 has an invalid length. [ 605.314490][ T2970] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.451406][ T2970] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.563645][ T2970] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.639890][T12048] netlink: 'syz.2.2316': attribute type 29 has an invalid length. [ 605.690005][ T2970] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.704668][T12048] netlink: 'syz.2.2316': attribute type 29 has an invalid length. [ 605.723902][T12049] netlink: 'syz.2.2316': attribute type 29 has an invalid length. [ 605.733265][T12048] netlink: 'syz.2.2316': attribute type 29 has an invalid length. [ 605.756897][T12048] netlink: 'syz.2.2316': attribute type 29 has an invalid length. [ 605.908819][T12028] chnl_net:caif_netlink_parms(): no params data found [ 606.071781][T12053] netlink: 'syz.3.2318': attribute type 10 has an invalid length. [ 606.079921][T12053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2318'. [ 606.160084][T12028] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.167481][T12028] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.174531][T12053] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2318'. [ 606.186528][T12028] bridge_slave_0: entered allmulticast mode [ 606.194423][T12028] bridge_slave_0: entered promiscuous mode [ 606.427040][T12028] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.434630][T12028] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.447087][T12028] bridge_slave_1: entered allmulticast mode [ 606.454937][T12028] bridge_slave_1: entered promiscuous mode [ 606.543997][T12028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.566725][T12028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.628581][T12028] team0: Port device team_slave_0 added [ 606.653942][T12028] team0: Port device team_slave_1 added [ 606.743534][T12028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.750639][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.840798][T12028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.863370][T12028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.870679][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.920462][T12029] Bluetooth: hci4: command tx timeout [ 606.934578][T12028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.967366][T12070] netlink: 'syz.3.2321': attribute type 10 has an invalid length. [ 607.489308][T12082] netlink: 'syz.3.2324': attribute type 29 has an invalid length. [ 607.529598][T12028] hsr_slave_0: entered promiscuous mode [ 607.561297][T12028] hsr_slave_1: entered promiscuous mode [ 607.635794][T12028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 607.654968][T12028] Cannot create hsr debugfs directory [ 608.990985][T12029] Bluetooth: hci4: command tx timeout [ 609.298454][T12082] netlink: 'syz.3.2324': attribute type 29 has an invalid length. [ 609.594488][T12103] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2328'. [ 609.670155][T12103] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2328'. [ 611.071023][T12029] Bluetooth: hci4: command tx timeout [ 611.268041][T12137] validate_nla: 4 callbacks suppressed [ 611.268067][T12137] netlink: 'syz.1.2334': attribute type 10 has an invalid length. [ 614.260335][T12142] netlink: 'syz.2.2337': attribute type 10 has an invalid length. [ 614.392872][T12149] netlink: 'syz.1.2339': attribute type 10 has an invalid length. [ 614.415682][T12149] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2339'. [ 614.524037][T12149] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2339'. [ 614.575113][T12151] netlink: 'syz.2.2340': attribute type 10 has an invalid length. [ 614.594282][T12151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2340'. [ 614.623444][T12156] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2340'. [ 614.824948][T12028] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 614.928032][T12028] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 615.025939][T12028] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 615.065267][T12163] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2344'. [ 615.967257][ T2970] veth1_macvtap: left promiscuous mode [ 615.974026][ T2970] veth0_macvtap: left promiscuous mode [ 615.979745][ T2970] veth1_vlan: left promiscuous mode [ 617.583813][ T2970] team0 (unregistering): Port device team_slave_1 removed [ 617.632476][ T2970] team0 (unregistering): Port device C removed [ 618.022468][T12028] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 618.038193][T12175] netlink: 'syz.1.2347': attribute type 10 has an invalid length. [ 618.064467][T12211] netlink: 'syz.3.2351': attribute type 13 has an invalid length. [ 618.076089][T12211] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.2351'. [ 618.255819][T12028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.350482][T12028] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.417556][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.424855][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.470033][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.477317][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.532689][T12220] netlink: 'syz.3.2354': attribute type 10 has an invalid length. [ 618.540672][T12220] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2354'. [ 618.607885][T12225] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2355'. [ 618.654529][T12225] hsr_slave_0: left promiscuous mode [ 618.661078][T12220] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2354'. [ 618.678830][T12225] hsr_slave_1: left promiscuous mode [ 618.706654][T12225] bridge0: port 3(hsr0) entered disabled state [ 618.813468][T12225] hsr0 (unregistering): left allmulticast mode [ 618.819877][T12225] bridge0: port 3(hsr0) entered disabled state [ 619.664282][T12252] netlink: 'syz.3.2359': attribute type 10 has an invalid length. [ 620.091340][T12263] netlink: 'syz.3.2361': attribute type 29 has an invalid length. [ 620.103303][T12263] netlink: 'syz.3.2361': attribute type 29 has an invalid length. [ 620.130300][T12263] netlink: 'syz.3.2361': attribute type 29 has an invalid length. [ 620.198177][T12266] netlink: 'syz.3.2361': attribute type 29 has an invalid length. [ 620.311823][T12263] netlink: 'syz.3.2361': attribute type 29 has an invalid length. [ 620.406553][T12028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.628655][T12028] veth0_vlan: entered promiscuous mode [ 621.209374][T12278] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2365'. [ 622.900999][T12277] netlink: 'syz.2.2365': attribute type 10 has an invalid length. [ 622.909138][T12277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2365'. [ 623.001701][T12028] veth1_vlan: entered promiscuous mode [ 623.066965][T12028] veth0_macvtap: entered promiscuous mode [ 623.105822][T12028] veth1_macvtap: entered promiscuous mode [ 623.158606][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.177246][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.188634][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.199543][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.212133][T12028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.254502][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.288430][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.313323][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.327805][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.340498][T12028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.367997][T12286] netlink: 'syz.2.2368': attribute type 10 has an invalid length. [ 623.382030][T12028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.398403][T12289] FAULT_INJECTION: forcing a failure. [ 623.398403][T12289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.400047][T12028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.446632][T12028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.455782][T12289] CPU: 0 PID: 12289 Comm: syz.1.2369 Not tainted syzkaller #0 [ 623.463301][T12289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 623.473404][T12289] Call Trace: [ 623.476710][T12289] [ 623.479684][T12289] dump_stack_lvl+0x18c/0x250 [ 623.484421][T12289] ? show_regs_print_info+0x20/0x20 [ 623.489679][T12289] ? load_image+0x420/0x420 [ 623.494248][T12289] ? __might_fault+0xaa/0x120 [ 623.498979][T12289] ? __lock_acquire+0x7d40/0x7d40 [ 623.499382][T12028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.504039][T12289] should_fail_ex+0x39d/0x4d0 [ 623.504078][T12289] _copy_from_iter+0x1d9/0x12e0 [ 623.504108][T12289] ? slab_post_alloc_hook+0x8a/0x4b0 [ 623.504137][T12289] ? __virt_addr_valid+0x18c/0x540 [ 623.504198][T12289] ? __lock_acquire+0x7d40/0x7d40 [ 623.504222][T12289] ? rcu_is_watching+0x15/0xb0 [ 623.542774][T12289] ? copyout_mc+0x70/0x70 [ 623.547167][T12289] ? __virt_addr_valid+0x18c/0x540 [ 623.552334][T12289] ? __virt_addr_valid+0x18c/0x540 [ 623.557501][T12289] ? __virt_addr_valid+0x469/0x540 [ 623.562668][T12289] ? __check_object_size+0x506/0xa20 [ 623.568002][T12289] netlink_sendmsg+0x76b/0xbf0 [ 623.572824][T12289] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 623.578692][T12289] ? netlink_getsockopt+0x590/0x590 [ 623.583957][T12289] ? aa_sock_msg_perm+0x94/0x150 [ 623.588952][T12289] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 623.594286][T12289] ? security_socket_sendmsg+0x80/0xa0 [ 623.599798][T12289] ? netlink_getsockopt+0x590/0x590 [ 623.605059][T12289] ____sys_sendmsg+0x5ba/0x960 [ 623.609878][T12289] ? __asan_memset+0x22/0x40 [ 623.614517][T12289] ? __sys_sendmsg_sock+0x30/0x30 [ 623.619584][T12289] ? __import_iovec+0x5f2/0x850 [ 623.624492][T12289] ? import_iovec+0x73/0xa0 [ 623.629045][T12289] ___sys_sendmsg+0x2a6/0x360 [ 623.633776][T12289] ? __sys_sendmsg+0x2a0/0x2a0 [ 623.638612][T12289] ? trace_call_bpf+0xc3/0x6c0 [ 623.643431][T12289] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 623.649751][T12289] __se_sys_sendmsg+0x1c2/0x2b0 [ 623.654649][T12289] ? __x64_sys_sendmsg+0x80/0x80 [ 623.659647][T12289] ? lockdep_hardirqs_on+0x98/0x150 [ 623.664906][T12289] do_syscall_64+0x55/0xb0 [ 623.669363][T12289] ? clear_bhb_loop+0x40/0x90 [ 623.674084][T12289] ? clear_bhb_loop+0x40/0x90 [ 623.678810][T12289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.684755][T12289] RIP: 0033:0x7f5909f9ce59 [ 623.689214][T12289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.708870][T12289] RSP: 002b:00007f590af12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.717347][T12289] RAX: ffffffffffffffda RBX: 00007f590a215fa0 RCX: 00007f5909f9ce59 [ 623.725396][T12289] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 623.733430][T12289] RBP: 00007f590af12090 R08: 0000000000000000 R09: 0000000000000000 [ 623.741445][T12289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.749736][T12289] R13: 00007f590a216038 R14: 00007f590a215fa0 R15: 00007ffd363e8338 [ 623.757769][T12289] [ 623.887144][ T6468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.915600][ T6468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.987644][T12294] netlink: 'syz.2.2371': attribute type 29 has an invalid length. [ 623.999233][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.024040][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.061581][T12294] netlink: 'syz.2.2371': attribute type 29 has an invalid length. [ 624.119790][T12299] netlink: 'syz.2.2371': attribute type 29 has an invalid length. [ 624.201182][T12301] netlink: 'syz.2.2371': attribute type 29 has an invalid length. [ 624.303982][T12294] netlink: 'syz.2.2371': attribute type 29 has an invalid length. [ 624.372552][T12304] netlink: 'syz.0.2309': attribute type 10 has an invalid length. [ 624.415651][T12304] geneve0: entered promiscuous mode [ 624.441230][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.447627][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.591184][T12304] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 624.686433][T12311] netlink: 'syz.2.2375': attribute type 10 has an invalid length. [ 624.711391][T12311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2375'. [ 624.808674][T12311] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2375'. [ 626.337505][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 626.349839][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 626.451033][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 626.460630][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 626.469762][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 626.528353][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 627.693600][T12322] netlink: 'syz.3.2378': attribute type 10 has an invalid length. [ 627.694177][T12324] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2379'. [ 627.978613][T12332] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2381'. [ 628.016683][T12336] netlink: 'syz.0.2384': attribute type 29 has an invalid length. [ 628.288994][T12318] chnl_net:caif_netlink_parms(): no params data found [ 628.375428][T12344] validate_nla: 4 callbacks suppressed [ 628.375447][T12344] netlink: 'syz.2.2386': attribute type 10 has an invalid length. [ 628.400945][T12344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2386'. [ 628.474265][T12344] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2386'. [ 628.601360][T12029] Bluetooth: hci1: command tx timeout [ 630.671063][T12029] Bluetooth: hci1: command tx timeout [ 631.359133][T12350] netlink: 'syz.0.2388': attribute type 10 has an invalid length. [ 631.704834][T12377] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2390'. [ 631.836788][T12318] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.856317][T12318] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.881193][T12318] bridge_slave_0: entered allmulticast mode [ 631.899072][T12383] netlink: 'syz.2.2393': attribute type 29 has an invalid length. [ 631.909114][T12318] bridge_slave_0: entered promiscuous mode [ 631.960649][T12380] netlink: 'syz.0.2392': attribute type 10 has an invalid length. [ 631.972275][T12383] netlink: 'syz.2.2393': attribute type 29 has an invalid length. [ 631.990090][T12318] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.007451][T12318] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.015506][T12318] bridge_slave_1: entered allmulticast mode [ 632.032757][T12318] bridge_slave_1: entered promiscuous mode [ 632.069753][T12384] netlink: 'syz.2.2393': attribute type 29 has an invalid length. [ 632.094321][T12387] netlink: 'syz.2.2393': attribute type 29 has an invalid length. [ 632.144051][T12389] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2395'. [ 632.187597][T12384] netlink: 'syz.2.2393': attribute type 29 has an invalid length. [ 632.304080][T12318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.339317][T12318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.761894][T12029] Bluetooth: hci1: command tx timeout [ 633.299039][T12398] netlink: 'syz.2.2398': attribute type 10 has an invalid length. [ 633.312954][T12401] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2397'. [ 633.400838][T12401] hsr_slave_0: left promiscuous mode [ 633.409503][T12401] hsr_slave_1: left promiscuous mode [ 633.537610][T12318] team0: Port device team_slave_0 added [ 633.554048][T12417] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2399'. [ 633.578463][T12318] team0: Port device team_slave_1 added [ 633.688610][T12415] netlink: 'syz.2.2399': attribute type 10 has an invalid length. [ 633.703142][T12415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2399'. [ 633.813466][T12422] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2401'. [ 633.840115][T12318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.871341][T12318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.913486][T12318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.927752][T12318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.940192][T12318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.989809][T12318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.319089][T12434] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2404'. [ 634.830988][T12029] Bluetooth: hci1: command tx timeout [ 637.118515][T12318] hsr_slave_0: entered promiscuous mode [ 637.129019][T12318] hsr_slave_1: entered promiscuous mode [ 637.137075][T12318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.146886][T12318] Cannot create hsr debugfs directory [ 637.161776][T12444] netlink: 'syz.2.2406': attribute type 10 has an invalid length. [ 637.393150][T12457] netlink: 'syz.0.2414': attribute type 10 has an invalid length. [ 637.502028][T12456] netlink: 'syz.2.2407': attribute type 10 has an invalid length. [ 637.652106][T12464] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2410'. [ 637.814689][T12468] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2411'. [ 637.831390][T12466] netlink: 'syz.2.2411': attribute type 10 has an invalid length. [ 637.844490][T12466] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2411'. [ 637.905758][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.921022][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.947475][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.971039][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.981903][ T146] bridge0: port 4(batadv0) entered disabled state [ 637.999355][ T146] bridge_slave_1: left allmulticast mode [ 638.005886][ T146] bridge_slave_1: left promiscuous mode [ 638.012456][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.023337][ T146] bridge_slave_0: left allmulticast mode [ 638.029038][ T146] bridge_slave_0: left promiscuous mode [ 638.036467][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.065685][ T146] veth1_vlan: left promiscuous mode [ 638.846925][ T146] team0 (unregistering): Port device geneve1 removed [ 639.824826][ T146] team0 (unregistering): Port device team_slave_1 removed [ 639.886346][ T146] team0 (unregistering): Port device team_slave_0 removed [ 640.461787][T12487] netlink: 'syz.0.2417': attribute type 10 has an invalid length. [ 640.883023][T12498] netlink: 'syz.0.2427': attribute type 10 has an invalid length. [ 640.997919][T12501] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2421'. [ 641.093860][T12503] netlink: 'syz.3.2420': attribute type 10 has an invalid length. [ 641.344542][T12514] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2423'. [ 641.406328][T12510] netlink: 'syz.2.2423': attribute type 10 has an invalid length. [ 641.450541][T12510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2423'. [ 641.777682][T12318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 642.105835][T12318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 644.554113][T12318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 644.596435][T12318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 644.754124][T12539] netlink: 'syz.0.2430': attribute type 10 has an invalid length. [ 644.869467][T12542] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2431'. [ 644.889022][T12318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.921577][T12318] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.957543][ T6481] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.964850][ T6481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.028506][ T6481] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.035757][ T6481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.449134][T12318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.518659][T12318] veth0_vlan: entered promiscuous mode [ 645.548865][T12318] veth1_vlan: entered promiscuous mode [ 645.590080][T12318] veth0_macvtap: entered promiscuous mode [ 645.607450][T12318] veth1_macvtap: entered promiscuous mode [ 645.644990][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.658411][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.669849][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.681761][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.694013][T12318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.712648][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.723351][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.734591][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.745259][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.756697][T12318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.770545][T12318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.780259][T12318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.789529][T12318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.798789][T12318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.885109][ T6468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.911183][ T6468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.949915][ T6487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.970879][ T6487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.238271][T12575] netlink: 'syz.1.2377': attribute type 10 has an invalid length. [ 646.297523][T12575] geneve0: entered promiscuous mode [ 646.493266][T12575] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 646.537802][T12579] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2441'. [ 646.823332][T12584] netlink: 'syz.2.2435': attribute type 10 has an invalid length. [ 646.860810][T12584] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2435'. [ 646.933292][T12592] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2435'. [ 646.961742][T12589] netlink: 'syz.1.2434': attribute type 10 has an invalid length. [ 647.263311][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 647.277840][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 647.286538][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 647.309913][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 647.321099][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 647.329155][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 647.516805][ T6487] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.634530][ T6487] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.894097][ T6487] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.027836][T12615] netlink: 'syz.0.2440': attribute type 10 has an invalid length. [ 648.452796][ T6487] bond0: (slave netdevsim0): Releasing backup interface [ 648.481858][ T6487] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.648792][T12627] netlink: 'syz.0.2444': attribute type 10 has an invalid length. [ 649.179154][T12645] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2446'. [ 649.216394][T12645] hsr_slave_0: left promiscuous mode [ 649.253648][T12645] hsr_slave_1: left promiscuous mode [ 649.309695][T12645] bridge0: port 3(hsr0) entered disabled state [ 649.405782][ T5785] Bluetooth: hci0: command tx timeout [ 649.428394][T12645] hsr0 (unregistering): left allmulticast mode [ 649.461381][T12645] bridge0: port 3(hsr0) entered disabled state [ 649.498179][T12661] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2452'. [ 649.556730][T12657] netlink: 'syz.0.2452': attribute type 10 has an invalid length. [ 649.566082][T12657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2452'. [ 649.595473][T12657] batadv0: entered promiscuous mode [ 649.612021][T12657] batadv0: entered allmulticast mode [ 649.620060][T12657] bridge0: port 3(batadv0) entered blocking state [ 649.628604][T12657] bridge0: port 3(batadv0) entered disabled state [ 649.660233][T12657] bridge0: port 3(batadv0) entered blocking state [ 649.667403][T12657] bridge0: port 3(batadv0) entered forwarding state [ 649.697331][T12660] netlink: 'syz.1.2451': attribute type 10 has an invalid length. [ 649.847518][T12597] chnl_net:caif_netlink_parms(): no params data found [ 650.245342][ T6484] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 650.255361][ T6484] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 650.755869][T12597] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.777499][T12597] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.786739][T12597] bridge_slave_0: entered allmulticast mode [ 650.796167][T12597] bridge_slave_0: entered promiscuous mode [ 650.809918][T12682] netlink: 'syz.0.2455': attribute type 10 has an invalid length. [ 650.851228][T12597] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.858494][T12597] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.888642][T12597] bridge_slave_1: entered allmulticast mode [ 650.912860][T12597] bridge_slave_1: entered promiscuous mode [ 651.074500][T12597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.126147][T12597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.217749][T12701] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2460'. [ 651.466567][T12707] netlink: 'syz.0.2461': attribute type 10 has an invalid length. [ 651.482134][ T5785] Bluetooth: hci0: command tx timeout [ 651.698094][T12597] team0: Port device team_slave_0 added [ 651.928827][T12597] team0: Port device team_slave_1 added [ 652.303254][T12597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.310360][T12597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.341693][T12597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.423203][T12597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.430471][T12597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.466453][T12597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.480528][T12736] netlink: 'syz.0.2466': attribute type 10 has an invalid length. [ 652.633316][T12744] netlink: 'syz.2.2470': attribute type 39 has an invalid length. [ 653.353496][T12746] netlink: 'syz.0.2471': attribute type 10 has an invalid length. [ 653.421844][T12597] hsr_slave_0: entered promiscuous mode [ 653.451682][T12597] hsr_slave_1: entered promiscuous mode [ 653.481400][T12597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.501358][T12597] Cannot create hsr debugfs directory [ 653.551101][ T5785] Bluetooth: hci0: command tx timeout [ 655.630872][ T5785] Bluetooth: hci0: command tx timeout [ 656.912470][T12778] netlink: 'syz.1.2478': attribute type 10 has an invalid length. [ 657.006251][ T6487] hsr_slave_0: left promiscuous mode [ 657.024351][ T6487] hsr_slave_1: left promiscuous mode [ 657.098632][ T6487] veth1_vlan: left promiscuous mode [ 657.166258][T12786] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2479'. [ 657.479384][ T6487] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 658.238747][ T6487] team0 (unregistering): Port device team_slave_1 removed [ 658.296449][ T6487] team0 (unregistering): Port device team_slave_0 removed [ 658.339434][ T6487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.401415][ T6487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.661903][ T6487] bond0 (unregistering): (slave team0): Releasing backup interface [ 658.702846][ T6487] bond0 (unregistering): Released all slaves [ 658.755059][T12783] netlink: 'syz.1.2479': attribute type 10 has an invalid length. [ 658.763420][T12783] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2479'. [ 658.773134][T12783] batadv0: entered promiscuous mode [ 658.778692][T12783] batadv0: entered allmulticast mode [ 658.786089][T12783] bridge0: port 3(batadv0) entered blocking state [ 658.794009][T12783] bridge0: port 3(batadv0) entered disabled state [ 658.808955][T12783] bridge0: port 3(batadv0) entered blocking state [ 658.815633][T12783] bridge0: port 3(batadv0) entered forwarding state [ 658.836223][T12789] netlink: 'syz.2.2481': attribute type 10 has an invalid length. [ 658.845842][T12804] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2486'. [ 659.111885][T12806] netlink: 'syz.2.2487': attribute type 10 has an invalid length. [ 659.212012][ T6484] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 659.221484][ T6484] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 659.618795][T12597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 659.635359][T12597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 659.658254][T12597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 659.669868][T12597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 659.831563][T12597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.854466][T12597] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.879250][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.886501][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.906736][ T6468] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.913977][ T6468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.286737][T12597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.360534][T12597] veth0_vlan: entered promiscuous mode [ 660.386114][T12597] veth1_vlan: entered promiscuous mode [ 660.424358][T12597] veth0_macvtap: entered promiscuous mode [ 660.437984][T12597] veth1_macvtap: entered promiscuous mode [ 660.460970][T12597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.471721][T12597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.487167][T12597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.504178][T12597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.515581][T12597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.528989][T12597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.542164][T12597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.571773][T12597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.582486][T12597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.597287][T12597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.615117][T12597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.625503][T12597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.637152][T12597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.648918][T12597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.662117][T12597] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.671341][T12597] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.680088][T12597] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.689600][T12597] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.809620][ T6487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.826546][ T6487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.881961][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.889838][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.053986][T12850] netlink: 'syz.3.2443': attribute type 39 has an invalid length. [ 661.558773][T12852] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2498'. [ 663.279170][T12867] netlink: 'syz.0.2500': attribute type 10 has an invalid length. [ 664.095099][T12889] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2495'. [ 664.369225][T12888] netlink: 'syz.1.2495': attribute type 10 has an invalid length. [ 664.378449][T12888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2495'. [ 664.403404][T12886] netlink: 'syz.3.2494': attribute type 10 has an invalid length. [ 664.449295][T12886] geneve0: entered promiscuous mode [ 664.677001][T12886] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 666.140135][T12916] netlink: 'syz.0.2510': attribute type 29 has an invalid length. [ 666.175462][T12916] netlink: 'syz.0.2510': attribute type 29 has an invalid length. [ 666.209214][T12916] netlink: 'syz.0.2510': attribute type 29 has an invalid length. [ 666.409404][T12029] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 666.419485][T12029] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 666.437336][T12029] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 666.449797][T12029] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 666.467645][T12029] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 666.477131][T12029] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 666.550883][T12921] netlink: 'syz.1.2513': attribute type 10 has an invalid length. [ 666.561013][T12921] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2513'. [ 666.694403][ T6468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.718585][T12921] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2513'. [ 666.758467][T12924] netlink: 'syz.0.2512': attribute type 10 has an invalid length. [ 666.862303][ T6468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.989230][ T6468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.156255][ T6468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.896734][T12942] netlink: 'syz.1.2519': attribute type 10 has an invalid length. [ 668.236424][T12956] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2523'. [ 668.266191][T12919] chnl_net:caif_netlink_parms(): no params data found [ 668.339418][T12954] netlink: 'syz.0.2522': attribute type 10 has an invalid length. [ 668.602917][ T5785] Bluetooth: hci2: command tx timeout [ 668.727931][T12967] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2526'. [ 668.768149][T12963] netlink: 'syz.0.2526': attribute type 10 has an invalid length. [ 668.776430][T12963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2526'. [ 668.824496][T12970] netlink: 'syz.3.2528': attribute type 10 has an invalid length. [ 670.084123][T12985] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2531'. [ 670.471695][T12919] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.478903][T12919] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.490993][T12919] bridge_slave_0: entered allmulticast mode [ 670.512073][T12919] bridge_slave_0: entered promiscuous mode [ 670.537104][T12919] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.556992][T12919] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.571110][T12919] bridge_slave_1: entered allmulticast mode [ 670.583193][T12919] bridge_slave_1: entered promiscuous mode [ 670.670914][ T5785] Bluetooth: hci2: command tx timeout [ 671.003182][T12919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.036742][T12919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.751275][ T5785] Bluetooth: hci2: command tx timeout [ 673.028347][T13016] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2538'. [ 673.042600][T13016] hsr_slave_0: left promiscuous mode [ 673.061634][T13016] hsr_slave_1: left promiscuous mode [ 673.186318][T13019] netlink: 'syz.3.2539': attribute type 10 has an invalid length. [ 673.267711][T12919] team0: Port device team_slave_0 added [ 673.484082][T13026] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2541'. [ 673.525851][T13024] sctp: [Deprecated]: syz.0.2547 (pid 13024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 673.525851][T13024] Use struct sctp_sack_info instead [ 673.559117][T12919] team0: Port device team_slave_1 added [ 673.571977][T13022] netlink: 'syz.1.2540': attribute type 10 has an invalid length. [ 674.493456][T13040] netlink: 'syz.3.2546': attribute type 10 has an invalid length. [ 674.536423][T12919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.576285][T12919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.622444][T12919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.693956][T13046] netlink: 'syz.1.2548': attribute type 10 has an invalid length. [ 674.741813][T12919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.759278][T12919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.814090][T12919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.838280][ T5785] Bluetooth: hci2: command tx timeout [ 674.968286][T13052] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2549'. [ 675.062526][T13057] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2551'. [ 675.088827][T12919] hsr_slave_0: entered promiscuous mode [ 675.132473][T12919] hsr_slave_1: entered promiscuous mode [ 675.162803][T13059] netlink: 'syz.1.2550': attribute type 10 has an invalid length. [ 675.455505][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.477316][ T6468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.529521][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.539391][ T6468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.575191][ T6468] bridge0: port 4(batadv0) entered disabled state [ 675.608978][ T6468] bridge_slave_1: left allmulticast mode [ 675.633386][ T6468] bridge_slave_1: left promiscuous mode [ 675.639249][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.687382][T13077] sctp: [Deprecated]: syz.3.2555 (pid 13077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 675.687382][T13077] Use struct sctp_sack_info instead [ 675.714043][ T6468] bridge_slave_0: left allmulticast mode [ 675.721438][ T6468] bridge_slave_0: left promiscuous mode [ 675.733268][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.169029][ T6468] veth1_vlan: left promiscuous mode [ 676.690160][ T6468] team0 (unregistering): Port device team_slave_1 removed [ 677.098176][T13081] netlink: 'syz.0.2556': attribute type 10 has an invalid length. [ 677.111114][T13083] netlink: 'syz.1.2557': attribute type 10 has an invalid length. [ 677.378101][T13089] netlink: 'syz.3.2566': attribute type 10 has an invalid length. [ 677.470088][T13088] netlink: 'syz.0.2565': attribute type 10 has an invalid length. [ 677.777938][T13100] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2560'. [ 677.917627][T13098] netlink: 'syz.1.2559': attribute type 10 has an invalid length. [ 677.974036][T13106] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2561'. [ 678.519949][T12919] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 678.692329][T13128] netlink: 'syz.0.2569': attribute type 10 has an invalid length. [ 678.725749][T12919] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 678.753479][T12919] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 678.777232][T12919] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 678.999638][T13134] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2571'. [ 679.061875][T12919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.169955][T12919] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.209437][T13138] netlink: 'syz.1.2572': attribute type 10 has an invalid length. [ 679.227436][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.234712][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.281932][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.289154][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.362472][T13140] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2573'. [ 679.387584][T13140] hsr_slave_0: left promiscuous mode [ 679.399530][T13140] hsr_slave_1: left promiscuous mode [ 679.602960][T12919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 680.032128][T13158] netlink: 'syz.1.2577': attribute type 10 has an invalid length. [ 680.115718][T13161] netlink: 'syz.0.2578': attribute type 10 has an invalid length. [ 680.317900][T12919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.403724][T13174] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2581'. [ 680.552322][T12919] veth0_vlan: entered promiscuous mode [ 680.609210][T12919] veth1_vlan: entered promiscuous mode [ 680.740204][T12919] veth0_macvtap: entered promiscuous mode [ 680.791654][T12919] veth1_macvtap: entered promiscuous mode [ 680.840280][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.863127][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.893904][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.939214][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.954213][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.968850][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.982002][T12919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.038364][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.079647][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.101275][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.121675][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.140762][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.165500][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.184376][T12919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.200640][T13185] netlink: 'syz.3.2583': attribute type 10 has an invalid length. [ 681.275260][T12919] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.290993][T12919] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.299758][T12919] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.328664][T12919] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.668362][ T6487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.704866][ T6487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.728850][T13200] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2586'. [ 681.768175][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.800996][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.047969][T13214] netlink: 'syz.3.2589': attribute type 10 has an invalid length. [ 682.112788][T13213] netlink: 'syz.0.2588': attribute type 10 has an invalid length. [ 682.900171][T13243] FAULT_INJECTION: forcing a failure. [ 682.900171][T13243] name failslab, interval 1, probability 0, space 0, times 0 [ 682.948650][T13243] CPU: 0 PID: 13243 Comm: syz.3.2597 Not tainted syzkaller #0 [ 682.956213][T13243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 682.966322][T13243] Call Trace: [ 682.969644][T13243] [ 682.972615][T13243] dump_stack_lvl+0x18c/0x250 [ 682.977350][T13243] ? show_regs_print_info+0x20/0x20 [ 682.982599][T13243] ? load_image+0x420/0x420 [ 682.987161][T13243] ? __might_sleep+0xe0/0xe0 [ 682.991815][T13243] ? __lock_acquire+0x7d40/0x7d40 [ 682.996898][T13243] should_fail_ex+0x39d/0x4d0 [ 683.001643][T13243] should_failslab+0x9/0x20 [ 683.006212][T13243] slab_pre_alloc_hook+0x59/0x310 [ 683.011294][T13243] ? __get_vm_area_node+0x125/0x370 [ 683.016543][T13243] __kmem_cache_alloc_node+0x53/0x250 [ 683.021973][T13243] ? __get_vm_area_node+0x125/0x370 [ 683.027229][T13243] kmalloc_node_trace+0x26/0xe0 [ 683.032142][T13243] __get_vm_area_node+0x125/0x370 [ 683.037242][T13243] __vmalloc_node_range+0x36e/0x1330 [ 683.042586][T13243] ? netlink_sendmsg+0x602/0xbf0 [ 683.047582][T13243] ? netlink_insert+0x109f/0x13a0 [ 683.052677][T13243] ? netlink_data_ready+0x10/0x10 [ 683.057759][T13243] ? free_vm_area+0x50/0x50 [ 683.062324][T13243] ? netlink_sendmsg+0x602/0xbf0 [ 683.067318][T13243] vmalloc+0x79/0x90 [ 683.071267][T13243] ? netlink_sendmsg+0x602/0xbf0 [ 683.076260][T13243] netlink_sendmsg+0x602/0xbf0 [ 683.081090][T13243] ? netlink_getsockopt+0x590/0x590 [ 683.086353][T13243] ? aa_sock_msg_perm+0x94/0x150 [ 683.091341][T13243] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 683.096700][T13243] ? security_socket_sendmsg+0x80/0xa0 [ 683.102218][T13243] ? netlink_getsockopt+0x590/0x590 [ 683.107476][T13243] ____sys_sendmsg+0x5ba/0x960 [ 683.112298][T13243] ? __asan_memset+0x22/0x40 [ 683.116940][T13243] ? __sys_sendmsg_sock+0x30/0x30 [ 683.122011][T13243] ? __import_iovec+0x5f2/0x850 [ 683.126924][T13243] ? import_iovec+0x73/0xa0 [ 683.131480][T13243] ___sys_sendmsg+0x2a6/0x360 [ 683.136216][T13243] ? __sys_sendmsg+0x2a0/0x2a0 [ 683.141048][T13243] ? trace_call_bpf+0xc3/0x6c0 [ 683.145896][T13243] __se_sys_sendmsg+0x1c2/0x2b0 [ 683.150798][T13243] ? __x64_sys_sendmsg+0x80/0x80 [ 683.155797][T13243] ? lockdep_hardirqs_on+0x98/0x150 [ 683.161058][T13243] do_syscall_64+0x55/0xb0 [ 683.165521][T13243] ? clear_bhb_loop+0x40/0x90 [ 683.170250][T13243] ? clear_bhb_loop+0x40/0x90 [ 683.174981][T13243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 683.180930][T13243] RIP: 0033:0x7f569939ce59 [ 683.185394][T13243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.205052][T13243] RSP: 002b:00007f569a2c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.213521][T13243] RAX: ffffffffffffffda RBX: 00007f5699615fa0 RCX: 00007f569939ce59 [ 683.221542][T13243] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 683.229573][T13243] RBP: 00007f569a2c9090 R08: 0000000000000000 R09: 0000000000000000 [ 683.237605][T13243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.245622][T13243] R13: 00007f5699616038 R14: 00007f5699615fa0 R15: 00007ffff8b8c828 [ 683.253661][T13243] [ 683.321086][T13243] warn_alloc: 1 callbacks suppressed [ 683.321181][T13243] syz.3.2597: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 683.382837][T13246] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2598'. [ 683.396194][T13243] CPU: 0 PID: 13243 Comm: syz.3.2597 Not tainted syzkaller #0 [ 683.403720][T13243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 683.413815][T13243] Call Trace: [ 683.417130][T13243] [ 683.420102][T13243] dump_stack_lvl+0x18c/0x250 [ 683.424842][T13243] ? show_regs_print_info+0x20/0x20 [ 683.430088][T13243] ? load_image+0x420/0x420 [ 683.434661][T13243] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 683.441132][T13243] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 683.447691][T13243] warn_alloc+0x246/0x340 [ 683.452081][T13243] ? __get_vm_area_node+0x125/0x370 [ 683.457341][T13243] ? zone_watermark_ok_safe+0x230/0x230 [ 683.462941][T13243] ? rcu_is_watching+0x15/0xb0 [ 683.467768][T13243] ? __get_vm_area_node+0x356/0x370 [ 683.473118][T13243] __vmalloc_node_range+0x393/0x1330 [ 683.478471][T13243] ? netlink_insert+0x109f/0x13a0 [ 683.483575][T13243] ? netlink_data_ready+0x10/0x10 [ 683.488652][T13243] ? free_vm_area+0x50/0x50 [ 683.493222][T13243] ? netlink_sendmsg+0x602/0xbf0 [ 683.498220][T13243] vmalloc+0x79/0x90 [ 683.502199][T13243] ? netlink_sendmsg+0x602/0xbf0 [ 683.507200][T13243] netlink_sendmsg+0x602/0xbf0 [ 683.512027][T13243] ? netlink_getsockopt+0x590/0x590 [ 683.517289][T13243] ? aa_sock_msg_perm+0x94/0x150 [ 683.522282][T13243] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 683.527621][T13243] ? security_socket_sendmsg+0x80/0xa0 [ 683.533129][T13243] ? netlink_getsockopt+0x590/0x590 [ 683.538408][T13243] ____sys_sendmsg+0x5ba/0x960 [ 683.543229][T13243] ? __asan_memset+0x22/0x40 [ 683.545329][T13247] netlink: 'syz.0.2599': attribute type 10 has an invalid length. [ 683.547854][T13243] ? __sys_sendmsg_sock+0x30/0x30 [ 683.547880][T13243] ? __import_iovec+0x5f2/0x850 [ 683.547910][T13243] ? import_iovec+0x73/0xa0 [ 683.547934][T13243] ___sys_sendmsg+0x2a6/0x360 [ 683.547963][T13243] ? __sys_sendmsg+0x2a0/0x2a0 [ 683.548006][T13243] ? trace_call_bpf+0xc3/0x6c0 [ 683.584548][T13243] __se_sys_sendmsg+0x1c2/0x2b0 [ 683.589465][T13243] ? __x64_sys_sendmsg+0x80/0x80 [ 683.594468][T13243] ? lockdep_hardirqs_on+0x98/0x150 [ 683.599716][T13243] do_syscall_64+0x55/0xb0 [ 683.604184][T13243] ? clear_bhb_loop+0x40/0x90 [ 683.608914][T13243] ? clear_bhb_loop+0x40/0x90 [ 683.613659][T13243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 683.619609][T13243] RIP: 0033:0x7f569939ce59 [ 683.624078][T13243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.643729][T13243] RSP: 002b:00007f569a2c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.652200][T13243] RAX: ffffffffffffffda RBX: 00007f5699615fa0 RCX: 00007f569939ce59 [ 683.660212][T13243] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 683.668228][T13243] RBP: 00007f569a2c9090 R08: 0000000000000000 R09: 0000000000000000 [ 683.676242][T13243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.684250][T13243] R13: 00007f5699616038 R14: 00007f5699615fa0 R15: 00007ffff8b8c828 [ 683.692277][T13243] [ 683.738419][T13243] Mem-Info: [ 683.758018][T13243] active_anon:5678 inactive_anon:0 isolated_anon:0 [ 683.758018][T13243] active_file:17393 inactive_file:40179 isolated_file:0 [ 683.758018][T13243] unevictable:768 dirty:141 writeback:0 [ 683.758018][T13243] slab_reclaimable:10234 slab_unreclaimable:90100 [ 683.758018][T13243] mapped:24724 shmem:1361 pagetables:582 [ 683.758018][T13243] sec_pagetables:0 bounce:0 [ 683.758018][T13243] kernel_misc_reclaimable:0 [ 683.758018][T13243] free:1350534 free_pcp:9043 free_cma:0 [ 683.837382][T13254] netlink: 'syz.2.2600': attribute type 21 has an invalid length. [ 683.880783][T13243] Node 0 active_anon:22712kB inactive_anon:0kB active_file:69572kB inactive_file:160516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98896kB dirty:560kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10308kB pagetables:2228kB sec_pagetables:0kB all_unreclaimable? no [ 683.956887][T13255] netlink: 'syz.2.2600': attribute type 10 has an invalid length. [ 684.041300][T13243] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 684.077655][T13255] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.131413][T13243] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 684.172548][T13255] bond0: (slave team0): Enslaving as an active interface with an up link [ 684.181229][T13243] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 684.188447][T13243] Node 0 DMA32 free:1486680kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22616kB inactive_anon:0kB active_file:69572kB inactive_file:159700kB unevictable:1536kB writepending:592kB present:3129332kB managed:2586944kB mlocked:0kB bounce:0kB free_pcp:26420kB local_pcp:13000kB free_cma:0kB [ 684.263822][T13261] netlink: 'syz.1.2601': attribute type 10 has an invalid length. [ 684.310886][T13243] lowmem_reserve[]: 0 0 0 0 0 [ 684.335631][T13243] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 684.423713][T13243] lowmem_reserve[]: 0 0 0 0 0 [ 684.428852][T13243] Node 1 Normal free:3900096kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:9984kB local_pcp:3680kB free_cma:0kB [ 684.540227][T13243] lowmem_reserve[]: 0 0 0 0 0 [ 684.549135][T13243] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 684.566525][T13243] Node 0 DMA32: 342*4kB (UE) 560*8kB (UME) 920*16kB (UME) 1376*32kB (UM) 316*64kB (UM) 250*128kB (UM) 163*256kB (UM) 78*512kB (UME) 50*1024kB (UM) 14*2048kB (UME) 295*4096kB (UM) = 1486680kB [ 684.595626][T13243] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 684.608783][T13243] Node 1 Normal: 228*4kB (UME) 46*8kB (UME) 34*16kB (UME) 167*32kB (UME) 51*64kB (UE) 8*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3900096kB [ 684.627822][T13243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 684.637836][T13243] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 684.667540][T13243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 684.729171][T13243] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 684.748888][T13243] 58935 total pagecache pages [ 684.763913][T13243] 0 pages in swap cache [ 684.768134][T13243] Free swap = 124996kB [ 684.784151][T13243] Total swap = 124996kB [ 684.795593][T13243] 2097051 pages RAM [ 684.816289][T13243] 0 pages HighMem/MovableOnly [ 684.826145][T13243] 416929 pages reserved [ 684.830355][T13243] 0 pages cma reserved [ 685.100747][T13278] netlink: 'syz.3.2606': attribute type 10 has an invalid length. [ 685.376664][T13290] netlink: 'syz.3.2610': attribute type 10 has an invalid length. [ 685.468907][T13288] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2609'. [ 685.620426][T13297] netlink: 'syz.3.2612': attribute type 10 has an invalid length. [ 685.663004][T13300] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2614'. [ 685.679562][T13300] bridge_slave_1: default FDB implementation only supports local addresses [ 685.885855][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.892408][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.156835][T13315] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2618'. [ 686.251255][T13319] netlink: 'syz.0.2619': attribute type 10 has an invalid length. [ 686.259903][T13321] netlink: 'syz.3.2620': attribute type 10 has an invalid length. [ 687.178052][T13337] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2624'. [ 687.433217][T13341] netlink: 'syz.0.2625': attribute type 10 has an invalid length. [ 687.849620][T13348] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2627'. [ 687.982741][T13351] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2630'. [ 688.001123][T13351] bridge_slave_1: default FDB implementation only supports local addresses [ 688.260453][T13353] netlink: 'syz.1.2632': attribute type 10 has an invalid length. [ 688.277389][T13355] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2631'. [ 688.489485][T13362] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2634'. [ 689.103114][T13362] hsr_slave_0: left promiscuous mode [ 689.305210][T13362] hsr_slave_1: left promiscuous mode [ 689.425464][T13372] netlink: 'syz.3.2637': attribute type 10 has an invalid length. [ 689.438732][T13369] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2636'. [ 689.668198][T13374] netlink: 'syz.2.2638': attribute type 10 has an invalid length. [ 689.714534][T13374] geneve0: entered promiscuous mode [ 689.869408][T13374] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 689.903702][T13378] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2640'. [ 690.091536][T13388] netlink: 'syz.3.2643': attribute type 10 has an invalid length. [ 690.136668][T13390] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2644'. [ 690.324104][T13399] netlink: 'syz.3.2647': attribute type 10 has an invalid length. [ 690.529776][T13401] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2648'. [ 691.668502][T13417] netlink: 'syz.3.2653': attribute type 10 has an invalid length. [ 694.397858][T13421] netlink: 'syz.1.2655': attribute type 10 has an invalid length. [ 694.623811][T13426] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2656'. [ 694.762963][T13432] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2659'. [ 694.870408][T13437] netlink: 'syz.2.2660': attribute type 10 has an invalid length. [ 696.763312][T13461] netlink: 'syz.2.2667': attribute type 10 has an invalid length. [ 696.789816][T13461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2667'. [ 696.809804][T13461] batadv0: entered promiscuous mode [ 696.837188][T13461] batadv0: entered allmulticast mode [ 696.855079][T13463] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2667'. [ 696.883716][T13461] bridge0: port 3(batadv0) entered blocking state [ 696.907132][T13461] bridge0: port 3(batadv0) entered disabled state [ 696.983304][T13461] bridge0: port 3(batadv0) entered blocking state [ 696.990662][T13461] bridge0: port 3(batadv0) entered forwarding state [ 697.017826][ T6487] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 697.027313][ T6487] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 697.044041][T13462] netlink: 'syz.1.2666': attribute type 10 has an invalid length. [ 699.631784][T13474] netlink: 'syz.0.2669': attribute type 10 has an invalid length. [ 699.677833][T13476] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2670'. [ 701.034037][T13497] netlink: 'syz.3.2676': attribute type 10 has an invalid length. [ 701.264918][T13508] netlink: 'syz.3.2680': attribute type 10 has an invalid length. [ 701.280923][T13508] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2680'. [ 701.300896][T13508] batadv0: entered promiscuous mode [ 701.306650][T13508] batadv0: entered allmulticast mode [ 701.314334][T13508] bridge0: port 3(batadv0) entered blocking state [ 701.332596][T13508] bridge0: port 3(batadv0) entered disabled state [ 701.349536][T13509] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2680'. [ 701.419058][T13508] bridge0: port 3(batadv0) entered blocking state [ 701.426263][T13508] bridge0: port 3(batadv0) entered forwarding state [ 701.740980][T12147] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 701.750297][T12147] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 701.826881][T13513] netlink: 'syz.0.2681': attribute type 10 has an invalid length. [ 701.977777][T13518] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2683'. [ 705.745294][T13530] netlink: 'syz.2.2688': attribute type 10 has an invalid length. [ 706.042276][T13540] netlink: 'syz.0.2691': attribute type 10 has an invalid length. [ 706.050301][T13540] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2691'. [ 706.103316][T13541] netlink: 'syz.2.2692': attribute type 10 has an invalid length. [ 706.144608][T13540] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2691'. [ 706.212318][T13546] FAULT_INJECTION: forcing a failure. [ 706.212318][T13546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.225787][T13546] CPU: 0 PID: 13546 Comm: syz.3.2694 Not tainted syzkaller #0 [ 706.233332][T13546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 706.243453][T13546] Call Trace: [ 706.246796][T13546] [ 706.249792][T13546] dump_stack_lvl+0x18c/0x250 [ 706.254545][T13546] ? show_regs_print_info+0x20/0x20 [ 706.259844][T13546] ? load_image+0x420/0x420 [ 706.264420][T13546] ? __lock_acquire+0x7d40/0x7d40 [ 706.269522][T13546] should_fail_ex+0x39d/0x4d0 [ 706.274321][T13546] _copy_from_user+0x2f/0xe0 [ 706.278994][T13546] __copy_msghdr+0x3bb/0x580 [ 706.283672][T13546] ___sys_sendmsg+0x214/0x360 [ 706.288436][T13546] ? __sys_sendmsg+0x2a0/0x2a0 [ 706.293400][T13546] ? __lock_acquire+0x7d40/0x7d40 [ 706.298548][T13546] __se_sys_sendmsg+0x1c2/0x2b0 [ 706.303451][T13546] ? __x64_sys_sendmsg+0x80/0x80 [ 706.308466][T13546] ? lockdep_hardirqs_on+0x98/0x150 [ 706.313708][T13546] do_syscall_64+0x55/0xb0 [ 706.318144][T13546] ? clear_bhb_loop+0x40/0x90 [ 706.322843][T13546] ? clear_bhb_loop+0x40/0x90 [ 706.327544][T13546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 706.333475][T13546] RIP: 0033:0x7f569939ce59 [ 706.338043][T13546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.357784][T13546] RSP: 002b:00007f569a2c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.366227][T13546] RAX: ffffffffffffffda RBX: 00007f5699615fa0 RCX: 00007f569939ce59 [ 706.374221][T13546] RDX: 0000000000000800 RSI: 0000200000000b00 RDI: 0000000000000004 [ 706.382233][T13546] RBP: 00007f569a2c9090 R08: 0000000000000000 R09: 0000000000000000 [ 706.390257][T13546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.398268][T13546] R13: 00007f5699616038 R14: 00007f5699615fa0 R15: 00007ffff8b8c828 [ 706.406325][T13546] [ 706.479591][T13544] netlink: 'syz.1.2693': attribute type 10 has an invalid length. [ 706.554458][T13549] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2695'. [ 707.072412][T13566] netlink: 'syz.3.2700': attribute type 10 has an invalid length. [ 710.205204][T13573] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2702'. [ 710.385553][T13578] netlink: 'syz.0.2704': attribute type 10 has an invalid length. [ 710.478173][T13580] netlink: 'syz.1.2705': attribute type 10 has an invalid length. [ 710.534015][T13582] netlink: 'syz.2.2706': attribute type 10 has an invalid length. [ 710.585668][T13582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2706'. [ 710.675841][T13582] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2706'. [ 710.693156][T13584] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2707'. [ 710.943769][T13592] netlink: 668 bytes leftover after parsing attributes in process `syz.1.2709'. [ 710.971088][T13592] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 710.980139][T13592] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 711.014617][T13597] netlink: 'syz.3.2711': attribute type 10 has an invalid length. [ 714.190172][T13610] netlink: 'syz.0.2716': attribute type 10 has an invalid length. [ 714.388322][T13615] netlink: 'syz.1.2717': attribute type 10 has an invalid length. [ 714.469433][T13619] netlink: 'syz.0.2720': attribute type 10 has an invalid length. [ 714.478068][T13619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2720'. [ 714.519385][T13619] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2720'. [ 714.532525][T13617] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2719'. [ 714.722775][T13624] netlink: 'syz.1.2722': attribute type 10 has an invalid length. [ 715.713764][T13642] netlink: 'syz.1.2728': attribute type 10 has an invalid length. [ 715.904595][T13646] netlink: 'syz.3.2730': attribute type 10 has an invalid length. [ 715.949294][T13649] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2731'. [ 716.056139][T13651] netlink: 'syz.1.2732': attribute type 10 has an invalid length. [ 716.069566][T13651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2732'. [ 716.144752][T13651] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2732'. [ 718.901855][T13654] netlink: 'syz.2.2734': attribute type 10 has an invalid length. [ 719.103830][T13658] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2736'. [ 719.201142][T13666] netlink: 'syz.3.2739': attribute type 1 has an invalid length. [ 719.329683][T13670] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2739'. [ 719.346332][T13671] netlink: 'syz.0.2740': attribute type 10 has an invalid length. [ 720.210312][T13675] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2742'. [ 720.219206][T13673] netlink: 'syz.2.2741': attribute type 10 has an invalid length. [ 720.381944][T13677] netlink: 'syz.0.2743': attribute type 10 has an invalid length. [ 720.390118][T13677] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2743'. [ 720.433874][T13677] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2743'. [ 720.817303][T13689] netlink: 'syz.2.2747': attribute type 10 has an invalid length. [ 720.866968][T13694] netlink: 'syz.1.2748': attribute type 21 has an invalid length. [ 720.904377][T13694] netlink: 'syz.1.2748': attribute type 10 has an invalid length. [ 721.234113][T13694] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.269249][T13694] bond0: (slave team0): Enslaving as an active interface with an up link [ 722.976676][T13709] netlink: 'syz.1.2751': attribute type 10 has an invalid length. [ 723.116308][T13711] netlink: 'syz.0.2753': attribute type 10 has an invalid length. [ 723.140522][T13713] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2754'. [ 723.372353][T13719] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2756'. [ 723.426761][T13719] netlink: 'syz.3.2756': attribute type 10 has an invalid length. [ 723.449619][T13719] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2756'. [ 723.468726][T13719] bond0: entered promiscuous mode [ 723.479364][T13719] bond_slave_0: entered promiscuous mode [ 723.485753][T13719] bond_slave_1: entered promiscuous mode [ 723.492664][T13719] bridge0: port 4(bond0) entered blocking state [ 723.499372][T13719] bridge0: port 4(bond0) entered disabled state [ 723.527185][T13719] bond0: entered allmulticast mode [ 723.541023][T13719] bond_slave_0: entered allmulticast mode [ 723.549871][T13722] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2757'. [ 723.551450][T13719] bond_slave_1: entered allmulticast mode [ 723.584166][T13719] geneve0: entered allmulticast mode [ 723.613087][T13719] bridge0: port 4(bond0) entered blocking state [ 723.619698][T13719] bridge0: port 4(bond0) entered forwarding state [ 723.672681][T13721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2757'. [ 724.375685][T13738] validate_nla: 2 callbacks suppressed [ 724.375713][T13738] netlink: 'syz.0.2761': attribute type 10 has an invalid length. [ 724.448286][T13738] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.514307][T13738] bond0: (slave team0): Enslaving as an active interface with an up link [ 724.561828][T13736] netlink: 'syz.0.2761': attribute type 21 has an invalid length. [ 725.102509][T13748] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2764'. [ 727.377268][T13749] netlink: 'syz.3.2763': attribute type 10 has an invalid length. [ 727.607517][T13756] netlink: 'syz.3.2767': attribute type 5 has an invalid length. [ 727.683398][T13754] netlink: 'syz.2.2765': attribute type 10 has an invalid length. [ 727.784450][T13761] netlink: 'syz.3.2769': attribute type 10 has an invalid length. [ 727.799538][T13761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2769'. [ 727.867768][T13761] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2769'. [ 727.986332][T13765] netlink: 'syz.1.2770': attribute type 10 has an invalid length. [ 728.730900][T13771] netlink: 'syz.0.2773': attribute type 10 has an invalid length. [ 728.928256][T12029] Bluetooth: hci4: command 0x0406 tx timeout [ 729.023008][T13774] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2774'. [ 729.093206][T13779] netlink: 'syz.2.2775': attribute type 10 has an invalid length. [ 729.844459][T13786] syz.2.2777: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 729.899174][T13786] CPU: 0 PID: 13786 Comm: syz.2.2777 Not tainted syzkaller #0 [ 729.906734][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 729.916838][T13786] Call Trace: [ 729.920170][T13786] [ 729.923154][T13786] dump_stack_lvl+0x18c/0x250 [ 729.927889][T13786] ? show_regs_print_info+0x20/0x20 [ 729.933132][T13786] ? load_image+0x420/0x420 [ 729.937715][T13786] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 729.944185][T13786] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 729.950750][T13786] warn_alloc+0x246/0x340 [ 729.955133][T13786] ? stack_trace_save+0xaa/0x100 [ 729.960128][T13786] ? zone_watermark_ok_safe+0x230/0x230 [ 729.965742][T13786] ? kasan_set_track+0x5f/0x70 [ 729.970556][T13786] ? kasan_set_track+0x4e/0x70 [ 729.975374][T13786] ? __kasan_kmalloc+0x8f/0xa0 [ 729.980189][T13786] ? xsk_init_queue+0xad/0x100 [ 729.985111][T13786] ? xsk_setsockopt+0x4e5/0x760 [ 729.990012][T13786] ? do_sock_setsockopt+0x175/0x1a0 [ 729.995255][T13786] ? __x64_sys_setsockopt+0x182/0x200 [ 730.000691][T13786] __vmalloc_node_range+0x126/0x1330 [ 730.006081][T13786] ? free_vm_area+0x50/0x50 [ 730.010652][T13786] vmalloc_user+0x74/0x80 [ 730.015039][T13786] ? xskq_create+0xbf/0x170 [ 730.019623][T13786] xskq_create+0xbf/0x170 [ 730.024021][T13786] xsk_init_queue+0xad/0x100 [ 730.028674][T13786] xsk_setsockopt+0x4e5/0x760 [ 730.033414][T13786] ? xsk_poll+0x680/0x680 [ 730.037814][T13786] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 730.044036][T13786] ? xsk_poll+0x680/0x680 [ 730.048426][T13786] do_sock_setsockopt+0x175/0x1a0 [ 730.053513][T13786] ? __fdget+0x180/0x210 [ 730.057825][T13786] __x64_sys_setsockopt+0x182/0x200 [ 730.063083][T13786] do_syscall_64+0x55/0xb0 [ 730.067548][T13786] ? clear_bhb_loop+0x40/0x90 [ 730.072273][T13786] ? clear_bhb_loop+0x40/0x90 [ 730.077000][T13786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 730.082947][T13786] RIP: 0033:0x7ff897b9ce59 [ 730.087404][T13786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.107071][T13786] RSP: 002b:00007ff898983028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 730.115532][T13786] RAX: ffffffffffffffda RBX: 00007ff897e15fa0 RCX: 00007ff897b9ce59 [ 730.123543][T13786] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 730.131553][T13786] RBP: 00007ff897c32d6f R08: 0000000000000004 R09: 0000000000000000 [ 730.139560][T13786] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 730.147586][T13786] R13: 00007ff897e16038 R14: 00007ff897e15fa0 R15: 00007fff91b22298 [ 730.155627][T13786] [ 730.261765][T13786] Mem-Info: [ 730.282183][T13786] active_anon:5218 inactive_anon:0 isolated_anon:0 [ 730.282183][T13786] active_file:18303 inactive_file:40197 isolated_file:0 [ 730.282183][T13786] unevictable:768 dirty:123 writeback:0 [ 730.282183][T13786] slab_reclaimable:10047 slab_unreclaimable:92782 [ 730.282183][T13786] mapped:24718 shmem:1361 pagetables:513 [ 730.282183][T13786] sec_pagetables:0 bounce:0 [ 730.282183][T13786] kernel_misc_reclaimable:0 [ 730.282183][T13786] free:1351032 free_pcp:4360 free_cma:0 [ 730.421697][T13786] Node 0 active_anon:20872kB inactive_anon:0kB active_file:73212kB inactive_file:160588kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98872kB dirty:488kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10228kB pagetables:2052kB sec_pagetables:0kB all_unreclaimable? no [ 730.466000][T13786] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 730.532051][T13786] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 730.561456][T13786] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 730.569089][T13786] Node 0 DMA32 free:1488160kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21036kB inactive_anon:0kB active_file:73212kB inactive_file:159764kB unevictable:1536kB writepending:488kB present:3129332kB managed:2586944kB mlocked:0kB bounce:0kB free_pcp:7476kB local_pcp:5852kB free_cma:0kB [ 730.659019][T13786] lowmem_reserve[]: 0 0 0 0 0 [ 730.669958][T13786] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 730.718440][T13786] lowmem_reserve[]: 0 0 0 0 0 [ 730.733563][T13786] Node 1 Normal free:3900608kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:9472kB local_pcp:6048kB free_cma:0kB [ 730.768585][T13786] lowmem_reserve[]: 0 0 0 0 0 [ 730.780618][T13786] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 730.795910][T13786] Node 0 DMA32: 339*4kB (UME) 1259*8kB (UME) 1116*16kB (UME) 1248*32kB (UME) 307*64kB (UME) 228*128kB (UME) 165*256kB (UM) 77*512kB (UME) 50*1024kB (UM) 14*2048kB (UME) 295*4096kB (UM) = 1487908kB [ 730.819277][T13786] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 730.833815][T13786] Node 1 Normal: 228*4kB (UME) 46*8kB (UME) 34*16kB (UME) 169*32kB (UME) 54*64kB (UE) 10*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3900608kB [ 730.856263][T13786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 730.867375][T13786] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 730.887804][T13786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 730.899466][T13786] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 730.910370][T13786] 59861 total pagecache pages [ 730.916300][T13786] 0 pages in swap cache [ 730.921948][T13786] Free swap = 124996kB [ 730.926601][T13786] Total swap = 124996kB [ 730.932204][T13786] 2097051 pages RAM [ 730.936634][T13786] 0 pages HighMem/MovableOnly [ 730.948225][T13786] 416929 pages reserved [ 730.953829][T13786] 0 pages cma reserved [ 732.590221][T13795] netlink: 'syz.1.2779': attribute type 10 has an invalid length. [ 732.918741][T13809] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2784'. [ 734.278964][T13804] netlink: 'syz.1.2782': attribute type 10 has an invalid length. [ 734.300278][T13804] team0: Port device hsr_slave_0 added [ 734.312669][T13812] netlink: 'syz.2.2785': attribute type 10 has an invalid length. [ 734.328468][T13815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2786'. [ 734.483869][T13818] netlink: 'syz.1.2787': attribute type 10 has an invalid length. [ 734.887025][T13826] netlink: 'syz.0.2790': attribute type 10 has an invalid length. [ 735.991046][T13842] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2793'. [ 737.140570][T13848] FAULT_INJECTION: forcing a failure. [ 737.140570][T13848] name failslab, interval 1, probability 0, space 0, times 0 [ 737.161830][T13848] CPU: 0 PID: 13848 Comm: syz.0.2795 Not tainted syzkaller #0 [ 737.169350][T13848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 737.179443][T13848] Call Trace: [ 737.182757][T13848] [ 737.185720][T13848] dump_stack_lvl+0x18c/0x250 [ 737.190441][T13848] ? show_regs_print_info+0x20/0x20 [ 737.195671][T13848] ? load_image+0x420/0x420 [ 737.200231][T13848] ? verify_lock_unused+0x140/0x140 [ 737.205482][T13848] should_fail_ex+0x39d/0x4d0 [ 737.210211][T13848] should_failslab+0x9/0x20 [ 737.214756][T13848] slab_pre_alloc_hook+0x59/0x310 [ 737.219827][T13848] kmem_cache_alloc+0x5a/0x2d0 [ 737.224636][T13848] ? skb_clone+0x1eb/0x370 [ 737.229102][T13848] skb_clone+0x1eb/0x370 [ 737.233408][T13848] __netlink_deliver_tap+0x41c/0x830 [ 737.238772][T13848] ? netlink_deliver_tap+0x2e/0x1b0 [ 737.244028][T13848] netlink_deliver_tap+0x19c/0x1b0 [ 737.249191][T13848] netlink_unicast+0x72c/0x8d0 [ 737.254042][T13848] netlink_sendmsg+0x8d0/0xbf0 [ 737.258863][T13848] ? netlink_getsockopt+0x590/0x590 [ 737.264113][T13848] ? aa_sock_msg_perm+0x94/0x150 [ 737.269092][T13848] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 737.274428][T13848] ? security_socket_sendmsg+0x80/0xa0 [ 737.279928][T13848] ? netlink_getsockopt+0x590/0x590 [ 737.285194][T13848] ____sys_sendmsg+0x5ba/0x960 [ 737.290031][T13848] ? __asan_memset+0x22/0x40 [ 737.294674][T13848] ? __sys_sendmsg_sock+0x30/0x30 [ 737.299804][T13848] ? __import_iovec+0x5f2/0x850 [ 737.304719][T13848] ? import_iovec+0x73/0xa0 [ 737.309278][T13848] ___sys_sendmsg+0x2a6/0x360 [ 737.314096][T13848] ? get_pid_task+0x20/0x1e0 [ 737.318754][T13848] ? __sys_sendmsg+0x2a0/0x2a0 [ 737.323595][T13848] ? __lock_acquire+0x7d40/0x7d40 [ 737.328717][T13848] __se_sys_sendmsg+0x1c2/0x2b0 [ 737.333640][T13848] ? __x64_sys_sendmsg+0x80/0x80 [ 737.338649][T13848] ? lockdep_hardirqs_on+0x98/0x150 [ 737.343913][T13848] do_syscall_64+0x55/0xb0 [ 737.348469][T13848] ? clear_bhb_loop+0x40/0x90 [ 737.353205][T13848] ? clear_bhb_loop+0x40/0x90 [ 737.357942][T13848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.363892][T13848] RIP: 0033:0x7ff738d9ce59 [ 737.368348][T13848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.388083][T13848] RSP: 002b:00007ff736ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.396542][T13848] RAX: ffffffffffffffda RBX: 00007ff739015fa0 RCX: 00007ff738d9ce59 [ 737.404644][T13848] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 737.412660][T13848] RBP: 00007ff736ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 737.420677][T13848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.428689][T13848] R13: 00007ff739016038 R14: 00007ff739015fa0 R15: 00007ffc670d4108 [ 737.436735][T13848] [ 737.444889][T13848] netlink: 'syz.0.2795': attribute type 10 has an invalid length. [ 737.621081][T13852] netlink: 'syz.0.2797': attribute type 10 has an invalid length. [ 737.717873][T13854] netlink: 'syz.3.2798': attribute type 10 has an invalid length. [ 738.174488][T13854] team0: Port device hsr_slave_0 added [ 738.263770][T13858] netlink: 'syz.2.2800': attribute type 10 has an invalid length. [ 738.441394][T13854] syz.3.2798 (13854) used greatest stack depth: 16968 bytes left [ 738.483244][T13870] netlink: 'syz.2.2802': attribute type 10 has an invalid length. [ 738.672783][T13868] netlink: 'syz.1.2810': attribute type 10 has an invalid length. [ 738.932875][T13876] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2804'. [ 741.263966][T13894] netlink: 'syz.1.2809': attribute type 10 has an invalid length. [ 741.365220][T13901] netlink: 'syz.2.2813': attribute type 1 has an invalid length. [ 741.373088][T13901] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2813'. [ 741.588812][T13906] netlink: 'syz.3.2815': attribute type 10 has an invalid length. [ 741.688804][T13910] netlink: 'syz.0.2816': attribute type 10 has an invalid length. [ 741.883260][T13914] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2817'. [ 742.179120][T13910] team0: Port device hsr_slave_0 added [ 743.421035][T13918] netlink: 'syz.3.2819': attribute type 10 has an invalid length. [ 743.656940][T13931] netlink: 'syz.2.2822': attribute type 10 has an invalid length. [ 745.220036][T13943] netlink: 'syz.2.2827': attribute type 10 has an invalid length. [ 745.358045][T13949] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2828'. [ 745.596365][T13957] netlink: 'syz.1.2832': attribute type 10 has an invalid length. [ 746.801970][T13971] netlink: 'syz.1.2835': attribute type 21 has an invalid length. [ 746.824231][T13971] netlink: 'syz.1.2835': attribute type 10 has an invalid length. [ 747.196656][T13970] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2836'. [ 747.405399][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.414745][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.717469][T13982] netlink: 'syz.2.2839': attribute type 10 has an invalid length. [ 747.743767][T13984] netlink: 'syz.0.2840': attribute type 29 has an invalid length. [ 747.768717][T13984] netlink: 'syz.0.2840': attribute type 29 has an invalid length. [ 747.808822][T13985] netlink: 'syz.0.2840': attribute type 29 has an invalid length. [ 747.997742][T13989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2841'. [ 748.236482][T13989] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2841'. [ 748.657660][T13995] validate_nla: 2 callbacks suppressed [ 748.657681][T13995] netlink: 'syz.3.2844': attribute type 10 has an invalid length. [ 748.862377][T14000] netlink: 'syz.2.2846': attribute type 10 has an invalid length. [ 749.170442][T14004] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2848'. [ 749.252783][T14010] netlink: 'syz.0.2850': attribute type 21 has an invalid length. [ 749.274234][T14010] netlink: 'syz.0.2850': attribute type 10 has an invalid length. [ 749.474552][T12029] Bluetooth: hci1: command 0x0406 tx timeout [ 749.806882][T14017] netlink: 'syz.3.2851': attribute type 10 has an invalid length. [ 750.095135][T14024] netlink: 'syz.3.2854': attribute type 29 has an invalid length. [ 750.117294][T14024] netlink: 'syz.3.2854': attribute type 29 has an invalid length. [ 750.138248][T14025] netlink: 'syz.3.2854': attribute type 29 has an invalid length. [ 750.154913][T14024] netlink: 'syz.3.2854': attribute type 29 has an invalid length. [ 750.180224][T14024] netlink: 'syz.3.2854': attribute type 29 has an invalid length. [ 751.317452][T14039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2861'. [ 753.874477][T14074] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2873'. [ 753.937402][T14077] validate_nla: 8 callbacks suppressed [ 753.937442][T14077] netlink: 'syz.1.2874': attribute type 10 has an invalid length. [ 754.133944][T14082] netlink: 'syz.0.2876': attribute type 10 has an invalid length. [ 754.150947][T14082] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2876'. [ 754.194223][T14082] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2876'. [ 754.245382][T14086] netlink: 'syz.2.2877': attribute type 29 has an invalid length. [ 754.319763][T14088] netlink: 'syz.3.2879': attribute type 10 has an invalid length. [ 754.353449][T14086] netlink: 'syz.2.2877': attribute type 29 has an invalid length. [ 754.392448][T14089] netlink: 'syz.2.2877': attribute type 29 has an invalid length. [ 754.400637][T14090] netlink: 'syz.2.2877': attribute type 29 has an invalid length. [ 754.423930][T14086] netlink: 'syz.2.2877': attribute type 29 has an invalid length. [ 755.395363][T14093] netlink: 'syz.2.2880': attribute type 10 has an invalid length. [ 755.527692][T14100] netlink: 'syz.1.2882': attribute type 21 has an invalid length. [ 757.027984][T14119] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2888'. [ 757.241026][T14127] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2891'. [ 757.266026][T14127] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2891'. [ 759.228712][T14153] validate_nla: 13 callbacks suppressed [ 759.228750][T14153] netlink: 'syz.1.2901': attribute type 10 has an invalid length. [ 759.373940][T14157] netlink: 'syz.2.2903': attribute type 10 has an invalid length. [ 759.391349][T14155] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2902'. [ 759.556232][T14162] netlink: 'syz.0.2906': attribute type 29 has an invalid length. [ 759.576124][T14162] netlink: 'syz.0.2906': attribute type 29 has an invalid length. [ 759.589369][T14162] netlink: 'syz.0.2906': attribute type 29 has an invalid length. [ 759.600286][T14162] netlink: 'syz.0.2906': attribute type 29 has an invalid length. [ 759.626097][T14162] netlink: 'syz.0.2906': attribute type 29 has an invalid length. [ 759.684253][T14164] netlink: 'syz.3.2905': attribute type 10 has an invalid length. [ 759.707879][T14164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2905'. [ 759.730213][T14164] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2905'. [ 759.928070][T14175] netlink: 'syz.0.2909': attribute type 10 has an invalid length. [ 761.796399][T14184] netlink: 'syz.2.2910': attribute type 21 has an invalid length. [ 764.167312][T14199] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2914'. [ 764.294336][T14203] validate_nla: 3 callbacks suppressed [ 764.294384][T14203] netlink: 'syz.1.2917': attribute type 29 has an invalid length. [ 764.342403][T14203] netlink: 'syz.1.2917': attribute type 29 has an invalid length. [ 764.374765][T14204] netlink: 'syz.1.2917': attribute type 29 has an invalid length. [ 764.448019][T14203] netlink: 'syz.1.2917': attribute type 29 has an invalid length. [ 764.534277][T14208] netlink: 'syz.2.2919': attribute type 10 has an invalid length. [ 764.573117][T14203] netlink: 'syz.1.2917': attribute type 29 has an invalid length. [ 764.945807][T14219] netlink: 'syz.2.2922': attribute type 10 has an invalid length. [ 764.963901][T14219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2922'. [ 765.039389][T14219] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2922'. [ 766.475450][T14223] netlink: 'syz.3.2924': attribute type 10 has an invalid length. [ 766.559195][T14230] netlink: 'syz.2.2927': attribute type 10 has an invalid length. [ 766.722986][T14232] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2928'. [ 766.758012][T14235] netlink: 'syz.3.2930': attribute type 10 has an invalid length. [ 768.938541][T14258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2935'. [ 769.029560][T14258] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2935'. [ 769.365300][T14269] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2941'. [ 769.375247][T14270] validate_nla: 11 callbacks suppressed [ 769.375284][T14270] netlink: 'syz.0.2942': attribute type 29 has an invalid length. [ 769.402428][T14270] netlink: 'syz.0.2942': attribute type 29 has an invalid length. [ 769.412334][T14271] netlink: 'syz.0.2942': attribute type 29 has an invalid length. [ 769.425612][T14270] netlink: 'syz.0.2942': attribute type 29 has an invalid length. [ 769.460066][T14270] netlink: 'syz.0.2942': attribute type 29 has an invalid length. [ 769.736917][T14283] netlink: 'syz.2.2945': attribute type 21 has an invalid length. [ 769.782774][T14283] netlink: 'syz.2.2945': attribute type 10 has an invalid length. [ 769.873449][T12029] Bluetooth: hci0: command 0x0406 tx timeout [ 771.161983][T14299] netlink: 'syz.2.2951': attribute type 10 has an invalid length. [ 771.183832][T14297] netlink: 'syz.0.2950': attribute type 10 has an invalid length. [ 771.408264][T14302] netlink: 'syz.1.2952': attribute type 10 has an invalid length. [ 771.420435][T14302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2952'. [ 771.468447][T14303] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2952'. [ 772.588659][T14309] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2954'. [ 775.100502][T14325] validate_nla: 6 callbacks suppressed [ 775.100539][T14325] netlink: 'syz.0.2961': attribute type 10 has an invalid length. [ 775.196801][T14329] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2963'. [ 775.213025][T14327] netlink: 'syz.3.2962': attribute type 10 has an invalid length. [ 775.344911][T14333] netlink: 'syz.2.2964': attribute type 21 has an invalid length. [ 775.419173][T14333] netlink: 'syz.2.2964': attribute type 10 has an invalid length. [ 776.149741][T14337] netlink: 'syz.0.2965': attribute type 10 has an invalid length. [ 776.201318][T14342] netlink: 'syz.3.2967': attribute type 10 has an invalid length. [ 776.371861][T14342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2967'. [ 776.484879][T14342] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2967'. [ 776.818817][T14349] netlink: 'syz.1.2969': attribute type 29 has an invalid length. [ 776.829285][T14349] netlink: 'syz.1.2969': attribute type 29 has an invalid length. [ 776.844987][T14349] netlink: 'syz.1.2969': attribute type 29 has an invalid length. [ 776.863070][T14349] netlink: 'syz.1.2969': attribute type 29 has an invalid length. [ 777.203537][T14359] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2974'. [ 779.241321][T14380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2981'. [ 779.332302][T14380] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2981'. [ 779.775036][T14397] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2988'. [ 780.650123][T14409] validate_nla: 17 callbacks suppressed [ 780.650176][T14409] netlink: 'syz.3.2993': attribute type 29 has an invalid length. [ 780.694621][T14409] netlink: 'syz.3.2993': attribute type 29 has an invalid length. [ 780.711638][T14411] netlink: 'syz.3.2993': attribute type 29 has an invalid length. [ 780.727154][T14413] netlink: 'syz.3.2993': attribute type 29 has an invalid length. [ 780.764621][T14416] netlink: 'syz.3.2993': attribute type 29 has an invalid length. [ 781.695223][T14422] netlink: 'syz.2.2998': attribute type 10 has an invalid length. [ 781.780320][T14424] netlink: 'syz.3.2997': attribute type 10 has an invalid length. [ 781.818059][T14428] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3000'. [ 781.966603][T14430] netlink: 'syz.0.3001': attribute type 10 has an invalid length. [ 782.118456][T14438] netlink: 'syz.1.3004': attribute type 21 has an invalid length. [ 782.182365][T14434] netlink: 'syz.3.3003': attribute type 10 has an invalid length. [ 782.205294][T14434] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3003'. [ 782.247368][T14434] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3003'. [ 786.103980][T14463] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3012'. [ 786.242224][T14465] validate_nla: 8 callbacks suppressed [ 786.242295][T14465] netlink: 'syz.2.3014': attribute type 10 has an invalid length. [ 786.311571][T14470] netlink: 'syz.3.3016': attribute type 10 has an invalid length. [ 786.325607][T14470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3016'. [ 786.376244][T14470] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3016'. [ 786.391346][T14472] netlink: 'syz.0.3017': attribute type 29 has an invalid length. [ 786.410038][T14472] netlink: 'syz.0.3017': attribute type 29 has an invalid length. [ 786.440313][T14475] netlink: 'syz.0.3017': attribute type 29 has an invalid length. [ 786.464920][T14477] netlink: 'syz.0.3017': attribute type 29 has an invalid length. [ 786.519705][T14479] netlink: 'syz.1.3018': attribute type 21 has an invalid length. [ 786.552246][T14479] netlink: 'syz.1.3018': attribute type 10 has an invalid length. [ 786.573947][T14472] netlink: 'syz.0.3017': attribute type 29 has an invalid length. [ 787.274579][T14488] netlink: 'syz.3.3020': attribute type 10 has an invalid length. [ 787.795506][T14502] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3026'. [ 788.160368][T14504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3028'. [ 788.265677][T14504] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3028'. [ 790.290979][T14532] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3036'. [ 790.350937][T12029] Bluetooth: hci2: command 0x0406 tx timeout [ 791.120746][T14549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3041'. [ 791.176420][T14544] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3041'. [ 791.654970][T14557] validate_nla: 14 callbacks suppressed [ 791.655002][T14557] netlink: 'syz.0.3043': attribute type 21 has an invalid length. [ 791.695399][T14557] netlink: 'syz.0.3043': attribute type 10 has an invalid length. [ 792.197180][T14559] netlink: 'syz.1.3044': attribute type 10 has an invalid length. [ 792.401454][T14566] netlink: 'syz.3.3046': attribute type 10 has an invalid length. [ 792.571737][T14570] netlink: 'syz.1.3048': attribute type 10 has an invalid length. [ 792.695925][T14576] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3050'. [ 792.706456][T14572] netlink: 'syz.2.3049': attribute type 29 has an invalid length. [ 792.708666][T14572] netlink: 'syz.2.3049': attribute type 29 has an invalid length. [ 792.742097][T14572] netlink: 'syz.2.3049': attribute type 29 has an invalid length. [ 792.763409][T14572] netlink: 'syz.2.3049': attribute type 29 has an invalid length. [ 792.789181][T14572] netlink: 'syz.2.3049': attribute type 29 has an invalid length. [ 793.075169][T14585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3053'. [ 793.174860][T14585] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3053'. [ 796.917881][T14601] validate_nla: 4 callbacks suppressed [ 796.918501][T14601] netlink: 'syz.2.3060': attribute type 10 has an invalid length. [ 797.048133][T14606] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3062'. [ 797.156154][T14609] netlink: 'syz.3.3063': attribute type 29 has an invalid length. [ 797.186215][T14608] netlink: 'syz.0.3061': attribute type 10 has an invalid length. [ 797.215747][T14609] netlink: 'syz.3.3063': attribute type 29 has an invalid length. [ 797.234817][T14612] netlink: 'syz.3.3063': attribute type 29 has an invalid length. [ 797.246313][T14609] netlink: 'syz.3.3063': attribute type 29 has an invalid length. [ 797.262181][T14609] netlink: 'syz.3.3063': attribute type 29 has an invalid length. [ 797.535138][T14618] netlink: 'syz.3.3067': attribute type 10 has an invalid length. [ 797.736507][T14622] netlink: 'syz.1.3068': attribute type 10 has an invalid length. [ 797.761055][T14622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3068'. [ 797.830432][T14622] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3068'. [ 798.885501][T14634] netlink: 'syz.0.3071': attribute type 21 has an invalid length. [ 799.614384][T14643] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3075'. [ 800.345121][T14663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3081'. [ 800.429659][T14664] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3081'. [ 802.037127][T14678] validate_nla: 13 callbacks suppressed [ 802.037182][T14678] netlink: 'syz.0.3086': attribute type 10 has an invalid length. [ 802.220084][T14684] netlink: 'syz.3.3088': attribute type 10 has an invalid length. [ 802.274484][T14682] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3087'. [ 802.355809][T14688] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3090'. [ 802.483091][T14691] netlink: 'syz.2.3091': attribute type 29 has an invalid length. [ 802.514643][T14691] netlink: 'syz.2.3091': attribute type 29 has an invalid length. [ 802.533106][T14694] netlink: 'syz.2.3091': attribute type 29 has an invalid length. [ 802.564165][T14691] netlink: 'syz.2.3091': attribute type 29 has an invalid length. [ 802.583619][T14691] netlink: 'syz.2.3091': attribute type 29 has an invalid length. [ 803.045304][T14705] netlink: 'syz.0.3094': attribute type 10 has an invalid length. [ 803.063758][T14705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3094'. [ 803.184172][T14706] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3094'. [ 803.825761][T14713] netlink: 'syz.1.3097': attribute type 10 has an invalid length. [ 803.876473][T14715] netlink: 'syz.2.3098': attribute type 10 has an invalid length. [ 804.209234][T14727] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3102'. [ 804.346940][T14729] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3103'. [ 805.866117][T14752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3113'. [ 805.999812][T14754] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3114'. [ 806.013579][T14752] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3113'. [ 806.025062][T14756] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3115'. [ 807.219618][T14777] validate_nla: 19 callbacks suppressed [ 807.219656][T14777] netlink: 'syz.0.3121': attribute type 10 has an invalid length. [ 807.343491][T14779] netlink: 'syz.3.3122': attribute type 10 has an invalid length. [ 807.635798][T14782] netlink: 'syz.0.3123': attribute type 10 has an invalid length. [ 807.673559][T14787] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3126'. [ 807.861538][T14789] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3127'. [ 807.935238][T14797] netlink: 'syz.0.3129': attribute type 21 has an invalid length. [ 807.985549][T14793] netlink: 'syz.1.3128': attribute type 10 has an invalid length. [ 808.012774][T14793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3128'. [ 808.019334][T14796] netlink: 'syz.3.3130': attribute type 29 has an invalid length. [ 808.044832][T14797] netlink: 'syz.0.3129': attribute type 10 has an invalid length. [ 808.070469][T14799] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3128'. [ 808.079219][T14796] netlink: 'syz.3.3130': attribute type 29 has an invalid length. [ 808.138617][T14801] netlink: 'syz.3.3130': attribute type 29 has an invalid length. [ 808.157180][T14802] netlink: 'syz.3.3130': attribute type 29 has an invalid length. [ 808.754346][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.765581][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.789273][T14826] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3139'. [ 809.966936][T14830] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3141'. [ 812.281310][T14873] __nla_validate_parse: 2 callbacks suppressed [ 812.281338][T14873] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3156'. [ 812.440466][T14881] validate_nla: 21 callbacks suppressed [ 812.440484][T14881] netlink: 'syz.1.3158': attribute type 21 has an invalid length. [ 812.504515][T14875] netlink: 'syz.0.3157': attribute type 10 has an invalid length. [ 812.540969][T14875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3157'. [ 812.569534][T14881] netlink: 'syz.1.3158': attribute type 10 has an invalid length. [ 812.711039][T14875] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3157'. [ 812.885217][T14887] netlink: 'syz.2.3160': attribute type 10 has an invalid length. [ 813.145596][T14893] netlink: 'syz.0.3162': attribute type 10 has an invalid length. [ 813.353511][T14897] netlink: 'syz.2.3164': attribute type 29 has an invalid length. [ 813.375675][T14897] netlink: 'syz.2.3164': attribute type 29 has an invalid length. [ 813.401811][T14901] netlink: 'syz.2.3164': attribute type 29 has an invalid length. [ 813.424891][T14897] netlink: 'syz.2.3164': attribute type 29 has an invalid length. [ 813.449064][T14897] netlink: 'syz.2.3164': attribute type 29 has an invalid length. [ 814.848554][T14913] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3170'. [ 814.977682][T14915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3172'. [ 815.159505][T14915] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3172'. [ 817.382093][T14949] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3185'. [ 817.592492][T14954] validate_nla: 14 callbacks suppressed [ 817.592531][T14954] netlink: 'syz.1.3187': attribute type 10 has an invalid length. [ 817.655534][T14956] netlink: 'syz.0.3188': attribute type 10 has an invalid length. [ 817.674747][T14956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3188'. [ 817.710209][T14961] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 817.742891][T14956] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3188'. [ 817.755115][T14963] netlink: 'syz.2.3189': attribute type 21 has an invalid length. [ 817.781146][T14961] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 817.811770][T14963] netlink: 'syz.2.3189': attribute type 10 has an invalid length. [ 817.832164][T14964] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 817.844066][T14961] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 817.868394][T14961] netlink: 'syz.3.3190': attribute type 29 has an invalid length. [ 819.595761][T14980] netlink: 'syz.3.3195': attribute type 10 has an invalid length. [ 822.809395][T14989] validate_nla: 1 callbacks suppressed [ 822.809437][T14989] netlink: 'syz.3.3199': attribute type 10 has an invalid length. [ 823.023391][T14991] netlink: 'syz.0.3200': attribute type 10 has an invalid length. [ 823.114676][T14991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3200'. [ 823.129612][T14995] netlink: 'syz.2.3202': attribute type 29 has an invalid length. [ 823.143727][T14998] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3200'. [ 823.189014][T14995] netlink: 'syz.2.3202': attribute type 29 has an invalid length. [ 823.208795][T15002] netlink: 'syz.2.3202': attribute type 29 has an invalid length. [ 823.217161][T14999] netlink: 'syz.2.3202': attribute type 29 has an invalid length. [ 823.284322][T14995] netlink: 'syz.2.3202': attribute type 29 has an invalid length. [ 823.319475][T14994] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3201'. [ 824.956455][T15020] netlink: 'syz.0.3206': attribute type 21 has an invalid length. [ 826.760810][T15020] netlink: 'syz.0.3206': attribute type 10 has an invalid length. [ 827.086378][T15028] netlink: 'syz.2.3208': attribute type 10 has an invalid length. [ 827.856773][T15040] validate_nla: 2 callbacks suppressed [ 827.856835][T15040] netlink: 'syz.3.3213': attribute type 29 has an invalid length. [ 827.885541][T15040] netlink: 'syz.3.3213': attribute type 29 has an invalid length. [ 827.948410][T15044] netlink: 'syz.3.3213': attribute type 29 has an invalid length. [ 827.988172][T15040] netlink: 'syz.3.3213': attribute type 29 has an invalid length. [ 828.016989][T15043] netlink: 'syz.1.3215': attribute type 10 has an invalid length. [ 828.030917][T15043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3215'. [ 828.042786][T15041] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3214'. [ 828.066568][T15040] netlink: 'syz.3.3213': attribute type 29 has an invalid length. [ 828.105878][T15043] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3215'. [ 831.613645][T15060] netlink: 'syz.3.3220': attribute type 10 has an invalid length. [ 831.670409][T15067] netlink: 'syz.2.3219': attribute type 21 has an invalid length. [ 831.707316][T15067] netlink: 'syz.2.3219': attribute type 10 has an invalid length. [ 831.807201][T15071] netlink: 'syz.0.3221': attribute type 10 has an invalid length. [ 835.092984][T15081] validate_nla: 1 callbacks suppressed [ 835.093020][T15081] netlink: 'syz.0.3226': attribute type 29 has an invalid length. [ 835.118191][T15081] netlink: 'syz.0.3226': attribute type 29 has an invalid length. [ 835.163564][T15087] netlink: 'syz.0.3226': attribute type 29 has an invalid length. [ 835.203988][T15081] netlink: 'syz.0.3226': attribute type 29 has an invalid length. [ 835.232995][T15081] netlink: 'syz.0.3226': attribute type 29 has an invalid length. [ 835.624263][T15092] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3230'. [ 836.176924][T15095] netlink: 'syz.0.3231': attribute type 10 has an invalid length. [ 836.682555][T15102] netlink: 'syz.1.3232': attribute type 10 has an invalid length. [ 836.700838][T15102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3232'. [ 836.815378][T15103] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3232'. [ 838.453220][T15106] netlink: 'syz.3.3233': attribute type 10 has an invalid length. [ 838.573147][T15111] netlink: 'syz.0.3236': attribute type 10 has an invalid length. [ 838.823764][T15122] netlink: 'syz.3.3238': attribute type 21 has an invalid length. [ 838.886650][T15122] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.923064][T15122] team0: entered promiscuous mode [ 838.928186][T15122] team_slave_0: entered promiscuous mode [ 838.958073][T15122] team_slave_1: entered promiscuous mode [ 838.981030][T15122] hsr_slave_0: entered promiscuous mode [ 839.011963][T15122] team0: entered allmulticast mode [ 839.017158][T15122] team_slave_0: entered allmulticast mode [ 839.050856][T15122] team_slave_1: entered allmulticast mode [ 839.067361][T15122] hsr_slave_0: entered allmulticast mode [ 839.087511][T15122] bond0: (slave team0): Enslaving as an active interface with an up link [ 839.567116][T15137] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3242'. [ 840.215255][T15142] validate_nla: 6 callbacks suppressed [ 840.215288][T15142] netlink: 'syz.0.3243': attribute type 10 has an invalid length. [ 840.476717][T15144] netlink: 'syz.2.3245': attribute type 10 has an invalid length. [ 840.540951][T15144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3245'. [ 840.687910][T15152] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3245'. [ 840.727715][T15151] netlink: 'syz.1.3247': attribute type 10 has an invalid length. [ 840.844284][T15146] netlink: 'syz.3.3246': attribute type 10 has an invalid length. [ 841.028575][T15157] netlink: 'syz.3.3249': attribute type 10 has an invalid length. [ 841.302790][T15162] netlink: 'syz.0.3251': attribute type 29 has an invalid length. [ 841.329362][T15162] netlink: 'syz.0.3251': attribute type 29 has an invalid length. [ 841.373847][T15163] netlink: 'syz.0.3251': attribute type 29 has an invalid length. [ 841.417482][T15168] netlink: 'syz.0.3251': attribute type 29 has an invalid length. [ 841.510113][T15162] netlink: 'syz.0.3251': attribute type 29 has an invalid length. [ 841.582991][T15166] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3252'. [ 843.463557][T15195] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3262'. [ 843.575127][T15195] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3262'. [ 843.816000][T15200] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3264'. [ 845.413643][T15221] validate_nla: 14 callbacks suppressed [ 845.413707][T15221] netlink: 'syz.3.3271': attribute type 10 has an invalid length. [ 845.431700][T15219] netlink: 'syz.0.3270': attribute type 10 has an invalid length. [ 845.634768][T15228] netlink: 'syz.0.3274': attribute type 29 has an invalid length. [ 845.645637][T15228] netlink: 'syz.0.3274': attribute type 29 has an invalid length. [ 845.662495][T15228] netlink: 'syz.0.3274': attribute type 29 has an invalid length. [ 845.689023][T15228] netlink: 'syz.0.3274': attribute type 29 has an invalid length. [ 845.714615][T15228] netlink: 'syz.0.3274': attribute type 29 has an invalid length. [ 845.853868][T15232] netlink: 'syz.3.3275': attribute type 10 has an invalid length. [ 845.870950][T15232] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3275'. [ 845.928708][T15233] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3276'. [ 845.942351][T15232] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3275'. [ 846.006870][T15240] netlink: 'syz.1.3279': attribute type 10 has an invalid length. [ 846.089177][T15238] netlink: 'syz.0.3278': attribute type 10 has an invalid length. [ 849.925331][T15272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3291'. [ 850.104930][T15272] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3291'. [ 850.127962][T15270] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3289'. [ 850.804539][T15291] validate_nla: 13 callbacks suppressed [ 850.804585][T15291] netlink: 'syz.1.3295': attribute type 10 has an invalid length. [ 851.868254][T15294] netlink: 'syz.1.3296': attribute type 10 has an invalid length. [ 852.431474][T15296] netlink: 'syz.2.3297': attribute type 10 has an invalid length. [ 852.663710][T15301] netlink: 'syz.1.3300': attribute type 29 has an invalid length. [ 852.702668][T15301] netlink: 'syz.1.3300': attribute type 29 has an invalid length. [ 852.752266][T15304] netlink: 'syz.1.3300': attribute type 29 has an invalid length. [ 852.778928][T15304] netlink: 'syz.1.3300': attribute type 29 has an invalid length. [ 852.877836][T15301] netlink: 'syz.1.3300': attribute type 29 has an invalid length. [ 852.936540][T15308] netlink: 'syz.3.3302': attribute type 10 has an invalid length. [ 853.336206][T15314] netlink: 'syz.1.3304': attribute type 10 has an invalid length. [ 853.368298][T15316] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3305'. [ 853.395658][T15312] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3303'. [ 853.453666][T15316] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3305'. [ 855.685685][T15350] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3317'. [ 855.837830][T15353] validate_nla: 12 callbacks suppressed [ 855.837849][T15353] netlink: 'syz.1.3318': attribute type 10 has an invalid length. [ 855.897015][T15353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3318'. [ 856.095324][T15356] netlink: 'syz.2.3319': attribute type 10 has an invalid length. [ 856.115806][T15353] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3318'. [ 856.244593][T15360] netlink: 'syz.0.3320': attribute type 21 has an invalid length. [ 856.313332][T15360] netlink: 'syz.0.3320': attribute type 10 has an invalid length. [ 856.597157][T15364] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3321'. [ 856.883006][T15373] netlink: 'syz.3.3325': attribute type 29 has an invalid length. [ 856.913870][T15373] netlink: 'syz.3.3325': attribute type 29 has an invalid length. [ 856.931790][T15375] netlink: 'syz.3.3325': attribute type 29 has an invalid length. [ 856.955350][T15373] netlink: 'syz.3.3325': attribute type 29 has an invalid length. [ 856.999922][T15373] netlink: 'syz.3.3325': attribute type 29 has an invalid length. [ 858.135636][T15381] netlink: 'syz.0.3327': attribute type 10 has an invalid length. [ 858.546529][T15387] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3330'. [ 858.599326][T15387] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3330'. [ 858.649959][T15391] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3331'. [ 858.907167][T15400] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3334'. [ 860.088797][T15425] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3343'. [ 860.337634][T15432] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3345'. [ 860.621853][T15436] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3344'. [ 860.733660][T15430] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3344'. [ 861.117952][T15442] validate_nla: 15 callbacks suppressed [ 861.118972][T15442] netlink: 'syz.0.3347': attribute type 29 has an invalid length. [ 861.154876][T15442] netlink: 'syz.0.3347': attribute type 29 has an invalid length. [ 861.182481][T15446] netlink: 'syz.0.3347': attribute type 29 has an invalid length. [ 861.201486][T15446] netlink: 'syz.0.3347': attribute type 29 has an invalid length. [ 861.247423][T15442] netlink: 'syz.0.3347': attribute type 29 has an invalid length. [ 861.272001][T15449] netlink: 'syz.1.3350': attribute type 10 has an invalid length. [ 861.352385][T15450] netlink: 'syz.3.3349': attribute type 10 has an invalid length. [ 861.407363][T15455] netlink: 'syz.2.3351': attribute type 21 has an invalid length. [ 861.501103][T15457] netlink: 'syz.2.3351': attribute type 10 has an invalid length. [ 861.675497][T15459] netlink: 'syz.0.3352': attribute type 10 has an invalid length. [ 862.628579][T15472] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3356'. [ 862.927734][T15479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3359'. [ 864.246723][T15503] __nla_validate_parse: 1 callbacks suppressed [ 864.246785][T15503] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3367'. [ 865.212944][T15521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3372'. [ 865.303100][T15521] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3372'. [ 866.439457][T15531] validate_nla: 20 callbacks suppressed [ 866.439496][T15531] netlink: 'syz.2.3377': attribute type 10 has an invalid length. [ 866.499273][T15530] netlink: 'syz.1.3376': attribute type 10 has an invalid length. [ 866.595748][T15535] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3378'. [ 866.787854][T15545] netlink: 'syz.3.3380': attribute type 21 has an invalid length. [ 866.812841][T15545] netlink: 'syz.3.3380': attribute type 10 has an invalid length. [ 866.903031][T15547] netlink: 'syz.0.3382': attribute type 29 has an invalid length. [ 866.928152][T15547] netlink: 'syz.0.3382': attribute type 29 has an invalid length. [ 866.961603][T15551] netlink: 'syz.0.3382': attribute type 29 has an invalid length. [ 866.988048][T15547] netlink: 'syz.0.3382': attribute type 29 has an invalid length. [ 867.014880][T15553] netlink: 'syz.2.3383': attribute type 10 has an invalid length. [ 867.031678][T15547] netlink: 'syz.0.3382': attribute type 29 has an invalid length. [ 867.342913][T15557] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3384'. [ 867.396394][T15557] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3384'. [ 868.971772][T15575] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3391'. [ 870.197293][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.203929][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.603472][T15603] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3399'. [ 871.534611][T15617] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3404'. [ 871.582512][T15619] validate_nla: 16 callbacks suppressed [ 871.582562][T15619] netlink: 'syz.2.3405': attribute type 29 has an invalid length. [ 871.622977][T15619] netlink: 'syz.2.3405': attribute type 29 has an invalid length. [ 871.672270][T15622] netlink: 'syz.1.3406': attribute type 10 has an invalid length. [ 871.700131][T15620] netlink: 'syz.2.3405': attribute type 29 has an invalid length. [ 871.718548][T15623] netlink: 'syz.2.3405': attribute type 29 has an invalid length. [ 871.741168][T15619] netlink: 'syz.2.3405': attribute type 29 has an invalid length. [ 871.837476][T15630] netlink: 'syz.3.3407': attribute type 21 has an invalid length. [ 871.871202][T15630] netlink: 'syz.3.3407': attribute type 10 has an invalid length. [ 872.070223][T15635] netlink: 'syz.2.3410': attribute type 10 has an invalid length. [ 872.133431][T15633] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3409'. [ 873.387142][T15650] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3416'. [ 873.399624][T15646] netlink: 'syz.3.3414': attribute type 10 has an invalid length. [ 873.441650][T15645] syz.1.3413: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 873.466804][T15645] CPU: 1 PID: 15645 Comm: syz.1.3413 Not tainted syzkaller #0 [ 873.474341][T15645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 873.484440][T15645] Call Trace: [ 873.487790][T15645] [ 873.490763][T15645] dump_stack_lvl+0x18c/0x250 [ 873.495500][T15645] ? show_regs_print_info+0x20/0x20 [ 873.500762][T15645] ? load_image+0x420/0x420 [ 873.505344][T15645] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 873.511811][T15645] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 873.518385][T15645] warn_alloc+0x246/0x340 [ 873.522787][T15645] ? stack_trace_save+0xaa/0x100 [ 873.527790][T15645] ? zone_watermark_ok_safe+0x230/0x230 [ 873.533418][T15645] ? kasan_set_track+0x5f/0x70 [ 873.538245][T15645] ? kasan_set_track+0x4e/0x70 [ 873.543085][T15645] ? __kasan_kmalloc+0x8f/0xa0 [ 873.547902][T15645] ? xsk_init_queue+0xad/0x100 [ 873.552722][T15645] ? xsk_setsockopt+0x4e5/0x760 [ 873.557628][T15645] ? do_sock_setsockopt+0x175/0x1a0 [ 873.562872][T15645] ? __x64_sys_setsockopt+0x182/0x200 [ 873.568336][T15645] __vmalloc_node_range+0x126/0x1330 [ 873.573723][T15645] ? free_vm_area+0x50/0x50 [ 873.578296][T15645] vmalloc_user+0x74/0x80 [ 873.582689][T15645] ? xskq_create+0xbf/0x170 [ 873.587243][T15645] xskq_create+0xbf/0x170 [ 873.591633][T15645] xsk_init_queue+0xad/0x100 [ 873.596303][T15645] xsk_setsockopt+0x4e5/0x760 [ 873.601055][T15645] ? xsk_poll+0x680/0x680 [ 873.605445][T15645] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 873.611666][T15645] ? xsk_poll+0x680/0x680 [ 873.616052][T15645] ? do_sock_setsockopt+0x15e/0x1a0 [ 873.621289][T15645] ? xsk_poll+0x680/0x680 [ 873.625658][T15645] do_sock_setsockopt+0x175/0x1a0 [ 873.630721][T15645] ? __fdget+0x180/0x210 [ 873.635014][T15645] __x64_sys_setsockopt+0x182/0x200 [ 873.640262][T15645] do_syscall_64+0x55/0xb0 [ 873.644730][T15645] ? clear_bhb_loop+0x40/0x90 [ 873.649437][T15645] ? clear_bhb_loop+0x40/0x90 [ 873.654146][T15645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.660069][T15645] RIP: 0033:0x7faffab9ce59 [ 873.664526][T15645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.684182][T15645] RSP: 002b:00007faffba00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 873.692628][T15645] RAX: ffffffffffffffda RBX: 00007faffae15fa0 RCX: 00007faffab9ce59 [ 873.700633][T15645] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 873.708637][T15645] RBP: 00007faffac32d6f R08: 0000000000000004 R09: 0000000000000000 [ 873.716637][T15645] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 873.724649][T15645] R13: 00007faffae16038 R14: 00007faffae15fa0 R15: 00007ffc2d9665c8 [ 873.732668][T15645] [ 873.785519][T15645] Mem-Info: [ 873.833216][T15645] active_anon:5323 inactive_anon:0 isolated_anon:0 [ 873.833216][T15645] active_file:18303 inactive_file:40251 isolated_file:0 [ 873.833216][T15645] unevictable:768 dirty:144 writeback:0 [ 873.833216][T15645] slab_reclaimable:10027 slab_unreclaimable:93270 [ 873.833216][T15645] mapped:25743 shmem:1361 pagetables:554 [ 873.833216][T15645] sec_pagetables:0 bounce:0 [ 873.833216][T15645] kernel_misc_reclaimable:0 [ 873.833216][T15645] free:1345533 free_pcp:9956 free_cma:0 [ 873.909722][T15648] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3415'. [ 873.942916][T15645] Node 0 active_anon:21292kB inactive_anon:0kB active_file:73212kB inactive_file:160804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102972kB dirty:576kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10320kB pagetables:2116kB sec_pagetables:0kB all_unreclaimable? no [ 874.244375][T15645] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 874.287399][T15645] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 874.342292][T15645] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 874.409474][T15645] Node 0 DMA32 free:1465396kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21236kB inactive_anon:0kB active_file:73212kB inactive_file:159980kB unevictable:1536kB writepending:668kB present:3129332kB managed:2586944kB mlocked:0kB bounce:0kB free_pcp:31584kB local_pcp:17660kB free_cma:0kB [ 874.453970][T15645] lowmem_reserve[]: 0 0 0 0 0 [ 874.458879][T15645] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 874.498865][T15645] lowmem_reserve[]: 0 0 0 0 0 [ 874.505997][T15645] Node 1 Normal free:3901376kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8704kB local_pcp:2656kB free_cma:0kB [ 874.540729][T15645] lowmem_reserve[]: 0 0 0 0 0 [ 874.547325][T15645] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 874.566708][T15645] Node 0 DMA32: 695*4kB (UME) 1573*8kB (UME) 1403*16kB (UME) 682*32kB (UME) 375*64kB (UME) 149*128kB (UME) 135*256kB (UM) 78*512kB (UME) 50*1024kB (UM) 14*2048kB (UME) 295*4096kB (UM) = 1465396kB [ 874.608773][T15645] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 874.645108][T15645] Node 1 Normal: 228*4kB (UME) 46*8kB (UME) 34*16kB (UME) 171*32kB (UME) 57*64kB (UE) 14*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3901376kB [ 874.708093][T15645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.719622][T15645] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 874.729416][T15645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.739479][T15645] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 874.763092][T15663] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3419'. [ 874.770308][T15645] 59915 total pagecache pages [ 874.795753][T15645] 0 pages in swap cache [ 874.799997][T15645] Free swap = 124996kB [ 874.851660][T15645] Total swap = 124996kB [ 874.855912][T15645] 2097051 pages RAM [ 874.859775][T15645] 0 pages HighMem/MovableOnly [ 874.897684][T15665] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3428'. [ 874.946444][T15645] 416929 pages reserved [ 874.970732][T15645] 0 pages cma reserved [ 875.281479][T15672] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3421'. [ 875.511816][T15679] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3422'. [ 875.935929][T15687] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3425'. [ 877.204657][T15691] validate_nla: 8 callbacks suppressed [ 877.204693][T15691] netlink: 'syz.1.3426': attribute type 10 has an invalid length. [ 877.231483][T15689] netlink: 'syz.2.3427': attribute type 10 has an invalid length. [ 877.266499][T15693] netlink: 'syz.0.3429': attribute type 29 has an invalid length. [ 877.284014][T15693] netlink: 'syz.0.3429': attribute type 29 has an invalid length. [ 877.303089][T15693] netlink: 'syz.0.3429': attribute type 29 has an invalid length. [ 877.323014][T15693] netlink: 'syz.0.3429': attribute type 29 has an invalid length. [ 877.366191][T15693] netlink: 'syz.0.3429': attribute type 29 has an invalid length. [ 877.582903][T15699] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3433'. [ 877.605034][T15701] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3434'. [ 877.803608][T15705] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3436'. [ 877.880576][T15707] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3435'. [ 877.988171][T15703] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3437'. [ 878.194879][T15712] netlink: 'syz.2.3439': attribute type 10 has an invalid length. [ 878.358831][T15719] netlink: 'syz.3.3441': attribute type 10 has an invalid length. [ 879.529688][T15721] netlink: 'syz.2.3442': attribute type 29 has an invalid length. [ 879.948575][T15733] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3446'. [ 879.960612][T15728] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3444'. [ 880.730065][T15739] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3448'. [ 880.758512][T15740] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3449'. [ 881.166722][T15747] __nla_validate_parse: 1 callbacks suppressed [ 881.166769][T15747] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3451'. [ 882.087052][T15766] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3458'. [ 882.093288][T15768] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3459'. [ 882.317034][T15771] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3468'. [ 882.454264][T15774] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3460'. [ 882.566048][T15778] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3469'. [ 882.621970][T15784] validate_nla: 13 callbacks suppressed [ 882.621989][T15784] netlink: 'syz.0.3462': attribute type 21 has an invalid length. [ 882.639695][T15784] netlink: 'syz.0.3462': attribute type 10 has an invalid length. [ 883.429705][T15788] netlink: 'syz.2.3463': attribute type 10 has an invalid length. [ 883.517437][T15790] netlink: 'syz.3.3464': attribute type 29 has an invalid length. [ 883.547851][T15790] netlink: 'syz.3.3464': attribute type 29 has an invalid length. [ 883.584412][T15796] netlink: 'syz.3.3464': attribute type 29 has an invalid length. [ 883.635385][T15797] netlink: 'syz.1.3475': attribute type 21 has an invalid length. [ 883.660938][T15790] netlink: 'syz.3.3464': attribute type 29 has an invalid length. [ 883.673128][T15797] netlink: 'syz.1.3475': attribute type 10 has an invalid length. [ 883.689159][T15790] netlink: 'syz.3.3464': attribute type 29 has an invalid length. [ 883.788368][T15794] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3474'. [ 883.877821][T15801] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3465'. [ 886.067106][T15837] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3485'. [ 886.158886][T15836] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3476'. [ 886.386437][T15840] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3479'. [ 887.213455][T15863] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3495'. [ 887.816733][T15874] validate_nla: 21 callbacks suppressed [ 887.816774][T15874] netlink: 'syz.2.3490': attribute type 10 has an invalid length. [ 887.865233][T15871] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3489'. [ 888.033175][T15876] netlink: 'syz.3.3491': attribute type 29 has an invalid length. [ 888.066298][T15876] netlink: 'syz.3.3491': attribute type 29 has an invalid length. [ 888.082718][T15879] netlink: 'syz.3.3491': attribute type 29 has an invalid length. [ 888.094782][T15876] netlink: 'syz.3.3491': attribute type 29 has an invalid length. [ 888.109690][T15876] netlink: 'syz.3.3491': attribute type 29 has an invalid length. [ 888.148181][T15878] netlink: 'syz.1.3492': attribute type 10 has an invalid length. [ 888.217374][T15881] netlink: 'syz.2.3493': attribute type 10 has an invalid length. [ 888.383407][T15884] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3494'. [ 888.545423][T15889] netlink: 'syz.2.3497': attribute type 29 has an invalid length. [ 888.557383][T15889] netlink: 'syz.2.3497': attribute type 29 has an invalid length. [ 888.587773][T15886] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3496'. [ 888.926911][T15903] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3500'. [ 890.019720][T15921] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3507'. [ 890.390935][T15925] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3508'. [ 890.506086][T15932] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3511'. [ 891.341180][T15945] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3514'. [ 891.806399][T15958] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3518'. [ 891.915704][T15962] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3520'. [ 892.103590][T15966] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3521'. [ 892.648924][T15992] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3529'. [ 892.790292][T15994] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3530'. [ 892.915150][T15996] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3531'. [ 893.052638][T15998] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3540'. [ 893.086903][T16000] validate_nla: 38 callbacks suppressed [ 893.086930][T16000] netlink: 'syz.3.3532': attribute type 10 has an invalid length. [ 893.476550][T16003] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3533'. [ 893.582832][T16009] FAULT_INJECTION: forcing a failure. [ 893.582832][T16009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.610789][T16009] CPU: 1 PID: 16009 Comm: syz.0.3535 Not tainted syzkaller #0 [ 893.618318][T16009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 893.628413][T16009] Call Trace: [ 893.631740][T16009] [ 893.634719][T16009] dump_stack_lvl+0x18c/0x250 [ 893.639452][T16009] ? show_regs_print_info+0x20/0x20 [ 893.644705][T16009] ? load_image+0x420/0x420 [ 893.649263][T16009] ? __lock_acquire+0x7d40/0x7d40 [ 893.654350][T16009] should_fail_ex+0x39d/0x4d0 [ 893.659080][T16009] _copy_from_user+0x2f/0xe0 [ 893.663725][T16009] __copy_msghdr+0x3bb/0x580 [ 893.668349][T16009] ___sys_sendmsg+0x214/0x360 [ 893.673050][T16009] ? get_pid_task+0x20/0x1e0 [ 893.677673][T16009] ? __sys_sendmsg+0x2a0/0x2a0 [ 893.682471][T16009] ? __lock_acquire+0x7d40/0x7d40 [ 893.687536][T16009] __se_sys_sendmsg+0x1c2/0x2b0 [ 893.692420][T16009] ? __x64_sys_sendmsg+0x80/0x80 [ 893.697488][T16009] ? lockdep_hardirqs_on+0x98/0x150 [ 893.702719][T16009] do_syscall_64+0x55/0xb0 [ 893.707155][T16009] ? clear_bhb_loop+0x40/0x90 [ 893.711857][T16009] ? clear_bhb_loop+0x40/0x90 [ 893.716561][T16009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 893.722492][T16009] RIP: 0033:0x7ff738d9ce59 [ 893.726945][T16009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.746571][T16009] RSP: 002b:00007ff736ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.755004][T16009] RAX: ffffffffffffffda RBX: 00007ff739015fa0 RCX: 00007ff738d9ce59 [ 893.762999][T16009] RDX: 000000000400e081 RSI: 00002000000002c0 RDI: 0000000000000003 [ 893.770997][T16009] RBP: 00007ff736ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 893.778992][T16009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.786985][T16009] R13: 00007ff739016038 R14: 00007ff739015fa0 R15: 00007ffc670d4108 [ 893.795006][T16009] [ 894.060152][T16013] netlink: 'syz.1.3538': attribute type 29 has an invalid length. [ 894.093944][T16013] netlink: 'syz.1.3538': attribute type 29 has an invalid length. [ 894.125796][T16015] netlink: 'syz.1.3538': attribute type 29 has an invalid length. [ 894.158407][T16013] netlink: 'syz.1.3538': attribute type 29 has an invalid length. [ 894.194619][T16013] netlink: 'syz.1.3538': attribute type 29 has an invalid length. [ 894.274232][T16016] netlink: 'syz.0.3537': attribute type 10 has an invalid length. [ 894.453562][T16020] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3541'. [ 894.547955][T16029] netlink: 'syz.3.3542': attribute type 21 has an invalid length. [ 894.549059][T16024] netlink: 'syz.1.3543': attribute type 4 has an invalid length. [ 894.571333][T16024] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3543'. [ 894.596355][T16029] netlink: 'syz.3.3542': attribute type 10 has an invalid length. [ 895.148929][T16041] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 895.325215][T16046] FAULT_INJECTION: forcing a failure. [ 895.325215][T16046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.346047][T16046] CPU: 1 PID: 16046 Comm: syz.3.3550 Not tainted syzkaller #0 [ 895.353578][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 895.363673][T16046] Call Trace: [ 895.367000][T16046] [ 895.369970][T16046] dump_stack_lvl+0x18c/0x250 [ 895.374700][T16046] ? show_regs_print_info+0x20/0x20 [ 895.379949][T16046] ? load_image+0x420/0x420 [ 895.384516][T16046] ? __might_fault+0xaa/0x120 [ 895.389247][T16046] ? __lock_acquire+0x7d40/0x7d40 [ 895.394327][T16046] should_fail_ex+0x39d/0x4d0 [ 895.399074][T16046] _copy_from_user+0x2f/0xe0 [ 895.403716][T16046] ___sys_sendmsg+0x1c7/0x360 [ 895.408453][T16046] ? get_pid_task+0x20/0x1e0 [ 895.413108][T16046] ? __sys_sendmsg+0x2a0/0x2a0 [ 895.417946][T16046] ? __lock_acquire+0x7d40/0x7d40 [ 895.423054][T16046] __se_sys_sendmsg+0x1c2/0x2b0 [ 895.427956][T16046] ? __x64_sys_sendmsg+0x80/0x80 [ 895.432964][T16046] ? lockdep_hardirqs_on+0x98/0x150 [ 895.438219][T16046] do_syscall_64+0x55/0xb0 [ 895.442684][T16046] ? clear_bhb_loop+0x40/0x90 [ 895.447413][T16046] ? clear_bhb_loop+0x40/0x90 [ 895.452151][T16046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.458092][T16046] RIP: 0033:0x7f569939ce59 [ 895.462558][T16046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.482214][T16046] RSP: 002b:00007f569a2c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 895.490675][T16046] RAX: ffffffffffffffda RBX: 00007f5699615fa0 RCX: 00007f569939ce59 [ 895.498688][T16046] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 895.506717][T16046] RBP: 00007f569a2c9090 R08: 0000000000000000 R09: 0000000000000000 [ 895.514714][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.522712][T16046] R13: 00007f5699616038 R14: 00007f5699615fa0 R15: 00007ffff8b8c828 [ 895.530719][T16046] [ 897.260740][T16090] __nla_validate_parse: 6 callbacks suppressed [ 897.260758][T16090] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3566'. [ 897.339954][T16091] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3564'. [ 898.040817][T16093] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3567'. [ 898.272419][T16102] validate_nla: 18 callbacks suppressed [ 898.272439][T16102] netlink: 'syz.0.3568': attribute type 10 has an invalid length. [ 898.310309][T16097] netlink: 'syz.1.3569': attribute type 29 has an invalid length. [ 898.346080][T16097] netlink: 'syz.1.3569': attribute type 29 has an invalid length. [ 898.395832][T16099] netlink: 'syz.1.3569': attribute type 29 has an invalid length. [ 898.405206][T16100] netlink: 'syz.1.3569': attribute type 29 has an invalid length. [ 898.415422][T16101] netlink: 'syz.1.3569': attribute type 29 has an invalid length. [ 898.839347][T16109] netlink: 'syz.2.3574': attribute type 29 has an invalid length. [ 898.850897][T16115] netlink: 'syz.1.3573': attribute type 21 has an invalid length. [ 898.862518][T16115] netlink: 'syz.1.3573': attribute type 10 has an invalid length. [ 898.873622][T16109] netlink: 'syz.2.3574': attribute type 29 has an invalid length. [ 898.992398][T16113] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3572'. [ 899.547489][T16127] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3577'. [ 901.153885][T16148] FAULT_INJECTION: forcing a failure. [ 901.153885][T16148] name failslab, interval 1, probability 0, space 0, times 0 [ 901.180740][T16148] CPU: 1 PID: 16148 Comm: syz.2.3585 Not tainted syzkaller #0 [ 901.188278][T16148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 901.198377][T16148] Call Trace: [ 901.201696][T16148] [ 901.204677][T16148] dump_stack_lvl+0x18c/0x250 [ 901.209414][T16148] ? show_regs_print_info+0x20/0x20 [ 901.214662][T16148] ? load_image+0x420/0x420 [ 901.219222][T16148] ? __might_sleep+0xe0/0xe0 [ 901.223855][T16148] ? __lock_acquire+0x7d40/0x7d40 [ 901.228913][T16148] should_fail_ex+0x39d/0x4d0 [ 901.233636][T16148] should_failslab+0x9/0x20 [ 901.238176][T16148] slab_pre_alloc_hook+0x59/0x310 [ 901.243237][T16148] ? __lock_acquire+0x7d40/0x7d40 [ 901.248290][T16148] kmem_cache_alloc_node+0x60/0x320 [ 901.253520][T16148] ? __alloc_skb+0x103/0x2c0 [ 901.258141][T16148] __alloc_skb+0x103/0x2c0 [ 901.262587][T16148] netlink_sendmsg+0x66a/0xbf0 [ 901.267393][T16148] ? netlink_getsockopt+0x590/0x590 [ 901.272633][T16148] ? aa_sock_msg_perm+0x94/0x150 [ 901.277605][T16148] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 901.282929][T16148] ? security_socket_sendmsg+0x80/0xa0 [ 901.288411][T16148] ? netlink_getsockopt+0x590/0x590 [ 901.293682][T16148] ____sys_sendmsg+0x5ba/0x960 [ 901.298482][T16148] ? __asan_memset+0x22/0x40 [ 901.303101][T16148] ? __sys_sendmsg_sock+0x30/0x30 [ 901.308144][T16148] ? __import_iovec+0x5f2/0x850 [ 901.313029][T16148] ? import_iovec+0x73/0xa0 [ 901.317565][T16148] ___sys_sendmsg+0x2a6/0x360 [ 901.322270][T16148] ? __sys_sendmsg+0x2a0/0x2a0 [ 901.327082][T16148] ? trace_call_bpf+0xc3/0x6c0 [ 901.331903][T16148] __se_sys_sendmsg+0x1c2/0x2b0 [ 901.336802][T16148] ? __x64_sys_sendmsg+0x80/0x80 [ 901.341776][T16148] ? lockdep_hardirqs_on+0x98/0x150 [ 901.347004][T16148] do_syscall_64+0x55/0xb0 [ 901.351442][T16148] ? clear_bhb_loop+0x40/0x90 [ 901.356151][T16148] ? clear_bhb_loop+0x40/0x90 [ 901.360862][T16148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 901.366788][T16148] RIP: 0033:0x7ff897b9ce59 [ 901.371226][T16148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.390868][T16148] RSP: 002b:00007ff898983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.399320][T16148] RAX: ffffffffffffffda RBX: 00007ff897e15fa0 RCX: 00007ff897b9ce59 [ 901.407315][T16148] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 901.415312][T16148] RBP: 00007ff898983090 R08: 0000000000000000 R09: 0000000000000000 [ 901.423306][T16148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.431296][T16148] R13: 00007ff897e16038 R14: 00007ff897e15fa0 R15: 00007fff91b22298 [ 901.439299][T16148] [ 901.503873][T16144] syzkaller0: entered promiscuous mode [ 901.509527][T16144] syzkaller0: entered allmulticast mode [ 901.953827][T16154] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3587'. [ 904.697780][T16158] validate_nla: 7 callbacks suppressed [ 904.697796][T16158] netlink: 'syz.1.3588': attribute type 21 has an invalid length. [ 904.714004][T16160] netlink: 'syz.1.3588': attribute type 10 has an invalid length. [ 904.722662][T16167] netlink: 'syz.0.3589': attribute type 10 has an invalid length. [ 904.734596][T16171] netlink: 'syz.2.3591': attribute type 10 has an invalid length. [ 904.908063][T16175] netlink: 'syz.1.3593': attribute type 10 has an invalid length. [ 904.995384][T16180] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3594'. [ 905.119378][T16173] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3592'. [ 905.425002][T16188] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3596'. [ 905.680699][T16192] netlink: 'syz.2.3595': attribute type 10 has an invalid length. [ 905.806882][T16196] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3598'. [ 905.936072][T16200] netlink: 'syz.2.3600': attribute type 10 has an invalid length. [ 906.051636][T16205] netlink: 'syz.3.3603': attribute type 10 has an invalid length. [ 906.199263][T16210] netlink: 'syz.1.3601': attribute type 21 has an invalid length. [ 906.241497][T16210] netlink: 'syz.1.3601': attribute type 10 has an invalid length. [ 906.614368][T16215] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3605'. [ 907.016430][T16224] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3609'. [ 907.197714][T16232] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3612'. [ 907.651122][T16244] wg1: entered promiscuous mode [ 907.675450][T16244] wg1: entered allmulticast mode [ 907.690940][T16244] team0: Device wg1 is of different type [ 908.584089][T16258] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3620'. [ 908.654553][T16261] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3623'. [ 909.493323][T16282] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3630'. [ 909.764753][T16289] validate_nla: 10 callbacks suppressed [ 909.764775][T16289] netlink: 'syz.3.3632': attribute type 21 has an invalid length. [ 909.800899][T16289] netlink: 'syz.3.3632': attribute type 10 has an invalid length. [ 910.505711][T16293] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3634'. [ 910.874249][T16307] netlink: 'syz.3.3637': attribute type 10 has an invalid length. [ 910.905498][T16310] netlink: 'syz.1.3638': attribute type 10 has an invalid length. [ 913.963744][T16331] netlink: 'syz.1.3643': attribute type 10 has an invalid length. [ 914.373116][T16341] netlink: 'syz.0.3645': attribute type 21 has an invalid length. [ 914.448306][T16342] netlink: 'syz.0.3645': attribute type 10 has an invalid length. [ 914.533402][T16339] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3646'. [ 915.093193][T16349] netlink: 'syz.3.3648': attribute type 10 has an invalid length. [ 915.247928][T16352] netlink: 'syz.2.3649': attribute type 10 has an invalid length. [ 915.579940][T16358] netlink: 'syz.1.3652': attribute type 29 has an invalid length. [ 915.618764][T16358] netlink: 'syz.1.3652': attribute type 29 has an invalid length. [ 915.653053][T16363] netlink: 'syz.1.3652': attribute type 29 has an invalid length. [ 915.671347][T16361] netlink: 'syz.1.3652': attribute type 29 has an invalid length. [ 915.879980][T16367] netlink: 'syz.3.3655': attribute type 10 has an invalid length. [ 915.922990][T16370] netlink: 'syz.0.3654': attribute type 10 has an invalid length. [ 916.069506][T16370] team0: Device wg1 is of different type [ 916.281992][T16375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 916.544902][T16378] netlink: 'syz.3.3658': attribute type 10 has an invalid length. [ 916.572708][T16380] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3657'. [ 916.608643][T16380] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3657'. [ 916.730259][T16384] netlink: 'syz.2.3659': attribute type 21 has an invalid length. [ 917.576155][T16394] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3662'. [ 918.208625][T16409] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3667'. [ 918.469739][T16417] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3670'. [ 918.514058][T16417] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3670'. [ 919.314299][T16435] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.3677'. [ 920.050935][T16456] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3684'. [ 920.068461][T16456] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3684'. [ 920.409167][T16459] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3686'. [ 920.488076][T16467] validate_nla: 18 callbacks suppressed [ 920.488114][T16467] netlink: 'syz.1.3688': attribute type 10 has an invalid length. [ 920.757525][T16474] netlink: 'syz.3.3691': attribute type 10 has an invalid length. [ 920.822954][T16477] netlink: 'syz.1.3692': attribute type 1 has an invalid length. [ 921.176281][T16491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 921.462438][T16499] netlink: 'syz.3.3700': attribute type 10 has an invalid length. [ 921.679474][T16506] netlink: 'syz.3.3703': attribute type 10 has an invalid length. [ 921.841222][T16513] sctp: [Deprecated]: syz.0.3704 (pid 16513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 921.841222][T16513] Use struct sctp_sack_info instead [ 921.960789][T16517] netlink: 'syz.2.3706': attribute type 1 has an invalid length. [ 921.968766][T16517] __nla_validate_parse: 2 callbacks suppressed [ 921.968780][T16517] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.3706'. [ 922.253573][T16529] netlink: 'syz.3.3709': attribute type 3 has an invalid length. [ 922.290898][T16529] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3709'. [ 922.478818][T16533] delete_channel: no stack [ 922.551009][T16536] netlink: 'syz.2.3712': attribute type 10 has an invalid length. [ 922.694961][T16544] netlink: 'syz.3.3714': attribute type 10 has an invalid length. [ 922.806234][T16551] FAULT_INJECTION: forcing a failure. [ 922.806234][T16551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.821590][T16551] CPU: 1 PID: 16551 Comm: syz.1.3719 Not tainted syzkaller #0 [ 922.829134][T16551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 922.839253][T16551] Call Trace: [ 922.842597][T16551] [ 922.845602][T16551] dump_stack_lvl+0x18c/0x250 [ 922.850366][T16551] ? show_regs_print_info+0x20/0x20 [ 922.855631][T16551] ? load_image+0x420/0x420 [ 922.860224][T16551] ? __might_fault+0xaa/0x120 [ 922.864953][T16551] ? __lock_acquire+0x7d40/0x7d40 [ 922.870039][T16551] should_fail_ex+0x39d/0x4d0 [ 922.874791][T16551] _copy_from_user+0x2f/0xe0 [ 922.879438][T16551] ___sys_sendmsg+0x1c7/0x360 [ 922.884176][T16551] ? __sys_sendmsg+0x2a0/0x2a0 [ 922.889035][T16551] ? __lock_acquire+0x7d40/0x7d40 [ 922.894175][T16551] __se_sys_sendmsg+0x1c2/0x2b0 [ 922.899079][T16551] ? __x64_sys_sendmsg+0x80/0x80 [ 922.904105][T16551] ? lockdep_hardirqs_on+0x98/0x150 [ 922.909371][T16551] do_syscall_64+0x55/0xb0 [ 922.913834][T16551] ? clear_bhb_loop+0x40/0x90 [ 922.918560][T16551] ? clear_bhb_loop+0x40/0x90 [ 922.923295][T16551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 922.929236][T16551] RIP: 0033:0x7faffab9ce59 [ 922.933701][T16551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.953361][T16551] RSP: 002b:00007faffba00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.961830][T16551] RAX: ffffffffffffffda RBX: 00007faffae15fa0 RCX: 00007faffab9ce59 [ 922.969848][T16551] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000003 [ 922.977870][T16551] RBP: 00007faffba00090 R08: 0000000000000000 R09: 0000000000000000 [ 922.985892][T16551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.993913][T16551] R13: 00007faffae16038 R14: 00007faffae15fa0 R15: 00007ffc2d9665c8 [ 923.001974][T16551] [ 923.167783][T16556] netlink: 'syz.2.3717': attribute type 21 has an invalid length. [ 923.459131][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3721'. [ 923.490559][T16560] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.3721'. [ 923.738956][T16565] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3723'. [ 923.771297][T16565] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3723'. [ 923.862651][T16570] ip6tnl0: entered allmulticast mode [ 924.326088][T16583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 924.628535][T16594] sctp: [Deprecated]: syz.2.3733 (pid 16594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 924.628535][T16594] Use struct sctp_sack_info instead [ 925.676279][T16615] validate_nla: 12 callbacks suppressed [ 925.676315][T16615] netlink: 'syz.1.3742': attribute type 10 has an invalid length. [ 925.778296][T16621] FAULT_INJECTION: forcing a failure. [ 925.778296][T16621] name failslab, interval 1, probability 0, space 0, times 0 [ 925.871282][T16621] CPU: 1 PID: 16621 Comm: syz.3.3745 Not tainted syzkaller #0 [ 925.878863][T16621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 925.889006][T16621] Call Trace: [ 925.892377][T16621] [ 925.895392][T16621] dump_stack_lvl+0x18c/0x250 [ 925.900169][T16621] ? show_regs_print_info+0x20/0x20 [ 925.905452][T16621] ? load_image+0x420/0x420 [ 925.910071][T16621] ? __might_sleep+0xe0/0xe0 [ 925.914752][T16621] ? __lock_acquire+0x7d40/0x7d40 [ 925.919875][T16621] should_fail_ex+0x39d/0x4d0 [ 925.924655][T16621] should_failslab+0x9/0x20 [ 925.929232][T16621] slab_pre_alloc_hook+0x59/0x310 [ 925.934347][T16621] kmem_cache_alloc_lru+0x4d/0x2d0 [ 925.939531][T16621] ? __d_alloc+0x31/0x730 [ 925.943957][T16621] __d_alloc+0x31/0x730 [ 925.948214][T16621] d_alloc_parallel+0xe0/0x1530 [ 925.953164][T16621] ? __asan_memset+0x22/0x40 [ 925.957866][T16621] ? __asan_memset+0x22/0x40 [ 925.962557][T16621] ? lockdep_init_map_type+0x9c/0x8e0 [ 925.968018][T16621] ? lockdep_softirqs_off+0x430/0x430 [ 925.973470][T16621] ? d_hash_and_lookup+0x1b0/0x1b0 [ 925.978696][T16621] ? __init_waitqueue_head+0xa9/0x150 [ 925.984152][T16621] __lookup_slow+0x138/0x400 [ 925.988837][T16621] ? lookup_one_len+0x2e0/0x2e0 [ 925.993787][T16621] ? try_to_unlazy+0x34c/0x5a0 [ 925.998646][T16621] ? down_read+0x1ac/0x2e0 [ 926.003145][T16621] lookup_slow+0x53/0x70 [ 926.007465][T16621] link_path_walk+0x990/0xe30 [ 926.012257][T16621] ? handle_lookup_down+0x130/0x130 [ 926.017561][T16621] path_openat+0x293/0x3230 [ 926.022141][T16621] ? trace_call_bpf+0xc3/0x6c0 [ 926.027097][T16621] ? do_filp_open+0x430/0x430 [ 926.031852][T16621] ? perf_trace_lock+0x304/0x3b0 [ 926.036898][T16621] ? trace_event_raw_event_lock+0x250/0x250 [ 926.042919][T16621] do_filp_open+0x1f5/0x430 [ 926.047502][T16621] ? alloc_fd+0x58f/0x630 [ 926.051938][T16621] ? vfs_tmpfile+0x490/0x490 [ 926.056653][T16621] ? noop_direct_IO+0x20/0x20 [ 926.061439][T16621] ? _raw_spin_unlock+0x28/0x40 [ 926.066362][T16621] ? alloc_fd+0x58f/0x630 [ 926.070795][T16621] do_sys_openat2+0x134/0x1d0 [ 926.075584][T16621] ? do_sys_open+0xe0/0xe0 [ 926.080093][T16621] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 926.086154][T16621] ? lock_chain_count+0x20/0x20 [ 926.091099][T16621] __x64_sys_openat+0x139/0x160 [ 926.096057][T16621] do_syscall_64+0x55/0xb0 [ 926.100548][T16621] ? clear_bhb_loop+0x40/0x90 [ 926.105297][T16621] ? clear_bhb_loop+0x40/0x90 [ 926.110046][T16621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.116004][T16621] RIP: 0033:0x7f569935d68e [ 926.120487][T16621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 926.140163][T16621] RSP: 002b:00007f569a2c8ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 926.148683][T16621] RAX: ffffffffffffffda RBX: 00007f569a2c96c0 RCX: 00007f569935d68e [ 926.156722][T16621] RDX: 0000000000000002 RSI: 00007f569a2c8f90 RDI: ffffffffffffff9c [ 926.164795][T16621] RBP: 00007f569a2c9090 R08: 0000000000000000 R09: 0000000000000000 [ 926.172919][T16621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.181004][T16621] R13: 00007f5699616038 R14: 00007f5699615fa0 R15: 00007ffff8b8c828 [ 926.189108][T16621] [ 926.437005][T16625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 926.459033][T16629] netlink: 'syz.0.3746': attribute type 21 has an invalid length. [ 926.550844][T16630] netlink: 'syz.0.3746': attribute type 10 has an invalid length. [ 926.994590][T16633] netlink: 'syz.3.3748': attribute type 10 has an invalid length. [ 927.146003][T16635] netlink: 'syz.2.3749': attribute type 29 has an invalid length. [ 927.159414][T16635] netlink: 'syz.2.3749': attribute type 29 has an invalid length. [ 927.173117][T16638] netlink: 'syz.2.3749': attribute type 29 has an invalid length. [ 927.188861][T16635] netlink: 'syz.2.3749': attribute type 29 has an invalid length. [ 927.225254][T16635] netlink: 'syz.2.3749': attribute type 29 has an invalid length. [ 927.871759][T16658] netlink: 'syz.3.3755': attribute type 10 has an invalid length. [ 928.308908][T16668] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3758'. [ 929.641494][T16697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 931.164698][T16725] validate_nla: 10 callbacks suppressed [ 931.164736][T16725] netlink: 'syz.0.3775': attribute type 29 has an invalid length. [ 931.195188][T16725] netlink: 'syz.0.3775': attribute type 29 has an invalid length. [ 931.208638][T16726] netlink: 'syz.0.3775': attribute type 29 has an invalid length. [ 931.226426][T16725] netlink: 'syz.0.3775': attribute type 29 has an invalid length. [ 931.307776][T16724] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3774'. [ 931.634957][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.646818][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.694636][T16728] netlink: 'syz.3.3776': attribute type 10 has an invalid length. [ 931.717179][T16730] FAULT_INJECTION: forcing a failure. [ 931.717179][T16730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.736986][T16730] CPU: 1 PID: 16730 Comm: syz.2.3778 Not tainted syzkaller #0 [ 931.744517][T16730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 931.754619][T16730] Call Trace: [ 931.757940][T16730] [ 931.760917][T16730] dump_stack_lvl+0x18c/0x250 [ 931.765648][T16730] ? show_regs_print_info+0x20/0x20 [ 931.770901][T16730] ? load_image+0x420/0x420 [ 931.775474][T16730] ? __might_fault+0xaa/0x120 [ 931.780209][T16730] ? __lock_acquire+0x7d40/0x7d40 [ 931.785284][T16730] should_fail_ex+0x39d/0x4d0 [ 931.790024][T16730] _copy_from_user+0x2f/0xe0 [ 931.794670][T16730] kstrtouint_from_user+0xde/0x170 [ 931.799838][T16730] ? kstrtol_from_user+0x190/0x190 [ 931.805024][T16730] proc_fail_nth_write+0x8f/0x250 [ 931.810100][T16730] ? proc_fail_nth_read+0x260/0x260 [ 931.815366][T16730] ? proc_fail_nth_read+0x260/0x260 [ 931.820623][T16730] vfs_write+0x296/0x990 [ 931.824932][T16730] ? file_end_write+0x250/0x250 [ 931.829829][T16730] ? __fget_files+0x28/0x4b0 [ 931.834472][T16730] ? __fget_files+0x28/0x4b0 [ 931.839120][T16730] ? __fget_files+0x43d/0x4b0 [ 931.843868][T16730] ? __fdget_pos+0x2a3/0x330 [ 931.848512][T16730] ? ksys_write+0x75/0x260 [ 931.852986][T16730] ksys_write+0x150/0x260 [ 931.857370][T16730] ? __ia32_sys_read+0x90/0x90 [ 931.862188][T16730] ? lockdep_hardirqs_on+0x98/0x150 [ 931.867443][T16730] do_syscall_64+0x55/0xb0 [ 931.871898][T16730] ? clear_bhb_loop+0x40/0x90 [ 931.876626][T16730] ? clear_bhb_loop+0x40/0x90 [ 931.881356][T16730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 931.887308][T16730] RIP: 0033:0x7ff897b5d68e [ 931.891773][T16730] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 931.911432][T16730] RSP: 002b:00007ff898982fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 931.919901][T16730] RAX: ffffffffffffffda RBX: 00007ff8989836c0 RCX: 00007ff897b5d68e [ 931.927936][T16730] RDX: 0000000000000001 RSI: 00007ff8989830a0 RDI: 0000000000000004 [ 931.935952][T16730] RBP: 00007ff898983090 R08: 0000000000000000 R09: 0000000000000000 [ 931.943965][T16730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.951978][T16730] R13: 00007ff897e16038 R14: 00007ff897e15fa0 R15: 00007fff91b22298 [ 931.960007][T16730] [ 931.971158][T16732] netlink: 'syz.1.3777': attribute type 10 has an invalid length. [ 932.204117][T16743] netlink: 'syz.1.3782': attribute type 9 has an invalid length. [ 932.224128][T16744] netlink: 'syz.2.3781': attribute type 10 has an invalid length. [ 932.234945][T16743] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3782'. [ 932.666228][T16757] netlink: 'syz.1.3792': attribute type 10 has an invalid length. [ 933.866830][T16764] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3794'. [ 933.904707][T16762] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3786'. [ 933.961862][T16771] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3787'. [ 934.128086][T16778] netlink: 'syz.2.3790': attribute type 10 has an invalid length. [ 934.211937][T16780] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3791'. [ 934.231440][T16782] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3793'. [ 934.233257][T16780] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3791'. [ 934.287032][T16782] team0: entered promiscuous mode [ 934.306837][T16782] team_slave_0: entered promiscuous mode [ 934.314703][T16782] team_slave_1: entered promiscuous mode [ 934.320991][T16782] hsr_slave_0: entered promiscuous mode [ 934.329977][T16782] bond0: (slave team0): Releasing backup interface [ 934.339195][T16782] bridge0: port 4(team0) entered blocking state [ 934.348826][T16782] bridge0: port 4(team0) entered disabled state [ 934.359079][T16782] team0: entered allmulticast mode [ 934.364390][T16782] team_slave_0: entered allmulticast mode [ 934.372443][T16782] team_slave_1: entered allmulticast mode [ 934.378223][T16782] hsr_slave_0: entered allmulticast mode [ 934.706855][T16792] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3797'. [ 934.838257][T16795] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3798'. [ 934.900046][T16792] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3797'. [ 935.511186][T16803] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3801'. [ 936.261471][T16827] validate_nla: 5 callbacks suppressed [ 936.261538][T16827] netlink: 'syz.1.3811': attribute type 10 has an invalid length. [ 936.279445][T16826] netlink: 'syz.0.3810': attribute type 10 has an invalid length. [ 936.663408][T16835] netlink: 'syz.0.3814': attribute type 10 has an invalid length. [ 937.241551][T16844] FAULT_INJECTION: forcing a failure. [ 937.241551][T16844] name failslab, interval 1, probability 0, space 0, times 0 [ 937.255163][T16844] CPU: 0 PID: 16844 Comm: syz.0.3818 Not tainted syzkaller #0 [ 937.262674][T16844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 937.272774][T16844] Call Trace: [ 937.276088][T16844] [ 937.279051][T16844] dump_stack_lvl+0x18c/0x250 [ 937.283781][T16844] ? show_regs_print_info+0x20/0x20 [ 937.289017][T16844] ? load_image+0x420/0x420 [ 937.293583][T16844] ? __might_sleep+0xe0/0xe0 [ 937.298225][T16844] ? __lock_acquire+0x7d40/0x7d40 [ 937.303308][T16844] should_fail_ex+0x39d/0x4d0 [ 937.308060][T16844] should_failslab+0x9/0x20 [ 937.312631][T16844] slab_pre_alloc_hook+0x59/0x310 [ 937.317709][T16844] ? apparmor_sk_alloc_security+0x77/0x100 [ 937.323567][T16844] __kmem_cache_alloc_node+0x53/0x250 [ 937.328996][T16844] ? apparmor_sk_alloc_security+0x77/0x100 [ 937.334840][T16844] kmalloc_trace+0x2a/0xe0 [ 937.339286][T16844] apparmor_sk_alloc_security+0x77/0x100 [ 937.344944][T16844] security_sk_alloc+0x6e/0xa0 [ 937.349757][T16844] sk_prot_alloc+0x101/0x210 [ 937.354380][T16844] ? sk_alloc+0x24/0x360 [ 937.358658][T16844] sk_alloc+0x3a/0x360 [ 937.362754][T16844] ? bpf_ctx_init+0x163/0x1a0 [ 937.367452][T16844] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 937.373025][T16844] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 937.378423][T16844] ? __fget_files+0x28/0x4b0 [ 937.383048][T16844] ? __fget_files+0x28/0x4b0 [ 937.387662][T16844] ? __fget_files+0x43d/0x4b0 [ 937.392384][T16844] ? cpu_online+0x60/0x60 [ 937.396745][T16844] bpf_prog_test_run+0x321/0x390 [ 937.401709][T16844] __sys_bpf+0x49d/0x890 [ 937.405987][T16844] ? bpf_link_show_fdinfo+0x390/0x390 [ 937.411406][T16844] ? lock_chain_count+0x20/0x20 [ 937.416301][T16844] __x64_sys_bpf+0x7c/0x90 [ 937.420748][T16844] do_syscall_64+0x55/0xb0 [ 937.425196][T16844] ? clear_bhb_loop+0x40/0x90 [ 937.429899][T16844] ? clear_bhb_loop+0x40/0x90 [ 937.434607][T16844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 937.440524][T16844] RIP: 0033:0x7ff738d9ce59 [ 937.444991][T16844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.464612][T16844] RSP: 002b:00007ff736ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 937.473077][T16844] RAX: ffffffffffffffda RBX: 00007ff739015fa0 RCX: 00007ff738d9ce59 [ 937.481076][T16844] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 937.489093][T16844] RBP: 00007ff736ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 937.497093][T16844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.505088][T16844] R13: 00007ff739016038 R14: 00007ff739015fa0 R15: 00007ffc670d4108 [ 937.513096][T16844] [ 937.861568][T16856] netlink: 'syz.0.3822': attribute type 10 has an invalid length. [ 938.218020][T16860] netlink: 'syz.1.3824': attribute type 10 has an invalid length. [ 938.568656][T16869] netlink: 'syz.1.3828': attribute type 10 has an invalid length. [ 938.745708][T16877] netlink: 'syz.2.3830': attribute type 10 has an invalid length. [ 938.763259][T16877] team0: entered promiscuous mode [ 938.768557][T16877] team_slave_0: entered promiscuous mode [ 938.777076][T16877] team_slave_1: entered promiscuous mode [ 938.787281][T16877] bond0: (slave team0): Releasing backup interface [ 938.806427][T16877] bridge0: port 4(team0) entered blocking state [ 938.837272][T16877] bridge0: port 4(team0) entered disabled state [ 938.848855][T16877] team0: entered allmulticast mode [ 938.858246][T16877] team_slave_0: entered allmulticast mode [ 938.868349][T16877] team_slave_1: entered allmulticast mode [ 939.138834][T16881] __nla_validate_parse: 9 callbacks suppressed [ 939.138900][T16881] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3832'. [ 939.298379][T16888] netlink: 'syz.3.3834': attribute type 10 has an invalid length. [ 939.440846][T16890] netlink: 'syz.0.3835': attribute type 10 has an invalid length. [ 939.461195][T16890] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3835'. [ 939.499456][T16890] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3835'. [ 939.847191][T16900] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3838'. [ 939.897671][T16907] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3841'. [ 940.145218][T16913] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3843'. [ 940.174620][T16915] netlink: 'syz.0.3844': attribute type 10 has an invalid length. [ 940.407190][T16921] FAULT_INJECTION: forcing a failure. [ 940.407190][T16921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.429554][T16921] CPU: 0 PID: 16921 Comm: syz.1.3847 Not tainted syzkaller #0 [ 940.437084][T16921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 940.447201][T16921] Call Trace: [ 940.450524][T16921] [ 940.453490][T16921] dump_stack_lvl+0x18c/0x250 [ 940.458220][T16921] ? show_regs_print_info+0x20/0x20 [ 940.463469][T16921] ? load_image+0x420/0x420 [ 940.468034][T16921] ? __lock_acquire+0x7d40/0x7d40 [ 940.473110][T16921] ? snprintf+0xe9/0x140 [ 940.477416][T16921] should_fail_ex+0x39d/0x4d0 [ 940.482171][T16921] _copy_to_user+0x2f/0xa0 [ 940.486638][T16921] simple_read_from_buffer+0xe7/0x150 [ 940.492074][T16921] proc_fail_nth_read+0x1e8/0x260 [ 940.497186][T16921] ? proc_fault_inject_write+0x360/0x360 [ 940.502875][T16921] ? fsnotify_perm+0x271/0x5e0 [ 940.507685][T16921] ? proc_fault_inject_write+0x360/0x360 [ 940.513372][T16921] vfs_read+0x28b/0x970 [ 940.517583][T16921] ? kernel_read+0x1e0/0x1e0 [ 940.522220][T16921] ? __fget_files+0x28/0x4b0 [ 940.526865][T16921] ? __fget_files+0x28/0x4b0 [ 940.531507][T16921] ? __fget_files+0x43d/0x4b0 [ 940.536249][T16921] ? __fdget_pos+0x2a3/0x330 [ 940.540888][T16921] ? ksys_read+0x75/0x260 [ 940.545279][T16921] ksys_read+0x150/0x260 [ 940.549575][T16921] ? vfs_write+0x990/0x990 [ 940.554053][T16921] ? lockdep_hardirqs_on+0x98/0x150 [ 940.559307][T16921] do_syscall_64+0x55/0xb0 [ 940.563764][T16921] ? clear_bhb_loop+0x40/0x90 [ 940.568502][T16921] ? clear_bhb_loop+0x40/0x90 [ 940.573232][T16921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 940.579178][T16921] RIP: 0033:0x7faffab5d68e [ 940.583637][T16921] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 940.603298][T16921] RSP: 002b:00007faffb9fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 940.611760][T16921] RAX: ffffffffffffffda RBX: 00007faffba006c0 RCX: 00007faffab5d68e [ 940.619771][T16921] RDX: 000000000000000f RSI: 00007faffba000a0 RDI: 0000000000000004 [ 940.627785][T16921] RBP: 00007faffba00090 R08: 0000000000000000 R09: 0000000000000000 [ 940.635811][T16921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.643821][T16921] R13: 00007faffae16038 R14: 00007faffae15fa0 R15: 00007ffc2d9665c8 [ 940.651857][T16921] [ 940.678867][T16924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3846'. [ 940.712889][T16924] team0: entered promiscuous mode [ 940.717997][T16924] team_slave_0: entered promiscuous mode [ 940.781524][T16924] team_slave_1: entered promiscuous mode [ 940.787416][T16924] hsr_slave_0: entered promiscuous mode [ 940.808223][T16924] bond0: (slave team0): Releasing backup interface [ 940.822140][T16924] bridge0: port 4(team0) entered blocking state [ 940.828948][T16924] bridge0: port 4(team0) entered disabled state [ 940.845035][T16924] team0: entered allmulticast mode [ 940.850233][T16924] team_slave_0: entered allmulticast mode [ 940.857830][T16924] team_slave_1: entered allmulticast mode [ 940.867324][T16924] hsr_slave_0: entered allmulticast mode [ 940.969379][T16931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3849'. [ 941.017687][T16931] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3849'. [ 941.136086][T16933] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3850'. [ 941.266988][T16938] FAULT_INJECTION: forcing a failure. [ 941.266988][T16938] name failslab, interval 1, probability 0, space 0, times 0 [ 941.296491][T16938] CPU: 1 PID: 16938 Comm: syz.2.3852 Not tainted syzkaller #0 [ 941.304024][T16938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 941.314131][T16938] Call Trace: [ 941.317451][T16938] [ 941.320416][T16938] dump_stack_lvl+0x18c/0x250 [ 941.325149][T16938] ? show_regs_print_info+0x20/0x20 [ 941.330404][T16938] ? load_image+0x420/0x420 [ 941.334971][T16938] ? __might_sleep+0xe0/0xe0 [ 941.339617][T16938] ? __lock_acquire+0x7d40/0x7d40 [ 941.344698][T16938] should_fail_ex+0x39d/0x4d0 [ 941.349429][T16938] should_failslab+0x9/0x20 [ 941.353973][T16938] slab_pre_alloc_hook+0x59/0x310 [ 941.359027][T16938] kmem_cache_alloc_node+0x60/0x320 [ 941.364257][T16938] ? __alloc_skb+0x103/0x2c0 [ 941.368873][T16938] __alloc_skb+0x103/0x2c0 [ 941.373318][T16938] netlink_dump+0x1ec/0xe50 [ 941.377888][T16938] ? __mutex_lock+0x315/0xcc0 [ 941.382586][T16938] ? netlink_lookup+0x200/0x200 [ 941.387474][T16938] ? netlink_autobind+0x300/0x300 [ 941.392544][T16938] ? netlink_lookup+0x30/0x200 [ 941.397343][T16938] ? netlink_lookup+0x30/0x200 [ 941.402142][T16938] __netlink_dump_start+0x5f1/0x810 [ 941.407378][T16938] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 941.412534][T16938] rtnetlink_rcv_msg+0xe1d/0xfa0 [ 941.417509][T16938] ? nla_put_uid_range+0x200/0x200 [ 941.422769][T16938] ? rtnetlink_bind+0x80/0x80 [ 941.427473][T16938] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 941.433514][T16938] ? __dev_queue_xmit+0x265/0x3660 [ 941.438736][T16938] ? lock_chain_count+0x20/0x20 [ 941.443670][T16938] ? __local_bh_enable_ip+0x13a/0x1c0 [ 941.449067][T16938] ? lockdep_hardirqs_on+0x98/0x150 [ 941.454299][T16938] ? __local_bh_enable_ip+0x13a/0x1c0 [ 941.459702][T16938] ? _local_bh_enable+0xa0/0xa0 [ 941.464600][T16938] ? __dev_queue_xmit+0x265/0x3660 [ 941.469750][T16938] ? __dev_queue_xmit+0x265/0x3660 [ 941.474903][T16938] ? __dev_queue_xmit+0x1b2c/0x3660 [ 941.480152][T16938] ? __dev_queue_xmit+0x265/0x3660 [ 941.485305][T16938] ? nla_put_uid_range+0x200/0x200 [ 941.490455][T16938] ? perf_trace_lock+0xfc/0x3b0 [ 941.495342][T16938] netlink_rcv_skb+0x241/0x4d0 [ 941.500143][T16938] ? rtnetlink_bind+0x80/0x80 [ 941.504842][T16938] ? netlink_ack+0x1180/0x1180 [ 941.509649][T16938] ? __lock_acquire+0x7d40/0x7d40 [ 941.514728][T16938] ? netlink_deliver_tap+0x2e/0x1b0 [ 941.519983][T16938] netlink_unicast+0x751/0x8d0 [ 941.524797][T16938] netlink_sendmsg+0x8d0/0xbf0 [ 941.529623][T16938] ? netlink_getsockopt+0x590/0x590 [ 941.534863][T16938] ? aa_sock_msg_perm+0x94/0x150 [ 941.539860][T16938] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 941.545179][T16938] ? security_socket_sendmsg+0x80/0xa0 [ 941.550672][T16938] ? netlink_getsockopt+0x590/0x590 [ 941.555917][T16938] ____sys_sendmsg+0x5ba/0x960 [ 941.560716][T16938] ? __asan_memset+0x22/0x40 [ 941.565337][T16938] ? __sys_sendmsg_sock+0x30/0x30 [ 941.570387][T16938] ? __import_iovec+0x5f2/0x850 [ 941.575269][T16938] ? import_iovec+0x73/0xa0 [ 941.579799][T16938] ___sys_sendmsg+0x2a6/0x360 [ 941.584507][T16938] ? __sys_sendmsg+0x2a0/0x2a0 [ 941.589309][T16938] ? __lock_acquire+0x7d40/0x7d40 [ 941.594380][T16938] __se_sys_sendmsg+0x1c2/0x2b0 [ 941.599268][T16938] ? __x64_sys_sendmsg+0x80/0x80 [ 941.604246][T16938] ? lockdep_hardirqs_on+0x98/0x150 [ 941.609469][T16938] do_syscall_64+0x55/0xb0 [ 941.613907][T16938] ? clear_bhb_loop+0x40/0x90 [ 941.618618][T16938] ? clear_bhb_loop+0x40/0x90 [ 941.623328][T16938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.629262][T16938] RIP: 0033:0x7ff897b9ce59 [ 941.633707][T16938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.653345][T16938] RSP: 002b:00007ff898983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 941.661793][T16938] RAX: ffffffffffffffda RBX: 00007ff897e15fa0 RCX: 00007ff897b9ce59 [ 941.669795][T16938] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 941.677794][T16938] RBP: 00007ff898983090 R08: 0000000000000000 R09: 0000000000000000 [ 941.685784][T16938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.693785][T16938] R13: 00007ff897e16038 R14: 00007ff897e15fa0 R15: 00007fff91b22298 [ 941.701795][T16938] [ 941.745037][T16941] validate_nla: 3 callbacks suppressed [ 941.745075][T16941] netlink: 'syz.1.3854': attribute type 10 has an invalid length. [ 942.007986][T16950] netlink: 'syz.3.3858': attribute type 10 has an invalid length. [ 942.582432][T16960] netlink: 'syz.0.3860': attribute type 10 has an invalid length. [ 943.106805][T16965] netlink: 'syz.1.3861': attribute type 10 has an invalid length. [ 943.385755][T16971] netlink: 'syz.3.3864': attribute type 10 has an invalid length. [ 943.420063][T16971] bond0: (slave team0): Releasing backup interface [ 943.436248][T16971] team0: left allmulticast mode [ 943.442274][T16971] team_slave_0: left allmulticast mode [ 943.447895][T16971] team_slave_1: left allmulticast mode [ 943.453839][T16971] hsr_slave_0: left allmulticast mode [ 943.488523][T16971] bridge0: port 5(team0) entered blocking state [ 943.495735][T16971] bridge0: port 5(team0) entered disabled state [ 943.508812][T16971] team0: entered allmulticast mode [ 943.521568][T16971] team_slave_0: entered allmulticast mode [ 943.528035][T16971] team_slave_1: entered allmulticast mode [ 943.534393][T16971] hsr_slave_0: entered allmulticast mode [ 943.545782][T16975] netlink: 'syz.1.3865': attribute type 10 has an invalid length. [ 943.763851][T16984] netlink: 'syz.1.3868': attribute type 10 has an invalid length. [ 944.069839][T16995] netlink: 'syz.0.3873': attribute type 10 has an invalid length. [ 944.222380][T16999] netlink: 'syz.1.3875': attribute type 10 has an invalid length. [ 944.405043][T17003] __nla_validate_parse: 8 callbacks suppressed [ 944.405140][T17003] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3876'. [ 944.681836][T17007] netlink: 'syz.2.3877': attribute type 10 has an invalid length. [ 944.915053][T17011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3879'. [ 945.155769][T17017] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3882'. [ 945.362825][T17024] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3885'. [ 945.576054][T17032] FAULT_INJECTION: forcing a failure. [ 945.576054][T17032] name failslab, interval 1, probability 0, space 0, times 0 [ 945.591625][T17032] CPU: 0 PID: 17032 Comm: syz.0.3889 Not tainted syzkaller #0 [ 945.599172][T17032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 945.609302][T17032] Call Trace: [ 945.612646][T17032] [ 945.615643][T17032] dump_stack_lvl+0x18c/0x250 [ 945.620417][T17032] ? show_regs_print_info+0x20/0x20 [ 945.625693][T17032] ? load_image+0x420/0x420 [ 945.630294][T17032] ? __might_sleep+0xe0/0xe0 [ 945.634962][T17032] ? __lock_acquire+0x7d40/0x7d40 [ 945.640085][T17032] should_fail_ex+0x39d/0x4d0 [ 945.644864][T17032] should_failslab+0x9/0x20 [ 945.649442][T17032] slab_pre_alloc_hook+0x59/0x310 [ 945.654563][T17032] kmem_cache_alloc_node+0x60/0x320 [ 945.659845][T17032] ? __alloc_skb+0x103/0x2c0 [ 945.664526][T17032] __alloc_skb+0x103/0x2c0 [ 945.669035][T17032] netlink_dump+0x1ec/0xe50 [ 945.673658][T17032] ? __mutex_lock+0x315/0xcc0 [ 945.678418][T17032] ? netlink_lookup+0x200/0x200 [ 945.683403][T17032] ? netlink_autobind+0x300/0x300 [ 945.688513][T17032] ? netlink_lookup+0x30/0x200 [ 945.693345][T17032] ? netlink_lookup+0x30/0x200 [ 945.698205][T17032] __netlink_dump_start+0x5f1/0x810 [ 945.703473][T17032] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 945.708651][T17032] rtnetlink_rcv_msg+0xe1d/0xfa0 [ 945.713647][T17032] ? inet6_dump_ifmcaddr+0x30/0x30 [ 945.718976][T17032] ? rtnetlink_bind+0x80/0x80 [ 945.723714][T17032] ? perf_trace_lock_acquire+0x34f/0x410 [ 945.729478][T17032] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 945.735520][T17032] ? lock_chain_count+0x20/0x20 [ 945.740427][T17032] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 945.746384][T17032] ? lockdep_hardirqs_on+0x98/0x150 [ 945.751636][T17032] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 945.757581][T17032] ? _raw_spin_unlock+0x40/0x40 [ 945.762506][T17032] ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0 [ 945.769154][T17032] ? inet6_dump_ifmcaddr+0x30/0x30 [ 945.774368][T17032] netlink_rcv_skb+0x241/0x4d0 [ 945.779197][T17032] ? rtnetlink_bind+0x80/0x80 [ 945.783931][T17032] ? netlink_ack+0x1180/0x1180 [ 945.788777][T17032] ? __lock_acquire+0x7d40/0x7d40 [ 945.793867][T17032] ? __rcu_read_unlock+0x7c/0xd0 [ 945.798848][T17032] ? netlink_deliver_tap+0x2e/0x1b0 [ 945.804111][T17032] netlink_unicast+0x751/0x8d0 [ 945.808961][T17032] netlink_sendmsg+0x8d0/0xbf0 [ 945.813819][T17032] ? netlink_getsockopt+0x590/0x590 [ 945.819089][T17032] ? aa_sock_msg_perm+0x94/0x150 [ 945.824093][T17032] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 945.829427][T17032] ? security_socket_sendmsg+0x80/0xa0 [ 945.834928][T17032] ? netlink_getsockopt+0x590/0x590 [ 945.840190][T17032] ____sys_sendmsg+0x5ba/0x960 [ 945.845021][T17032] ? __asan_memset+0x22/0x40 [ 945.849665][T17032] ? __sys_sendmsg_sock+0x30/0x30 [ 945.854739][T17032] ? __import_iovec+0x5f2/0x850 [ 945.859657][T17032] ? import_iovec+0x73/0xa0 [ 945.864225][T17032] ___sys_sendmsg+0x2a6/0x360 [ 945.868948][T17032] ? get_pid_task+0x20/0x1e0 [ 945.873599][T17032] ? __sys_sendmsg+0x2a0/0x2a0 [ 945.878463][T17032] ? __lock_acquire+0x7d40/0x7d40 [ 945.883610][T17032] __se_sys_sendmsg+0x1c2/0x2b0 [ 945.888513][T17032] ? __x64_sys_sendmsg+0x80/0x80 [ 945.893539][T17032] ? lockdep_hardirqs_on+0x98/0x150 [ 945.898793][T17032] do_syscall_64+0x55/0xb0 [ 945.903264][T17032] ? clear_bhb_loop+0x40/0x90 [ 945.907990][T17032] ? clear_bhb_loop+0x40/0x90 [ 945.912719][T17032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.918656][T17032] RIP: 0033:0x7ff738d9ce59 [ 945.923127][T17032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.942777][T17032] RSP: 002b:00007ff736ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.951234][T17032] RAX: ffffffffffffffda RBX: 00007ff739015fa0 RCX: 00007ff738d9ce59 [ 945.959248][T17032] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000000000000005 [ 945.967260][T17032] RBP: 00007ff736ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 945.975273][T17032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.983283][T17032] R13: 00007ff739016038 R14: 00007ff739015fa0 R15: 00007ffc670d4108 [ 945.991367][T17032] [ 946.200187][T17038] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3891'. [ 947.331731][T17058] validate_nla: 6 callbacks suppressed [ 947.331769][T17058] netlink: 'syz.2.3898': attribute type 10 has an invalid length. [ 947.432410][T17062] netlink: 'syz.3.3900': attribute type 10 has an invalid length. [ 947.484525][T17068] netlink: 'syz.3.3900': attribute type 21 has an invalid length. [ 947.626546][T17069] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3901'. [ 947.708762][T17073] netlink: 'syz.3.3904': attribute type 10 has an invalid length. [ 948.426668][T17083] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3907'. [ 948.577823][T17089] netlink: 'syz.1.3909': attribute type 10 has an invalid length. [ 948.649299][T17087] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3910'. [ 948.857986][T17096] netlink: 'syz.3.3913': attribute type 10 has an invalid length. [ 948.869426][T17096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3913'. [ 949.169879][T17104] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3915'. [ 949.278154][T17108] netlink: 'syz.2.3916': attribute type 21 has an invalid length. [ 949.315962][T17108] netlink: 'syz.2.3916': attribute type 10 has an invalid length. [ 949.339866][T17108] team0: left allmulticast mode [ 949.359034][T17108] team_slave_0: left allmulticast mode [ 949.385937][T17108] team_slave_1: left allmulticast mode [ 949.400923][T17108] team0: left promiscuous mode [ 949.405787][T17108] team_slave_0: left promiscuous mode [ 949.451292][T17108] team_slave_1: left promiscuous mode [ 949.471895][T17108] bridge0: port 4(team0) entered disabled state [ 949.512489][T17108] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.544609][T17108] bond0: (slave team0): Enslaving as an active interface with an up link [ 949.815957][T17112] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3917'. [ 950.099938][T17117] netlink: 'syz.3.3919': attribute type 10 has an invalid length. [ 950.345758][T17119] syzkaller0: entered promiscuous mode [ 950.374703][T17119] syzkaller0: entered allmulticast mode [ 950.694129][T17132] netlink: 'syz.2.3923': attribute type 10 has an invalid length. [ 950.710102][T17132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3923'. serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.