last executing test programs: 3.713028026s ago: executing program 0 (id=2632): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)=@isdn={0x22, 0x4, 0x40, 0x0, 0xb}, 0x80, 0x0, 0x33}, 0x20000800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r2, 0x4000, r2}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="020f000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) socket$kcm(0x11, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1c, 0x0, 0xfffffffd, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') 3.605436979s ago: executing program 1 (id=2633): openat$tun(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11240a, 0xca, 0x0, 0x4, 0x8, 0x0, 0x200}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYRES32], 0x2) 3.042951223s ago: executing program 2 (id=2636): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) 2.613217804s ago: executing program 2 (id=2637): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) 2.555813715s ago: executing program 0 (id=2638): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a"], 0x48) socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @mcast1, 0x8}}, 0x80, 0x0, 0x39}, 0x8804) socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) recvmsg$kcm(r2, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x141) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@union={0x4, 0x3, 0x0, 0x5, 0x1, 0x401, [{0x5, 0x2, 0x80000001}, {0x1, 0x2, 0x89}, {0xe, 0x1, 0x8001}]}]}, {0x0, [0x0]}}, &(0x7f0000000740)=""/4096, 0x4b, 0x1000, 0x0, 0x7fffffff, 0x65212a7541d7a945, @value=r1}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x40014, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x26]}}, &(0x7f0000000400)=""/9, 0x1b, 0x9, 0x1, 0x3b}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x300, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f00000005c0)=0x1) 2.535373396s ago: executing program 3 (id=2639): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) 2.453283547s ago: executing program 1 (id=2640): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r0}, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x80044943, 0x0) r3 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b23a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xb, 0x1, 0x0, 0x0, 0x0, 0x9, 0x742bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x71d, 0x0, 0x2005}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 2.394335919s ago: executing program 2 (id=2641): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001800)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000100)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f00000004c0)='GPL\x00', 0x3c3be546, 0x3c, &(0x7f0000000500)=""/60, 0x41100, 0x50, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x9, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001780)=[{0x4, 0x4, 0x8, 0x7}, {0x5, 0x4}, {0x0, 0x2, 0x5, 0x9}, {0x1, 0x5, 0x1, 0x2}, {0x5, 0x5, 0xd, 0x9}, {0x1, 0x4, 0xf}], 0x10, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="c5dfb080cd20d308098e000088a8", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="180000000000000000ef0000004dbb82f95417990f04ddc933bcaf770000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xf}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) recvmsg$unix(r0, &(0x7f0000002240)={&(0x7f0000001d40)=@abs, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001dc0)=""/163, 0xa3}, {&(0x7f0000001e80)=""/119, 0x77}, {&(0x7f0000001f00)=""/97, 0x61}, {&(0x7f0000001f80)=""/138, 0x8a}, {&(0x7f0000002040)=""/165, 0xa5}], 0x5, &(0x7f0000002180)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x2001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001900)=""/35, 0x2f, 0x23, 0x0, 0x1ff}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x28, 0x0, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x3, 0x84) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast}) 2.254463273s ago: executing program 3 (id=2642): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a"], 0x48) socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @mcast1, 0x8}}, 0x80, 0x0, 0x39}, 0x8804) socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) recvmsg$kcm(r2, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x141) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@union={0x4, 0x3, 0x0, 0x5, 0x1, 0x401, [{0x5, 0x2, 0x80000001}, {0x1, 0x2, 0x89}, {0xe, 0x1, 0x8001}]}]}, {0x0, [0x0]}}, &(0x7f0000000740)=""/4096, 0x4b, 0x1000, 0x0, 0x7fffffff, 0x65212a7541d7a945, @value=r1}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x40014, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x26]}}, &(0x7f0000000400)=""/9, 0x1b, 0x9, 0x1, 0x3b}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x300, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) (fail_nth: 6) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f00000005c0)=0x1) 2.201302504s ago: executing program 0 (id=2643): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, &(0x7f0000000580)) 2.080182607s ago: executing program 1 (id=2644): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x48) 1.96120526s ago: executing program 0 (id=2645): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) 1.433172604s ago: executing program 3 (id=2646): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x48) 1.418378244s ago: executing program 2 (id=2647): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)=@isdn={0x22, 0x4, 0x40, 0x0, 0xb}, 0x80, 0x0, 0x33}, 0x20000800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r2, 0x4000, r2}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="020f000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1c, 0x0, 0xfffffffd, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') 1.342838306s ago: executing program 1 (id=2648): r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x2a009, 0x80000000, 0x4, 0x2, 0xb, 0x3f, 0x1d0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x5, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x0, 0x0, 0x9, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x10000000001, r0, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.341589386s ago: executing program 0 (id=2656): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000000009000005000000280000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc) socket$kcm(0x29, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYBLOB="2e00000010000000", @ANYRES32, @ANYBLOB="075776483836b5663c380a5bc998c71aaebb452ce00aa0a1449cbf131cc1cb0973b18928971576001e87516f91e014ad9e4d5bc9d76c942f"], 0x20) syz_clone(0x20090100, &(0x7f0000000580)="604e7c8d5742348feb65ce19f30dccb16c8589298a5238bfe6501244da3f4ff6fa9636a6a07015a8c51029e7869ed8338b1fbecf263815951dbc729c04b15082ee6d4a83fe68bbb55b26f02dbcf5b4d2b713583eefd7a28469e4", 0x5a, &(0x7f0000000600), &(0x7f0000000640), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'batadv0\x00', @random='\x00\x00\x00\x00\x00 '}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8000000, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, 0x0) sendmsg$inet(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{}], 0x1}, 0x48014) sendmsg(r6, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r6, r2, 0x22, 0x2b, r3, @void, @void, @void, @value, r5}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.251651488s ago: executing program 3 (id=2649): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) 640.320864ms ago: executing program 3 (id=2650): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffefff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xad8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x2, 0x1, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) close(r4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r6, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001700)=""/4094, 0xffe}, {&(0x7f0000000440)=""/224, 0xe0}], 0x2}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r7, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9e}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x0, 0x2d, 0x24, &(0x7f0000000e40)=""/36, 0x41000, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001080)=[{0x0, 0x5, 0x4, 0x6}, {0x2, 0x4, 0x9, 0xa}, {0x5, 0x3, 0x9, 0xb}], 0x10, 0x8}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000004) 507.459197ms ago: executing program 2 (id=2651): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0xf7, 0x1, 0x6, 0x0, 0x8, 0x42024, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x3}, 0x20, 0x80000001, 0x0, 0x8, 0x1, 0x10000, 0xffff, 0x0, 0xa425, 0x0, 0x6e95}, 0xffffffffffffffff, 0xc, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000000000000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 471.702838ms ago: executing program 1 (id=2652): close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6b772b5b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100924, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum64={0x2, 0x0, 0x0, 0x13, 0x0, 0xc}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x1, 0xffff}, 0x28) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80698c6394090324fc602f6e35400800018025581d00d1bd00"/46, 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) 73.146888ms ago: executing program 0 (id=2653): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, &(0x7f0000000580)) 1.16796ms ago: executing program 3 (id=2654): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a"], 0x48) socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @mcast1, 0x8}}, 0x80, 0x0, 0x39}, 0x8804) socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) recvmsg$kcm(r2, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x141) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@union={0x4, 0x3, 0x0, 0x5, 0x1, 0x401, [{0x5, 0x2, 0x80000001}, {0x1, 0x2, 0x89}, {0xe, 0x1, 0x8001}]}]}, {0x0, [0x0]}}, &(0x7f0000000740)=""/4096, 0x4b, 0x1000, 0x0, 0x7fffffff, 0x65212a7541d7a945, @value=r1}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x40014, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x26]}}, &(0x7f0000000400)=""/9, 0x1b, 0x9, 0x1, 0x3b}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa000a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xbfbfe277, 0xfffc, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x300, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f00000005c0)=0x1) 709.49µs ago: executing program 2 (id=2655): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001800)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000100)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f00000004c0)='GPL\x00', 0x3c3be546, 0x3c, &(0x7f0000000500)=""/60, 0x41100, 0x50, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x9, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001780)=[{0x4, 0x4, 0x8, 0x7}, {0x5, 0x4}, {0x0, 0x2, 0x5, 0x9}, {0x1, 0x5, 0x1, 0x2}, {0x5, 0x5, 0xd, 0x9}, {0x1, 0x4, 0xf}], 0x10, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="c5dfb080cd20d308098e000088a8", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="180000000000000000ef0000004dbb82f95417990f04ddc933bcaf770000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xf}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) recvmsg$unix(r0, &(0x7f0000002240)={&(0x7f0000001d40)=@abs, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001dc0)=""/163, 0xa3}, {&(0x7f0000001e80)=""/119, 0x77}, {&(0x7f0000001f00)=""/97, 0x61}, {&(0x7f0000001f80)=""/138, 0x8a}, {&(0x7f0000002040)=""/165, 0xa5}], 0x5, &(0x7f0000002180)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x2001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001900)=""/35, 0x2f, 0x23, 0x0, 0x1ff}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x28, 0x0, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x3, 0x84) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast}) 0s ago: executing program 1 (id=2657): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) kernel console output (not intermixed with test programs): sock+0x30/0x30 [ 358.514999][T10752] ? __import_iovec+0x5f2/0x850 [ 358.520035][T10752] ? import_iovec+0x73/0xa0 [ 358.524598][T10752] ___sys_sendmsg+0x2a6/0x360 [ 358.529425][T10752] ? __sys_sendmsg+0x2b0/0x2b0 [ 358.534385][T10752] ? __lock_acquire+0x7d80/0x7d80 [ 358.541212][T10752] __se_sys_sendmsg+0x1d0/0x2c0 [ 358.546243][T10752] ? __x64_sys_sendmsg+0x80/0x80 [ 358.551415][T10752] ? lockdep_hardirqs_on+0x98/0x150 [ 358.557494][T10752] do_syscall_64+0x55/0xb0 [ 358.562181][T10752] ? clear_bhb_loop+0x40/0x90 [ 358.566922][T10752] ? clear_bhb_loop+0x40/0x90 [ 358.571767][T10752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.577739][T10752] RIP: 0033:0x7f98f859e019 [ 358.582231][T10752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.603063][T10752] RSP: 002b:00007f98f9448028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.611987][T10752] RAX: ffffffffffffffda RBX: 00007f98f8825fa0 RCX: 00007f98f859e019 [ 358.620021][T10752] RDX: 00000000000000c9 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 358.628071][T10752] RBP: 00007f98f9448090 R08: 0000000000000000 R09: 0000000000000000 [ 358.636921][T10752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.645287][T10752] R13: 00007f98f8826038 R14: 00007f98f8825fa0 R15: 00007ffe37ff78e8 [ 358.653845][T10752] [ 364.903614][T10812] netlink: 'syz.2.1470': attribute type 10 has an invalid length. [ 364.943990][T10812] bridge_slave_1: entered promiscuous mode [ 364.992605][T10812] bridge_slave_1: entered allmulticast mode [ 367.663657][T10868] netlink: 'syz.1.1486': attribute type 10 has an invalid length. [ 368.043883][T10868] bridge_slave_1: entered promiscuous mode [ 368.184528][T10868] bridge_slave_1: entered allmulticast mode [ 369.023009][T10892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.031188][T10892] IPv6: NLM_F_CREATE should be set when creating new route [ 369.038759][T10892] IPv6: NLM_F_CREATE should be set when creating new route [ 369.046211][T10892] IPv6: NLM_F_CREATE should be set when creating new route [ 369.274096][T10892] netlink: 'syz.2.1495': attribute type 9 has an invalid length. [ 369.353155][T10892] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1495'. [ 369.700947][T10898] netlink: 'syz.2.1495': attribute type 9 has an invalid length. [ 369.766739][T10898] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1495'. [ 370.332488][T10905] À: port 1(vlan0) entered blocking state [ 370.348356][T10905] À: port 1(vlan0) entered disabled state [ 370.356276][T10905] vlan0: entered allmulticast mode [ 370.369699][T10905] veth0_vlan: entered allmulticast mode [ 370.420419][T10905] vlan0: entered promiscuous mode [ 372.959393][T10957] netlink: 'syz.3.1520': attribute type 29 has an invalid length. [ 372.984198][T10957] netlink: 'syz.3.1520': attribute type 29 has an invalid length. [ 373.647538][ T6936] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 379.023034][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.030223][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.887237][T11066] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1553'. [ 383.850296][T11100] netlink: 'syz.3.1563': attribute type 10 has an invalid length. [ 386.073350][T11100] geneve1: entered promiscuous mode [ 386.132027][T11100] geneve1: entered allmulticast mode [ 386.195826][T11100] team0: Port device geneve1 added [ 388.024989][T11132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1575'. [ 388.169425][T11132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1575'. [ 388.225851][T11133] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1575'. [ 388.254936][T11131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1575'. [ 393.250888][T11182] netlink: 'syz.2.1589': attribute type 3 has an invalid length. [ 393.282290][T11182] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1589'. [ 394.936709][T11202] netlink: 'syz.2.1597': attribute type 3 has an invalid length. [ 394.955697][T11202] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1597'. [ 396.655410][T11215] FAULT_INJECTION: forcing a failure. [ 396.655410][T11215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.749980][T11215] CPU: 0 PID: 11215 Comm: syz.1.1601 Not tainted syzkaller #0 [ 396.758877][T11215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.771700][T11215] Call Trace: [ 396.775953][T11215] [ 396.786602][T11215] dump_stack_lvl+0x18c/0x250 [ 396.793893][T11215] ? show_regs_print_info+0x20/0x20 [ 396.800342][T11215] ? load_image+0x420/0x420 [ 396.805277][T11215] ? __lock_acquire+0x7d80/0x7d80 [ 396.810624][T11215] should_fail_ex+0x394/0x4c0 [ 396.815703][T11215] _copy_from_user+0x2f/0xe0 [ 396.820891][T11215] bpf_prog_test_run_skb+0x267/0x18f0 [ 396.827480][T11215] ? __fget_files+0x28/0x460 [ 396.832797][T11215] ? __fget_files+0x3fc/0x460 [ 396.837716][T11215] ? cpu_online+0x60/0x60 [ 396.842111][T11215] bpf_prog_test_run+0x31f/0x390 [ 396.847296][T11215] __sys_bpf+0x49d/0x890 [ 396.851936][T11215] ? bpf_link_show_fdinfo+0x390/0x390 [ 396.857605][T11215] ? lock_chain_count+0x20/0x20 [ 396.862549][T11215] __x64_sys_bpf+0x7c/0x90 [ 396.867487][T11215] do_syscall_64+0x55/0xb0 [ 396.872096][T11215] ? clear_bhb_loop+0x40/0x90 [ 396.877049][T11215] ? clear_bhb_loop+0x40/0x90 [ 396.882629][T11215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.889037][T11215] RIP: 0033:0x7f98f859e019 [ 396.893684][T11215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.917564][T11215] RSP: 002b:00007f98f9448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.928489][T11215] RAX: ffffffffffffffda RBX: 00007f98f8825fa0 RCX: 00007f98f859e019 [ 396.937422][T11215] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 396.947380][T11215] RBP: 00007f98f9448090 R08: 0000000000000000 R09: 0000000000000000 [ 396.956359][T11215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.964770][T11215] R13: 00007f98f8826038 R14: 00007f98f8825fa0 R15: 00007ffe37ff78e8 [ 396.973177][T11215] [ 398.644081][T11242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1612'. [ 398.731581][T11242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1612'. [ 398.942240][T11241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1612'. [ 398.960864][T11242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1612'. [ 402.262493][T11292] netlink: 'syz.3.1630': attribute type 2 has an invalid length. [ 402.284780][T11292] netlink: 'syz.3.1630': attribute type 1 has an invalid length. [ 402.332570][T11292] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1630'. [ 403.572185][T11320] netlink: 'syz.2.1637': attribute type 2 has an invalid length. [ 403.585051][T11320] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1637'. [ 404.780270][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 405.990530][T11363] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1652'. [ 406.022688][T11363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.608870][T11372] netlink: 'syz.2.1656': attribute type 3 has an invalid length. [ 406.675519][T11372] netlink: 16795 bytes leftover after parsing attributes in process `syz.2.1656'. [ 407.006530][T11378] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1658'. [ 408.586446][T11398] netlink: 'syz.1.1664': attribute type 10 has an invalid length. [ 408.638679][T11398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1664'. [ 408.885877][T11398] batman_adv: batadv0: Adding interface: virt_wifi0 [ 408.904323][T11398] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.022381][T11398] batman_adv: batadv0: Interface activated: virt_wifi0 [ 409.279675][T11419] netlink: 'syz.0.1672': attribute type 10 has an invalid length. [ 409.364993][T11419] vxcan1: entered promiscuous mode [ 409.371463][T11419] vxcan1: entered allmulticast mode [ 409.415126][T11419] team0: Device vxcan1 is of different type [ 413.428684][T11477] netlink: 'syz.3.1691': attribute type 21 has an invalid length. [ 414.365021][T11489] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1694'. [ 414.466104][T11489] netlink: zone id is out of range [ 414.740453][T11495] netlink: 'syz.3.1696': attribute type 10 has an invalid length. [ 414.770689][T11495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1696'. [ 414.908300][T11495] batman_adv: batadv0: Adding interface: virt_wifi0 [ 414.982574][T11495] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.056521][T11495] batman_adv: batadv0: Interface activated: virt_wifi0 [ 415.681497][T11509] netlink: 'syz.2.1700': attribute type 10 has an invalid length. [ 415.732213][T11509] syz_tun: entered promiscuous mode [ 415.788908][T11509] syz_tun: entered allmulticast mode [ 415.806603][T11509] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 416.582810][T11523] netlink: 'syz.3.1706': attribute type 21 has an invalid length. [ 416.594388][T11523] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1706'. [ 418.849994][T11561] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1716'. [ 418.873140][T11561] netlink: zone id is out of range [ 420.053651][T11580] netlink: 'syz.0.1726': attribute type 21 has an invalid length. [ 423.267750][T11633] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1740'. [ 423.562799][T11633] netlink: zone id is out of range [ 423.911774][T11627] syz.2.1740 (11627) used greatest stack depth: 19496 bytes left [ 428.710807][T11709] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1776'. [ 429.425058][T11715] FAULT_INJECTION: forcing a failure. [ 429.425058][T11715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.475248][T11715] CPU: 0 PID: 11715 Comm: syz.1.1771 Not tainted syzkaller #0 [ 429.483721][T11715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.499678][T11715] Call Trace: [ 429.503680][T11715] [ 429.507532][T11715] dump_stack_lvl+0x18c/0x250 [ 429.513183][T11715] ? show_regs_print_info+0x20/0x20 [ 429.519141][T11715] ? load_image+0x420/0x420 [ 429.525137][T11715] ? __might_fault+0xaa/0x120 [ 429.530577][T11715] ? __lock_acquire+0x7d80/0x7d80 [ 429.538017][T11715] should_fail_ex+0x394/0x4c0 [ 429.546519][T11715] _copy_from_user+0x2f/0xe0 [ 429.552197][T11715] __sys_bpf+0x23e/0x890 [ 429.557989][T11715] ? bpf_link_show_fdinfo+0x390/0x390 [ 429.564045][T11715] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.571632][T11715] __x64_sys_bpf+0x7c/0x90 [ 429.577815][T11715] do_syscall_64+0x55/0xb0 [ 429.582720][T11715] ? clear_bhb_loop+0x40/0x90 [ 429.590136][T11715] ? clear_bhb_loop+0x40/0x90 [ 429.595946][T11715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.603414][T11715] RIP: 0033:0x7f98f859e019 [ 429.609224][T11715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.635251][T11715] RSP: 002b:00007f98f9448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.647369][T11715] RAX: ffffffffffffffda RBX: 00007f98f8825fa0 RCX: 00007f98f859e019 [ 429.656444][T11715] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 429.668629][T11715] RBP: 00007f98f9448090 R08: 0000000000000000 R09: 0000000000000000 [ 429.681079][T11715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.691916][T11715] R13: 00007f98f8826038 R14: 00007f98f8825fa0 R15: 00007ffe37ff78e8 [ 429.702023][T11715] [ 429.778396][T11724] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1773'. [ 433.080137][T11772] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1790'. [ 435.918507][ T6932] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 437.881521][T11852] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1815'. [ 440.460359][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.470635][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.763392][T11917] netlink: 'syz.1.1836': attribute type 21 has an invalid length. [ 441.821492][T11917] netlink: 'syz.1.1836': attribute type 4 has an invalid length. [ 441.872090][T11917] netlink: 'syz.1.1836': attribute type 23 has an invalid length. [ 441.941136][T11917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1836'. [ 442.212866][T11931] netlink: 'syz.0.1838': attribute type 10 has an invalid length. [ 442.239095][T11931] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 445.716383][T12007] netlink: 'syz.2.1862': attribute type 1 has an invalid length. [ 445.736257][T12007] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1862'. [ 445.792828][T12007] netlink: 'syz.2.1862': attribute type 3 has an invalid length. [ 445.823003][T12007] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1862'. [ 446.957045][T12036] netlink: 'syz.1.1868': attribute type 10 has an invalid length. [ 447.007793][T12036] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 447.646278][T12043] netlink: 'syz.2.1873': attribute type 10 has an invalid length. [ 448.061037][T12045] netlink: 'syz.2.1873': attribute type 10 has an invalid length. [ 451.624765][T12117] FAULT_INJECTION: forcing a failure. [ 451.624765][T12117] name failslab, interval 1, probability 0, space 0, times 0 [ 451.666824][T12117] CPU: 0 PID: 12117 Comm: syz.1.1904 Not tainted syzkaller #0 [ 451.676004][T12117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 451.689157][T12117] Call Trace: [ 451.693180][T12117] [ 451.696167][T12117] dump_stack_lvl+0x18c/0x250 [ 451.701374][T12117] ? show_regs_print_info+0x20/0x20 [ 451.709057][T12117] ? load_image+0x420/0x420 [ 451.714455][T12117] ? __lock_acquire+0x7d80/0x7d80 [ 451.720473][T12117] should_fail_ex+0x394/0x4c0 [ 451.727595][T12117] should_failslab+0x9/0x20 [ 451.733266][T12117] slab_pre_alloc_hook+0x59/0x300 [ 451.738734][T12117] ? mark_lock+0x94/0x320 [ 451.743239][T12117] kmem_cache_alloc+0x5a/0x2c0 [ 451.748077][T12117] ? alloc_empty_file+0x9e/0x1d0 [ 451.753120][T12117] alloc_empty_file+0x9e/0x1d0 [ 451.758206][T12117] path_openat+0x120/0x3270 [ 451.762837][T12117] ? mark_lock+0x94/0x320 [ 451.767780][T12117] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 451.775394][T12117] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 451.782721][T12117] ? lock_chain_count+0x20/0x20 [ 451.787976][T12117] ? do_filp_open+0x430/0x430 [ 451.794539][T12117] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 451.803469][T12117] ? lockdep_hardirqs_on+0x98/0x150 [ 451.809811][T12117] do_filp_open+0x1f2/0x430 [ 451.814394][T12117] ? vfs_tmpfile+0x620/0x620 [ 451.819065][T12117] ? _raw_spin_unlock+0x28/0x40 [ 451.825643][T12117] ? alloc_fd+0x590/0x640 [ 451.831526][T12117] do_sys_openat2+0x134/0x1d0 [ 451.838536][T12117] ? do_sys_open+0xe0/0xe0 [ 451.844294][T12117] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 451.850445][T12117] ? lock_chain_count+0x20/0x20 [ 451.855552][T12117] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 451.862175][T12117] __x64_sys_openat+0x139/0x160 [ 451.867412][T12117] do_syscall_64+0x55/0xb0 [ 451.871925][T12117] ? clear_bhb_loop+0x40/0x90 [ 451.876963][T12117] ? clear_bhb_loop+0x40/0x90 [ 451.881741][T12117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.888191][T12117] RIP: 0033:0x7f98f859e019 [ 451.893176][T12117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.916946][T12117] RSP: 002b:00007f98f9448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 451.926404][T12117] RAX: ffffffffffffffda RBX: 00007f98f8825fa0 RCX: 00007f98f859e019 [ 451.937496][T12117] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 451.946938][T12117] RBP: 00007f98f9448090 R08: 0000000000000000 R09: 0000000000000000 [ 451.956329][T12117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.967218][T12117] R13: 00007f98f8826038 R14: 00007f98f8825fa0 R15: 00007ffe37ff78e8 [ 451.978594][T12117] [ 453.181818][T12145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1914'. [ 453.196146][T12145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1914'. [ 453.213161][T12145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1914'. [ 453.262887][T12145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1914'. [ 453.615134][T12160] FAULT_INJECTION: forcing a failure. [ 453.615134][T12160] name failslab, interval 1, probability 0, space 0, times 0 [ 453.714515][T12160] CPU: 1 PID: 12160 Comm: syz.3.1918 Not tainted syzkaller #0 [ 453.722090][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.732389][T12160] Call Trace: [ 453.735735][T12160] [ 453.739354][T12160] dump_stack_lvl+0x18c/0x250 [ 453.744435][T12160] ? show_regs_print_info+0x20/0x20 [ 453.749799][T12160] ? load_image+0x420/0x420 [ 453.754381][T12160] ? __lock_acquire+0x7d80/0x7d80 [ 453.759484][T12160] should_fail_ex+0x394/0x4c0 [ 453.764285][T12160] should_failslab+0x9/0x20 [ 453.768951][T12160] slab_pre_alloc_hook+0x59/0x300 [ 453.774065][T12160] kmem_cache_alloc_node+0x5e/0x310 [ 453.779696][T12160] ? alloc_vmap_area+0x6f7/0x1e50 [ 453.784803][T12160] alloc_vmap_area+0x6f7/0x1e50 [ 453.789819][T12160] ? vm_map_ram+0xcf0/0xcf0 [ 453.794413][T12160] ? rcu_is_watching+0x15/0xb0 [ 453.799266][T12160] __get_vm_area_node+0x162/0x370 [ 453.804800][T12160] __vmalloc_node_range+0x36f/0x1320 [ 453.810153][T12160] ? netlink_sendmsg+0x602/0xbf0 [ 453.815133][T12160] ? netlink_insert+0x1094/0x1390 [ 453.820224][T12160] ? netlink_insert+0x2ba/0x1390 [ 453.825993][T12160] ? free_vm_area+0x50/0x50 [ 453.830671][T12160] ? netlink_sendmsg+0x602/0xbf0 [ 453.835653][T12160] vmalloc+0x79/0x90 [ 453.840327][T12160] ? netlink_sendmsg+0x602/0xbf0 [ 453.845396][T12160] netlink_sendmsg+0x602/0xbf0 [ 453.850206][T12160] ? netlink_getsockopt+0x590/0x590 [ 453.855557][T12160] ? apparmor_socket_sendmsg+0x8e/0x330 [ 453.861257][T12160] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 453.866672][T12160] ? security_socket_sendmsg+0x80/0xa0 [ 453.872190][T12160] ? netlink_getsockopt+0x590/0x590 [ 453.877452][T12160] ____sys_sendmsg+0x61b/0x980 [ 453.882257][T12160] ? __asan_memset+0x22/0x40 [ 453.886971][T12160] ? __sys_sendmsg_sock+0x30/0x30 [ 453.892463][T12160] ? __import_iovec+0x5f2/0x850 [ 453.897361][T12160] ? import_iovec+0x73/0xa0 [ 453.901908][T12160] ___sys_sendmsg+0x2a6/0x360 [ 453.906646][T12160] ? get_pid_task+0x20/0x1e0 [ 453.911277][T12160] ? __sys_sendmsg+0x2b0/0x2b0 [ 453.916145][T12160] ? __lock_acquire+0x7d80/0x7d80 [ 453.921476][T12160] __se_sys_sendmsg+0x1d0/0x2c0 [ 453.926386][T12160] ? __x64_sys_sendmsg+0x80/0x80 [ 453.931389][T12160] ? lockdep_hardirqs_on+0x98/0x150 [ 453.936641][T12160] do_syscall_64+0x55/0xb0 [ 453.941100][T12160] ? clear_bhb_loop+0x40/0x90 [ 453.945813][T12160] ? clear_bhb_loop+0x40/0x90 [ 453.951033][T12160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.957859][T12160] RIP: 0033:0x7f82ebb9e019 [ 453.962362][T12160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.982052][T12160] RSP: 002b:00007f82ecaaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.990823][T12160] RAX: ffffffffffffffda RBX: 00007f82ebe25fa0 RCX: 00007f82ebb9e019 [ 453.998853][T12160] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 454.008060][T12160] RBP: 00007f82ecaaf090 R08: 0000000000000000 R09: 0000000000000000 [ 454.016257][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.024452][T12160] R13: 00007f82ebe26038 R14: 00007f82ebe25fa0 R15: 00007ffecb20ebd8 [ 454.032744][T12160] [ 454.216450][T12160] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1918'. [ 454.245018][T12160] bridge_slave_1: default FDB implementation only supports local addresses [ 457.133923][T12213] syz.2.1936 (12213) used obsolete PPPIOCDETACH ioctl [ 460.252818][T12260] netlink: 'syz.2.1952': attribute type 4 has an invalid length. [ 460.284831][T12260] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1952'. [ 460.421066][T12260] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 461.507076][T12286] netlink: 'syz.0.1962': attribute type 4 has an invalid length. [ 461.519447][T12286] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1962'. [ 461.567805][T12286] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 462.927601][T12316] netlink: 'syz.0.1972': attribute type 10 has an invalid length. [ 462.957136][T12316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1972'. [ 463.005389][T12316] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 464.780150][T12363] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1990'. [ 465.085920][T12369] netlink: 'syz.2.1992': attribute type 39 has an invalid length. [ 466.535492][T12395] FAULT_INJECTION: forcing a failure. [ 466.535492][T12395] name failslab, interval 1, probability 0, space 0, times 0 [ 466.561232][T12395] CPU: 1 PID: 12395 Comm: syz.1.2003 Not tainted syzkaller #0 [ 466.569174][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.581797][T12395] Call Trace: [ 466.585403][T12395] [ 466.588576][T12395] dump_stack_lvl+0x18c/0x250 [ 466.593777][T12395] ? show_regs_print_info+0x20/0x20 [ 466.599254][T12395] ? load_image+0x420/0x420 [ 466.604053][T12395] ? __might_sleep+0xe0/0xe0 [ 466.608989][T12395] ? __lock_acquire+0x7d80/0x7d80 [ 466.614713][T12395] should_fail_ex+0x394/0x4c0 [ 466.619510][T12395] should_failslab+0x9/0x20 [ 466.624470][T12395] slab_pre_alloc_hook+0x59/0x300 [ 466.630619][T12395] ? __get_vm_area_node+0x125/0x370 [ 466.636498][T12395] ? __get_vm_area_node+0x125/0x370 [ 466.642703][T12395] __kmem_cache_alloc_node+0x53/0x250 [ 466.649020][T12395] ? __get_vm_area_node+0x125/0x370 [ 466.654494][T12395] kmalloc_node_trace+0x26/0xe0 [ 466.659532][T12395] __get_vm_area_node+0x125/0x370 [ 466.664742][T12395] __vmalloc_node_range+0x36f/0x1320 [ 466.670897][T12395] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 466.678039][T12395] ? __lock_acquire+0x7d80/0x7d80 [ 466.685147][T12395] ? __schedule+0x15b6/0x4660 [ 466.692315][T12395] ? aa_get_newest_label+0xfd/0x5c0 [ 466.699372][T12395] ? free_vm_area+0x50/0x50 [ 466.704267][T12395] ? end_current_label_crit_section+0x170/0x170 [ 466.711287][T12395] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 466.718314][T12395] ? preempt_schedule_irq+0xea/0x150 [ 466.725213][T12395] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 466.731018][T12395] __vmalloc+0x7a/0x90 [ 466.735466][T12395] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 466.741802][T12395] bpf_prog_alloc_no_stats+0x46/0x430 [ 466.747358][T12395] bpf_prog_alloc+0x3d/0x1a0 [ 466.752675][T12395] bpf_prog_load+0x6b2/0x1610 [ 466.757727][T12395] ? map_freeze+0x420/0x420 [ 466.762409][T12395] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.769882][T12395] ? lockdep_hardirqs_on+0x98/0x150 [ 466.775956][T12395] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.783854][T12395] ? rep_movs_alternative+0x33/0x90 [ 466.789964][T12395] ? bpf_lsm_bpf+0x9/0x10 [ 466.794733][T12395] ? security_bpf+0x7e/0xa0 [ 466.799580][T12395] __sys_bpf+0x5ba/0x890 [ 466.803885][T12395] ? bpf_link_show_fdinfo+0x390/0x390 [ 466.809378][T12395] ? lock_chain_count+0x20/0x20 [ 466.814552][T12395] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 466.821248][T12395] __x64_sys_bpf+0x7c/0x90 [ 466.825836][T12395] do_syscall_64+0x55/0xb0 [ 466.831331][T12395] ? clear_bhb_loop+0x40/0x90 [ 466.838708][T12395] ? clear_bhb_loop+0x40/0x90 [ 466.843488][T12395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.849455][T12395] RIP: 0033:0x7f98f859e019 [ 466.853913][T12395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.874088][T12395] RSP: 002b:00007f98f9448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 466.882680][T12395] RAX: ffffffffffffffda RBX: 00007f98f8825fa0 RCX: 00007f98f859e019 [ 466.892767][T12395] RDX: 0000000000000023 RSI: 000020000000e000 RDI: 0000000000000005 [ 466.900927][T12395] RBP: 00007f98f9448090 R08: 0000000000000000 R09: 0000000000000000 [ 466.909141][T12395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.918391][T12395] R13: 00007f98f8826038 R14: 00007f98f8825fa0 R15: 00007ffe37ff78e8 [ 466.929830][T12395] [ 466.953569][T12395] syz.1.2003: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 466.979709][T12395] CPU: 1 PID: 12395 Comm: syz.1.2003 Not tainted syzkaller #0 [ 466.988198][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.999378][T12395] Call Trace: [ 467.002986][T12395] [ 467.006484][T12395] dump_stack_lvl+0x18c/0x250 [ 467.011530][T12395] ? show_regs_print_info+0x20/0x20 [ 467.017123][T12395] ? load_image+0x420/0x420 [ 467.022419][T12395] ? __rcu_read_unlock+0x7c/0xd0 [ 467.027526][T12395] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 467.034024][T12395] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 467.040790][T12395] warn_alloc+0x246/0x340 [ 467.045200][T12395] ? __get_vm_area_node+0x125/0x370 [ 467.050725][T12395] ? zone_watermark_ok_safe+0x230/0x230 [ 467.056430][T12395] ? rcu_is_watching+0x15/0xb0 [ 467.062090][T12395] ? __get_vm_area_node+0x356/0x370 [ 467.067815][T12395] __vmalloc_node_range+0x394/0x1320 [ 467.073878][T12395] ? __lock_acquire+0x7d80/0x7d80 [ 467.079671][T12395] ? __schedule+0x15b6/0x4660 [ 467.086191][T12395] ? aa_get_newest_label+0xfd/0x5c0 [ 467.091543][T12395] ? free_vm_area+0x50/0x50 [ 467.096231][T12395] ? end_current_label_crit_section+0x170/0x170 [ 467.103082][T12395] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 467.109299][T12395] ? preempt_schedule_irq+0xea/0x150 [ 467.114953][T12395] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 467.120827][T12395] __vmalloc+0x7a/0x90 [ 467.126422][T12395] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 467.132318][T12395] bpf_prog_alloc_no_stats+0x46/0x430 [ 467.138847][T12395] bpf_prog_alloc+0x3d/0x1a0 [ 467.143901][T12395] bpf_prog_load+0x6b2/0x1610 [ 467.149107][T12395] ? map_freeze+0x420/0x420 [ 467.153751][T12395] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 467.160136][T12395] ? lockdep_hardirqs_on+0x98/0x150 [ 467.165386][T12395] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 467.171941][T12395] ? rep_movs_alternative+0x33/0x90 [ 467.177302][T12395] ? bpf_lsm_bpf+0x9/0x10 [ 467.182571][T12395] ? security_bpf+0x7e/0xa0 [ 467.187551][T12395] __sys_bpf+0x5ba/0x890 [ 467.191911][T12395] ? bpf_link_show_fdinfo+0x390/0x390 [ 467.197699][T12395] ? lock_chain_count+0x20/0x20 [ 467.203898][T12395] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 467.210796][T12395] __x64_sys_bpf+0x7c/0x90 [ 467.215650][T12395] do_syscall_64+0x55/0xb0 [ 467.220310][T12395] ? clear_bhb_loop+0x40/0x90 [ 467.225407][T12395] ? clear_bhb_loop+0x40/0x90 [ 467.230506][T12395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.238461][T12395] RIP: 0033:0x7f98f859e019 [ 467.244447][T12395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.268258][T12395] RSP: 002b:00007f98f9448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 467.277881][T12395] RAX: ffffffffffffffda RBX: 00007f98f8825fa0 RCX: 00007f98f859e019 [ 467.286268][T12395] RDX: 0000000000000023 RSI: 000020000000e000 RDI: 0000000000000005 [ 467.294802][T12395] RBP: 00007f98f9448090 R08: 0000000000000000 R09: 0000000000000000 [ 467.303096][T12395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.311636][T12395] R13: 00007f98f8826038 R14: 00007f98f8825fa0 R15: 00007ffe37ff78e8 [ 467.319669][T12395] [ 467.338352][ T6958] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 467.355527][T12395] Mem-Info: [ 467.359574][T12395] active_anon:5090 inactive_anon:0 isolated_anon:0 [ 467.359574][T12395] active_file:19202 inactive_file:40102 isolated_file:0 [ 467.359574][T12395] unevictable:768 dirty:120 writeback:0 [ 467.359574][T12395] slab_reclaimable:10136 slab_unreclaimable:92381 [ 467.359574][T12395] mapped:24894 shmem:1361 pagetables:561 [ 467.359574][T12395] sec_pagetables:0 bounce:0 [ 467.359574][T12395] kernel_misc_reclaimable:0 [ 467.359574][T12395] free:1342919 free_pcp:9726 free_cma:0 [ 467.442464][T12395] Node 0 active_anon:20416kB inactive_anon:0kB active_file:76808kB inactive_file:160204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99616kB dirty:484kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10744kB pagetables:2272kB sec_pagetables:0kB all_unreclaimable? no [ 467.481210][T12395] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 467.545031][T12395] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.591902][T12395] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 467.624932][T12395] Node 0 DMA32 free:1462420kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20180kB inactive_anon:0kB active_file:76808kB inactive_file:159380kB unevictable:1536kB writepending:384kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:20548kB local_pcp:5304kB free_cma:0kB [ 467.678857][T12395] lowmem_reserve[]: 0 0 0 0 0 [ 467.690239][T12395] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 467.768309][T12395] lowmem_reserve[]: 0 0 0 0 0 [ 467.805462][T12395] Node 1 Normal free:3893668kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21064kB local_pcp:13252kB free_cma:0kB [ 467.855668][T12395] lowmem_reserve[]: 0 0 0 0 0 [ 467.860518][T12395] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 467.879100][T12395] Node 0 DMA32: 425*4kB (UME) 1308*8kB (UME) 1345*16kB (UME) 1044*32kB (UME) 526*64kB (UME) 172*128kB (UME) 89*256kB (UM) 62*512kB (UM) 31*1024kB (UME) 4*2048kB (UM) 304*4096kB (UM) = 1462420kB [ 467.934374][T12395] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 467.971953][T12395] Node 1 Normal: 247*4kB (UE) 63*8kB (UME) 43*16kB (UME) 53*32kB (UME) 18*64kB (UE) 4*128kB (UME) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3893668kB [ 467.997535][T12395] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.010634][T12395] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 468.023636][T12395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.066718][T12395] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 468.103526][T12395] 60665 total pagecache pages [ 468.113687][T12395] 0 pages in swap cache [ 468.130921][T12395] Free swap = 124996kB [ 468.142193][T12395] Total swap = 124996kB [ 468.185117][T12395] 2097051 pages RAM [ 468.189192][T12395] 0 pages HighMem/MovableOnly [ 468.194025][T12395] 416955 pages reserved [ 468.227779][T12395] 0 pages cma reserved [ 470.317948][T12442] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2020'. [ 474.566527][T12502] netlink: 'syz.1.2041': attribute type 6 has an invalid length. [ 474.582878][T12502] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2041'. [ 474.832329][T12501] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 476.151828][T12538] netlink: 'syz.3.2054': attribute type 5 has an invalid length. [ 482.945558][T12644] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 485.090724][T12698] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 485.098232][T12698] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 485.141283][T12699] netlink: 'syz.1.2110': attribute type 6 has an invalid length. [ 485.168441][T12699] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2110'. [ 485.373904][T12703] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 485.953172][T12718] netlink: 'syz.2.2118': attribute type 39 has an invalid length. [ 485.963211][T12718] veth1_vlan: entered allmulticast mode [ 486.583563][T12731] netlink: 'syz.3.2122': attribute type 6 has an invalid length. [ 486.593189][T12731] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2122'. [ 486.653932][T12730] netlink: 'syz.2.2121': attribute type 33 has an invalid length. [ 486.674274][T12730] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2121'. [ 486.834588][T12734] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 487.379464][T12751] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2130'. [ 487.390117][T12751] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2130'. [ 487.402389][T12751] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2130'. [ 488.011335][T12759] netlink: 'syz.2.2132': attribute type 6 has an invalid length. [ 488.035384][T12759] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2132'. [ 488.186513][T12761] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2134'. [ 488.232077][T12761] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2134'. [ 488.274652][T12762] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2134'. [ 488.346453][T12761] FAULT_INJECTION: forcing a failure. [ 488.346453][T12761] name failslab, interval 1, probability 0, space 0, times 0 [ 488.390276][T12761] CPU: 0 PID: 12761 Comm: syz.2.2134 Not tainted syzkaller #0 [ 488.398142][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 488.410273][T12761] Call Trace: [ 488.413799][T12761] [ 488.417276][T12761] dump_stack_lvl+0x18c/0x250 [ 488.424328][T12761] ? show_regs_print_info+0x20/0x20 [ 488.430965][T12761] ? load_image+0x420/0x420 [ 488.436918][T12761] ? perf_trace_lock+0xfc/0x3b0 [ 488.442404][T12761] should_fail_ex+0x394/0x4c0 [ 488.447819][T12761] should_failslab+0x9/0x20 [ 488.452725][T12761] slab_pre_alloc_hook+0x59/0x300 [ 488.459124][T12761] kmem_cache_alloc+0x5a/0x2c0 [ 488.465264][T12761] ? skb_clone+0x1eb/0x370 [ 488.471613][T12761] skb_clone+0x1eb/0x370 [ 488.476216][T12761] __netlink_deliver_tap+0x411/0x7f0 [ 488.483019][T12761] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.489472][T12761] netlink_deliver_tap+0x19c/0x1b0 [ 488.495297][T12761] netlink_dump+0x95b/0xec0 [ 488.501722][T12761] ? netlink_lookup+0x200/0x200 [ 488.507284][T12761] ? slab_free_freelist_hook+0x130/0x1a0 [ 488.513726][T12761] ? netlink_recvmsg+0x5e7/0xe60 [ 488.519190][T12761] ? kmem_cache_free+0xf8/0x290 [ 488.525788][T12761] netlink_recvmsg+0x693/0xe60 [ 488.531677][T12761] ? netlink_sendmsg+0xbf0/0xbf0 [ 488.538573][T12761] ? aa_af_perm+0x330/0x330 [ 488.544008][T12761] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 488.551838][T12761] ? security_socket_recvmsg+0x89/0xb0 [ 488.559507][T12761] ? netlink_sendmsg+0xbf0/0xbf0 [ 488.567001][T12761] ____sys_recvmsg+0x2bd/0x5d0 [ 488.573612][T12761] ? __sys_recvmsg_sock+0x50/0x50 [ 488.584237][T12761] ? import_iovec+0x73/0xa0 [ 488.589639][T12761] ___sys_recvmsg+0x214/0x590 [ 488.595402][T12761] ? __sys_recvmsg+0x2a0/0x2a0 [ 488.600818][T12761] ? ksys_write+0x1d2/0x260 [ 488.605908][T12761] ? __fget_files+0x3fc/0x460 [ 488.611689][T12761] __x64_sys_recvmsg+0x21e/0x2f0 [ 488.617437][T12761] ? ___sys_recvmsg+0x590/0x590 [ 488.623633][T12761] ? lockdep_hardirqs_on+0x98/0x150 [ 488.629813][T12761] do_syscall_64+0x55/0xb0 [ 488.635025][T12761] ? clear_bhb_loop+0x40/0x90 [ 488.643575][T12761] ? clear_bhb_loop+0x40/0x90 [ 488.649502][T12761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.658363][T12761] RIP: 0033:0x7fbd91f9e019 [ 488.663388][T12761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.687285][T12761] RSP: 002b:00007fbd92e37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 488.696484][T12761] RAX: ffffffffffffffda RBX: 00007fbd92225fa0 RCX: 00007fbd91f9e019 [ 488.706893][T12761] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003 [ 488.717455][T12761] RBP: 00007fbd92e37090 R08: 0000000000000000 R09: 0000000000000000 [ 488.728485][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.738102][T12761] R13: 00007fbd92226038 R14: 00007fbd92225fa0 R15: 00007ffc096a3818 [ 488.746726][T12761] [ 488.981072][T12772] netlink: 'syz.2.2138': attribute type 2 has an invalid length. [ 489.006940][T12772] netlink: 'syz.2.2138': attribute type 1 has an invalid length. [ 489.054754][T12772] netlink: 'syz.2.2138': attribute type 8 has an invalid length. [ 490.401580][T12798] __nla_validate_parse: 2 callbacks suppressed [ 490.401600][T12798] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2147'. [ 490.411484][T12799] netlink: 'syz.3.2146': attribute type 21 has an invalid length. [ 490.444052][T12798] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2147'. [ 490.486148][T12800] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2147'. [ 490.514574][T12799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2146'. [ 490.541931][T12799] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2146'. [ 491.565094][T12816] netlink: 'syz.3.2154': attribute type 33 has an invalid length. [ 491.581790][T12816] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2154'. [ 492.915043][T12842] netlink: 'syz.3.2159': attribute type 21 has an invalid length. [ 493.063571][T12842] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2159'. [ 493.233619][T12842] netlink: 'syz.3.2159': attribute type 4 has an invalid length. [ 493.320661][T12842] netlink: 'syz.3.2159': attribute type 3 has an invalid length. [ 493.373834][T12842] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2159'. [ 496.024713][T12891] netlink: 'syz.0.2179': attribute type 39 has an invalid length. [ 496.726380][T12891] hsr_slave_1 (unregistering): left promiscuous mode [ 498.700705][T12917] netlink: 'syz.0.2188': attribute type 10 has an invalid length. [ 498.710961][T12917] syz_tun: entered promiscuous mode [ 498.741503][T12917] syz_tun: entered allmulticast mode [ 498.771146][T12917] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 498.784949][T12918] netlink: 'syz.0.2188': attribute type 10 has an invalid length. [ 498.859102][T12918] bond0: left promiscuous mode [ 498.872416][T12918] bond_slave_0: left promiscuous mode [ 498.882329][T12918] bond_slave_1: left promiscuous mode [ 498.905175][T12918] bond0: left allmulticast mode [ 498.910366][T12918] bond_slave_0: left allmulticast mode [ 498.927904][T12918] bond_slave_1: left allmulticast mode [ 498.933948][T12918] syz_tun: left allmulticast mode [ 498.976516][T12918] team0: Port device bond0 removed [ 499.520307][T12935] FAULT_INJECTION: forcing a failure. [ 499.520307][T12935] name failslab, interval 1, probability 0, space 0, times 0 [ 499.581786][T12935] CPU: 1 PID: 12935 Comm: syz.2.2194 Not tainted syzkaller #0 [ 499.589416][T12935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.600099][T12935] Call Trace: [ 499.604330][T12935] [ 499.607341][T12935] dump_stack_lvl+0x18c/0x250 [ 499.612100][T12935] ? show_regs_print_info+0x20/0x20 [ 499.617501][T12935] ? load_image+0x420/0x420 [ 499.622092][T12935] ? __might_sleep+0xe0/0xe0 [ 499.626818][T12935] ? __lock_acquire+0x7d80/0x7d80 [ 499.632359][T12935] should_fail_ex+0x394/0x4c0 [ 499.639208][T12935] should_failslab+0x9/0x20 [ 499.644068][T12935] slab_pre_alloc_hook+0x59/0x300 [ 499.649197][T12935] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 499.655857][T12935] __kmem_cache_alloc_node+0x53/0x250 [ 499.662711][T12935] ? __asan_memset+0x22/0x40 [ 499.669308][T12935] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 499.676226][T12935] kmalloc_trace+0x2a/0xe0 [ 499.680858][T12935] __xdp_reg_mem_model+0x1e3/0x5a0 [ 499.687168][T12935] ? kvmalloc_node+0x70/0x180 [ 499.692342][T12935] ? kvmalloc_node+0x70/0x180 [ 499.697729][T12935] ? xdp_reg_mem_model+0x40/0x40 [ 499.702751][T12935] xdp_reg_mem_model+0x22/0x40 [ 499.707952][T12935] bpf_test_run_xdp_live+0x262/0x1b30 [ 499.713497][T12935] ? 0xffffffffa0004740 [ 499.717723][T12935] ? 0xffffffffa0004740 [ 499.721933][T12935] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 499.728461][T12935] ? xdp_convert_md_to_buff+0x330/0x330 [ 499.734485][T12935] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 499.741116][T12935] ? _copy_from_user+0xa5/0xe0 [ 499.746838][T12935] ? bpf_test_init+0x119/0x140 [ 499.751858][T12935] ? xdp_convert_md_to_buff+0x5b/0x330 [ 499.757668][T12935] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 499.765479][T12935] ? __lock_acquire+0x7d80/0x7d80 [ 499.771835][T12935] ? dev_put+0x80/0x80 [ 499.776871][T12935] ? dev_put+0x80/0x80 [ 499.781013][T12935] bpf_prog_test_run+0x31f/0x390 [ 499.786379][T12935] __sys_bpf+0x49d/0x890 [ 499.791070][T12935] ? bpf_link_show_fdinfo+0x390/0x390 [ 499.796576][T12935] ? lock_chain_count+0x20/0x20 [ 499.801533][T12935] __x64_sys_bpf+0x7c/0x90 [ 499.806134][T12935] do_syscall_64+0x55/0xb0 [ 499.810670][T12935] ? clear_bhb_loop+0x40/0x90 [ 499.815474][T12935] ? clear_bhb_loop+0x40/0x90 [ 499.820521][T12935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.827121][T12935] RIP: 0033:0x7fbd91f9e019 [ 499.831819][T12935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.853444][T12935] RSP: 002b:00007fbd92e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 499.862035][T12935] RAX: ffffffffffffffda RBX: 00007fbd92225fa0 RCX: 00007fbd91f9e019 [ 499.870335][T12935] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 499.878989][T12935] RBP: 00007fbd92e37090 R08: 0000000000000000 R09: 0000000000000000 [ 499.887464][T12935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.897939][T12935] R13: 00007fbd92226038 R14: 00007fbd92225fa0 R15: 00007ffc096a3818 [ 499.910423][T12935] [ 500.401219][T12949] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2200'. [ 500.418704][T12951] FAULT_INJECTION: forcing a failure. [ 500.418704][T12951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.456917][T12951] CPU: 0 PID: 12951 Comm: syz.3.2201 Not tainted syzkaller #0 [ 500.464736][T12951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.475376][T12951] Call Trace: [ 500.478814][T12951] [ 500.481884][T12951] dump_stack_lvl+0x18c/0x250 [ 500.486633][T12951] ? show_regs_print_info+0x20/0x20 [ 500.492005][T12951] ? load_image+0x420/0x420 [ 500.496933][T12951] ? __might_fault+0xaa/0x120 [ 500.501791][T12951] ? __lock_acquire+0x7d80/0x7d80 [ 500.506915][T12951] should_fail_ex+0x394/0x4c0 [ 500.511810][T12951] _copy_from_iter+0x1cd/0x1290 [ 500.516717][T12951] ? rcu_is_watching+0x15/0xb0 [ 500.521737][T12951] ? copyout_mc+0x70/0x70 [ 500.526109][T12951] ? __virt_addr_valid+0x10c/0x380 [ 500.531323][T12951] ? __virt_addr_valid+0x10c/0x380 [ 500.536745][T12951] ? __virt_addr_valid+0x10c/0x380 [ 500.542010][T12951] ? __check_object_size+0x4fc/0xa40 [ 500.547431][T12951] netlink_sendmsg+0x76b/0xbf0 [ 500.552247][T12951] ? netlink_getsockopt+0x590/0x590 [ 500.557843][T12951] ? apparmor_socket_sendmsg+0x8e/0x330 [ 500.563445][T12951] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 500.568796][T12951] ? security_socket_sendmsg+0x80/0xa0 [ 500.574320][T12951] ? netlink_getsockopt+0x590/0x590 [ 500.579777][T12951] ____sys_sendmsg+0x61b/0x980 [ 500.585047][T12951] ? __asan_memset+0x22/0x40 [ 500.589863][T12951] ? __sys_sendmsg_sock+0x30/0x30 [ 500.595025][T12951] ? __import_iovec+0x5f2/0x850 [ 500.600482][T12951] ? import_iovec+0x73/0xa0 [ 500.605211][T12951] ___sys_sendmsg+0x2a6/0x360 [ 500.610223][T12951] ? get_pid_task+0x20/0x1e0 [ 500.614883][T12951] ? __sys_sendmsg+0x2b0/0x2b0 [ 500.619713][T12951] ? __lock_acquire+0x7d80/0x7d80 [ 500.625115][T12951] __se_sys_sendmsg+0x1d0/0x2c0 [ 500.630316][T12951] ? __x64_sys_sendmsg+0x80/0x80 [ 500.635708][T12951] ? lockdep_hardirqs_on+0x98/0x150 [ 500.641341][T12951] do_syscall_64+0x55/0xb0 [ 500.646653][T12951] ? clear_bhb_loop+0x40/0x90 [ 500.651936][T12951] ? clear_bhb_loop+0x40/0x90 [ 500.657409][T12951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.664496][T12951] RIP: 0033:0x7f82ebb9e019 [ 500.669611][T12951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.690343][T12951] RSP: 002b:00007f82ecaaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.699177][T12951] RAX: ffffffffffffffda RBX: 00007f82ebe25fa0 RCX: 00007f82ebb9e019 [ 500.707307][T12951] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 500.715723][T12951] RBP: 00007f82ecaaf090 R08: 0000000000000000 R09: 0000000000000000 [ 500.723954][T12951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.732080][T12951] R13: 00007f82ebe26038 R14: 00007f82ebe25fa0 R15: 00007ffecb20ebd8 [ 500.740125][T12951] [ 501.308292][T12963] FAULT_INJECTION: forcing a failure. [ 501.308292][T12963] name failslab, interval 1, probability 0, space 0, times 0 [ 501.322964][T12963] CPU: 1 PID: 12963 Comm: syz.2.2206 Not tainted syzkaller #0 [ 501.330521][T12963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 501.340697][T12963] Call Trace: [ 501.344158][T12963] [ 501.347316][T12963] dump_stack_lvl+0x18c/0x250 [ 501.352082][T12963] ? show_regs_print_info+0x20/0x20 [ 501.357367][T12963] ? load_image+0x420/0x420 [ 501.361946][T12963] ? __might_sleep+0xe0/0xe0 [ 501.366614][T12963] ? __lock_acquire+0x7d80/0x7d80 [ 501.371735][T12963] should_fail_ex+0x394/0x4c0 [ 501.376601][T12963] should_failslab+0x9/0x20 [ 501.381268][T12963] slab_pre_alloc_hook+0x59/0x300 [ 501.386403][T12963] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 501.391925][T12963] __kmem_cache_alloc_node+0x53/0x250 [ 501.397498][T12963] ? __asan_memset+0x22/0x40 [ 501.402836][T12963] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 501.408260][T12963] kmalloc_trace+0x2a/0xe0 [ 501.412719][T12963] __xdp_reg_mem_model+0x1e3/0x5a0 [ 501.417964][T12963] ? kvmalloc_node+0x70/0x180 [ 501.422782][T12963] ? kvmalloc_node+0x70/0x180 [ 501.427499][T12963] ? xdp_reg_mem_model+0x40/0x40 [ 501.432678][T12963] xdp_reg_mem_model+0x22/0x40 [ 501.437559][T12963] bpf_test_run_xdp_live+0x262/0x1b30 [ 501.443035][T12963] ? 0xffffffffa0004740 [ 501.447891][T12963] ? 0xffffffffa0004740 [ 501.452266][T12963] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 501.458212][T12963] ? xdp_convert_md_to_buff+0x330/0x330 [ 501.464021][T12963] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 501.470307][T12963] ? _copy_from_user+0xa5/0xe0 [ 501.475112][T12963] ? bpf_test_init+0x119/0x140 [ 501.480107][T12963] ? xdp_convert_md_to_buff+0x5b/0x330 [ 501.485759][T12963] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 501.491475][T12963] ? __lock_acquire+0x7d80/0x7d80 [ 501.496566][T12963] ? dev_put+0x80/0x80 [ 501.500768][T12963] ? dev_put+0x80/0x80 [ 501.505134][T12963] bpf_prog_test_run+0x31f/0x390 [ 501.510150][T12963] __sys_bpf+0x49d/0x890 [ 501.514474][T12963] ? read_tsc+0x9/0x20 [ 501.518619][T12963] ? bpf_link_show_fdinfo+0x390/0x390 [ 501.524414][T12963] ? lock_chain_count+0x20/0x20 [ 501.529323][T12963] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 501.535400][T12963] __x64_sys_bpf+0x7c/0x90 [ 501.539880][T12963] do_syscall_64+0x55/0xb0 [ 501.544525][T12963] ? clear_bhb_loop+0x40/0x90 [ 501.549469][T12963] ? clear_bhb_loop+0x40/0x90 [ 501.554849][T12963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 501.561004][T12963] RIP: 0033:0x7fbd91f9e019 [ 501.566806][T12963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.587077][T12963] RSP: 002b:00007fbd92e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 501.595906][T12963] RAX: ffffffffffffffda RBX: 00007fbd92225fa0 RCX: 00007fbd91f9e019 [ 501.604072][T12963] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 501.612882][T12963] RBP: 00007fbd92e37090 R08: 0000000000000000 R09: 0000000000000000 [ 501.620917][T12963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.629010][T12963] R13: 00007fbd92226038 R14: 00007fbd92225fa0 R15: 00007ffc096a3818 [ 501.639236][T12963] [ 501.939568][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.957243][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.265589][T12975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.273425][T12975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.317699][T12975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.413076][T12975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.424652][T12975] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 502.432062][T12975] batman_adv: batadv0: Removing interface: virt_wifi0 [ 502.485814][T12979] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2213'. [ 503.003506][T12980] netlink: 'syz.1.2210': attribute type 10 has an invalid length. [ 503.265292][T12980] syz_tun: entered promiscuous mode [ 503.384753][T12980] syz_tun: entered allmulticast mode [ 503.402614][T12980] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 503.462135][T12979] netlink: 'syz.2.2213': attribute type 10 has an invalid length. [ 503.505686][T12979] team0: left promiscuous mode [ 503.535217][T12979] team_slave_0: left promiscuous mode [ 503.542104][T12979] team_slave_1: left promiscuous mode [ 503.584528][T12979] bond0: left promiscuous mode [ 503.589443][T12979] bond_slave_0: left promiscuous mode [ 503.630203][T12979] bond_slave_1: left promiscuous mode [ 503.684936][T12979] team0: left allmulticast mode [ 503.690198][T12979] team_slave_0: left allmulticast mode [ 503.769081][T12979] team_slave_1: left allmulticast mode [ 503.793252][T12979] bond0: left allmulticast mode [ 503.818877][T12979] bond_slave_0: left allmulticast mode [ 503.841543][T12979] bond_slave_1: left allmulticast mode [ 503.858081][T12979] syz_tun: left allmulticast mode [ 503.930264][T12979] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.372550][T12997] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.2219'. [ 504.521462][ T5793] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 506.115992][T13018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.152337][T13018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.191218][T13018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.201556][T13018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.220510][T13022] FAULT_INJECTION: forcing a failure. [ 506.220510][T13022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.245232][T13022] CPU: 0 PID: 13022 Comm: syz.0.2227 Not tainted syzkaller #0 [ 506.254938][T13022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.266477][T13022] Call Trace: [ 506.270272][T13022] [ 506.273819][T13022] dump_stack_lvl+0x18c/0x250 [ 506.278906][T13022] ? show_regs_print_info+0x20/0x20 [ 506.285086][T13022] ? load_image+0x420/0x420 [ 506.290851][T13022] ? __lock_acquire+0x7d80/0x7d80 [ 506.296208][T13022] ? snprintf+0xe9/0x140 [ 506.300821][T13022] should_fail_ex+0x394/0x4c0 [ 506.305749][T13022] _copy_to_user+0x2f/0xa0 [ 506.311296][T13022] simple_read_from_buffer+0xe7/0x150 [ 506.317064][T13022] proc_fail_nth_read+0x1e8/0x260 [ 506.322666][T13022] ? proc_fault_inject_write+0x360/0x360 [ 506.329992][T13022] ? fsnotify_perm+0x271/0x5e0 [ 506.335593][T13022] ? proc_fault_inject_write+0x360/0x360 [ 506.342344][T13022] vfs_read+0x298/0x990 [ 506.347710][T13022] ? kernel_read+0x1e0/0x1e0 [ 506.355351][T13022] ? __fget_files+0x28/0x460 [ 506.361707][T13022] ? __fget_files+0x3fc/0x460 [ 506.368724][T13022] ? __fdget_pos+0x2a3/0x330 [ 506.374687][T13022] ? ksys_read+0x74/0x260 [ 506.380440][T13022] ksys_read+0x151/0x260 [ 506.386312][T13022] ? vfs_write+0x9a0/0x9a0 [ 506.392921][T13022] ? lockdep_hardirqs_on+0x98/0x150 [ 506.401934][T13022] do_syscall_64+0x55/0xb0 [ 506.407030][T13022] ? clear_bhb_loop+0x40/0x90 [ 506.412867][T13022] ? clear_bhb_loop+0x40/0x90 [ 506.419560][T13022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.427270][T13022] RIP: 0033:0x7faa38b5e84e [ 506.432808][T13022] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 506.452949][T13022] RSP: 002b:00007faa39a48fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 506.461826][T13022] RAX: ffffffffffffffda RBX: 00007faa39a496c0 RCX: 00007faa38b5e84e [ 506.471040][T13022] RDX: 000000000000000f RSI: 00007faa39a490a0 RDI: 0000000000000004 [ 506.479499][T13022] RBP: 00007faa39a49090 R08: 0000000000000000 R09: 0000000000000000 [ 506.488575][T13022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.496704][T13022] R13: 00007faa38e26038 R14: 00007faa38e25fa0 R15: 00007ffe8f921818 [ 506.504963][T13022] [ 506.577002][T13021] netlink: 'syz.2.2226': attribute type 10 has an invalid length. [ 507.142822][T13035] netlink: 'syz.0.2230': attribute type 2 has an invalid length. [ 507.159957][T13035] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2230'. [ 508.317893][T13068] FAULT_INJECTION: forcing a failure. [ 508.317893][T13068] name failslab, interval 1, probability 0, space 0, times 0 [ 508.393894][T13068] CPU: 1 PID: 13068 Comm: syz.0.2240 Not tainted syzkaller #0 [ 508.404110][T13068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.415685][T13068] Call Trace: [ 508.419766][T13068] [ 508.424064][T13068] dump_stack_lvl+0x18c/0x250 [ 508.429100][T13068] ? show_regs_print_info+0x20/0x20 [ 508.434938][T13068] ? load_image+0x420/0x420 [ 508.439716][T13068] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 508.445872][T13068] ? lock_chain_count+0x20/0x20 [ 508.450847][T13068] should_fail_ex+0x394/0x4c0 [ 508.455888][T13068] should_failslab+0x9/0x20 [ 508.460537][T13068] slab_pre_alloc_hook+0x59/0x300 [ 508.465958][T13068] ? sctp_add_bind_addr+0x8c/0x360 [ 508.471162][T13068] ? sctp_add_bind_addr+0x8c/0x360 [ 508.476768][T13068] __kmem_cache_alloc_node+0x53/0x250 [ 508.482234][T13068] ? sctp_add_bind_addr+0x8c/0x360 [ 508.488298][T13068] kmalloc_trace+0x2a/0xe0 [ 508.492982][T13068] sctp_add_bind_addr+0x8c/0x360 [ 508.498391][T13068] ? sctp_auto_asconf_init+0x14d/0x1d0 [ 508.504019][T13068] sctp_do_bind+0x57e/0x8f0 [ 508.508684][T13068] sctp_connect_new_asoc+0x26a/0x6a0 [ 508.516005][T13068] ? __sctp_connect+0xd80/0xd80 [ 508.521590][T13068] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 508.527288][T13068] ? security_sctp_bind_connect+0x89/0xb0 [ 508.533367][T13068] sctp_sendmsg+0x1519/0x27b0 [ 508.538467][T13068] ? perf_trace_preemptirq_template+0x269/0x330 [ 508.545160][T13068] ? sctp_getsockopt+0xb60/0xb60 [ 508.550772][T13068] ? lock_chain_count+0x20/0x20 [ 508.555766][T13068] ? inet_send_prepare+0x250/0x250 [ 508.561378][T13068] ? sock_rps_record_flow+0x19/0x3f0 [ 508.567602][T13068] ? inet_sendmsg+0xce/0x2a0 [ 508.573016][T13068] ? inet_send_prepare+0x250/0x250 [ 508.579270][T13068] ____sys_sendmsg+0x61b/0x980 [ 508.584996][T13068] ? __asan_memset+0x22/0x40 [ 508.590255][T13068] ? __sys_sendmsg_sock+0x30/0x30 [ 508.596103][T13068] ? __import_iovec+0x5f2/0x850 [ 508.601312][T13068] ? import_iovec+0x73/0xa0 [ 508.606213][T13068] ___sys_sendmsg+0x2a6/0x360 [ 508.611041][T13068] ? __sys_sendmsg+0x2b0/0x2b0 [ 508.616175][T13068] __se_sys_sendmsg+0x1d0/0x2c0 [ 508.621184][T13068] ? __x64_sys_sendmsg+0x80/0x80 [ 508.626198][T13068] ? syscall_enter_from_user_mode+0x2e/0x80 [ 508.632964][T13068] do_syscall_64+0x55/0xb0 [ 508.637807][T13068] ? clear_bhb_loop+0x40/0x90 [ 508.643006][T13068] ? clear_bhb_loop+0x40/0x90 [ 508.647956][T13068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.654287][T13068] RIP: 0033:0x7faa38b9e019 [ 508.658749][T13068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.679571][T13068] RSP: 002b:00007faa39a49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.688740][T13068] RAX: ffffffffffffffda RBX: 00007faa38e25fa0 RCX: 00007faa38b9e019 [ 508.696785][T13068] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000016 [ 508.704997][T13068] RBP: 00007faa39a49090 R08: 0000000000000000 R09: 0000000000000000 [ 508.713342][T13068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.721730][T13068] R13: 00007faa38e26038 R14: 00007faa38e25fa0 R15: 00007ffe8f921818 [ 508.729895][T13068] [ 508.941348][T13081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.964434][T13081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.989333][T13081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.008710][T13081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.216513][T13086] netlink: 'syz.0.2245': attribute type 10 has an invalid length. [ 511.034487][T13127] netlink: 'syz.2.2260': attribute type 2 has an invalid length. [ 511.043543][T13127] netlink: 'syz.2.2260': attribute type 8 has an invalid length. [ 511.124819][T13127] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2260'. [ 511.210354][T13132] netlink: 'syz.2.2260': attribute type 2 has an invalid length. [ 511.230673][T13132] netlink: 'syz.2.2260': attribute type 8 has an invalid length. [ 511.239716][T13132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2260'. [ 511.251376][T13129] netlink: 'syz.1.2261': attribute type 10 has an invalid length. [ 511.301286][T13134] netlink: 'syz.1.2261': attribute type 10 has an invalid length. [ 512.191326][T13146] netlink: 'syz.3.2265': attribute type 2 has an invalid length. [ 512.223054][T13146] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2265'. [ 513.676981][T13180] netlink: 'syz.0.2276': attribute type 10 has an invalid length. [ 513.687066][T13180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2276'. [ 514.989990][T13209] netlink: 'syz.2.2285': attribute type 2 has an invalid length. [ 515.017556][T13209] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2285'. [ 515.678425][T13231] FAULT_INJECTION: forcing a failure. [ 515.678425][T13231] name failslab, interval 1, probability 0, space 0, times 0 [ 515.714235][T13231] CPU: 1 PID: 13231 Comm: syz.0.2294 Not tainted syzkaller #0 [ 515.723573][T13231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.735721][T13231] Call Trace: [ 515.739439][T13231] [ 515.742973][T13231] dump_stack_lvl+0x18c/0x250 [ 515.747900][T13231] ? show_regs_print_info+0x20/0x20 [ 515.753236][T13231] ? load_image+0x420/0x420 [ 515.757974][T13231] ? verify_lock_unused+0x140/0x140 [ 515.763457][T13231] should_fail_ex+0x394/0x4c0 [ 515.768350][T13231] should_failslab+0x9/0x20 [ 515.772984][T13231] slab_pre_alloc_hook+0x59/0x300 [ 515.778202][T13231] ? nsim_fib_event_nb+0x187/0x1040 [ 515.783561][T13231] __kmem_cache_alloc_node+0x53/0x250 [ 515.789565][T13231] ? nsim_fib_event_nb+0x187/0x1040 [ 515.795034][T13231] kmalloc_trace+0x2a/0xe0 [ 515.799656][T13231] nsim_fib_event_nb+0x187/0x1040 [ 515.804850][T13231] ? read_lock_is_recursive+0x20/0x20 [ 515.810272][T13231] notifier_call_chain+0x18f/0x380 [ 515.815706][T13231] ? atomic_notifier_call_chain+0x26/0x180 [ 515.822561][T13231] atomic_notifier_call_chain+0xda/0x180 [ 515.828740][T13231] call_fib_notifiers+0x31/0x60 [ 515.834401][T13231] fib_table_delete+0xc6e/0xfc0 [ 515.839717][T13231] ? nexthop_get_nhc_lookup+0x400/0x400 [ 515.845779][T13231] ? l3mdev_fib_table+0x18/0x160 [ 515.851167][T13231] ? fib_new_table+0x10a/0x2d0 [ 515.856551][T13231] fib_magic+0x2ee/0x3b0 [ 515.860874][T13231] ? fib_add_ifaddr+0x5d0/0x5d0 [ 515.865798][T13231] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 515.872628][T13231] fib_del_ifaddr+0x27b/0x14c0 [ 515.877545][T13231] ? inetaddr_event+0xf0/0x150 [ 515.882730][T13231] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 515.889680][T13231] fib_inetaddr_event+0xbb/0x1d0 [ 515.894765][T13231] notifier_call_chain+0x18f/0x380 [ 515.900465][T13231] blocking_notifier_call_chain+0x6a/0x90 [ 515.906326][T13231] __inet_del_ifa+0xaac/0x1090 [ 515.911455][T13231] inetdev_event+0x653/0x1610 [ 515.916288][T13231] ? devinet_exit_net+0x220/0x220 [ 515.921571][T13231] notifier_call_chain+0x18f/0x380 [ 515.926950][T13231] dev_set_mtu_ext+0x463/0x680 [ 515.932060][T13231] ? __read_once_word_nocheck+0x9/0x10 [ 515.937932][T13231] ? dev_validate_mtu+0x170/0x170 [ 515.943141][T13231] ? is_bpf_text_address+0x28f/0x2a0 [ 515.948690][T13231] ? is_bpf_text_address+0x26/0x2a0 [ 515.954350][T13231] do_setlink+0x842/0x3f40 [ 515.958942][T13231] ? arch_stack_walk+0x160/0x190 [ 515.964300][T13231] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 515.970677][T13231] ? stack_trace_save+0xaa/0x100 [ 515.975763][T13231] ? stack_trace_snprint+0xf0/0xf0 [ 515.981048][T13231] ? __nla_validate+0x50/0x50 [ 515.985870][T13231] ? validate_linkmsg+0x719/0x910 [ 515.991401][T13231] rtnl_newlink+0x1848/0x2170 [ 515.996448][T13231] ? rtnl_newlink+0x4c1/0x2170 [ 516.002317][T13231] ? rtnl_setlink+0x4e0/0x4e0 [ 516.007092][T13231] ? trace_raw_output_contention_end+0xd0/0xd0 [ 516.013391][T13231] ? rcu_is_watching+0x15/0xb0 [ 516.018292][T13231] ? trace_contention_end+0x39/0xe0 [ 516.023576][T13231] ? __mutex_lock+0x30d/0xc80 [ 516.028333][T13231] ? rtnl_setlink+0x4e0/0x4e0 [ 516.033061][T13231] rtnetlink_rcv_msg+0x843/0xf90 [ 516.038056][T13231] ? rtnetlink_rcv_msg+0x220/0xf90 [ 516.043227][T13231] ? rtnetlink_bind+0x80/0x80 [ 516.047968][T13231] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 516.053998][T13231] ? lock_chain_count+0x20/0x20 [ 516.059020][T13231] ? __local_bh_enable_ip+0x13a/0x1c0 [ 516.064523][T13231] ? lockdep_hardirqs_on+0x98/0x150 [ 516.070131][T13231] ? __local_bh_enable_ip+0x13a/0x1c0 [ 516.076315][T13231] ? _local_bh_enable+0xa0/0xa0 [ 516.081348][T13231] ? __dev_queue_xmit+0x275/0x3630 [ 516.087135][T13231] ? __dev_queue_xmit+0x1bc2/0x3630 [ 516.092392][T13231] ? __dev_queue_xmit+0x275/0x3630 [ 516.097573][T13231] ? ref_tracker_free+0x686/0x830 [ 516.102686][T13231] netlink_rcv_skb+0x235/0x4c0 [ 516.107536][T13231] ? rtnetlink_bind+0x80/0x80 [ 516.112873][T13231] ? netlink_ack+0x1160/0x1160 [ 516.117790][T13231] ? __lock_acquire+0x7d80/0x7d80 [ 516.122862][T13231] ? netlink_deliver_tap+0x2e/0x1b0 [ 516.128195][T13231] netlink_unicast+0x7b1/0x930 [ 516.133173][T13231] netlink_sendmsg+0x8d0/0xbf0 [ 516.138159][T13231] ? netlink_getsockopt+0x590/0x590 [ 516.143398][T13231] ? apparmor_socket_sendmsg+0x8e/0x330 [ 516.149119][T13231] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 516.154730][T13231] ? security_socket_sendmsg+0x80/0xa0 [ 516.160433][T13231] ? netlink_getsockopt+0x590/0x590 [ 516.165948][T13231] ____sys_sendmsg+0x61b/0x980 [ 516.170898][T13231] ? __asan_memset+0x22/0x40 [ 516.176067][T13231] ? __sys_sendmsg_sock+0x30/0x30 [ 516.181309][T13231] ? __import_iovec+0x5f2/0x850 [ 516.186411][T13231] ? import_iovec+0x73/0xa0 [ 516.190967][T13231] ___sys_sendmsg+0x2a6/0x360 [ 516.195698][T13231] ? get_pid_task+0x20/0x1e0 [ 516.200333][T13231] ? __sys_sendmsg+0x2b0/0x2b0 [ 516.205436][T13231] ? __lock_acquire+0x7d80/0x7d80 [ 516.210670][T13231] __se_sys_sendmsg+0x1d0/0x2c0 [ 516.215659][T13231] ? __x64_sys_sendmsg+0x80/0x80 [ 516.220652][T13231] ? lockdep_hardirqs_on+0x98/0x150 [ 516.226176][T13231] do_syscall_64+0x55/0xb0 [ 516.230675][T13231] ? clear_bhb_loop+0x40/0x90 [ 516.235594][T13231] ? clear_bhb_loop+0x40/0x90 [ 516.240315][T13231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.246683][T13231] RIP: 0033:0x7faa38b9e019 [ 516.251309][T13231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.271582][T13231] RSP: 002b:00007faa39a49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.280242][T13231] RAX: ffffffffffffffda RBX: 00007faa38e25fa0 RCX: 00007faa38b9e019 [ 516.288550][T13231] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 516.296681][T13231] RBP: 00007faa39a49090 R08: 0000000000000000 R09: 0000000000000000 [ 516.304779][T13231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.312896][T13231] R13: 00007faa38e26038 R14: 00007faa38e25fa0 R15: 00007ffe8f921818 [ 516.320923][T13231] [ 516.338923][T13231] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2294'. [ 516.378842][T13231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.406352][T13235] netlink: 'syz.3.2296': attribute type 15 has an invalid length. [ 516.414488][T13235] netlink: 'syz.3.2296': attribute type 7 has an invalid length. [ 516.422851][T13235] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2296'. [ 516.776319][T13246] netlink: 'syz.3.2300': attribute type 6 has an invalid length. [ 516.866499][T13246] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2300'. [ 517.192447][T13246] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 519.684710][T13285] netlink: 'syz.2.2312': attribute type 6 has an invalid length. [ 519.694048][T13285] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2312'. [ 521.705895][T13328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 521.725083][T13328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 521.734831][T13328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 521.755610][T13328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 521.764684][ T5775] bond0: (slave syz_tun): Releasing backup interface [ 521.767481][T13328] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 521.784479][T13328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 522.081049][ T1098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.244876][ T1098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.593198][ T1098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.919056][ T1098] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.312859][T13327] chnl_net:caif_netlink_parms(): no params data found [ 523.389763][T13367] netlink: 'syz.3.2340': attribute type 6 has an invalid length. [ 523.414306][T13367] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2340'. [ 523.889034][T13327] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.904447][ T5793] Bluetooth: hci0: command tx timeout [ 523.919284][T13327] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.954417][T13327] bridge_slave_0: entered allmulticast mode [ 523.976742][T13327] bridge_slave_0: entered promiscuous mode [ 524.042005][T13327] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.065866][T13327] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.090017][T13327] bridge_slave_1: entered allmulticast mode [ 524.141383][T13327] bridge_slave_1: entered promiscuous mode [ 524.349102][T13327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.382977][T13327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.559793][T13327] team0: Port device team_slave_0 added [ 524.599013][T13327] team0: Port device team_slave_1 added [ 525.051600][T13327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.098772][T13327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.169256][T13327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.211818][T13327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.232140][T13327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.295043][T13327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.526569][T13405] netlink: 'syz.0.2348': attribute type 6 has an invalid length. [ 525.565829][T13405] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2348'. [ 525.974269][ T5793] Bluetooth: hci0: command tx timeout [ 526.378431][T13327] hsr_slave_0: entered promiscuous mode [ 526.434644][T13327] hsr_slave_1: entered promiscuous mode [ 526.458200][T13327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.474154][T13327] Cannot create hsr debugfs directory [ 526.486083][T13427] netlink: 'syz.3.2352': attribute type 6 has an invalid length. [ 526.565863][T13427] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2352'. [ 528.054297][ T5793] Bluetooth: hci0: command tx timeout [ 528.983489][T13480] netlink: 'syz.3.2366': attribute type 1 has an invalid length. [ 529.033559][T13480] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2366'. [ 530.134420][ T5793] Bluetooth: hci0: command tx timeout [ 531.986145][T13479] netlink: 'syz.0.2365': attribute type 6 has an invalid length. [ 532.004827][T13479] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2365'. [ 532.609866][ T1098] hsr_slave_0: left promiscuous mode [ 532.629871][ T1098] hsr_slave_1: left promiscuous mode [ 532.752077][ T1098] veth1_macvtap: left promiscuous mode [ 532.759027][ T1098] veth0_macvtap: left promiscuous mode [ 532.769816][ T1098] veth0_vlan: left promiscuous mode [ 534.481338][T13538] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 534.490965][T13538] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2383'. [ 537.400657][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 537.457596][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 537.522456][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.590675][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.913186][ T1098] team0 (unregistering): Port device bond0 removed [ 537.953153][ T1098] bond0 (unregistering): Released all slaves [ 538.000673][T13525] netlink: 'syz.1.2377': attribute type 6 has an invalid length. [ 538.024354][T13525] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2377'. [ 538.276169][T13327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 538.324855][T13327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 538.410883][T13327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 538.491649][T13327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 538.981180][T13327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.069345][T13327] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.179597][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.187902][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.232948][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.240710][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.443722][T13574] netlink: 'syz.0.2392': attribute type 6 has an invalid length. [ 539.478014][T13574] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2392'. [ 539.641104][T13327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.203960][T13327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.366504][T13327] veth0_vlan: entered promiscuous mode [ 540.425672][T13327] veth1_vlan: entered promiscuous mode [ 540.531321][T13327] veth0_macvtap: entered promiscuous mode [ 540.589703][T13327] veth1_macvtap: entered promiscuous mode [ 540.703969][T13327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.748012][T13327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.771229][T13327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.805966][T13327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.851455][T13327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.861741][T13327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.872054][T13327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.884225][T13327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.224712][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.232638][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.307187][ T6958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.316173][ T6958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.877991][T13656] netlink: 'syz.1.2410': attribute type 6 has an invalid length. [ 542.945042][T13656] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2410'. [ 543.065449][T13660] netlink: 'syz.2.2411': attribute type 25 has an invalid length. [ 543.073473][T13660] netlink: 'syz.2.2411': attribute type 9 has an invalid length. [ 543.185493][T13660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2411'. [ 543.255202][T13660] FAULT_INJECTION: forcing a failure. [ 543.255202][T13660] name failslab, interval 1, probability 0, space 0, times 0 [ 543.269217][T13660] CPU: 0 PID: 13660 Comm: syz.2.2411 Not tainted syzkaller #0 [ 543.277569][T13660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 543.288476][T13660] Call Trace: [ 543.291897][T13660] [ 543.294934][T13660] dump_stack_lvl+0x18c/0x250 [ 543.300404][T13660] ? show_regs_print_info+0x20/0x20 [ 543.307163][T13660] ? load_image+0x420/0x420 [ 543.312387][T13660] ? tick_nohz_tick_stopped+0x7f/0xc0 [ 543.318547][T13660] ? __irq_work_queue_local+0x13a/0x3b0 [ 543.324274][T13660] should_fail_ex+0x394/0x4c0 [ 543.329325][T13660] should_failslab+0x9/0x20 [ 543.334174][T13660] slab_pre_alloc_hook+0x59/0x300 [ 543.340285][T13660] ? printk_sprint+0x460/0x460 [ 543.345354][T13660] ? switchdev_deferred_enqueue+0x2d/0x240 [ 543.351873][T13660] ? switchdev_deferred_enqueue+0x2d/0x240 [ 543.358690][T13660] __kmem_cache_alloc_node+0x53/0x250 [ 543.364161][T13660] ? switchdev_deferred_enqueue+0x2d/0x240 [ 543.370039][T13660] ? switchdev_deferred_enqueue+0x240/0x240 [ 543.376094][T13660] __kmalloc+0xa7/0x240 [ 543.380419][T13660] switchdev_deferred_enqueue+0x2d/0x240 [ 543.386319][T13660] switchdev_port_attr_set+0xff/0x2e0 [ 543.391825][T13660] ? __lock_acquire+0x7d80/0x7d80 [ 543.397009][T13660] ? switchdev_deferred_process+0x290/0x290 [ 543.403168][T13660] ? atomic_notifier_call_chain+0x26/0x180 [ 543.409142][T13660] ? atomic_notifier_call_chain+0x26/0x180 [ 543.415169][T13660] br_switchdev_set_port_flag+0x29a/0x3b0 [ 543.421089][T13660] ? nbp_switchdev_allowed_egress+0x1c0/0x1c0 [ 543.427405][T13660] br_setport+0xae3/0x1680 [ 543.431973][T13660] ? br_setlink+0x860/0x860 [ 543.436560][T13660] ? __rwlock_init+0x150/0x150 [ 543.441464][T13660] ? br_setlink+0x4df/0x860 [ 543.446005][T13660] br_setlink+0x4f1/0x860 [ 543.450552][T13660] ? br_vlan_info+0x460/0x460 [ 543.455465][T13660] ? trace_contention_end+0x39/0xe0 [ 543.460740][T13660] ? __mutex_lock+0x30d/0xc80 [ 543.465601][T13660] ? mutex_is_locked+0x12/0x40 [ 543.470517][T13660] rtnl_bridge_setlink+0x5b2/0x7d0 [ 543.475757][T13660] ? mutex_lock_nested+0x20/0x20 [ 543.480764][T13660] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 543.486248][T13660] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 543.492834][T13660] rtnetlink_rcv_msg+0x843/0xf90 [ 543.498221][T13660] ? rtnetlink_rcv_msg+0x220/0xf90 [ 543.503406][T13660] ? rtnetlink_bind+0x80/0x80 [ 543.508193][T13660] ? perf_trace_preemptirq_template+0xac/0x330 [ 543.514668][T13660] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 543.520880][T13660] ? lock_chain_count+0x20/0x20 [ 543.526283][T13660] ? __local_bh_enable_ip+0x13a/0x1c0 [ 543.532014][T13660] ? lockdep_hardirqs_on+0x98/0x150 [ 543.537383][T13660] ? __local_bh_enable_ip+0x13a/0x1c0 [ 543.542912][T13660] ? _local_bh_enable+0xa0/0xa0 [ 543.548801][T13660] ? __dev_queue_xmit+0x275/0x3630 [ 543.555641][T13660] ? __dev_queue_xmit+0x1bc2/0x3630 [ 543.561632][T13660] ? __dev_queue_xmit+0x275/0x3630 [ 543.567370][T13660] ? ref_tracker_free+0x686/0x830 [ 543.572459][T13660] netlink_rcv_skb+0x235/0x4c0 [ 543.577378][T13660] ? rtnetlink_bind+0x80/0x80 [ 543.582103][T13660] ? netlink_ack+0x1160/0x1160 [ 543.587475][T13660] ? __lock_acquire+0x7d80/0x7d80 [ 543.592921][T13660] ? netlink_deliver_tap+0x2e/0x1b0 [ 543.598206][T13660] netlink_unicast+0x7b1/0x930 [ 543.603065][T13660] netlink_sendmsg+0x8d0/0xbf0 [ 543.607908][T13660] ? netlink_getsockopt+0x590/0x590 [ 543.613145][T13660] ? apparmor_socket_sendmsg+0x8e/0x330 [ 543.618866][T13660] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 543.624234][T13660] ? security_socket_sendmsg+0x80/0xa0 [ 543.629833][T13660] ? netlink_getsockopt+0x590/0x590 [ 543.635629][T13660] ____sys_sendmsg+0x61b/0x980 [ 543.642114][T13660] ? __asan_memset+0x22/0x40 [ 543.647575][T13660] ? __sys_sendmsg_sock+0x30/0x30 [ 543.653100][T13660] ? __import_iovec+0x5f2/0x850 [ 543.658512][T13660] ? import_iovec+0x73/0xa0 [ 543.664534][T13660] ___sys_sendmsg+0x2a6/0x360 [ 543.669324][T13660] ? get_pid_task+0x20/0x1e0 [ 543.674113][T13660] ? __sys_sendmsg+0x2b0/0x2b0 [ 543.678944][T13660] ? __lock_acquire+0x7d80/0x7d80 [ 543.684305][T13660] __se_sys_sendmsg+0x1d0/0x2c0 [ 543.689312][T13660] ? __x64_sys_sendmsg+0x80/0x80 [ 543.694589][T13660] ? lockdep_hardirqs_on+0x98/0x150 [ 543.699847][T13660] do_syscall_64+0x55/0xb0 [ 543.704435][T13660] ? clear_bhb_loop+0x40/0x90 [ 543.709200][T13660] ? clear_bhb_loop+0x40/0x90 [ 543.714015][T13660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.720154][T13660] RIP: 0033:0x7fa6a2f9e019 [ 543.724891][T13660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.745483][T13660] RSP: 002b:00007fa6a3e06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.753954][T13660] RAX: ffffffffffffffda RBX: 00007fa6a3225fa0 RCX: 00007fa6a2f9e019 [ 543.762005][T13660] RDX: 0000000000098010 RSI: 0000200000000240 RDI: 0000000000000003 [ 543.770101][T13660] RBP: 00007fa6a3e06090 R08: 0000000000000000 R09: 0000000000000000 [ 543.778486][T13660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.787152][T13660] R13: 00007fa6a3226038 R14: 00007fa6a3225fa0 R15: 00007ffda2115fc8 [ 543.795298][T13660] [ 543.952583][T13328] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.962841][T13328] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 544.046215][T13328] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 544.058306][T13328] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 544.068705][T13328] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 544.077234][T13328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 544.781561][T13672] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2412'. [ 544.834729][T13672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 545.017776][ T6949] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.223264][ T6949] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.503009][ T6949] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.538106][T13704] netlink: 'syz.1.2421': attribute type 6 has an invalid length. [ 545.554497][T13704] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2421'. [ 545.788360][T13696] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2420'. [ 545.890660][T13696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 545.957388][ T6949] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.969274][T13696] syz.2.2420 (13696) used greatest stack depth: 19416 bytes left [ 546.144697][T13328] Bluetooth: hci4: command tx timeout [ 546.200115][T13670] chnl_net:caif_netlink_parms(): no params data found [ 546.480869][T13719] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.2425'. [ 546.781451][T13670] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.800343][T13670] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.817567][T13670] bridge_slave_0: entered allmulticast mode [ 546.839211][T13670] bridge_slave_0: entered promiscuous mode [ 546.930116][T13670] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.942346][T13670] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.953322][T13670] bridge_slave_1: entered allmulticast mode [ 546.962285][T13670] bridge_slave_1: entered promiscuous mode [ 547.131311][T13670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.159698][T13670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.479127][T13670] team0: Port device team_slave_0 added [ 547.518987][T13744] netlink: 'syz.2.2430': attribute type 6 has an invalid length. [ 547.543108][T13744] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2430'. [ 547.794964][T13747] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2431'. [ 547.847335][T13747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.890837][T13739] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 548.129077][T13670] team0: Port device team_slave_1 added [ 548.214498][T13328] Bluetooth: hci4: command tx timeout [ 548.261965][T13761] FAULT_INJECTION: forcing a failure. [ 548.261965][T13761] name failslab, interval 1, probability 0, space 0, times 0 [ 548.284243][T13761] CPU: 1 PID: 13761 Comm: syz.2.2434 Not tainted syzkaller #0 [ 548.292515][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 548.302852][T13761] Call Trace: [ 548.306183][T13761] [ 548.309173][T13761] dump_stack_lvl+0x18c/0x250 [ 548.313912][T13761] ? show_regs_print_info+0x20/0x20 [ 548.319198][T13761] ? load_image+0x420/0x420 [ 548.323790][T13761] ? __might_sleep+0xe0/0xe0 [ 548.328650][T13761] ? __lock_acquire+0x7d80/0x7d80 [ 548.334098][T13761] should_fail_ex+0x394/0x4c0 [ 548.338847][T13761] should_failslab+0x9/0x20 [ 548.343430][T13761] slab_pre_alloc_hook+0x59/0x300 [ 548.348534][T13761] ? kvmalloc_node+0x70/0x180 [ 548.353285][T13761] ? kvmalloc_node+0x70/0x180 [ 548.358092][T13761] __kmem_cache_alloc_node+0x53/0x250 [ 548.363572][T13761] ? kvmalloc_node+0x70/0x180 [ 548.368858][T13761] __kmalloc_node+0xa6/0x240 [ 548.373520][T13761] kvmalloc_node+0x70/0x180 [ 548.378274][T13761] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 548.383745][T13761] ? 0xffffffffa0004740 [ 548.387960][T13761] ? 0xffffffffa0004740 [ 548.392226][T13761] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 548.398300][T13761] ? xdp_convert_md_to_buff+0x330/0x330 [ 548.403962][T13761] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 548.410326][T13761] ? _copy_from_user+0xa5/0xe0 [ 548.415243][T13761] ? bpf_test_init+0x119/0x140 [ 548.420065][T13761] ? xdp_convert_md_to_buff+0x5b/0x330 [ 548.426508][T13761] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 548.432130][T13761] ? __lock_acquire+0x7d80/0x7d80 [ 548.437218][T13761] ? dev_put+0x80/0x80 [ 548.441368][T13761] ? dev_put+0x80/0x80 [ 548.445480][T13761] bpf_prog_test_run+0x31f/0x390 [ 548.450611][T13761] __sys_bpf+0x49d/0x890 [ 548.454920][T13761] ? bpf_link_show_fdinfo+0x390/0x390 [ 548.460428][T13761] ? lock_chain_count+0x20/0x20 [ 548.465323][T13761] __x64_sys_bpf+0x7c/0x90 [ 548.469866][T13761] do_syscall_64+0x55/0xb0 [ 548.474519][T13761] ? clear_bhb_loop+0x40/0x90 [ 548.479273][T13761] ? clear_bhb_loop+0x40/0x90 [ 548.484091][T13761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.490442][T13761] RIP: 0033:0x7fa6a2f9e019 [ 548.494918][T13761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.515541][T13761] RSP: 002b:00007fa6a3e06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 548.524110][T13761] RAX: ffffffffffffffda RBX: 00007fa6a3225fa0 RCX: 00007fa6a2f9e019 [ 548.532871][T13761] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 548.541169][T13761] RBP: 00007fa6a3e06090 R08: 0000000000000000 R09: 0000000000000000 [ 548.549899][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.558103][T13761] R13: 00007fa6a3226038 R14: 00007fa6a3225fa0 R15: 00007ffda2115fc8 [ 548.566176][T13761] [ 548.610939][T13670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.645364][T13670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.728395][T13670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.787110][T13670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.807663][T13670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.917340][T13670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.039009][T13670] hsr_slave_0: entered promiscuous mode [ 549.046835][T13670] hsr_slave_1: entered promiscuous mode [ 549.053783][T13670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.073709][T13670] Cannot create hsr debugfs directory [ 549.309698][T13778] netlink: 'syz.2.2441': attribute type 1 has an invalid length. [ 549.330433][T13778] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2441'. [ 550.294392][T13328] Bluetooth: hci4: command tx timeout [ 550.731469][T13794] netlink: 'syz.0.2444': attribute type 10 has an invalid length. [ 551.117924][ T6949] hsr_slave_0: left promiscuous mode [ 551.143679][ T6949] hsr_slave_1: left promiscuous mode [ 551.167903][ T6949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.200684][ T6949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.260530][ T6949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.284278][ T6949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.311180][ T6949] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 551.321322][ T6949] batman_adv: batadv0: Removing interface: virt_wifi0 [ 551.480750][ T6949] veth1_macvtap: left promiscuous mode [ 551.496188][ T6949] veth0_macvtap: left promiscuous mode [ 551.508665][T13819] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2450'. [ 551.512839][ T6949] veth1_vlan: left promiscuous mode [ 551.531775][ T6949] veth0_vlan: left promiscuous mode [ 551.974618][ T6949] geneve1 (unregistering): left promiscuous mode [ 551.981463][ T6949] geneve1 (unregistering): left allmulticast mode [ 552.029370][ T6949] team0 (unregistering): Port device geneve1 removed [ 552.379123][T13328] Bluetooth: hci4: command tx timeout [ 553.119024][ T6949] team_slave_1 (unregistering): left promiscuous mode [ 553.128783][ T6949] team_slave_1 (unregistering): left allmulticast mode [ 553.138098][ T6949] team0 (unregistering): Port device team_slave_1 removed [ 553.191591][ T6949] team_slave_0 (unregistering): left promiscuous mode [ 553.200962][ T6949] team_slave_0 (unregistering): left allmulticast mode [ 553.210126][ T6949] team0 (unregistering): Port device team_slave_0 removed [ 553.267234][ T6949] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.276740][ T6949] bond_slave_1 (unregistering): left promiscuous mode [ 553.283893][ T6949] bond_slave_1 (unregistering): left allmulticast mode [ 553.340259][ T6949] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.349613][ T6949] bond_slave_0 (unregistering): left promiscuous mode [ 553.360329][ T6949] bond_slave_0 (unregistering): left allmulticast mode [ 553.777069][ T6949] .` (unregistering): left promiscuous mode [ 553.783147][ T6949] .` (unregistering): left allmulticast mode [ 553.791127][ T6949] team0 (unregistering): Port device .` removed [ 553.833153][ T6949] .` (unregistering): Released all slaves [ 553.937048][T13824] netlink: 'syz.1.2452': attribute type 10 has an invalid length. [ 553.957973][T13824] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2452'. [ 553.977870][T13824] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 554.985480][T13866] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2464'. [ 555.207190][T13872] netlink: 'syz.2.2471': attribute type 4 has an invalid length. [ 555.259561][T13872] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.2471'. [ 555.353461][T13878] netlink: 'syz.1.2466': attribute type 8 has an invalid length. [ 555.361860][T13878] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2466'. [ 555.485508][T13875] netlink: 'syz.0.2465': attribute type 6 has an invalid length. [ 555.521258][T13875] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2465'. [ 555.556628][T13878] netlink: 'syz.1.2466': attribute type 10 has an invalid length. [ 555.628013][T13878] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 555.646209][T13878] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 555.671832][T13878] team0: Port device wlan1 added [ 555.718392][T13877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.938010][T13670] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 555.979748][T13670] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 556.021319][T13670] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 556.076271][T13670] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 556.526386][T13670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.582133][T13670] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.613810][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.621155][ T6949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.660201][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.668617][ T6949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.694776][T13899] FAULT_INJECTION: forcing a failure. [ 556.694776][T13899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.747490][T13899] CPU: 1 PID: 13899 Comm: syz.2.2472 Not tainted syzkaller #0 [ 556.755076][T13899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 556.765802][T13899] Call Trace: [ 556.769142][T13899] [ 556.772126][T13899] dump_stack_lvl+0x18c/0x250 [ 556.776873][T13899] ? show_regs_print_info+0x20/0x20 [ 556.782156][T13899] ? load_image+0x420/0x420 [ 556.786745][T13899] ? __might_fault+0xaa/0x120 [ 556.791595][T13899] ? __lock_acquire+0x7d80/0x7d80 [ 556.796784][T13899] ? bpf_percpu_hash_update+0x2b/0x200 [ 556.802406][T13899] ? __virt_addr_valid+0x10c/0x380 [ 556.807693][T13899] should_fail_ex+0x394/0x4c0 [ 556.812548][T13899] _copy_from_user+0x2f/0xe0 [ 556.817209][T13899] generic_map_update_batch+0x58c/0x800 [ 556.822835][T13899] ? rcu_read_unlock+0xa0/0xa0 [ 556.828396][T13899] ? rcu_read_unlock+0xa0/0xa0 [ 556.833298][T13899] bpf_map_do_batch+0x3f2/0x600 [ 556.838250][T13899] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 556.844855][T13899] __sys_bpf+0x381/0x890 [ 556.849141][T13899] ? bpf_link_show_fdinfo+0x390/0x390 [ 556.854571][T13899] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 556.860991][T13899] __x64_sys_bpf+0x7c/0x90 [ 556.865449][T13899] do_syscall_64+0x55/0xb0 [ 556.869904][T13899] ? clear_bhb_loop+0x40/0x90 [ 556.875312][T13899] ? clear_bhb_loop+0x40/0x90 [ 556.880298][T13899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.887449][T13899] RIP: 0033:0x7fa6a2f9e019 [ 556.892661][T13899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.913120][T13899] RSP: 002b:00007fa6a3e06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 556.921815][T13899] RAX: ffffffffffffffda RBX: 00007fa6a3225fa0 RCX: 00007fa6a2f9e019 [ 556.930128][T13899] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 556.938192][T13899] RBP: 00007fa6a3e06090 R08: 0000000000000000 R09: 0000000000000000 [ 556.946214][T13899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.954561][T13899] R13: 00007fa6a3226038 R14: 00007fa6a3225fa0 R15: 00007ffda2115fc8 [ 556.962603][T13899] [ 557.031689][T13670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 557.306774][T13906] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2474'. [ 557.755713][T13921] IPv6: NLM_F_CREATE should be specified when creating new route [ 557.767731][T13921] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2477'. [ 557.889677][T13670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.035022][T13670] veth0_vlan: entered promiscuous mode [ 558.101586][T13670] veth1_vlan: entered promiscuous mode [ 558.327483][T13670] veth0_macvtap: entered promiscuous mode [ 558.371084][T13670] veth1_macvtap: entered promiscuous mode [ 558.411842][T13934] netlink: 'syz.1.2480': attribute type 6 has an invalid length. [ 558.500322][T13934] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2480'. [ 558.759387][T13670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.780702][T13670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.842265][T13670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.947151][T13670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.989727][T13670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.017477][T13670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.068816][T13670] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.112300][T13670] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.134405][T13670] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.156452][T13670] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.584698][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.629962][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.691792][ T6949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.726168][ T6949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.154719][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 561.173115][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 561.182968][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 561.193116][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 561.201789][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 561.211950][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 561.773069][T13987] chnl_net:caif_netlink_parms(): no params data found [ 562.091497][T13987] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.114546][T13987] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.122065][T13987] bridge_slave_0: entered allmulticast mode [ 562.156375][T13987] bridge_slave_0: entered promiscuous mode [ 562.187983][T13987] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.212405][T13987] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.245065][T13987] bridge_slave_1: entered allmulticast mode [ 562.253280][T13987] bridge_slave_1: entered promiscuous mode [ 562.390333][T13987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.436052][T13987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.496935][T13987] team0: Port device team_slave_0 added [ 562.507714][T13987] team0: Port device team_slave_1 added [ 563.011222][T13987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.039566][T13987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.120332][T13987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.192758][T13987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.208702][T13987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.254675][ T5793] Bluetooth: hci2: command tx timeout [ 563.315292][T13987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.350333][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.357305][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.440189][ T5777] bond0: (slave syz_tun): Releasing backup interface [ 563.497780][ T5777] syz_tun (unregistering): left allmulticast mode [ 563.877240][T13987] hsr_slave_0: entered promiscuous mode [ 563.919499][T13987] hsr_slave_1: entered promiscuous mode [ 563.941970][T13987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.951712][T13987] Cannot create hsr debugfs directory [ 564.019577][T14034] netlink: 'syz.0.2496': attribute type 10 has an invalid length. [ 564.038727][T14034] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2496'. [ 564.603686][T13987] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.172371][T13987] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.344366][ T5793] Bluetooth: hci2: command tx timeout [ 565.379870][T13987] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.549343][T13987] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.713207][T14064] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 565.729405][T14064] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 565.806545][T14066] netlink: 'syz.2.2506': attribute type 10 has an invalid length. [ 565.863469][T14066] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2506'. [ 565.904434][T14066] batman_adv: batadv0: Adding interface: vlan1 [ 565.911025][T14066] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.938759][T14066] batman_adv: batadv0: Interface activated: vlan1 [ 566.090550][T13987] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 566.207544][T13987] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 566.231964][T13987] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 566.790320][T13987] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 567.161581][T13987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.228314][T13987] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.268353][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.276060][ T6949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.313976][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.321229][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.414539][ T5793] Bluetooth: hci2: command tx timeout [ 567.652115][T14099] netlink: 'syz.3.2516': attribute type 39 has an invalid length. [ 568.861556][T13987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.018223][T13987] veth0_vlan: entered promiscuous mode [ 569.044809][T13987] veth1_vlan: entered promiscuous mode [ 569.107417][T13987] veth0_macvtap: entered promiscuous mode [ 569.130119][T13987] veth1_macvtap: entered promiscuous mode [ 569.163536][T13987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.186839][T13987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.202007][T13987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.214389][T13987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.233463][T13987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.279790][T13987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.296634][T13987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.311651][T13987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.330208][T13987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.347411][T13987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.372122][T13987] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.405140][T13987] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.424249][T13987] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.433409][T13987] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.494910][ T5793] Bluetooth: hci2: command tx timeout [ 569.772345][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.803333][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.879622][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.897210][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.266250][T14149] netlink: 'syz.1.2490': attribute type 6 has an invalid length. [ 570.328854][T14149] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2490'. [ 572.135657][T14165] FAULT_INJECTION: forcing a failure. [ 572.135657][T14165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.170271][T14165] CPU: 0 PID: 14165 Comm: syz.3.2533 Not tainted syzkaller #0 [ 572.178222][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.188344][T14165] Call Trace: [ 572.191696][T14165] [ 572.194685][T14165] dump_stack_lvl+0x18c/0x250 [ 572.199607][T14165] ? show_regs_print_info+0x20/0x20 [ 572.204976][T14165] ? load_image+0x420/0x420 [ 572.209583][T14165] ? __might_fault+0xaa/0x120 [ 572.214330][T14165] ? __lock_acquire+0x7d80/0x7d80 [ 572.219817][T14165] ? __virt_addr_valid+0x10c/0x380 [ 572.225012][T14165] should_fail_ex+0x394/0x4c0 [ 572.229775][T14165] _copy_from_user+0x2f/0xe0 [ 572.234531][T14165] sctp_setsockopt+0x19e/0x11e0 [ 572.240253][T14165] ? sock_common_recvmsg+0x190/0x190 [ 572.245607][T14165] do_sock_setsockopt+0x175/0x1a0 [ 572.250703][T14165] ? __fdget+0x180/0x210 [ 572.255047][T14165] __x64_sys_setsockopt+0x182/0x200 [ 572.260334][T14165] do_syscall_64+0x55/0xb0 [ 572.264842][T14165] ? clear_bhb_loop+0x40/0x90 [ 572.269641][T14165] ? clear_bhb_loop+0x40/0x90 [ 572.274394][T14165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.280463][T14165] RIP: 0033:0x7f8b17f9e019 [ 572.284963][T14165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.305004][T14165] RSP: 002b:00007f8b18d8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 572.313489][T14165] RAX: ffffffffffffffda RBX: 00007f8b18225fa0 RCX: 00007f8b17f9e019 [ 572.321521][T14165] RDX: 0000000000000019 RSI: 0000000000000084 RDI: 0000000000000004 [ 572.330260][T14165] RBP: 00007f8b18d8b090 R08: 0000000000000008 R09: 0000000000000000 [ 572.338289][T14165] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.346329][T14165] R13: 00007f8b18226038 R14: 00007f8b18225fa0 R15: 00007ffc3216c428 [ 572.354410][T14165] [ 573.316293][T14174] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2536'. [ 573.935377][T13328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 574.022477][T13328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 574.031167][T13328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 574.150575][T14188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 574.161282][T14188] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 574.171378][T14188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 574.526219][ T5774] bond0: (slave syz_tun): Releasing backup interface [ 574.618195][T14194] netlink: 'syz.3.2541': attribute type 11 has an invalid length. [ 574.783157][T14199] netlink: 'syz.1.2542': attribute type 6 has an invalid length. [ 574.854876][T14199] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2542'. [ 574.975226][T14196] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 575.508249][T14208] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2545'. [ 575.554712][T14208] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2545'. [ 575.638982][T14212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2545'. [ 575.677701][T14208] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2545'. [ 575.733856][T14183] chnl_net:caif_netlink_parms(): no params data found [ 576.216229][T14188] Bluetooth: hci1: command tx timeout [ 576.393674][T14183] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.415995][T14183] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.423786][T14183] bridge_slave_0: entered allmulticast mode [ 576.435917][T14183] bridge_slave_0: entered promiscuous mode [ 576.500441][ T6936] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.529064][T14183] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.550054][T14183] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.559084][T14183] bridge_slave_1: entered allmulticast mode [ 576.573377][T14183] bridge_slave_1: entered promiscuous mode [ 576.660414][ T6936] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.797513][T14183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.814455][T14183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.873108][ T6936] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.198163][ T6936] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.333188][T14246] netlink: 'syz.2.2555': attribute type 1 has an invalid length. [ 577.343865][T14183] team0: Port device team_slave_0 added [ 577.360044][T14183] team0: Port device team_slave_1 added [ 577.366077][T14246] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2555'. [ 577.378941][T14247] netlink: 'syz.3.2554': attribute type 6 has an invalid length. [ 577.402157][T14247] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2554'. [ 577.775164][T14248] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 577.869368][T14183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.876643][T14183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.936792][T14183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.982473][T14183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.001945][T14183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.033688][T14183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.282639][T14253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2557'. [ 578.302632][T14188] Bluetooth: hci1: command tx timeout [ 578.345670][T14253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2557'. [ 578.360792][T14253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2557'. [ 578.413076][T14183] hsr_slave_0: entered promiscuous mode [ 578.427051][T14183] hsr_slave_1: entered promiscuous mode [ 578.433672][T14183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 578.458817][T14183] Cannot create hsr debugfs directory [ 578.491722][T14253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2557'. [ 580.363158][T14292] netlink: 'syz.2.2566': attribute type 6 has an invalid length. [ 580.384299][T14188] Bluetooth: hci1: command tx timeout [ 580.924457][T14312] __nla_validate_parse: 1 callbacks suppressed [ 580.924475][T14312] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2572'. [ 581.000572][T14312] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2572'. [ 581.036968][T14316] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2572'. [ 581.181806][T14312] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2572'. [ 581.469403][T14317] netlink: 'syz.3.2574': attribute type 6 has an invalid length. [ 581.615077][T14317] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2574'. [ 582.329174][T14348] netlink: 'syz.1.2579': attribute type 6 has an invalid length. [ 582.394842][T14348] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2579'. [ 582.455077][T14188] Bluetooth: hci1: command tx timeout [ 582.532509][ T6936] vlan0: left allmulticast mode [ 582.569845][ T6936] veth0_vlan: left allmulticast mode [ 582.597387][ T6936] vlan0: left promiscuous mode [ 582.630979][ T6936] À: port 1(vlan0) entered disabled state [ 582.686857][ T6936] hsr_slave_0: left promiscuous mode [ 582.763743][ T6936] veth1_macvtap: left promiscuous mode [ 582.774764][ T6936] veth0_macvtap: left promiscuous mode [ 582.781191][ T6936] veth1_vlan: left promiscuous mode [ 582.787484][ T6936] veth0_vlan: left promiscuous mode [ 583.594013][ T6936] team_slave_1 (unregistering): left promiscuous mode [ 583.601438][ T6936] team_slave_1 (unregistering): left allmulticast mode [ 583.615395][ T6936] team0 (unregistering): Port device team_slave_1 removed [ 583.671894][ T6936] team_slave_0 (unregistering): left promiscuous mode [ 583.681061][ T6936] team_slave_0 (unregistering): left allmulticast mode [ 583.690239][ T6936] team0 (unregistering): Port device team_slave_0 removed [ 583.747607][ T6936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.800950][ T6936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.170825][ T6936] bond0 (unregistering): Released all slaves [ 584.228729][T14360] netlink: 'syz.3.2581': attribute type 15 has an invalid length. [ 584.239022][T14360] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.2581'. [ 584.274291][T14363] netlink: 'syz.3.2581': attribute type 15 has an invalid length. [ 584.282813][T14363] netlink: 'syz.3.2581': attribute type 16 has an invalid length. [ 584.324209][T14363] netlink: 'syz.3.2581': attribute type 21 has an invalid length. [ 584.332122][T14363] netlink: 'syz.3.2581': attribute type 25 has an invalid length. [ 584.354676][T14363] netlink: 'syz.3.2581': attribute type 27 has an invalid length. [ 584.362720][T14363] netlink: 'syz.3.2581': attribute type 28 has an invalid length. [ 584.370933][T14363] netlink: 'syz.3.2581': attribute type 29 has an invalid length. [ 584.388907][T14363] netlink: 'syz.3.2581': attribute type 30 has an invalid length. [ 584.498926][T14183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 584.539564][T14183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 584.598961][T14183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 584.647627][T14183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 584.962029][T14183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.039201][T14380] netlink: 'syz.2.2585': attribute type 6 has an invalid length. [ 585.105908][T14380] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2585'. [ 585.129011][T14183] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.195183][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.202650][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.267273][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.274588][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.011479][T14406] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2590'. [ 586.054860][T14183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.204008][T14183] veth0_vlan: entered promiscuous mode [ 586.267557][T14183] veth1_vlan: entered promiscuous mode [ 586.396263][T14183] veth0_macvtap: entered promiscuous mode [ 586.427301][T14183] veth1_macvtap: entered promiscuous mode [ 586.506821][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.538413][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.567769][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.600252][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.647853][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.684093][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.715052][T14183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.844971][T14426] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2593'. [ 586.927967][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.982958][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.024246][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.055450][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.077632][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.097861][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.112489][T14183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.200146][T14183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.212409][T14183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.227729][T14183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.238686][T14183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.582710][T14447] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2599'. [ 587.825790][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.858562][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.992217][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.024602][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.387745][T14461] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2602'. [ 589.676155][T14496] validate_nla: 3 callbacks suppressed [ 589.676175][T14496] netlink: 'syz.3.2606': attribute type 6 has an invalid length. [ 589.853359][T14496] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2606'. [ 590.876903][T14519] netlink: 'syz.2.2613': attribute type 6 has an invalid length. [ 590.903553][T14519] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2613'. [ 592.127025][T14539] netlink: 'syz.0.2621': attribute type 6 has an invalid length. [ 592.154484][T14539] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2621'. [ 592.375590][T14538] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 592.507852][T14542] pim6reg1: entered promiscuous mode [ 592.535642][T14542] pim6reg1: entered allmulticast mode [ 593.241338][T14565] netlink: 'syz.1.2628': attribute type 6 has an invalid length. [ 593.276485][T14565] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2628'. [ 593.306455][T14566] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2631'. [ 593.320615][T14556] netlink: 'syz.2.2626': attribute type 10 has an invalid length. [ 593.333185][T14556] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2626'. [ 593.343863][T14556] hsr0: entered promiscuous mode [ 593.360823][T14556] bridge0: port 3(hsr0) entered blocking state [ 593.394766][T14556] bridge0: port 3(hsr0) entered disabled state [ 593.416997][T14556] hsr0: entered allmulticast mode [ 593.429272][T14556] hsr_slave_0: entered allmulticast mode [ 593.447033][T14556] hsr_slave_1: entered allmulticast mode [ 593.620971][T14556] bridge0: port 3(hsr0) entered blocking state [ 593.629973][T14556] bridge0: port 3(hsr0) entered forwarding state [ 595.185388][T14590] delete_channel: no stack [ 595.321075][T14598] netlink: 'syz.2.2641': attribute type 6 has an invalid length. [ 595.355505][T14598] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2641'. [ 595.509453][T14600] FAULT_INJECTION: forcing a failure. [ 595.509453][T14600] name failslab, interval 1, probability 0, space 0, times 0 [ 595.547260][T14600] CPU: 1 PID: 14600 Comm: syz.3.2642 Not tainted syzkaller #0 [ 595.555434][T14600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 595.565674][T14600] Call Trace: [ 595.569052][T14600] [ 595.572338][T14600] dump_stack_lvl+0x18c/0x250 [ 595.577202][T14600] ? show_regs_print_info+0x20/0x20 [ 595.583061][T14600] ? load_image+0x420/0x420 [ 595.587655][T14600] ? ip_tunnel_ctl+0xc36/0x1910 [ 595.592666][T14600] should_fail_ex+0x394/0x4c0 [ 595.597439][T14600] should_failslab+0x9/0x20 [ 595.602118][T14600] slab_pre_alloc_hook+0x59/0x300 [ 595.607239][T14600] ? stack_depot_init+0x36/0xe0 [ 595.612162][T14600] ? __hw_addr_add_ex+0x1f4/0x700 [ 595.617314][T14600] __kmem_cache_alloc_node+0x53/0x250 [ 595.622778][T14600] ? __hw_addr_add_ex+0x1f4/0x700 [ 595.627893][T14600] kmalloc_trace+0x2a/0xe0 [ 595.633180][T14600] __hw_addr_add_ex+0x1f4/0x700 [ 595.638571][T14600] dev_addr_init+0x15b/0x240 [ 595.643252][T14600] ? dev_addr_flush+0x210/0x210 [ 595.648178][T14600] ? kvmalloc_node+0x70/0x180 [ 595.652934][T14600] ? __kmalloc_node+0xe4/0x240 [ 595.657886][T14600] alloc_netdev_mqs+0x2d8/0x1040 [ 595.662906][T14600] ? udp_tunnel_nic_device_sync_work+0x880/0x880 [ 595.669650][T14600] __ip_tunnel_create+0x303/0x4d0 [ 595.674758][T14600] ? ip_tunnel_init_net+0x7c0/0x7c0 [ 595.680118][T14600] ? security_capable+0x89/0xb0 [ 595.685252][T14600] ip_tunnel_ctl+0xc36/0x1910 [ 595.690021][T14600] vti_tunnel_ctl+0x1f9/0x390 [ 595.694780][T14600] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 595.700394][T14600] ? dev_ioctl+0x83c/0x1140 [ 595.705071][T14600] ? ip_tunnel_update+0xae0/0xae0 [ 595.710194][T14600] ? dev_ifsioc+0x957/0xc40 [ 595.714793][T14600] dev_ioctl+0x84c/0x1140 [ 595.719255][T14600] sock_ioctl+0x74c/0x7e0 [ 595.723669][T14600] ? sock_poll+0x3e0/0x3e0 [ 595.728259][T14600] ? bpf_lsm_file_ioctl+0x9/0x10 [ 595.733258][T14600] ? security_file_ioctl+0x80/0xa0 [ 595.738445][T14600] ? sock_poll+0x3e0/0x3e0 [ 595.743133][T14600] __se_sys_ioctl+0xfd/0x170 [ 595.747796][T14600] do_syscall_64+0x55/0xb0 [ 595.752271][T14600] ? clear_bhb_loop+0x40/0x90 [ 595.757109][T14600] ? clear_bhb_loop+0x40/0x90 [ 595.761866][T14600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.767836][T14600] RIP: 0033:0x7f8b17f9e019 [ 595.772311][T14600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.792077][T14600] RSP: 002b:00007f8b18d8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.801283][T14600] RAX: ffffffffffffffda RBX: 00007f8b18225fa0 RCX: 00007f8b17f9e019 [ 595.809587][T14600] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000b [ 595.818054][T14600] RBP: 00007f8b18d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 595.826717][T14600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.835546][T14600] R13: 00007f8b18226038 R14: 00007f8b18225fa0 R15: 00007ffc3216c428 [ 595.843768][T14600] [ 596.863018][T14618] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2648'. [ 597.138398][T14631] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2652'. [ 597.163260][T14631] netlink: get zone limit has 4 unknown bytes [ 597.224512][T14633] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2650'. [ 597.236522][T14628] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2650'. [ 597.260402][T14632] netlink: set zone limit has 8 unknown bytes [ 597.532905][ T6936] [ 597.535325][ T6936] ====================================================== [ 597.542646][ T6936] WARNING: possible circular locking dependency detected [ 597.549847][ T6936] syzkaller #0 Not tainted [ 597.554305][ T6936] ------------------------------------------------------ [ 597.561460][ T6936] kworker/u4:13/6936 is trying to acquire lock: [ 597.567738][ T6936] ffff88802f754d80 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0 [ 597.577461][ T6936] [ 597.577461][ T6936] but task is already holding lock: [ 597.584880][ T6936] ffff888021a18768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 597.595415][ T6936] [ 597.595415][ T6936] which lock already depends on the new lock. [ 597.595415][ T6936] [ 597.605870][ T6936] [ 597.605870][ T6936] the existing dependency chain (in reverse order) is: [ 597.615384][ T6936] [ 597.615384][ T6936] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 597.623768][ T6936] __mutex_lock+0x135/0xc80 [ 597.629413][ T6936] ieee80211_open+0x144/0x200 [ 597.634687][ T6936] __dev_open+0x2cb/0x430 [ 597.639769][ T6936] dev_open+0xab/0x190 [ 597.644421][ T6936] team_add_slave+0x703/0x28a0 [ 597.649762][ T6936] do_setlink+0xcde/0x3f40 [ 597.655173][ T6936] rtnl_newlink+0x1848/0x2170 [ 597.660593][ T6936] rtnetlink_rcv_msg+0x843/0xf90 [ 597.666124][ T6936] netlink_rcv_skb+0x235/0x4c0 [ 597.671524][ T6936] netlink_unicast+0x7b1/0x930 [ 597.677948][ T6936] netlink_sendmsg+0x8d0/0xbf0 [ 597.683386][ T6936] ____sys_sendmsg+0x61b/0x980 [ 597.688712][ T6936] ___sys_sendmsg+0x2a6/0x360 [ 597.693951][ T6936] __se_sys_sendmsg+0x1d0/0x2c0 [ 597.699453][ T6936] do_syscall_64+0x55/0xb0 [ 597.704433][ T6936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.710897][ T6936] [ 597.710897][ T6936] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 597.719319][ T6936] __lock_acquire+0x37ef/0x7d80 [ 597.724788][ T6936] lock_acquire+0x19e/0x420 [ 597.730673][ T6936] __mutex_lock+0x135/0xc80 [ 597.735763][ T6936] team_del_slave+0x31/0x1b0 [ 597.740960][ T6936] team_device_event+0x297/0xa30 [ 597.746798][ T6936] notifier_call_chain+0x18f/0x380 [ 597.752514][ T6936] unregister_netdevice_many_notify+0x1037/0x1910 [ 597.760137][ T6936] unregister_netdevice_queue+0x2e9/0x330 [ 597.766514][ T6936] _cfg80211_unregister_wdev+0x16d/0x580 [ 597.772815][ T6936] ieee80211_remove_interfaces+0x4b3/0x690 [ 597.779720][ T6936] ieee80211_unregister_hw+0x5d/0x2a0 [ 597.785750][ T6936] mac80211_hwsim_del_radio+0x289/0x480 [ 597.791989][ T6936] hwsim_exit_net+0x58d/0x650 [ 597.797233][ T6936] cleanup_net+0x707/0xbb0 [ 597.802241][ T6936] process_scheduled_works+0xa60/0x1600 [ 597.808358][ T6936] worker_thread+0xa5e/0xfe0 [ 597.813834][ T6936] kthread+0x2fa/0x390 [ 597.818559][ T6936] ret_from_fork+0x48/0x80 [ 597.823550][ T6936] ret_from_fork_asm+0x11/0x20 [ 597.829063][ T6936] [ 597.829063][ T6936] other info that might help us debug this: [ 597.829063][ T6936] [ 597.839510][ T6936] Possible unsafe locking scenario: [ 597.839510][ T6936] [ 597.846991][ T6936] CPU0 CPU1 [ 597.852467][ T6936] ---- ---- [ 597.857860][ T6936] lock(&rdev->wiphy.mtx); [ 597.862406][ T6936] lock(team->team_lock_key#2); [ 597.869991][ T6936] lock(&rdev->wiphy.mtx); [ 597.877092][ T6936] lock(team->team_lock_key#2); [ 597.882171][ T6936] [ 597.882171][ T6936] *** DEADLOCK *** [ 597.882171][ T6936] [ 597.891041][ T6936] 5 locks held by kworker/u4:13/6936: [ 597.896473][ T6936] #0: ffff88801a25d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 597.908741][ T6936] #1: ffffc900045bfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 597.919381][ T6936] #2: ffffffff8e3ca0d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 597.928969][ T6936] #3: ffffffff8e3d70c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 597.939168][ T6936] #4: ffff888021a18768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 597.950309][ T6936] [ 597.950309][ T6936] stack backtrace: [ 597.956774][ T6936] CPU: 1 PID: 6936 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 597.964828][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 597.974944][ T6936] Workqueue: netns cleanup_net [ 597.979850][ T6936] Call Trace: [ 597.983170][ T6936] [ 597.986515][ T6936] dump_stack_lvl+0x18c/0x250 [ 597.991255][ T6936] ? load_image+0x420/0x420 [ 597.995823][ T6936] ? show_regs_print_info+0x20/0x20 [ 598.001164][ T6936] ? print_circular_bug+0x12b/0x1a0 [ 598.006414][ T6936] check_noncircular+0x2fc/0x400 [ 598.011405][ T6936] ? print_deadlock_bug+0x5d0/0x5d0 [ 598.016683][ T6936] ? lockdep_lock+0xf5/0x230 [ 598.021602][ T6936] ? _find_first_zero_bit+0xd6/0x100 [ 598.026969][ T6936] __lock_acquire+0x37ef/0x7d80 [ 598.031898][ T6936] ? verify_lock_unused+0x140/0x140 [ 598.037229][ T6936] ? verify_lock_unused+0x140/0x140 [ 598.042558][ T6936] ? __up_read+0x2b8/0x6b0 [ 598.047110][ T6936] lock_acquire+0x19e/0x420 [ 598.051748][ T6936] ? team_del_slave+0x31/0x1b0 [ 598.056708][ T6936] ? __might_sleep+0xe0/0xe0 [ 598.061648][ T6936] ? read_lock_is_recursive+0x20/0x20 [ 598.067184][ T6936] __mutex_lock+0x135/0xc80 [ 598.071790][ T6936] ? team_del_slave+0x31/0x1b0 [ 598.077026][ T6936] ? __mutex_lock+0x30d/0xc80 [ 598.081789][ T6936] ? team_del_slave+0x31/0x1b0 [ 598.086640][ T6936] ? mutex_lock_nested+0x20/0x20 [ 598.091639][ T6936] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 598.097336][ T6936] team_del_slave+0x31/0x1b0 [ 598.102098][ T6936] team_device_event+0x297/0xa30 [ 598.107678][ T6936] notifier_call_chain+0x18f/0x380 [ 598.113259][ T6936] unregister_netdevice_many_notify+0x1037/0x1910 [ 598.119752][ T6936] ? unregister_netdevice_many+0x20/0x20 [ 598.125528][ T6936] ? kernfs_remove_by_name_ns+0x117/0x150 [ 598.131310][ T6936] ? __lock_acquire+0x7d80/0x7d80 [ 598.136424][ T6936] unregister_netdevice_queue+0x2e9/0x330 [ 598.142415][ T6936] ? list_netdevice+0x730/0x730 [ 598.147473][ T6936] ? kernfs_remove_by_name_ns+0x117/0x150 [ 598.153283][ T6936] _cfg80211_unregister_wdev+0x16d/0x580 [ 598.159174][ T6936] ieee80211_remove_interfaces+0x4b3/0x690 [ 598.165182][ T6936] ? ieee80211_do_stop+0x2000/0x2000 [ 598.171400][ T6936] ? rcu_is_watching+0x15/0xb0 [ 598.176225][ T6936] ieee80211_unregister_hw+0x5d/0x2a0 [ 598.181678][ T6936] mac80211_hwsim_del_radio+0x289/0x480 [ 598.187290][ T6936] ? rhashtable_remove_fast+0xc00/0xc00 [ 598.192989][ T6936] hwsim_exit_net+0x58d/0x650 [ 598.198089][ T6936] ? hwsim_init_net+0x90/0x90 [ 598.202822][ T6936] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 598.208807][ T6936] cleanup_net+0x707/0xbb0 [ 598.213273][ T6936] ? ops_free_list+0x3b0/0x3b0 [ 598.218142][ T6936] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.223603][ T6936] ? process_scheduled_works+0x975/0x1600 [ 598.229433][ T6936] ? process_scheduled_works+0x975/0x1600 [ 598.235389][ T6936] process_scheduled_works+0xa60/0x1600 [ 598.241196][ T6936] ? worker_attach_to_pool+0x370/0x370 [ 598.246937][ T6936] ? assign_work+0x3cc/0x5d0 [ 598.251850][ T6936] worker_thread+0xa5e/0xfe0 [ 598.256705][ T6936] kthread+0x2fa/0x390 [ 598.260915][ T6936] ? pr_cont_work+0x550/0x550 [ 598.265753][ T6936] ? kthread_blkcg+0xd0/0xd0 [ 598.270411][ T6936] ret_from_fork+0x48/0x80 [ 598.275071][ T6936] ? kthread_blkcg+0xd0/0xd0 [ 598.279713][ T6936] ret_from_fork_asm+0x11/0x20 [ 598.284568][ T6936] [ 598.359919][ T6936] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode [ 598.380675][ T6936] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode [ 598.496399][ T6936] team0: Port device wlan1 removed [ 598.561772][T14644] netlink: 'syz.2.2655': attribute type 6 has an invalid length. [ 598.573231][T14644] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2655'. [ 598.814968][ T6936] hsr_slave_0: left promiscuous mode [ 598.826121][ T6936] hsr_slave_1: left promiscuous mode [ 598.838019][ T6936] veth1_macvtap: left promiscuous mode [ 598.843650][ T6936] veth1_vlan: left promiscuous mode [ 598.849264][ T6936] veth0_vlan: left promiscuous mode [ 599.128901][ T6936] team_slave_1 (unregistering): left promiscuous mode [ 599.137198][ T6936] team_slave_1 (unregistering): left allmulticast mode [ 599.145139][ T6936] team0 (unregistering): Port device team_slave_1 removed [ 599.178644][ T6936] team_slave_0 (unregistering): left promiscuous mode [ 599.185589][ T6936] team_slave_0 (unregistering): left allmulticast mode [ 599.193404][ T6936] team0 (unregistering): Port device team_slave_0 removed [ 599.210271][ T6936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.220048][ T6936] bond_slave_1 (unregistering): left promiscuous mode [ 599.227005][ T6936] bond_slave_1 (unregistering): left allmulticast mode [ 599.430075][ T6936] bond0 (unregistering): left promiscuous mode [ 599.441222][ T6936] bond0 (unregistering): left allmulticast mode [ 599.448520][ T6936] team0 (unregistering): Port device bond0 removed [ 599.488296][ T6936] bond0 (unregistering): Released all slaves