last executing test programs: 5.327198588s ago: executing program 1 (id=1625): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f0000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) gettid() 5.184878162s ago: executing program 3 (id=1626): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000000), &(0x7f0000000180)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x2b, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000005000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009356fcff080000009500000000000000180100002020262500000000002020207b1af8ff00000000b7a100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000950000000000000085000000a400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018120000"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x64, &(0x7f0000000ac0)=""/100, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000f40)={0x2, 0xc, 0x3e, 0xff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f00000010c0)=[{0x4, 0x2, 0xe, 0x898420c868e9fced}, {0x0, 0x1, 0xa, 0x8}, {0x0, 0x3, 0x1, 0xd}, {0x0, 0x2, 0x1}, {0x4, 0x5, 0x9, 0x2}, {0x2, 0x5, 0xd, 0x9}, {0x2, 0x1, 0x5, 0x1}, {0x2, 0x4, 0xb, 0xa}, {0x0, 0x4, 0x8, 0x4}], 0x10, 0x7}, 0x94) close(r2) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES8=r2], 0x9a) recvmsg$unix(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/141, 0x8d}], 0x2, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x2) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r0) r9 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000001500)=""/156, 0x9c}, {0x0}], 0x3}, 0x20) write$cgroup_subtree(r10, 0x0, 0xfe33) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r9, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 5.106133254s ago: executing program 2 (id=1627): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001400)=""/232, 0xe8}], 0x4}, 0x2000) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="18080000c0000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 5.105783734s ago: executing program 1 (id=1628): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x10022) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x0) 5.066232565s ago: executing program 0 (id=1629): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x4000000) r1 = perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x2}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="08000000000000000000000000000000000000004c88ab0e479fdad16e5ec3c4b505d8d72c7a0e185a20f70022dd93273ad419bcf90a957c20b02f109728c2d6bb37cb92abef8f6aba6eafa2776e4de4a91e8f895a114b5fc376e025e46132941263b4d3592b65657304905711dc08e1eb383fbeb54c217eea58f322f25147a84c15c8f4134ac44888ea1f54fa32b374a0733c9b152a3fd3c069263571c705b65bd89c53c22ec5b7d8793845269700"/184, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40010002) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8084) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x5}}, @printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.560414447s ago: executing program 2 (id=1630): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r1, 0x0, 0x40000020) r2 = perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x2}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="08000000000000000000000000000000000000004c88ab0e479fdad16e5ec3c4b505d8d72c7a0e185a20f70022dd93273ad419bcf90a957c20b02f109728c2d6bb37cb92abef8f6aba6eafa2776e4de4a91e8f895a114b5fc376e025e46132941263b4d3592b65657304905711dc08e1eb383fbeb54c217eea58f322f25147a84c15c8f4134ac44888ea1f54fa32b374a0733c9b152a3fd3c069263571c705b65bd89c53c22ec5b7d8793845269700"/184, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r4, &(0x7f0000000100), 0x0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40010002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8084) r6 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) 3.981396012s ago: executing program 1 (id=1631): bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff00) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x3fff8000}, 0xb182, 0x8c, 0x9, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff0000f003fb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 3.457832965s ago: executing program 3 (id=1632): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0x2}, 0x100301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x20, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000002000000000000e0a7375a18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000aa0700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000180100002020642500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000bf91000000000000b7020000acea40fe8500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair(0x0, 0xa, 0x0, &(0x7f0000000000)) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x7ffffc, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close(r3) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001c40)) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x6b120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80004, 0xca, 0x0, 0x5, 0x40, 0x400000, 0x0, 0x0, 0xd, 0x0, 0x8}, 0x0, 0x0, r5, 0x2) recvmsg$unix(r0, 0x0, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x9a) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000010000000000000", @ANYRES32, @ANYBLOB="0200"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 3.363712417s ago: executing program 0 (id=1633): perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x2}]}, @func={0x1, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x2e]}}, 0x0, 0x3b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000002000000000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000007910400000000000630a04ff000000009500000000eef224c2bff3b0d05d372c441a87e3000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000002c0)={0x2, 0x80, 0xf3, 0x5, 0xff, 0x10, 0x0, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbc9, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0xc, 0x8, 0xa24, 0x9, 0xdbf8, 0x800, 0x8, 0x0, 0x9, 0x0, 0x80000001}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x7f80000000000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.23650032s ago: executing program 1 (id=1634): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={&(0x7f0000000280)="d96fa3ee0cf1a5efbdfed57ef905213942386e4ba0a89b6e7c4a06c1d786091444769498f5d2c3a4f03dbd6221ab260838e75b93856df9ce40c6b9b182fb7d3b9d85baea5d9b4d69baaac1c0ac816f906fe61e1e746dfa30abb6db29ec0754f619a4d333e692e37365afe917bac8c23b6ec8c54c379134c7e44f7cfb405663dae2aadf184977fd9d0a9f8978", &(0x7f0000000340)=""/162, &(0x7f0000000500)="56a6d7ad008fcf7443cc68ca44e16a25e2ee7bf638c166653ab65059f91da437b0fd6c14296a298253e3e9310c354c1e934a5b90c2be1a49734e3f6f75453fd5fb4d720423ab8e21e4bfbaea9ef824d710040bbbe22464df79dfb7b4fdb278f22990f74e57e0fa05c437805a1c446f90130bb7eacd05854d6aa85d40f3d90f3ef77a34a217dc4bf2bc4720f60192744640250e1502a5e540834241b5c9b7d9f36daa78e18cf8ec2227601101577fb9e661b7e46fa976d244f85e0b0d5fab013c721011374b839f1a65057ffb6f5a6054637be50a2efba6da41e4922d667fa839aea484b78530c526f0e2da418853ce", &(0x7f0000000600)="6538488047a39485d255a007dc23c5190ca86abe828b875880f830bf230aa0182344e7811bf0b1c9d24eda34c3cf77c405d5922db30c406341cadc576c134e406632ba3406567b6506f7549d984fb9d41fc4fd324cbec7", 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc92b}, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000002400000008000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x58, &(0x7f00000001c0)}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d80000002d0081044e81f782db44b90402000000e8fe55a1180015000600142603600e", 0x23}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x21, 0x19eaf300, 0x3, 0x9, 0x61012, 0xffffffffffffffff, 0x1a3a, '\x00', r7, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 3.029705285s ago: executing program 2 (id=1635): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xf2ee, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x2, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2020, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x6, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x2, 0x0, 0x0, 0x7fc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20}, 0x50) sendmsg$unix(r0, &(0x7f0000002180)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000000440)="f309c946be8742afb97e63c80b7b810b54d0d94dd53865c854de50f9", 0x1c}, {&(0x7f0000000dc0)="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", 0xdae}, {&(0x7f0000001dc0)="3deeead73dd61472d4660d307f525f94c8ca0c45a6035072003b66fca517ea0227c30beb2c40df5f19f199d700fe3b1753c55465553fbd8d4f126ec1a667df66b4a4f4b3e67e84f5b77883ac3f52aef6319a58c0ec81ae82216d69fe1e48a30409b0a99f7af696f34e52203f5030a4887981e7d3a01620a60d60eeece9f44544cb363b8451045b44", 0x88}, {&(0x7f0000001f40)}, {&(0x7f0000002040)="ce4e13aa90e168f4433d63b04aca7d85d617a18afea62eec321b53bbe59702eb6738dd841bd1cd05dc90623365a3b2d9f584d56be35a110a29d630b1cb762632bde86fdd58abb9d7090ac10161af92cca4d8bae9bbbfc126d47f186a3f075e11b75e56d65e62b10fc58e5cdcb650569506f1774e8f", 0x75}, {&(0x7f00000020c0)="0f94e3c647c807b469bd9cfac7febf", 0xf}], 0x6, 0x0, 0x0, 0xc000}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.44599415s ago: executing program 3 (id=1636): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f0000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) gettid() 2.366641752s ago: executing program 0 (id=1637): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x5, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000000)='\x00', 0x0}, 0x30) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r3}, 0x4) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400"/71], 0x0, 0x52}, 0x28) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000140)=r4) socket$kcm(0xa, 0x2, 0x73) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r8], 0x12) 2.355331582s ago: executing program 1 (id=1638): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000d30678479f000000000004000000000000"], 0x0, 0x26}, 0x20) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0xa, 0x2, 0x3a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000500)="5cff918647f61e41ec6e00d4c1c08aed0b0e3852fcbaa562db83c4458904871ca4d32742710a8fed9bb6c27df25809f6e01c6807a050c6b4010cc4353cdb8aadb447f543ef425f21b30f2ddf100890a9f4234f529917b6b0e781275e73d1e10a5d7885c9d0f2f40490fccf66c8dfab40fe3bdd6ccb705cc4894ced111895a6960c55a907138b62fc83fee159e1d92246593b800498eff63f9d0f935d6276bb2376a49854a1ca69880fae093c3695bc877202c0", 0xb3}], 0x1}, 0x48800) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) close(r4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="1a00000028a3200000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r9, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) 2.197741356s ago: executing program 3 (id=1639): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001400)=""/232, 0xe8}], 0x4}, 0x2000) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="18080000c0000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 2.102955368s ago: executing program 2 (id=1640): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000000), &(0x7f0000000180)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x2b, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000005000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009356fcff080000009500000000000000180100002020262500000000002020207b1af8ff00000000b7a100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000950000000000000085000000a400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018120000"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x64, &(0x7f0000000ac0)=""/100, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000f40)={0x2, 0xc, 0x3e, 0xff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f00000010c0)=[{0x4, 0x2, 0xe, 0x898420c868e9fced}, {0x0, 0x1, 0xa, 0x8}, {0x0, 0x3, 0x1, 0xd}, {0x0, 0x2, 0x1}, {0x4, 0x5, 0x9, 0x2}, {0x2, 0x5, 0xd, 0x9}, {0x2, 0x1, 0x5, 0x1}, {0x2, 0x4, 0xb, 0xa}, {0x0, 0x4, 0x8, 0x4}], 0x10, 0x7}, 0x94) close(r2) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES8=r2], 0x9a) recvmsg$unix(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/141, 0x8d}], 0x2, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x2) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r0) r9 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000001500)=""/156, 0x9c}, {0x0}], 0x3}, 0x20) write$cgroup_subtree(r10, 0x0, 0xfe33) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r9, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 2.005629651s ago: executing program 0 (id=1641): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x4000000) r1 = perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x2}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="08000000000000000000000000000000000000004c88ab0e479fdad16e5ec3c4b505d8d72c7a0e185a20f70022dd93273ad419bcf90a957c20b02f109728c2d6bb37cb92abef8f6aba6eafa2776e4de4a91e8f895a114b5fc376e025e46132941263b4d3592b65657304905711dc08e1eb383fbeb54c217eea58f322f25147a84c15c8f4134ac44888ea1f54fa32b374a0733c9b152a3fd3c069263571c705b65bd89c53c22ec5b7d8793845269700"/184, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40010002) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8084) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x5}}, @printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.64653881s ago: executing program 3 (id=1642): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x10022) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x0) 1.2476125s ago: executing program 1 (id=1643): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r1, 0x0, 0x40000020) r2 = perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x2}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="08000000000000000000000000000000000000004c88ab0e479fdad16e5ec3c4b505d8d72c7a0e185a20f70022dd93273ad419bcf90a957c20b02f109728c2d6bb37cb92abef8f6aba6eafa2776e4de4a91e8f895a114b5fc376e025e46132941263b4d3592b65657304905711dc08e1eb383fbeb54c217eea58f322f25147a84c15c8f4134ac44888ea1f54fa32b374a0733c9b152a3fd3c069263571c705b65bd89c53c22ec5b7d8793845269700"/184, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r4, &(0x7f0000000100), 0x0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40010002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8084) r6 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) 1.085162924s ago: executing program 2 (id=1644): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0x2}, 0x100301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x20, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000002000000000000e0a7375a18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000aa0700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000180100002020642500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000bf91000000000000b7020000acea40fe8500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b7020000feffff7fbfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair(0x0, 0xa, 0x0, &(0x7f0000000000)) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x7ffffc, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close(r3) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001c40)) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x6b120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80004, 0xca, 0x0, 0x5, 0x40, 0x400000, 0x0, 0x0, 0xd, 0x0, 0x8}, 0x0, 0x0, r5, 0x2) recvmsg$unix(r0, 0x0, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x9a) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000010000000000000", @ANYRES32, @ANYBLOB="0200"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 974.445656ms ago: executing program 0 (id=1645): bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff00) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x3fff8000}, 0xb182, 0x8c, 0x9, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff0000f003fb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 495.356898ms ago: executing program 3 (id=1646): perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x2}]}, @func={0x1, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x2e]}}, 0x0, 0x3b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000002000000000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000007910400000000000630a04ff000000009500000000eef224c2bff3b0d05d372c441a87e3000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000002c0)={0x2, 0x80, 0xf3, 0x5, 0xff, 0x10, 0x0, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbc9, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0xc, 0x8, 0xa24, 0x9, 0xdbf8, 0x800, 0x8, 0x0, 0x9, 0x0, 0x80000001}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x7f80000000000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 45.659059ms ago: executing program 0 (id=1647): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={&(0x7f0000000280)="d96fa3ee0cf1a5efbdfed57ef905213942386e4ba0a89b6e7c4a06c1d786091444769498f5d2c3a4f03dbd6221ab260838e75b93856df9ce40c6b9b182fb7d3b9d85baea5d9b4d69baaac1c0ac816f906fe61e1e746dfa30abb6db29ec0754f619a4d333e692e37365afe917bac8c23b6ec8c54c379134c7e44f7cfb405663dae2aadf184977fd9d0a9f8978", &(0x7f0000000340)=""/162, &(0x7f0000000500)="56a6d7ad008fcf7443cc68ca44e16a25e2ee7bf638c166653ab65059f91da437b0fd6c14296a298253e3e9310c354c1e934a5b90c2be1a49734e3f6f75453fd5fb4d720423ab8e21e4bfbaea9ef824d710040bbbe22464df79dfb7b4fdb278f22990f74e57e0fa05c437805a1c446f90130bb7eacd05854d6aa85d40f3d90f3ef77a34a217dc4bf2bc4720f60192744640250e1502a5e540834241b5c9b7d9f36daa78e18cf8ec2227601101577fb9e661b7e46fa976d244f85e0b0d5fab013c721011374b839f1a65057ffb6f5a6054637be50a2efba6da41e4922d667fa839aea484b78530c526f0e2da418853ce", &(0x7f0000000600)="6538488047a39485d255a007dc23c5190ca86abe828b875880f830bf230aa0182344e7811bf0b1c9d24eda34c3cf77c405d5922db30c406341cadc576c134e406632ba3406567b6506f7549d984fb9d41fc4fd324cbec7", 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc92b}, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000002400000008000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x58, &(0x7f00000001c0)}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d80000002d0081044e81f782db44b90402000000e8fe55a1180015000600142603600e", 0x23}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x21, 0x19eaf300, 0x3, 0x9, 0x61012, 0xffffffffffffffff, 0x1a3a, '\x00', r7, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 2 (id=1648): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xf2ee, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x2, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2020, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x6, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x2, 0x0, 0x0, 0x7fc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20}, 0x50) sendmsg$unix(r0, &(0x7f0000002180)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000000440)="f309c946be8742afb97e63c80b7b810b54d0d94dd53865c854de50f9", 0x1c}, {&(0x7f0000000dc0)="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", 0xdae}, {&(0x7f0000001dc0)="3deeead73dd61472d4660d307f525f94c8ca0c45a6035072003b66fca517ea0227c30beb2c40df5f19f199d700fe3b1753c55465553fbd8d4f126ec1a667df66b4a4f4b3e67e84f5b77883ac3f52aef6319a58c0ec81ae82216d69fe1e48a30409b0a99f7af696f34e52203f5030a4887981e7d3a01620a60d60eeece9f44544cb363b8451045b44", 0x88}, {&(0x7f0000001f40)}, {&(0x7f0000002040)="ce4e13aa90e168f4433d63b04aca7d85d617a18afea62eec321b53bbe59702eb6738dd841bd1cd05dc90623365a3b2d9f584d56be35a110a29d630b1cb762632bde86fdd58abb9d7090ac10161af92cca4d8bae9bbbfc126d47f186a3f075e11b75e56d65e62b10fc58e5cdcb650569506f1774e8f", 0x75}, {&(0x7f00000020c0)="0f94e3c647c807b469bd9cfac7febf", 0xf}], 0x6, 0x0, 0x0, 0xc000}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. [ 81.584299][ T5764] cgroup: Unknown subsys name 'net' [ 81.721025][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.385448][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.990143][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.002481][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.011073][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.032573][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.082490][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.093390][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.101702][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.109332][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.118171][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.145518][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.155001][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.163362][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.172074][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.180488][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.185182][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.189865][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.201946][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.204491][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.211805][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.223754][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.225573][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.234149][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.239358][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.245934][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.722206][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 85.811467][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 85.879701][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 85.933273][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 85.951855][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.959082][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.966850][ T5779] bridge_slave_0: entered allmulticast mode [ 85.974507][ T5779] bridge_slave_0: entered promiscuous mode [ 86.027770][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.036029][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.043417][ T5779] bridge_slave_1: entered allmulticast mode [ 86.050621][ T5779] bridge_slave_1: entered promiscuous mode [ 86.113889][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.121129][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.128914][ T5776] bridge_slave_0: entered allmulticast mode [ 86.136700][ T5776] bridge_slave_0: entered promiscuous mode [ 86.168943][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.176426][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.184392][ T5776] bridge_slave_1: entered allmulticast mode [ 86.191622][ T5776] bridge_slave_1: entered promiscuous mode [ 86.204149][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.216655][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.310600][ T5779] team0: Port device team_slave_0 added [ 86.338302][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.348523][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.356279][ T5780] bridge_slave_0: entered allmulticast mode [ 86.364149][ T5780] bridge_slave_0: entered promiscuous mode [ 86.372848][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.379989][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.388412][ T5780] bridge_slave_1: entered allmulticast mode [ 86.396309][ T5780] bridge_slave_1: entered promiscuous mode [ 86.405457][ T5779] team0: Port device team_slave_1 added [ 86.425032][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.434846][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.442279][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.449530][ T5784] bridge_slave_0: entered allmulticast mode [ 86.457456][ T5784] bridge_slave_0: entered promiscuous mode [ 86.502351][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.524205][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.531911][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.539185][ T5784] bridge_slave_1: entered allmulticast mode [ 86.546585][ T5784] bridge_slave_1: entered promiscuous mode [ 86.554805][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.562609][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.590485][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.604773][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.611849][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.638159][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.653831][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.692360][ T5776] team0: Port device team_slave_0 added [ 86.719290][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.756448][ T5776] team0: Port device team_slave_1 added [ 86.790630][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.840416][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.847555][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.873916][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.889978][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.903364][ T5780] team0: Port device team_slave_0 added [ 86.915746][ T5779] hsr_slave_0: entered promiscuous mode [ 86.923370][ T5779] hsr_slave_1: entered promiscuous mode [ 86.931119][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.941737][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.967918][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.992609][ T5780] team0: Port device team_slave_1 added [ 87.022747][ T5784] team0: Port device team_slave_0 added [ 87.068221][ T5784] team0: Port device team_slave_1 added [ 87.098589][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.111345][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.161632][ T5783] Bluetooth: hci0: command tx timeout [ 87.169205][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.187949][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.195770][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.227708][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.301907][ T5783] Bluetooth: hci2: command tx timeout [ 87.301930][ T5786] Bluetooth: hci3: command tx timeout [ 87.302242][ T5786] Bluetooth: hci1: command tx timeout [ 87.325959][ T5776] hsr_slave_0: entered promiscuous mode [ 87.337250][ T5776] hsr_slave_1: entered promiscuous mode [ 87.344065][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.357470][ T5776] Cannot create hsr debugfs directory [ 87.452341][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.459356][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.489997][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.546427][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.554352][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.580610][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.599507][ T5780] hsr_slave_0: entered promiscuous mode [ 87.606777][ T5780] hsr_slave_1: entered promiscuous mode [ 87.615903][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.625062][ T5780] Cannot create hsr debugfs directory [ 87.751202][ T5784] hsr_slave_0: entered promiscuous mode [ 87.762980][ T5784] hsr_slave_1: entered promiscuous mode [ 87.769523][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.779842][ T5784] Cannot create hsr debugfs directory [ 88.161864][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.190743][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.205111][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.226232][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.270772][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.306400][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.317482][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.343217][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.403582][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.417990][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.438227][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.476703][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.558182][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.570535][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.592949][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.603956][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.699337][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.729919][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.765696][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.794420][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.831344][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.838683][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.853956][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.861690][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.880057][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.887320][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.943389][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.963486][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.970650][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.018416][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.047762][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.054985][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.088496][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.095690][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.199084][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.222650][ T5786] Bluetooth: hci0: command tx timeout [ 89.297109][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.353178][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.360395][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.383365][ T5786] Bluetooth: hci2: command tx timeout [ 89.388856][ T5786] Bluetooth: hci3: command tx timeout [ 89.396493][ T5785] Bluetooth: hci1: command tx timeout [ 89.400453][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.409113][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.767886][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.855843][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.923311][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.995674][ T5776] veth0_vlan: entered promiscuous mode [ 90.009973][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.050166][ T5779] veth0_vlan: entered promiscuous mode [ 90.059523][ T5776] veth1_vlan: entered promiscuous mode [ 90.109904][ T5779] veth1_vlan: entered promiscuous mode [ 90.144673][ T5780] veth0_vlan: entered promiscuous mode [ 90.205023][ T5779] veth0_macvtap: entered promiscuous mode [ 90.217898][ T5780] veth1_vlan: entered promiscuous mode [ 90.228133][ T5784] veth0_vlan: entered promiscuous mode [ 90.248415][ T5779] veth1_macvtap: entered promiscuous mode [ 90.258731][ T5776] veth0_macvtap: entered promiscuous mode [ 90.275665][ T5776] veth1_macvtap: entered promiscuous mode [ 90.295342][ T5784] veth1_vlan: entered promiscuous mode [ 90.337776][ T5780] veth0_macvtap: entered promiscuous mode [ 90.358873][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.388886][ T5780] veth1_macvtap: entered promiscuous mode [ 90.410570][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.420840][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.434433][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.448279][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.480039][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.490004][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.499293][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.509006][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.525515][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.538991][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.549451][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.563168][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.575592][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.588795][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.599788][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.611878][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.630737][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.639700][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.649314][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.658835][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.677831][ T5784] veth0_macvtap: entered promiscuous mode [ 90.690031][ T5784] veth1_macvtap: entered promiscuous mode [ 90.710327][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.727233][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.738147][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.750101][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.764090][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.796549][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.806422][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.817235][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.828832][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.917507][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.928322][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.938834][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.949564][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.959524][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.970200][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.988195][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.037995][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.049435][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.059510][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.073234][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.083490][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.094308][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.110564][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.173333][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.191838][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.202062][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.210828][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.224925][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.234083][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.297957][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.303435][ T5783] Bluetooth: hci0: command tx timeout [ 91.314824][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.347716][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.375616][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.411117][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.432571][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.464611][ T5783] Bluetooth: hci3: command tx timeout [ 91.470140][ T5783] Bluetooth: hci1: command tx timeout [ 91.475724][ T5786] Bluetooth: hci2: command tx timeout [ 91.530636][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.556020][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.658732][ T5845] netlink: 'syz.3.4': attribute type 39 has an invalid length. [ 91.738252][ C0] hrtimer: interrupt took 59262 ns [ 91.751251][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.788952][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.889516][ T5849] Zero length message leads to an empty skb [ 91.994310][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.052215][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.076098][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.097087][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.226026][ T23] cfg80211: failed to load regulatory.db [ 92.495677][ T5853] netlink: 'syz.0.5': attribute type 39 has an invalid length. [ 92.874644][ T5847] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.100053][ T5847] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.122197][ T5862] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.267983][ T5861] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.381871][ T5783] Bluetooth: hci0: command tx timeout [ 93.467719][ T5862] netlink: 'syz.1.2': attribute type 8 has an invalid length. [ 93.496268][ T5862] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.542673][ T5783] Bluetooth: hci1: command tx timeout [ 93.549290][ T5786] Bluetooth: hci2: command tx timeout [ 93.555581][ T5785] Bluetooth: hci3: command tx timeout [ 93.573861][ T5859] bridge_slave_1: left allmulticast mode [ 93.580187][ T5859] bridge_slave_1: left promiscuous mode [ 93.597683][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.654079][ T5859] bridge_slave_0: left allmulticast mode [ 93.667659][ T5859] bridge_slave_0: left promiscuous mode [ 93.689758][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.233716][ T5873] delete_channel: no stack [ 94.734663][ T5877] bridge_slave_1: left allmulticast mode [ 94.741224][ T5877] bridge_slave_1: left promiscuous mode [ 94.770934][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.887964][ T5885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.925430][ T5877] bridge_slave_0: left allmulticast mode [ 94.937615][ T5877] bridge_slave_0: left promiscuous mode [ 94.947730][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.550329][ T5884] bridge_slave_1: left allmulticast mode [ 95.570726][ T5884] bridge_slave_1: left promiscuous mode [ 95.593067][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.696254][ T5884] bridge_slave_0: left allmulticast mode [ 95.723204][ T5884] bridge_slave_0: left promiscuous mode [ 95.745203][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.075963][ T5891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14'. [ 96.390883][ T5900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.534538][ T5902] netlink: 'syz.1.17': attribute type 39 has an invalid length. [ 96.842161][ T5907] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 96.993909][ T5911] netlink: 'syz.0.19': attribute type 9 has an invalid length. [ 97.044004][ T5911] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.19'. [ 97.271837][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 97.354273][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 97.407716][ T5902] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.17'. [ 97.455414][ T5902] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.17'. [ 97.555316][ T5909] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.17'. [ 97.593296][ T5914] bridge_slave_1: left allmulticast mode [ 97.601861][ T5914] bridge_slave_1: left promiscuous mode [ 97.618594][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.032502][ T5914] bridge_slave_0: left allmulticast mode [ 98.038740][ T5907] syz.0.19 (5907) used greatest stack depth: 20296 bytes left [ 98.053216][ T5914] bridge_slave_0: left promiscuous mode [ 98.076216][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.268463][ T5918] netlink: 'syz.2.22': attribute type 10 has an invalid length. [ 98.430338][ T5918] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 98.455316][ T5922] netlink: 140 bytes leftover after parsing attributes in process `syz.1.23'. [ 98.485975][ T5922] netlink: 10 bytes leftover after parsing attributes in process `syz.1.23'. [ 98.519861][ T5922] bond0: (slave bond_slave_0): Releasing backup interface [ 98.586547][ T5922] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 98.956953][ T5928] netlink: 'syz.2.25': attribute type 10 has an invalid length. [ 98.966947][ T5922] syz.1.23 (5922) used greatest stack depth: 19880 bytes left [ 99.061228][ T5929] netlink: 'syz.2.25': attribute type 9 has an invalid length. [ 99.079162][ T5929] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.25'. [ 99.230882][ T5928] team0 (unregistering): Port device team_slave_0 removed [ 99.288916][ T5928] team0 (unregistering): Port device team_slave_1 removed [ 100.245568][ T5945] warning: `syz.0.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.803232][ T5959] netlink: 'syz.2.36': attribute type 39 has an invalid length. [ 101.115208][ T5972] netlink: 'syz.0.37': attribute type 39 has an invalid length. [ 101.235107][ T5976] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.36'. [ 101.302045][ T5976] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.36'. [ 101.389871][ T5979] netlink: 'syz.3.39': attribute type 10 has an invalid length. [ 101.476404][ T5980] netlink: 'syz.3.39': attribute type 9 has an invalid length. [ 101.537787][ T5980] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.39'. [ 101.674363][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 101.718216][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 101.739484][ T5963] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.36'. [ 101.754578][ T5974] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.37'. [ 101.906723][ T5974] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.37'. [ 101.932589][ T5972] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.37'. [ 102.194297][ T5991] netlink: 'syz.1.42': attribute type 10 has an invalid length. [ 102.309988][ T5993] netlink: 'syz.1.42': attribute type 9 has an invalid length. [ 102.532564][ T5991] team0 (unregistering): Port device team_slave_0 removed [ 102.646240][ T5991] team0 (unregistering): Port device team_slave_1 removed [ 102.798535][ T5992] netlink: 'syz.0.43': attribute type 39 has an invalid length. [ 103.052849][ T6003] netlink: 'syz.3.46': attribute type 39 has an invalid length. [ 103.722440][ T6011] __nla_validate_parse: 4 callbacks suppressed [ 103.722463][ T6011] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.46'. [ 103.908772][ T6011] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.46'. [ 103.939696][ T6015] netlink: 'syz.2.49': attribute type 10 has an invalid length. [ 103.952568][ T6003] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.46'. [ 104.017908][ T6015] netlink: 'syz.2.49': attribute type 9 has an invalid length. [ 104.038585][ T6015] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.49'. [ 104.232587][ T6021] netlink: 'syz.3.51': attribute type 39 has an invalid length. [ 104.339226][ T6026] netlink: 'syz.0.52': attribute type 10 has an invalid length. [ 104.454412][ T6027] netlink: 'syz.0.52': attribute type 9 has an invalid length. [ 104.489913][ T6027] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.52'. [ 105.211280][ T6024] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.51'. [ 105.242965][ T6024] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.51'. [ 105.252847][ T6021] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.51'. [ 106.812176][ T6064] netlink: 14 bytes leftover after parsing attributes in process `syz.1.63'. [ 106.910222][ T6065] netlink: 'syz.3.65': attribute type 9 has an invalid length. [ 106.972103][ T6065] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.65'. [ 107.474567][ T6054] syzkaller0: entered promiscuous mode [ 107.493144][ T6054] syzkaller0: entered allmulticast mode [ 107.507910][ T6063] netlink: 'syz.3.65': attribute type 10 has an invalid length. [ 107.524128][ T6060] syz.1.63 (6060) used greatest stack depth: 18312 bytes left [ 108.824770][ T6064] netlink: 6 bytes leftover after parsing attributes in process `syz.1.63'. [ 108.839189][ T6064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.091106][ T6071] netlink: 'syz.2.67': attribute type 10 has an invalid length. [ 109.125811][ T6071] netlink: 'syz.2.67': attribute type 9 has an invalid length. [ 109.162372][ T6071] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.67'. [ 110.559799][ T6094] netlink: 'syz.1.74': attribute type 39 has an invalid length. [ 111.085296][ T6097] netlink: 14 bytes leftover after parsing attributes in process `syz.2.76'. [ 111.123313][ T6099] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.74'. [ 111.194479][ T6099] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.74'. [ 111.307627][ T6094] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.74'. [ 111.433246][ T6097] netlink: 6 bytes leftover after parsing attributes in process `syz.2.76'. [ 111.491219][ T6097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.529907][ T6104] netlink: 'syz.0.77': attribute type 10 has an invalid length. [ 111.614301][ T6105] netlink: 'syz.0.77': attribute type 9 has an invalid length. [ 111.652533][ T6105] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.77'. [ 111.726498][ T6097] syz.2.76 (6097) used greatest stack depth: 17224 bytes left [ 111.829246][ T6109] netlink: 'syz.3.79': attribute type 10 has an invalid length. [ 111.861165][ T6109] netlink: 'syz.3.79': attribute type 9 has an invalid length. [ 111.888302][ T6109] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.79'. [ 112.153572][ T6113] netlink: 'syz.2.88': attribute type 10 has an invalid length. [ 112.178973][ T6113] netlink: 'syz.2.88': attribute type 9 has an invalid length. [ 112.208782][ T6113] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.88'. [ 115.552350][ T6145] netlink: 'syz.3.86': attribute type 39 has an invalid length. [ 115.678296][ T6147] netlink: 'syz.1.85': attribute type 10 has an invalid length. [ 115.744051][ T6147] netlink: 'syz.1.85': attribute type 9 has an invalid length. [ 115.808217][ T6147] netlink: 179280 bytes leftover after parsing attributes in process `syz.1.85'. [ 115.931863][ T6150] netlink: 'syz.2.87': attribute type 39 has an invalid length. [ 116.085801][ T6154] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.86'. [ 116.096908][ T6156] netlink: 14 bytes leftover after parsing attributes in process `syz.0.89'. [ 116.117155][ T6154] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.86'. [ 116.148894][ T6145] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.86'. [ 116.376836][ T6152] netlink: 6 bytes leftover after parsing attributes in process `syz.0.89'. [ 116.405679][ T6155] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.87'. [ 116.512803][ T6152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.559336][ T6155] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.87'. [ 116.603809][ T6150] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.87'. [ 116.767379][ T6162] netlink: 'syz.3.92': attribute type 10 has an invalid length. [ 116.780784][ T6162] netlink: 'syz.3.92': attribute type 9 has an invalid length. [ 116.821746][ T6162] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.92'. [ 118.290660][ T6181] netlink: 'syz.1.99': attribute type 39 has an invalid length. [ 118.650660][ T6183] netlink: 'syz.2.100': attribute type 10 has an invalid length. [ 118.724879][ T6183] netlink: 'syz.2.100': attribute type 9 has an invalid length. [ 118.940155][ T6188] netlink: 'syz.2.101': attribute type 39 has an invalid length. [ 120.972843][ T6209] __nla_validate_parse: 9 callbacks suppressed [ 120.972862][ T6209] netlink: 14 bytes leftover after parsing attributes in process `syz.3.104'. [ 121.049593][ T6217] validate_nla: 4 callbacks suppressed [ 121.049613][ T6217] netlink: 'syz.0.118': attribute type 10 has an invalid length. [ 121.164392][ T6217] netlink: 'syz.0.118': attribute type 9 has an invalid length. [ 121.190126][ T6217] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.118'. [ 121.218791][ T6209] netlink: 6 bytes leftover after parsing attributes in process `syz.3.104'. [ 121.267902][ T6209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.423193][ T6239] netlink: 'syz.3.117': attribute type 10 has an invalid length. [ 123.373793][ T6239] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 123.736142][ T6260] netlink: 'syz.3.123': attribute type 10 has an invalid length. [ 123.828192][ T6260] netlink: 'syz.3.123': attribute type 9 has an invalid length. [ 123.850401][ T6260] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.123'. [ 124.547057][ T6282] netlink: 'syz.2.129': attribute type 39 has an invalid length. [ 124.887603][ T6285] netlink: 'syz.3.131': attribute type 39 has an invalid length. [ 125.065254][ T6290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.183410][ T6291] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.129'. [ 125.245479][ T6291] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.129'. [ 125.290129][ T6282] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.129'. [ 125.745564][ T6285] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.131'. [ 125.762335][ T6285] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.131'. [ 125.819374][ T6293] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.131'. [ 125.949548][ T6300] netlink: 'syz.0.142': attribute type 10 has an invalid length. [ 125.970586][ T6300] netlink: 'syz.0.142': attribute type 9 has an invalid length. [ 126.590862][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.722577][ T6319] netlink: 'syz.1.140': attribute type 39 has an invalid length. [ 127.197271][ T6326] netlink: 'syz.0.144': attribute type 39 has an invalid length. [ 127.219220][ T6328] __nla_validate_parse: 1 callbacks suppressed [ 127.219238][ T6328] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.140'. [ 127.235551][ T6328] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.140'. [ 127.249563][ T6319] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.140'. [ 127.404009][ T6331] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.144'. [ 127.436103][ T6331] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.144'. [ 127.446892][ T6330] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.144'. [ 127.702198][ T6335] netlink: 'syz.1.145': attribute type 39 has an invalid length. [ 127.953955][ T6339] netlink: 'syz.2.148': attribute type 10 has an invalid length. [ 127.976350][ T6339] netlink: 'syz.2.148': attribute type 9 has an invalid length. [ 128.005406][ T6339] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.148'. [ 128.410772][ T6344] netlink: 'syz.3.149': attribute type 10 has an invalid length. [ 128.452288][ T6349] netlink: 'syz.2.151': attribute type 10 has an invalid length. [ 128.492737][ T6350] netlink: 'syz.3.149': attribute type 9 has an invalid length. [ 128.500720][ T6350] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.149'. [ 128.546456][ T6346] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.145'. [ 128.594124][ T6346] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.145'. [ 128.604553][ T6349] netlink: 'syz.2.151': attribute type 9 has an invalid length. [ 128.978063][ T6359] netlink: 'syz.1.153': attribute type 39 has an invalid length. [ 130.133684][ T6372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.282965][ T6379] delete_channel: no stack [ 130.535439][ T6391] FAULT_INJECTION: forcing a failure. [ 130.535439][ T6391] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.577582][ T6391] CPU: 0 PID: 6391 Comm: syz.3.162 Not tainted syzkaller #0 [ 130.585076][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.595206][ T6391] Call Trace: [ 130.598554][ T6391] [ 130.601522][ T6391] dump_stack_lvl+0x18c/0x250 [ 130.606243][ T6391] ? show_regs_print_info+0x20/0x20 [ 130.611474][ T6391] ? load_image+0x420/0x420 [ 130.616100][ T6391] ? __might_fault+0xaa/0x120 [ 130.620820][ T6391] ? __lock_acquire+0x7d80/0x7d80 [ 130.625924][ T6391] should_fail_ex+0x394/0x4c0 [ 130.630725][ T6391] _copy_from_user+0x2f/0xe0 [ 130.635462][ T6391] kstrtouint_from_user+0xde/0x170 [ 130.640636][ T6391] ? kstrtol_from_user+0x190/0x190 [ 130.645987][ T6391] proc_fail_nth_write+0x8f/0x250 [ 130.651060][ T6391] ? proc_fail_nth_read+0x260/0x260 [ 130.656294][ T6391] ? proc_fail_nth_read+0x260/0x260 [ 130.661542][ T6391] vfs_write+0x299/0x9a0 [ 130.665861][ T6391] ? file_end_write+0x250/0x250 [ 130.670750][ T6391] ? __fget_files+0x28/0x460 [ 130.675398][ T6391] ? __fget_files+0x3fc/0x460 [ 130.680158][ T6391] ? __fdget_pos+0x2a3/0x330 [ 130.684818][ T6391] ? ksys_write+0x74/0x260 [ 130.689284][ T6391] ksys_write+0x151/0x260 [ 130.693663][ T6391] ? __ia32_sys_read+0x90/0x90 [ 130.698479][ T6391] ? lockdep_hardirqs_on+0x98/0x150 [ 130.703720][ T6391] do_syscall_64+0x55/0xb0 [ 130.708257][ T6391] ? clear_bhb_loop+0x40/0x90 [ 130.712970][ T6391] ? clear_bhb_loop+0x40/0x90 [ 130.717785][ T6391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.723724][ T6391] RIP: 0033:0x7f2ce9b5e90e [ 130.728205][ T6391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.747943][ T6391] RSP: 002b:00007f2ce7dd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.756393][ T6391] RAX: ffffffffffffffda RBX: 00007f2ce7dd56c0 RCX: 00007f2ce9b5e90e [ 130.764499][ T6391] RDX: 0000000000000001 RSI: 00007f2ce7dd50a0 RDI: 0000000000000004 [ 130.772509][ T6391] RBP: 00007f2ce7dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 130.780523][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.788529][ T6391] R13: 00007f2ce9e26128 R14: 00007f2ce9e26090 R15: 00007ffce1c52f68 [ 130.796906][ T6391] [ 131.541110][ T6407] delete_channel: no stack [ 131.968363][ T6417] validate_nla: 8 callbacks suppressed [ 131.968381][ T6417] netlink: 'syz.1.172': attribute type 10 has an invalid length. [ 132.075218][ T6418] netlink: 'syz.1.172': attribute type 9 has an invalid length. [ 132.262432][ T6411] __nla_validate_parse: 9 callbacks suppressed [ 132.262453][ T6411] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.170'. [ 132.314120][ T6411] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.170'. [ 132.330189][ T6410] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.170'. [ 132.561513][ T6427] netlink: 'syz.0.183': attribute type 39 has an invalid length. [ 133.110414][ T6435] netlink: 'syz.3.177': attribute type 2 has an invalid length. [ 133.130792][ T6435] netlink: 'syz.3.177': attribute type 1 has an invalid length. [ 133.143473][ T6435] netlink: 9 bytes leftover after parsing attributes in process `syz.3.177'. [ 133.159408][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.166254][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.417222][ T6441] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.183'. [ 133.432491][ T6441] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.183'. [ 133.455868][ T6427] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.183'. [ 133.904347][ T6447] netlink: 'syz.0.181': attribute type 10 has an invalid length. [ 133.940941][ T6451] netlink: 'syz.1.192': attribute type 39 has an invalid length. [ 134.178370][ T6447] netlink: 'syz.0.181': attribute type 9 has an invalid length. [ 134.221447][ T6447] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.181'. [ 134.422079][ T6456] netlink: 'syz.2.184': attribute type 39 has an invalid length. [ 134.471951][ T6452] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.192'. [ 134.481161][ T6452] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.192'. [ 134.669131][ T6459] netlink: 'syz.0.186': attribute type 39 has an invalid length. [ 134.959689][ T6465] FAULT_INJECTION: forcing a failure. [ 134.959689][ T6465] name failslab, interval 1, probability 0, space 0, times 1 [ 134.979884][ T6465] CPU: 0 PID: 6465 Comm: syz.1.188 Not tainted syzkaller #0 [ 134.987267][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.997417][ T6465] Call Trace: [ 135.000736][ T6465] [ 135.003809][ T6465] dump_stack_lvl+0x18c/0x250 [ 135.008530][ T6465] ? show_regs_print_info+0x20/0x20 [ 135.013780][ T6465] ? load_image+0x420/0x420 [ 135.018343][ T6465] ? __might_sleep+0xe0/0xe0 [ 135.023001][ T6465] ? __lock_acquire+0x7d80/0x7d80 [ 135.028108][ T6465] should_fail_ex+0x394/0x4c0 [ 135.032892][ T6465] should_failslab+0x9/0x20 [ 135.037501][ T6465] slab_pre_alloc_hook+0x59/0x300 [ 135.042617][ T6465] kmem_cache_alloc_lru+0x4d/0x2b0 [ 135.047789][ T6465] ? __d_alloc+0x31/0x710 [ 135.052182][ T6465] __d_alloc+0x31/0x710 [ 135.056401][ T6465] d_alloc_pseudo+0x1d/0x70 [ 135.060956][ T6465] alloc_file_pseudo+0xe4/0x210 [ 135.065869][ T6465] ? fput+0x1a0/0x1a0 [ 135.069923][ T6465] ? tipc_node_get_capabilities+0xee/0x130 [ 135.075783][ T6465] sock_alloc_file+0xb7/0x280 [ 135.080542][ T6465] __sys_socketpair+0x2d0/0x550 [ 135.085466][ T6465] __x64_sys_socketpair+0x9b/0xb0 [ 135.090536][ T6465] do_syscall_64+0x55/0xb0 [ 135.095100][ T6465] ? clear_bhb_loop+0x40/0x90 [ 135.099811][ T6465] ? clear_bhb_loop+0x40/0x90 [ 135.104531][ T6465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.110465][ T6465] RIP: 0033:0x7f6c8cf9e0d9 [ 135.114937][ T6465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.134614][ T6465] RSP: 002b:00007f6c8debe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 135.143080][ T6465] RAX: ffffffffffffffda RBX: 00007f6c8d225fa0 RCX: 00007f6c8cf9e0d9 [ 135.151125][ T6465] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 135.159303][ T6465] RBP: 00007f6c8debe090 R08: 0000000000000000 R09: 0000000000000000 [ 135.167329][ T6465] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 135.175612][ T6465] R13: 00007f6c8d226038 R14: 00007f6c8d225fa0 R15: 00007ffd41b50158 [ 135.183699][ T6465] [ 137.544929][ T6499] netlink: 'syz.2.202': attribute type 39 has an invalid length. [ 138.075597][ T6506] netlink: 'syz.3.204': attribute type 13 has an invalid length. [ 138.121833][ T6506] netlink: 'syz.3.204': attribute type 58 has an invalid length. [ 138.170349][ T6506] __nla_validate_parse: 7 callbacks suppressed [ 138.170367][ T6506] netlink: 152 bytes leftover after parsing attributes in process `syz.3.204'. [ 138.328362][ T6501] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.202'. [ 138.365133][ T6501] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.202'. [ 138.517803][ T6499] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.202'. [ 139.658045][ T6531] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 139.730317][ T6534] netlink: 'syz.2.212': attribute type 9 has an invalid length. [ 139.773687][ T6534] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.212'. [ 139.832282][ T6536] netlink: 132 bytes leftover after parsing attributes in process `syz.0.214'. [ 139.905932][ T6536] netlink: 184 bytes leftover after parsing attributes in process `syz.0.214'. [ 140.027775][ T6538] netlink: 'syz.3.215': attribute type 3 has an invalid length. [ 140.078167][ T6538] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 140.106689][ T6538] netlink: 'syz.3.215': attribute type 6 has an invalid length. [ 140.153227][ T6538] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.215'. [ 140.474830][ T6545] netlink: 60 bytes leftover after parsing attributes in process `syz.3.218'. [ 140.489401][ T6545] netlink: 60 bytes leftover after parsing attributes in process `syz.3.218'. [ 143.722434][ T6569] netlink: 'syz.2.224': attribute type 10 has an invalid length. [ 143.759183][ T6571] netlink: 'syz.1.225': attribute type 8 has an invalid length. [ 143.767743][ T6573] netlink: 'syz.3.226': attribute type 39 has an invalid length. [ 143.769737][ T6571] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 143.788173][ T6569] netlink: 'syz.2.224': attribute type 9 has an invalid length. [ 143.815003][ T6571] __nla_validate_parse: 2 callbacks suppressed [ 143.815030][ T6571] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.225'. [ 143.844441][ T6569] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.224'. [ 144.350441][ T6579] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.226'. [ 144.376097][ T6579] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.226'. [ 144.470190][ T6573] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.226'. [ 144.505116][ T6585] netlink: 60 bytes leftover after parsing attributes in process `syz.0.230'. [ 144.528153][ T6585] netlink: 60 bytes leftover after parsing attributes in process `syz.0.230'. [ 144.664141][ T6589] netlink: 'syz.1.232': attribute type 17 has an invalid length. [ 144.716851][ T6589] netlink: 160 bytes leftover after parsing attributes in process `syz.1.232'. [ 144.765629][ T6589] netlink: 196 bytes leftover after parsing attributes in process `syz.1.232'. [ 144.857361][ T6590] netlink: 60 bytes leftover after parsing attributes in process `syz.0.230'. [ 145.268071][ T6600] netlink: 'syz.2.237': attribute type 10 has an invalid length. [ 145.320278][ T6600] netlink: 'syz.2.237': attribute type 9 has an invalid length. [ 145.841163][ T6613] netlink: 'syz.0.241': attribute type 39 has an invalid length. [ 147.119832][ T6634] netlink: 'syz.0.248': attribute type 10 has an invalid length. [ 147.140491][ T5783] Bluetooth: hci3: unexpected event 0x17 length: 151 > 6 [ 147.809697][ T6650] FAULT_INJECTION: forcing a failure. [ 147.809697][ T6650] name failslab, interval 1, probability 0, space 0, times 0 [ 147.888696][ T6650] CPU: 1 PID: 6650 Comm: syz.1.254 Not tainted syzkaller #0 [ 147.896264][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.906378][ T6650] Call Trace: [ 147.909703][ T6650] [ 147.912787][ T6650] dump_stack_lvl+0x18c/0x250 [ 147.917535][ T6650] ? show_regs_print_info+0x20/0x20 [ 147.922793][ T6650] ? load_image+0x420/0x420 [ 147.927406][ T6650] ? __might_sleep+0xe0/0xe0 [ 147.932241][ T6650] ? __lock_acquire+0x7d80/0x7d80 [ 147.937333][ T6650] should_fail_ex+0x394/0x4c0 [ 147.942075][ T6650] should_failslab+0x9/0x20 [ 147.946635][ T6650] slab_pre_alloc_hook+0x59/0x300 [ 147.951743][ T6650] ? subflow_ulp_init+0x95/0x530 [ 147.956749][ T6650] __kmem_cache_alloc_node+0x53/0x250 [ 147.962282][ T6650] ? tcp_set_ulp+0xb1/0x5f0 [ 147.966850][ T6650] ? subflow_ulp_init+0x95/0x530 [ 147.971854][ T6650] kmalloc_trace+0x2a/0xe0 [ 147.976352][ T6650] subflow_ulp_init+0x95/0x530 [ 147.981184][ T6650] ? tcp_set_ulp+0xb1/0x5f0 [ 147.985753][ T6650] tcp_set_ulp+0x536/0x5f0 [ 147.990236][ T6650] mptcp_subflow_create_socket+0x61d/0xad0 [ 147.996101][ T6650] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 148.001996][ T6650] ? __mptcp_subflow_connect+0x14d0/0x14d0 [ 148.007859][ T6650] ? mark_lock+0x94/0x320 [ 148.012268][ T6650] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 148.018307][ T6650] __mptcp_nmpc_sk+0x157/0x720 [ 148.023130][ T6650] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 148.029969][ T6650] ? __local_bh_enable_ip+0x13a/0x1c0 [ 148.035416][ T6650] ? lockdep_hardirqs_on+0x98/0x150 [ 148.040724][ T6650] ? __local_bh_enable_ip+0x13a/0x1c0 [ 148.046166][ T6650] mptcp_sendmsg_fastopen+0x7c/0x4c0 [ 148.051635][ T6650] mptcp_sendmsg+0x144c/0x1670 [ 148.056523][ T6650] ? aa_sk_perm+0x83c/0x970 [ 148.061121][ T6650] ? aa_sk_perm+0x83c/0x970 [ 148.065726][ T6650] ? aa_af_perm+0x330/0x330 [ 148.070323][ T6650] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 148.076821][ T6650] ? mptcp_shutdown+0x80/0x80 [ 148.081565][ T6650] ? sock_rps_record_flow+0x19/0x3f0 [ 148.086932][ T6650] ? inet_sendmsg+0xce/0x2a0 [ 148.091587][ T6650] ? inet_send_prepare+0x250/0x250 [ 148.096771][ T6650] ____sys_sendmsg+0x61b/0x980 [ 148.101616][ T6650] ? __asan_memset+0x22/0x40 [ 148.106275][ T6650] ? __sys_sendmsg_sock+0x30/0x30 [ 148.111357][ T6650] ? __import_iovec+0x3fa/0x850 [ 148.116259][ T6650] ? import_iovec+0x73/0xa0 [ 148.120805][ T6650] ___sys_sendmsg+0x2a6/0x360 [ 148.125529][ T6650] ? __sys_sendmsg+0x2b0/0x2b0 [ 148.130349][ T6650] ? trace_call_bpf+0xc3/0x6c0 [ 148.135175][ T6650] __se_sys_sendmsg+0x1d0/0x2c0 [ 148.140070][ T6650] ? __x64_sys_sendmsg+0x80/0x80 [ 148.145093][ T6650] ? lockdep_hardirqs_on+0x98/0x150 [ 148.150344][ T6650] do_syscall_64+0x55/0xb0 [ 148.154805][ T6650] ? clear_bhb_loop+0x40/0x90 [ 148.159525][ T6650] ? clear_bhb_loop+0x40/0x90 [ 148.164242][ T6650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.170215][ T6650] RIP: 0033:0x7f6c8cf9e0d9 [ 148.174672][ T6650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.194338][ T6650] RSP: 002b:00007f6c8debe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.202801][ T6650] RAX: ffffffffffffffda RBX: 00007f6c8d225fa0 RCX: 00007f6c8cf9e0d9 [ 148.210811][ T6650] RDX: 00000000300060c1 RSI: 0000200000000240 RDI: 0000000000000003 [ 148.218822][ T6650] RBP: 00007f6c8debe090 R08: 0000000000000000 R09: 0000000000000000 [ 148.226829][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.234842][ T6650] R13: 00007f6c8d226038 R14: 00007f6c8d225fa0 R15: 00007ffd41b50158 [ 148.242876][ T6650] [ 148.950996][ T6666] validate_nla: 3 callbacks suppressed [ 148.951015][ T6666] netlink: 'syz.2.260': attribute type 10 has an invalid length. [ 148.969056][ T6666] netlink: 'syz.2.260': attribute type 9 has an invalid length. [ 149.092581][ T6666] __nla_validate_parse: 14 callbacks suppressed [ 149.092598][ T6666] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.260'. [ 149.125715][ T6655] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.256'. [ 149.182077][ T6662] netlink: 60 bytes leftover after parsing attributes in process `syz.1.257'. [ 149.234318][ T6655] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.256'. [ 149.299069][ T6662] netlink: 60 bytes leftover after parsing attributes in process `syz.1.257'. [ 149.349322][ T6670] netlink: 'syz.3.261': attribute type 2 has an invalid length. [ 150.125579][ T6681] netlink: 'syz.2.265': attribute type 8 has an invalid length. [ 150.171437][ T6681] netlink: 'syz.2.265': attribute type 1 has an invalid length. [ 150.197251][ T6681] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.265'. [ 150.623453][ T6697] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.636318][ T6697] netlink: 1 bytes leftover after parsing attributes in process `syz.1.278'. [ 150.734984][ T6699] netlink: 60 bytes leftover after parsing attributes in process `syz.2.271'. [ 150.754772][ T6699] netlink: 60 bytes leftover after parsing attributes in process `syz.2.271'. [ 151.156267][ T6699] netlink: 60 bytes leftover after parsing attributes in process `syz.2.271'. [ 151.458397][ T6712] netlink: 'syz.2.275': attribute type 3 has an invalid length. [ 151.466976][ T6712] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 151.475123][ T6712] netlink: 'syz.2.275': attribute type 6 has an invalid length. [ 151.737939][ T6714] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 151.763640][ T6714] openvswitch: netlink: Message has 1 unknown bytes. [ 153.355095][ T6747] veth1_to_bond: entered allmulticast mode [ 153.790965][ T6756] netlink: 'syz.1.292': attribute type 10 has an invalid length. [ 153.838055][ T6756] netlink: 'syz.1.292': attribute type 9 has an invalid length. [ 154.922476][ T6778] netlink: 'syz.2.300': attribute type 17 has an invalid length. [ 154.942442][ T6778] __nla_validate_parse: 4 callbacks suppressed [ 154.942460][ T6778] netlink: 160 bytes leftover after parsing attributes in process `syz.2.300'. [ 155.869245][ T6794] FAULT_INJECTION: forcing a failure. [ 155.869245][ T6794] name failslab, interval 1, probability 0, space 0, times 0 [ 155.895784][ T6794] CPU: 1 PID: 6794 Comm: syz.0.307 Not tainted syzkaller #0 [ 155.903172][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.913286][ T6794] Call Trace: [ 155.916614][ T6794] [ 155.919595][ T6794] dump_stack_lvl+0x18c/0x250 [ 155.924344][ T6794] ? show_regs_print_info+0x20/0x20 [ 155.929598][ T6794] ? load_image+0x420/0x420 [ 155.934176][ T6794] ? __might_sleep+0xe0/0xe0 [ 155.938828][ T6794] ? __lock_acquire+0x7d80/0x7d80 [ 155.943951][ T6794] should_fail_ex+0x394/0x4c0 [ 155.948872][ T6794] should_failslab+0x9/0x20 [ 155.953441][ T6794] slab_pre_alloc_hook+0x59/0x300 [ 155.958519][ T6794] ? __lock_acquire+0x7d80/0x7d80 [ 155.963592][ T6794] ? kvmalloc_node+0x70/0x180 [ 155.968333][ T6794] ? kvmalloc_node+0x70/0x180 [ 155.973070][ T6794] __kmem_cache_alloc_node+0x53/0x250 [ 155.978501][ T6794] ? __schedule_delayed_monitor_work+0x200/0x200 [ 155.984901][ T6794] ? kvmalloc_node+0x70/0x180 [ 155.989632][ T6794] __kmalloc_node+0xa6/0x240 [ 155.994295][ T6794] kvmalloc_node+0x70/0x180 [ 155.998869][ T6794] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 156.004305][ T6794] ? 0xffffffffa0004740 [ 156.008511][ T6794] ? 0xffffffffa0004740 [ 156.012715][ T6794] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 156.018688][ T6794] ? xdp_convert_md_to_buff+0x330/0x330 [ 156.024359][ T6794] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 156.030667][ T6794] ? _copy_from_user+0xa5/0xe0 [ 156.035504][ T6794] ? bpf_test_init+0x119/0x140 [ 156.040350][ T6794] ? xdp_convert_md_to_buff+0x5b/0x330 [ 156.045907][ T6794] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 156.051356][ T6794] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 156.058747][ T6794] ? dev_put+0x80/0x80 [ 156.062934][ T6794] ? dev_put+0x80/0x80 [ 156.067067][ T6794] bpf_prog_test_run+0x31f/0x390 [ 156.072068][ T6794] __sys_bpf+0x49d/0x890 [ 156.076369][ T6794] ? bpf_link_show_fdinfo+0x390/0x390 [ 156.081817][ T6794] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 156.088064][ T6794] __x64_sys_bpf+0x7c/0x90 [ 156.092542][ T6794] do_syscall_64+0x55/0xb0 [ 156.097032][ T6794] ? clear_bhb_loop+0x40/0x90 [ 156.101787][ T6794] ? clear_bhb_loop+0x40/0x90 [ 156.106530][ T6794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.112484][ T6794] RIP: 0033:0x7f77d3f9e0d9 [ 156.116968][ T6794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.136633][ T6794] RSP: 002b:00007f77d4e39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.145230][ T6794] RAX: ffffffffffffffda RBX: 00007f77d4225fa0 RCX: 00007f77d3f9e0d9 [ 156.153269][ T6794] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 156.161470][ T6794] RBP: 00007f77d4e39090 R08: 0000000000000000 R09: 0000000000000000 [ 156.169558][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.177618][ T6794] R13: 00007f77d4226038 R14: 00007f77d4225fa0 R15: 00007ffe872bf558 [ 156.185672][ T6794] [ 156.783240][ T5783] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 158.503568][ T6834] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.320'. [ 158.551562][ T6834] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 158.560370][ T6834] openvswitch: netlink: Message has 1 unknown bytes. [ 158.852876][ T5783] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6 [ 159.344498][ T6851] netlink: 'syz.2.327': attribute type 10 has an invalid length. [ 159.375070][ T6851] netlink: 'syz.2.327': attribute type 9 has an invalid length. [ 159.388803][ T6851] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.327'. [ 159.792452][ T6856] veth1_to_bond: entered allmulticast mode [ 160.694158][ T6872] netlink: 'syz.0.335': attribute type 10 has an invalid length. [ 160.752330][ T6872] netlink: 'syz.0.335': attribute type 9 has an invalid length. [ 160.760094][ T6872] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.335'. [ 161.033326][ T5783] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6 [ 161.802018][ T6887] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.340'. [ 161.869147][ T6887] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 161.901537][ T6887] openvswitch: netlink: Message has 1 unknown bytes. [ 162.093830][ T6888] veth1_to_bond: entered allmulticast mode [ 163.014047][ T6907] netlink: 'syz.0.347': attribute type 10 has an invalid length. [ 163.123896][ T6907] netlink: 'syz.0.347': attribute type 9 has an invalid length. [ 163.193265][ T6907] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.347'. [ 163.221564][ T5783] Bluetooth: hci3: unexpected event 0x17 length: 151 > 6 [ 165.875213][ T5783] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6 [ 167.032176][ T6955] FAULT_INJECTION: forcing a failure. [ 167.032176][ T6955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.091540][ T6955] CPU: 0 PID: 6955 Comm: syz.3.361 Not tainted syzkaller #0 [ 167.098933][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.109172][ T6955] Call Trace: [ 167.112503][ T6955] [ 167.115492][ T6955] dump_stack_lvl+0x18c/0x250 [ 167.120286][ T6955] ? show_regs_print_info+0x20/0x20 [ 167.125555][ T6955] ? load_image+0x420/0x420 [ 167.130154][ T6955] ? __might_fault+0xaa/0x120 [ 167.134915][ T6955] ? __lock_acquire+0x7d80/0x7d80 [ 167.140000][ T6955] should_fail_ex+0x394/0x4c0 [ 167.144749][ T6955] _copy_from_user+0x2f/0xe0 [ 167.149404][ T6955] ___sys_recvmsg+0x174/0x590 [ 167.154153][ T6955] ? __sys_recvmsg+0x2a0/0x2a0 [ 167.158994][ T6955] ? trace_call_bpf+0xc3/0x6c0 [ 167.163833][ T6955] ? trace_call_bpf+0x5e9/0x6c0 [ 167.168754][ T6955] ? __fget_files+0x3fc/0x460 [ 167.173552][ T6955] __x64_sys_recvmsg+0x21e/0x2f0 [ 167.178567][ T6955] ? perf_trace_preemptirq_template+0x269/0x330 [ 167.184884][ T6955] ? ___sys_recvmsg+0x590/0x590 [ 167.189808][ T6955] ? trace_sys_enter+0x1f/0x80 [ 167.194648][ T6955] do_syscall_64+0x55/0xb0 [ 167.199147][ T6955] ? clear_bhb_loop+0x40/0x90 [ 167.204057][ T6955] ? clear_bhb_loop+0x40/0x90 [ 167.208787][ T6955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.214715][ T6955] RIP: 0033:0x7f2ce9b9e0d9 [ 167.219186][ T6955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.238849][ T6955] RSP: 002b:00007f2ce7df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 167.247294][ T6955] RAX: ffffffffffffffda RBX: 00007f2ce9e25fa0 RCX: 00007f2ce9b9e0d9 [ 167.255303][ T6955] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000004 [ 167.263393][ T6955] RBP: 00007f2ce7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.271395][ T6955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.279397][ T6955] R13: 00007f2ce9e26038 R14: 00007f2ce9e25fa0 R15: 00007ffce1c52f68 [ 167.287452][ T6955] [ 167.578722][ T6960] netlink: 'syz.2.363': attribute type 10 has an invalid length. [ 167.699003][ T6960] netlink: 'syz.2.363': attribute type 9 has an invalid length. [ 167.712012][ T6960] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.363'. [ 167.988968][ T6967] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 168.094171][ T6967] netlink: 'syz.1.366': attribute type 1 has an invalid length. [ 168.125666][ T6967] netlink: 'syz.1.366': attribute type 6 has an invalid length. [ 168.262092][ T6967] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.366'. [ 170.454154][ T7000] netlink: 'syz.2.377': attribute type 10 has an invalid length. [ 170.475498][ T7000] netlink: 'syz.2.377': attribute type 9 has an invalid length. [ 170.490747][ T7000] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.377'. [ 171.774090][ T5783] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 173.664272][ T7041] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 173.748110][ T7041] netlink: 'syz.3.388': attribute type 9 has an invalid length. [ 173.792261][ T7041] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.388'. [ 174.613979][ T5783] Bluetooth: hci3: unexpected event 0x17 length: 151 > 6 [ 175.236349][ T7065] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.296098][ T7065] netlink: 1 bytes leftover after parsing attributes in process `syz.3.397'. [ 175.388439][ T7065] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 176.315391][ T5783] Bluetooth: hci3: unexpected event 0x17 length: 151 > 6 [ 177.058298][ T7102] netlink: 1 bytes leftover after parsing attributes in process `syz.1.409'. [ 177.322951][ T7102] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 178.725583][ T5783] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 178.816460][ T7131] netlink: 'syz.3.418': attribute type 10 has an invalid length. [ 178.877791][ T7131] netlink: 'syz.3.418': attribute type 9 has an invalid length. [ 178.901615][ T7131] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.418'. [ 179.287214][ T7141] netlink: 'syz.3.423': attribute type 3 has an invalid length. [ 179.303276][ T7141] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 179.334302][ T7141] netlink: 'syz.3.423': attribute type 2 has an invalid length. [ 179.354611][ T7141] netlink: 132500 bytes leftover after parsing attributes in process `syz.3.423'. [ 179.661779][ T7149] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.692384][ T7149] netlink: 1 bytes leftover after parsing attributes in process `syz.2.425'. [ 179.753375][ T7149] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 180.239176][ T7165] netlink: 'syz.0.431': attribute type 10 has an invalid length. [ 180.265664][ T7165] netlink: 'syz.0.431': attribute type 9 has an invalid length. [ 180.381563][ T5783] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8 [ 180.395702][ T7165] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.431'. [ 181.146538][ T7184] netlink: 'syz.3.436': attribute type 3 has an invalid length. [ 181.158004][ T7184] netlink: 'syz.3.436': attribute type 1 has an invalid length. [ 181.165986][ T7184] netlink: 'syz.3.436': attribute type 2 has an invalid length. [ 181.174531][ T7184] netlink: 132500 bytes leftover after parsing attributes in process `syz.3.436'. [ 181.197921][ T7179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.476302][ T7195] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.442'. [ 181.949673][ T7198] Illegal XDP return value 4294967274 on prog (id 413) dev N/A, expect packet loss! [ 182.082540][ T7202] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.439'. [ 182.115758][ T7202] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.439'. [ 182.195505][ T7191] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.439'. [ 182.633059][ T7214] syz.1.448[7214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.640172][ T7214] syz.1.448[7214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.431542][ T7223] netlink: 132500 bytes leftover after parsing attributes in process `syz.0.450'. [ 184.019638][ T7235] validate_nla: 6 callbacks suppressed [ 184.019658][ T7235] netlink: 'syz.1.454': attribute type 10 has an invalid length. [ 184.117159][ T7237] netlink: 'syz.1.454': attribute type 9 has an invalid length. [ 184.152849][ T7237] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.454'. [ 184.261470][ T7240] netlink: 'syz.0.456': attribute type 39 has an invalid length. [ 185.052863][ T7240] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.456'. [ 185.087664][ T7240] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.456'. [ 185.139303][ T7242] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.456'. [ 185.473545][ T7248] veth1_to_bond: entered allmulticast mode [ 187.484127][ T5783] Bluetooth: hci3: unexpected event 0x17 length: 151 > 6 [ 187.569015][ T7282] netlink: 'syz.2.467': attribute type 10 has an invalid length. [ 187.644117][ T7282] netlink: 'syz.2.467': attribute type 9 has an invalid length. [ 187.673790][ T7282] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.467'. [ 187.795593][ T7291] netlink: 'syz.0.469': attribute type 39 has an invalid length. [ 188.499424][ T7300] netlink: 'syz.2.472': attribute type 3 has an invalid length. [ 188.516393][ T7300] netlink: 'syz.2.472': attribute type 6 has an invalid length. [ 188.526174][ T7300] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.472'. [ 188.725443][ T7291] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.469'. [ 188.833843][ T7291] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.469'. [ 188.966034][ T7294] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.469'. [ 189.752559][ T5783] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6 [ 190.026526][ T7333] netlink: 'syz.1.482': attribute type 39 has an invalid length. [ 190.027116][ T7331] netlink: 'syz.2.481': attribute type 3 has an invalid length. [ 190.182110][ T7331] netlink: 'syz.2.481': attribute type 6 has an invalid length. [ 190.229601][ T7331] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.481'. [ 190.791992][ T7342] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.482'. [ 190.872518][ T7342] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.482'. [ 190.960355][ T7333] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.482'. [ 192.036507][ T7354] netlink: 'syz.2.489': attribute type 10 has an invalid length. [ 192.087666][ T7354] netlink: 'syz.2.489': attribute type 9 has an invalid length. [ 192.119680][ T7354] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.489'. [ 192.605098][ T7368] netlink: 'syz.2.493': attribute type 3 has an invalid length. [ 192.626299][ T7368] netlink: 189132 bytes leftover after parsing attributes in process `syz.2.493'. [ 192.752604][ T5783] Bluetooth: hci3: unexpected event 0x17 length: 151 > 6 [ 192.874188][ T7375] netlink: 'syz.3.495': attribute type 39 has an invalid length. [ 193.501619][ T7385] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.495'. [ 193.514610][ T7385] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.495'. [ 193.525712][ T7375] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.495'. [ 193.907321][ T7389] netlink: 'syz.0.501': attribute type 10 has an invalid length. [ 193.958107][ T7389] netlink: 'syz.0.501': attribute type 9 has an invalid length. [ 194.031631][ T7389] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.501'. [ 194.293292][ T7404] netlink: 'syz.3.505': attribute type 3 has an invalid length. [ 194.586318][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.601646][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.646633][ T5783] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6 [ 195.503985][ T7424] __nla_validate_parse: 1 callbacks suppressed [ 195.504008][ T7424] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.510'. [ 195.786994][ T7424] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.510'. [ 196.171295][ T7419] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.510'. [ 197.216465][ T7437] validate_nla: 1 callbacks suppressed [ 197.216485][ T7437] netlink: 'syz.0.514': attribute type 10 has an invalid length. [ 197.255651][ T7439] netlink: 'syz.2.515': attribute type 3 has an invalid length. [ 197.263701][ T7439] netlink: 189132 bytes leftover after parsing attributes in process `syz.2.515'. [ 197.297473][ T7437] netlink: 'syz.0.514': attribute type 9 has an invalid length. [ 197.323020][ T7437] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.514'. [ 197.838832][ T7456] netlink: 'syz.2.522': attribute type 39 has an invalid length. [ 197.899448][ T5783] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6 [ 198.892037][ T7466] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.522'. [ 198.943752][ T7466] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.522'. [ 198.984042][ T7456] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.522'. [ 199.299407][ T5783] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6 [ 199.689980][ T7486] netlink: 'syz.3.529': attribute type 10 has an invalid length. [ 199.740377][ T7486] netlink: 'syz.3.529': attribute type 9 has an invalid length. [ 199.761541][ T7486] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.529'. [ 200.207257][ T7500] netlink: 'syz.1.536': attribute type 39 has an invalid length. [ 201.042546][ T7508] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.536'. [ 201.067085][ T7508] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.536'. [ 201.120817][ T7500] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.536'. [ 201.182942][ T7512] FAULT_INJECTION: forcing a failure. [ 201.182942][ T7512] name failslab, interval 1, probability 0, space 0, times 0 [ 201.213681][ T7512] CPU: 1 PID: 7512 Comm: syz.0.539 Not tainted syzkaller #0 [ 201.221082][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.231205][ T7512] Call Trace: [ 201.234554][ T7512] [ 201.237549][ T7512] dump_stack_lvl+0x18c/0x250 [ 201.242313][ T7512] ? show_regs_print_info+0x20/0x20 [ 201.247596][ T7512] ? load_image+0x420/0x420 [ 201.252191][ T7512] ? __might_sleep+0xe0/0xe0 [ 201.256868][ T7512] ? __lock_acquire+0x7d80/0x7d80 [ 201.261980][ T7512] should_fail_ex+0x394/0x4c0 [ 201.266767][ T7512] should_failslab+0x9/0x20 [ 201.271357][ T7512] slab_pre_alloc_hook+0x59/0x300 [ 201.276472][ T7512] kmem_cache_alloc+0x5a/0x2c0 [ 201.281308][ T7512] ? security_file_alloc+0x34/0x120 [ 201.286596][ T7512] security_file_alloc+0x34/0x120 [ 201.291731][ T7512] init_file+0x94/0x1f0 [ 201.295971][ T7512] alloc_empty_file+0xb7/0x1d0 [ 201.300822][ T7512] alloc_file+0x5b/0x600 [ 201.305214][ T7512] alloc_file_pseudo+0x184/0x210 [ 201.310245][ T7512] ? fput+0x1a0/0x1a0 [ 201.314296][ T7512] ? __local_bh_enable_ip+0x13a/0x1c0 [ 201.319732][ T7512] ? lockdep_hardirqs_on+0x98/0x150 [ 201.325000][ T7512] ? __local_bh_enable_ip+0x13a/0x1c0 [ 201.330419][ T7512] ? _local_bh_enable+0xa0/0xa0 [ 201.335328][ T7512] sock_alloc_file+0xb7/0x280 [ 201.340061][ T7512] kcm_ioctl+0x2c4/0xfd0 [ 201.344356][ T7512] ? kcm_release+0x5a0/0x5a0 [ 201.349078][ T7512] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 201.354755][ T7512] ? tomoyo_path_number_perm+0x217/0x5e0 [ 201.360433][ T7512] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 201.365954][ T7512] sock_do_ioctl+0xfc/0x310 [ 201.370973][ T7512] ? sock_show_fdinfo+0xb0/0xb0 [ 201.375912][ T7512] sock_ioctl+0x5be/0x7e0 [ 201.380304][ T7512] ? sock_poll+0x3e0/0x3e0 [ 201.384793][ T7512] ? bpf_lsm_file_ioctl+0x9/0x10 [ 201.389776][ T7512] ? security_file_ioctl+0x80/0xa0 [ 201.394943][ T7512] ? sock_poll+0x3e0/0x3e0 [ 201.399495][ T7512] __se_sys_ioctl+0xfd/0x170 [ 201.404140][ T7512] do_syscall_64+0x55/0xb0 [ 201.408596][ T7512] ? clear_bhb_loop+0x40/0x90 [ 201.413330][ T7512] ? clear_bhb_loop+0x40/0x90 [ 201.418095][ T7512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.424072][ T7512] RIP: 0033:0x7f77d3f9e0d9 [ 201.428547][ T7512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.448214][ T7512] RSP: 002b:00007f77d4e39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.456696][ T7512] RAX: ffffffffffffffda RBX: 00007f77d4225fa0 RCX: 00007f77d3f9e0d9 [ 201.464723][ T7512] RDX: 0000200000000100 RSI: 00000000000089e2 RDI: 0000000000000004 [ 201.472736][ T7512] RBP: 00007f77d4e39090 R08: 0000000000000000 R09: 0000000000000000 [ 201.480753][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.488777][ T7512] R13: 00007f77d4226038 R14: 00007f77d4225fa0 R15: 00007ffe872bf558 [ 201.496851][ T7512] [ 201.746968][ T5783] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 202.024634][ T7528] netlink: 'syz.2.545': attribute type 10 has an invalid length. [ 202.073757][ T7528] netlink: 'syz.2.545': attribute type 9 has an invalid length. [ 202.091682][ T7528] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.545'. [ 202.669943][ T7541] netlink: 'syz.1.550': attribute type 39 has an invalid length. [ 203.851905][ T7553] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.550'. [ 203.898428][ T7553] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.550'. [ 203.956735][ T5783] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 203.972790][ T7544] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.550'. [ 205.937867][ T7582] netlink: 'syz.2.563': attribute type 39 has an invalid length. [ 207.663159][ T7586] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.563'. [ 207.702208][ T7586] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.563'. [ 207.968714][ T7582] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.563'. [ 208.371020][ T7596] netlink: 'syz.3.567': attribute type 10 has an invalid length. [ 208.398668][ T7596] netlink: 'syz.3.567': attribute type 9 has an invalid length. [ 208.422661][ T5783] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 208.438364][ T7596] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.567'. [ 208.620429][ T7601] netlink: 'syz.0.568': attribute type 10 has an invalid length. [ 208.675222][ T7601] netlink: 'syz.0.568': attribute type 9 has an invalid length. [ 208.685653][ T7601] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.568'. [ 208.855897][ T7608] FAULT_INJECTION: forcing a failure. [ 208.855897][ T7608] name failslab, interval 1, probability 0, space 0, times 0 [ 208.869173][ T7608] CPU: 0 PID: 7608 Comm: syz.1.572 Not tainted syzkaller #0 [ 208.876536][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.886644][ T7608] Call Trace: [ 208.889955][ T7608] [ 208.892977][ T7608] dump_stack_lvl+0x18c/0x250 [ 208.897702][ T7608] ? sctp_sendmsg+0x1519/0x27b0 [ 208.902605][ T7608] ? ___sys_sendmsg+0x2a6/0x360 [ 208.907507][ T7608] ? show_regs_print_info+0x20/0x20 [ 208.912766][ T7608] ? load_image+0x420/0x420 [ 208.917340][ T7608] should_fail_ex+0x394/0x4c0 [ 208.922080][ T7608] should_failslab+0x9/0x20 [ 208.926661][ T7608] slab_pre_alloc_hook+0x59/0x300 [ 208.931735][ T7608] ? sctp_add_bind_addr+0x8c/0x360 [ 208.936902][ T7608] __kmem_cache_alloc_node+0x53/0x250 [ 208.942337][ T7608] ? sctp_add_bind_addr+0x8c/0x360 [ 208.947491][ T7608] kmalloc_trace+0x2a/0xe0 [ 208.951986][ T7608] sctp_add_bind_addr+0x8c/0x360 [ 208.956982][ T7608] sctp_copy_local_addr_list+0x31b/0x4e0 [ 208.962713][ T7608] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 208.968482][ T7608] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 208.974624][ T7608] ? sctp_v4_is_any+0x35/0x60 [ 208.979359][ T7608] ? sctp_copy_one_addr+0x8c/0x350 [ 208.984542][ T7608] sctp_bind_addr_copy+0xb3/0x3c0 [ 208.989606][ T7608] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 208.995994][ T7608] sctp_connect_new_asoc+0x2f9/0x6a0 [ 209.001338][ T7608] ? __sctp_connect+0xd80/0xd80 [ 209.006251][ T7608] ? __local_bh_enable_ip+0x13a/0x1c0 [ 209.011666][ T7608] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 209.017258][ T7608] ? security_sctp_bind_connect+0x89/0xb0 [ 209.023347][ T7608] sctp_sendmsg+0x1519/0x27b0 [ 209.028119][ T7608] ? sctp_getsockopt+0xb60/0xb60 [ 209.033152][ T7608] ? aa_af_perm+0x330/0x330 [ 209.037733][ T7608] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 209.044318][ T7608] ? sock_rps_record_flow+0x19/0x3f0 [ 209.049687][ T7608] ? inet_sendmsg+0xce/0x2a0 [ 209.054319][ T7608] ? inet_send_prepare+0x250/0x250 [ 209.059489][ T7608] ____sys_sendmsg+0x61b/0x980 [ 209.064481][ T7608] ? __asan_memset+0x22/0x40 [ 209.069129][ T7608] ? __sys_sendmsg_sock+0x30/0x30 [ 209.074204][ T7608] ? __import_iovec+0x5f2/0x850 [ 209.079115][ T7608] ? import_iovec+0x73/0xa0 [ 209.083671][ T7608] ___sys_sendmsg+0x2a6/0x360 [ 209.088481][ T7608] ? __sys_sendmsg+0x2b0/0x2b0 [ 209.093330][ T7608] ? __lock_acquire+0x7d80/0x7d80 [ 209.098438][ T7608] __se_sys_sendmsg+0x1d0/0x2c0 [ 209.103331][ T7608] ? __x64_sys_sendmsg+0x80/0x80 [ 209.108327][ T7608] ? lockdep_hardirqs_on+0x98/0x150 [ 209.113578][ T7608] do_syscall_64+0x55/0xb0 [ 209.118042][ T7608] ? clear_bhb_loop+0x40/0x90 [ 209.122757][ T7608] ? clear_bhb_loop+0x40/0x90 [ 209.127501][ T7608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.133452][ T7608] RIP: 0033:0x7f6c8cf9e0d9 [ 209.137899][ T7608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.157796][ T7608] RSP: 002b:00007f6c8debe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.166265][ T7608] RAX: ffffffffffffffda RBX: 00007f6c8d225fa0 RCX: 00007f6c8cf9e0d9 [ 209.174454][ T7608] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 209.182459][ T7608] RBP: 00007f6c8debe090 R08: 0000000000000000 R09: 0000000000000000 [ 209.190467][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.198470][ T7608] R13: 00007f6c8d226038 R14: 00007f6c8d225fa0 R15: 00007ffd41b50158 [ 209.206496][ T7608] [ 209.631722][ T7615] netlink: 'syz.1.573': attribute type 39 has an invalid length. [ 210.493207][ T7627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.577'. [ 210.511516][ T7625] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.573'. [ 210.598261][ T7625] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.573'. [ 210.634118][ T7615] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.573'. [ 211.338903][ T5783] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6 [ 211.781092][ T7646] netlink: 60 bytes leftover after parsing attributes in process `syz.0.582'. [ 211.848230][ T7651] netlink: 'syz.3.584': attribute type 10 has an invalid length. [ 211.871711][ T7651] netlink: 'syz.3.584': attribute type 9 has an invalid length. [ 212.185012][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 212.191184][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 212.198850][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 212.204630][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 212.215887][ T7656] netlink: 'syz.2.586': attribute type 3 has an invalid length. [ 212.261674][ T7656] netlink: 'syz.2.586': attribute type 6 has an invalid length. [ 212.516827][ T7659] netlink: 'syz.3.587': attribute type 39 has an invalid length. [ 213.301343][ T7659] __nla_validate_parse: 2 callbacks suppressed [ 213.301457][ T7659] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.587'. [ 213.375974][ T7659] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.587'. [ 213.784930][ T7683] netlink: 'syz.2.595': attribute type 10 has an invalid length. [ 213.923243][ T7687] netlink: 'syz.0.596': attribute type 3 has an invalid length. [ 213.930998][ T7687] netlink: 'syz.0.596': attribute type 6 has an invalid length. [ 213.948140][ T7687] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.596'. [ 214.003949][ T7683] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 214.481912][ T7697] netlink: 'syz.3.600': attribute type 39 has an invalid length. [ 215.350575][ T7713] FAULT_INJECTION: forcing a failure. [ 215.350575][ T7713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.446732][ T7713] CPU: 0 PID: 7713 Comm: syz.1.606 Not tainted syzkaller #0 [ 215.454123][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.464335][ T7713] Call Trace: [ 215.467671][ T7713] [ 215.470661][ T7713] dump_stack_lvl+0x18c/0x250 [ 215.475425][ T7713] ? show_regs_print_info+0x20/0x20 [ 215.480688][ T7713] ? load_image+0x420/0x420 [ 215.485302][ T7713] ? __lock_acquire+0x7d80/0x7d80 [ 215.490386][ T7713] ? snprintf+0xe9/0x140 [ 215.494697][ T7713] should_fail_ex+0x394/0x4c0 [ 215.499445][ T7713] _copy_to_user+0x2f/0xa0 [ 215.503918][ T7713] simple_read_from_buffer+0xe7/0x150 [ 215.509344][ T7713] proc_fail_nth_read+0x1e8/0x260 [ 215.514466][ T7713] ? proc_fault_inject_write+0x360/0x360 [ 215.520347][ T7713] ? fsnotify_perm+0x271/0x5e0 [ 215.525182][ T7713] ? proc_fault_inject_write+0x360/0x360 [ 215.530889][ T7713] vfs_read+0x298/0x990 [ 215.535111][ T7713] ? kernel_read+0x1e0/0x1e0 [ 215.539773][ T7713] ? __fget_files+0x28/0x460 [ 215.544472][ T7713] ? __fget_files+0x3fc/0x460 [ 215.549218][ T7713] ? __fdget_pos+0x2a3/0x330 [ 215.553861][ T7713] ? ksys_read+0x74/0x260 [ 215.558265][ T7713] ksys_read+0x151/0x260 [ 215.562572][ T7713] ? vfs_write+0x9a0/0x9a0 [ 215.567058][ T7713] ? lockdep_hardirqs_on+0x98/0x150 [ 215.572325][ T7713] do_syscall_64+0x55/0xb0 [ 215.573914][ T7717] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.600'. [ 215.576783][ T7713] ? clear_bhb_loop+0x40/0x90 [ 215.590635][ T7713] ? clear_bhb_loop+0x40/0x90 [ 215.595378][ T7713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.601371][ T7713] RIP: 0033:0x7f6c8cf5e90e [ 215.605847][ T7713] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.625546][ T7713] RSP: 002b:00007f6c8debdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.634030][ T7713] RAX: ffffffffffffffda RBX: 00007f6c8debe6c0 RCX: 00007f6c8cf5e90e [ 215.642260][ T7713] RDX: 000000000000000f RSI: 00007f6c8debe0a0 RDI: 0000000000000004 [ 215.650284][ T7713] RBP: 00007f6c8debe090 R08: 0000000000000000 R09: 0000000000000000 [ 215.658319][ T7713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.666349][ T7713] R13: 00007f6c8d226038 R14: 00007f6c8d225fa0 R15: 00007ffd41b50158 [ 215.674405][ T7713] [ 215.715225][ T7717] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.600'. [ 215.782478][ T7697] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.600'. [ 216.055363][ T7724] netlink: 'syz.1.608': attribute type 3 has an invalid length. [ 216.199993][ T7724] netlink: 'syz.1.608': attribute type 6 has an invalid length. [ 216.277789][ T7729] netlink: 'syz.2.610': attribute type 10 has an invalid length. [ 216.286850][ T7724] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.608'. [ 216.353102][ T7729] netlink: 'syz.2.610': attribute type 9 has an invalid length. [ 216.360838][ T7729] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.610'. [ 217.088048][ T7746] netlink: 'syz.0.617': attribute type 39 has an invalid length. [ 217.154365][ T7749] vlan0: mtu greater than device maximum [ 218.121445][ T7762] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.617'. [ 218.130615][ T7762] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.617'. [ 218.144095][ T7760] netlink: 'syz.2.621': attribute type 3 has an invalid length. [ 218.561094][ T7770] __nla_validate_parse: 2 callbacks suppressed [ 218.561116][ T7770] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.624'. [ 218.615052][ T7776] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 218.797066][ T7768] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.623'. [ 219.510197][ T7790] validate_nla: 3 callbacks suppressed [ 219.510225][ T7790] netlink: 'syz.2.632': attribute type 39 has an invalid length. [ 220.024407][ T5088] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 220.076042][ T7795] netlink: 'syz.1.633': attribute type 3 has an invalid length. [ 220.496758][ T7795] netlink: 'syz.1.633': attribute type 6 has an invalid length. [ 220.543786][ T7795] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.633'. [ 220.652001][ T7797] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.632'. [ 220.704988][ T7797] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.632'. [ 220.862000][ T7790] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.632'. [ 221.074031][ T7811] netlink: 'syz.0.646': attribute type 39 has an invalid length. [ 221.372473][ T7817] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.639'. [ 221.984105][ T7814] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.646'. [ 221.994471][ T7814] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.646'. [ 222.034229][ T7811] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.646'. [ 223.667488][ T5088] Bluetooth: hci2: unexpected event 0x14 length: 151 > 6 [ 223.949887][ T7850] netlink: 'syz.1.651': attribute type 10 has an invalid length. [ 224.001002][ T7850] netlink: 'syz.1.651': attribute type 9 has an invalid length. [ 224.031533][ T7850] __nla_validate_parse: 1 callbacks suppressed [ 224.031550][ T7850] netlink: 179280 bytes leftover after parsing attributes in process `syz.1.651'. [ 224.185461][ T7856] netlink: 'syz.3.654': attribute type 39 has an invalid length. [ 224.515053][ T7861] netlink: 22 bytes leftover after parsing attributes in process `syz.1.655'. [ 224.702422][ T7862] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.654'. [ 224.731364][ T7862] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.654'. [ 224.760381][ T7856] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.654'. [ 225.000031][ T7872] FAULT_INJECTION: forcing a failure. [ 225.000031][ T7872] name failslab, interval 1, probability 0, space 0, times 0 [ 225.049478][ T7872] CPU: 0 PID: 7872 Comm: syz.1.659 Not tainted syzkaller #0 [ 225.056855][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.066961][ T7872] Call Trace: [ 225.070286][ T7872] [ 225.073268][ T7872] dump_stack_lvl+0x18c/0x250 [ 225.078010][ T7872] ? show_regs_print_info+0x20/0x20 [ 225.083270][ T7872] ? load_image+0x420/0x420 [ 225.087841][ T7872] ? __might_sleep+0xe0/0xe0 [ 225.092529][ T7872] ? __lock_acquire+0x7d80/0x7d80 [ 225.097635][ T7872] should_fail_ex+0x394/0x4c0 [ 225.102473][ T7872] should_failslab+0x9/0x20 [ 225.107041][ T7872] slab_pre_alloc_hook+0x59/0x300 [ 225.112133][ T7872] ? kvmalloc_node+0x70/0x180 [ 225.116867][ T7872] ? kvmalloc_node+0x70/0x180 [ 225.121606][ T7872] __kmem_cache_alloc_node+0x53/0x250 [ 225.127035][ T7872] ? kvmalloc_node+0x70/0x180 [ 225.131757][ T7872] __kmalloc_node+0xa6/0x240 [ 225.136386][ T7872] kvmalloc_node+0x70/0x180 [ 225.140932][ T7872] alloc_netdev_mqs+0xa5a/0x1040 [ 225.145917][ T7872] ? IP6_ECN_decapsulate+0x1830/0x1830 [ 225.151434][ T7872] ip6_tnl_locate+0x684/0x830 [ 225.156173][ T7872] ? ip6_tnl_parm_from_user+0x340/0x340 [ 225.161780][ T7872] ? __might_fault+0xaa/0x120 [ 225.166582][ T7872] ? __might_fault+0xc6/0x120 [ 225.171478][ T7872] ? __might_fault+0xaa/0x120 [ 225.176188][ T7872] ? ip6_tnl_siocdevprivate+0x5ed/0xab0 [ 225.181769][ T7872] ip6_tnl_siocdevprivate+0x61b/0xab0 [ 225.187446][ T7872] ? ip6_tnl_start_xmit+0x1230/0x1230 [ 225.192856][ T7872] ? dev_ioctl+0x83c/0x1140 [ 225.197402][ T7872] ? __lock_acquire+0x7d80/0x7d80 [ 225.202473][ T7872] ? dev_ifsioc+0x957/0xc40 [ 225.207016][ T7872] dev_ioctl+0x84c/0x1140 [ 225.211394][ T7872] sock_ioctl+0x74c/0x7e0 [ 225.215759][ T7872] ? sock_poll+0x3e0/0x3e0 [ 225.220216][ T7872] ? bpf_lsm_file_ioctl+0x9/0x10 [ 225.225181][ T7872] ? security_file_ioctl+0x80/0xa0 [ 225.230347][ T7872] ? sock_poll+0x3e0/0x3e0 [ 225.234808][ T7872] __se_sys_ioctl+0xfd/0x170 [ 225.239458][ T7872] do_syscall_64+0x55/0xb0 [ 225.243913][ T7872] ? clear_bhb_loop+0x40/0x90 [ 225.248655][ T7872] ? clear_bhb_loop+0x40/0x90 [ 225.253364][ T7872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.259299][ T7872] RIP: 0033:0x7f6c8cf9e0d9 [ 225.263744][ T7872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.283410][ T7872] RSP: 002b:00007f6c8debe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.291858][ T7872] RAX: ffffffffffffffda RBX: 00007f6c8d225fa0 RCX: 00007f6c8cf9e0d9 [ 225.299858][ T7872] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 225.307901][ T7872] RBP: 00007f6c8debe090 R08: 0000000000000000 R09: 0000000000000000 [ 225.315931][ T7872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.323988][ T7872] R13: 00007f6c8d226038 R14: 00007f6c8d225fa0 R15: 00007ffd41b50158 [ 225.332027][ T7872] [ 226.212970][ T7890] netlink: 'syz.2.664': attribute type 10 has an invalid length. [ 226.305460][ T7890] netlink: 'syz.2.664': attribute type 9 has an invalid length. [ 226.349689][ T7890] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.664'. [ 226.367282][ T7894] FAULT_INJECTION: forcing a failure. [ 226.367282][ T7894] name failslab, interval 1, probability 0, space 0, times 0 [ 226.399398][ T7894] CPU: 0 PID: 7894 Comm: syz.1.666 Not tainted syzkaller #0 [ 226.406782][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.416890][ T7894] Call Trace: [ 226.420223][ T7894] [ 226.423297][ T7894] dump_stack_lvl+0x18c/0x250 [ 226.428044][ T7894] ? show_regs_print_info+0x20/0x20 [ 226.433360][ T7894] ? load_image+0x420/0x420 [ 226.437944][ T7894] ? __might_sleep+0xe0/0xe0 [ 226.442570][ T7894] ? __lock_acquire+0x7d80/0x7d80 [ 226.442611][ T7894] should_fail_ex+0x394/0x4c0 [ 226.442645][ T7894] should_failslab+0x9/0x20 [ 226.442677][ T7894] slab_pre_alloc_hook+0x59/0x300 [ 226.442712][ T7894] ? __request_module+0x2ed/0x600 [ 226.442735][ T7894] ? __request_module+0x2ed/0x600 [ 226.442757][ T7894] __kmem_cache_alloc_node+0x53/0x250 [ 226.442796][ T7894] ? __request_module+0x2ed/0x600 [ 226.442819][ T7894] __kmalloc_node_track_caller+0xa4/0x230 [ 226.442857][ T7894] kstrdup+0x3b/0x80 [ 226.442888][ T7894] __request_module+0x2ed/0x600 [ 226.442920][ T7894] ? module_enforce_rwx_sections+0x150/0x150 [ 226.442960][ T7894] ? __lock_acquire+0x7d80/0x7d80 [ 226.442983][ T7894] ? bpf_lsm_inode_alloc_security+0x9/0x10 [ 226.443017][ T7894] pppox_create+0x9d/0x1a0 [ 226.443053][ T7894] __sock_create+0x49e/0x940 [ 226.443086][ T7894] __sys_socketpair+0x1c1/0x550 [ 226.443118][ T7894] __x64_sys_socketpair+0x9b/0xb0 [ 226.443143][ T7894] do_syscall_64+0x55/0xb0 [ 226.443166][ T7894] ? clear_bhb_loop+0x40/0x90 [ 226.443190][ T7894] ? clear_bhb_loop+0x40/0x90 [ 226.443216][ T7894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.443239][ T7894] RIP: 0033:0x7f6c8cf9e0d9 [ 226.443259][ T7894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.443277][ T7894] RSP: 002b:00007f6c8debe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 226.443301][ T7894] RAX: ffffffffffffffda RBX: 00007f6c8d225fa0 RCX: 00007f6c8cf9e0d9 [ 226.443316][ T7894] RDX: 0000000000000003 RSI: 0000000000000800 RDI: 0000000000000018 [ 226.443330][ T7894] RBP: 00007f6c8debe090 R08: 0000000000000000 R09: 0000000000000000 [ 226.443342][ T7894] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 226.443355][ T7894] R13: 00007f6c8d226038 R14: 00007f6c8d225fa0 R15: 00007ffd41b50158 [ 226.443386][ T7894] [ 226.706108][ T7896] netlink: 22 bytes leftover after parsing attributes in process `syz.0.665'. [ 226.767938][ T7901] netlink: 'syz.3.668': attribute type 39 has an invalid length. [ 227.342618][ T7906] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.668'. [ 227.385960][ T7906] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.668'. [ 227.471417][ T7901] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.668'. [ 228.463001][ T7926] netlink: 'syz.2.677': attribute type 10 has an invalid length. [ 228.520401][ T7926] netlink: 'syz.2.677': attribute type 9 has an invalid length. [ 228.691894][ T7933] netlink: 'syz.1.680': attribute type 10 has an invalid length. [ 228.812705][ T7933] netlink: 'syz.1.680': attribute type 9 has an invalid length. [ 229.186916][ T7941] netlink: 'syz.3.683': attribute type 39 has an invalid length. [ 229.790309][ T7949] __nla_validate_parse: 3 callbacks suppressed [ 229.790326][ T7949] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.683'. [ 229.826602][ T7949] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.683'. [ 229.838927][ T7941] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.683'. [ 231.500828][ T7983] netlink: 'syz.2.694': attribute type 9 has an invalid length. [ 231.531354][ T7983] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.694'. [ 231.560408][ T7979] netlink: 'syz.2.694': attribute type 10 has an invalid length. [ 232.004541][ T7991] netlink: 'syz.0.697': attribute type 39 has an invalid length. [ 232.652292][ T7994] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.697'. [ 232.688873][ T7994] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.697'. [ 232.731322][ T7991] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.697'. [ 234.419806][ T8025] netlink: 'syz.0.709': attribute type 39 has an invalid length. [ 234.445663][ T8023] netlink: 'syz.2.710': attribute type 21 has an invalid length. [ 235.062792][ T8032] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.709'. [ 235.142436][ T8032] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.709'. [ 235.213952][ T8025] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.709'. [ 236.950776][ T8068] netlink: 'syz.0.725': attribute type 3 has an invalid length. [ 236.989066][ T8068] netlink: 'syz.0.725': attribute type 6 has an invalid length. [ 237.016083][ T8068] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.725'. [ 237.910240][ T8078] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.724'. [ 239.369793][ T8072] netlink: 'syz.1.724': attribute type 39 has an invalid length. [ 239.387546][ T8078] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.724'. [ 240.395746][ T8101] netlink: 'syz.2.735': attribute type 10 has an invalid length. [ 240.420450][ T8106] netlink: 'syz.3.736': attribute type 39 has an invalid length. [ 240.435440][ T8101] netlink: 'syz.2.735': attribute type 9 has an invalid length. [ 240.457056][ T8101] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.735'. [ 240.556420][ T8104] netlink: 'syz.1.734': attribute type 10 has an invalid length. [ 240.686689][ T8108] netlink: 'syz.1.734': attribute type 9 has an invalid length. [ 240.745067][ T8108] netlink: 179280 bytes leftover after parsing attributes in process `syz.1.734'. [ 241.093325][ T8110] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.736'. [ 241.152998][ T8110] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.736'. [ 241.213691][ T8106] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.736'. [ 241.843314][ T8130] netlink: 60 bytes leftover after parsing attributes in process `syz.0.744'. [ 242.325124][ T8142] netlink: 'syz.0.747': attribute type 10 has an invalid length. [ 242.438428][ T8142] netlink: 'syz.0.747': attribute type 9 has an invalid length. [ 242.492085][ T8142] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.747'. [ 242.543859][ T8145] netlink: 'syz.1.748': attribute type 27 has an invalid length. [ 242.552687][ T8145] netlink: 164 bytes leftover after parsing attributes in process `syz.1.748'. [ 242.659065][ T8149] netlink: 'syz.2.749': attribute type 39 has an invalid length. [ 243.213808][ T8150] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.749'. [ 243.241551][ T8150] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.749'. [ 244.062250][ T8172] netlink: 'syz.3.758': attribute type 10 has an invalid length. [ 244.084315][ T8172] netlink: 'syz.3.758': attribute type 9 has an invalid length. [ 245.401587][ T8195] netlink: 'syz.2.765': attribute type 39 has an invalid length. [ 245.844537][ T8201] __nla_validate_parse: 2 callbacks suppressed [ 245.844592][ T8201] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.767'. [ 245.992350][ T8203] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.765'. [ 246.070476][ T8203] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.765'. [ 246.141216][ T8195] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.765'. [ 246.382115][ T8210] netlink: 'syz.1.769': attribute type 10 has an invalid length. [ 246.434983][ T8210] netlink: 'syz.1.769': attribute type 9 has an invalid length. [ 246.460088][ T8210] netlink: 179280 bytes leftover after parsing attributes in process `syz.1.769'. [ 247.020697][ T8225] netlink: 60 bytes leftover after parsing attributes in process `syz.0.774'. [ 247.060988][ T8225] netlink: 60 bytes leftover after parsing attributes in process `syz.0.774'. [ 247.107752][ T8224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.774'. [ 247.117600][ T8226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.125327][ T8226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.157428][ T8226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.171892][ T8226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.867238][ T8239] netlink: 'syz.1.778': attribute type 39 has an invalid length. [ 248.754958][ T8251] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.778'. [ 248.790911][ T8251] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.778'. [ 249.207330][ T8261] netlink: 'syz.2.785': attribute type 3 has an invalid length. [ 249.219203][ T8259] netlink: 'syz.1.784': attribute type 10 has an invalid length. [ 249.232188][ T8261] netlink: 'syz.2.785': attribute type 6 has an invalid length. [ 249.250153][ T8259] netlink: 'syz.1.784': attribute type 9 has an invalid length. [ 249.417735][ T8264] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 249.466788][ T8264] netlink: 'syz.3.787': attribute type 9 has an invalid length. [ 249.923966][ T8277] netlink: 'syz.1.792': attribute type 39 has an invalid length. [ 251.189482][ T8296] netlink: 'syz.1.796': attribute type 3 has an invalid length. [ 251.250248][ T8296] netlink: 'syz.1.796': attribute type 6 has an invalid length. [ 251.295295][ T8296] __nla_validate_parse: 7 callbacks suppressed [ 251.295313][ T8296] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.796'. [ 251.373843][ T8301] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.797'. [ 251.620615][ T8307] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.799'. [ 252.819963][ T8323] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.804'. [ 252.879270][ T8323] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.804'. [ 253.014166][ T8319] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.804'. [ 253.300736][ T8336] validate_nla: 5 callbacks suppressed [ 253.300781][ T8336] netlink: 'syz.3.808': attribute type 3 has an invalid length. [ 253.404324][ T8336] netlink: 'syz.3.808': attribute type 6 has an invalid length. [ 253.441951][ T8336] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.808'. [ 253.571108][ T8343] netlink: 'syz.1.811': attribute type 10 has an invalid length. [ 253.625133][ T8343] netlink: 'syz.1.811': attribute type 9 has an invalid length. [ 253.654673][ T8343] netlink: 179280 bytes leftover after parsing attributes in process `syz.1.811'. [ 253.767580][ T8350] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 253.822975][ T8347] netlink: 'syz.2.820': attribute type 3 has an invalid length. [ 253.841440][ T8347] netlink: 'syz.2.820': attribute type 6 has an invalid length. [ 253.866613][ T8347] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.820'. [ 253.902234][ T8350] netlink: 'syz.3.812': attribute type 9 has an invalid length. [ 253.921423][ T8350] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.812'. [ 254.070245][ T8354] netlink: 'syz.0.813': attribute type 10 has an invalid length. [ 254.856364][ T8366] netlink: 'syz.3.816': attribute type 39 has an invalid length. [ 256.027300][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.034027][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.101127][ T8389] FAULT_INJECTION: forcing a failure. [ 256.101127][ T8389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.115756][ T8389] CPU: 0 PID: 8389 Comm: syz.3.825 Not tainted syzkaller #0 [ 256.123131][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.133252][ T8389] Call Trace: [ 256.136676][ T8389] [ 256.139759][ T8389] dump_stack_lvl+0x18c/0x250 [ 256.144655][ T8389] ? show_regs_print_info+0x20/0x20 [ 256.149999][ T8389] ? load_image+0x420/0x420 [ 256.154615][ T8389] ? __lock_acquire+0x7d80/0x7d80 [ 256.159773][ T8389] should_fail_ex+0x394/0x4c0 [ 256.164568][ T8389] prepare_alloc_pages+0x1e1/0x5b0 [ 256.169809][ T8389] __alloc_pages+0x134/0x460 [ 256.174476][ T8389] ? zone_statistics+0x170/0x170 [ 256.179485][ T8389] ? mt_find+0x169/0x640 [ 256.183793][ T8389] ? alloc_pages+0x4e1/0x740 [ 256.188504][ T8389] __pud_alloc+0x3a/0x200 [ 256.192899][ T8389] handle_mm_fault+0x346d/0x4a50 [ 256.197995][ T8389] ? handle_mm_fault+0xe6/0x4a50 [ 256.203067][ T8389] ? numa_migrate_prep+0x350/0x350 [ 256.208263][ T8389] ? lock_chain_count+0x20/0x20 [ 256.213188][ T8389] ? perf_trace_lock+0xfc/0x3b0 [ 256.218137][ T8389] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 256.223490][ T8389] do_user_addr_fault+0x736/0x12d0 [ 256.228726][ T8389] exc_page_fault+0x64/0x100 [ 256.233402][ T8389] asm_exc_page_fault+0x26/0x30 [ 256.238485][ T8389] RIP: 0010:__put_user_4+0x11/0x20 [ 256.243767][ T8389] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 256.264035][ T8389] RSP: 0018:ffffc90004d5fe80 EFLAGS: 00050206 [ 256.270363][ T8389] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000300 [ 256.278398][ T8389] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0ca0 [ 256.286433][ T8389] RBP: 0000000000000004 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 256.294466][ T8389] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: 0000000000000000 [ 256.302492][ T8389] R13: 0000200000000300 R14: 000000000000001a R15: 0000000000000001 [ 256.310728][ T8389] __sys_socketpair+0xb8/0x550 [ 256.315866][ T8389] __x64_sys_socketpair+0x9b/0xb0 [ 256.320967][ T8389] do_syscall_64+0x55/0xb0 [ 256.325453][ T8389] ? clear_bhb_loop+0x40/0x90 [ 256.330202][ T8389] ? clear_bhb_loop+0x40/0x90 [ 256.335128][ T8389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.341139][ T8389] RIP: 0033:0x7f2ce9b9e0d9 [ 256.345618][ T8389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.365371][ T8389] RSP: 002b:00007f2ce7df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 256.373897][ T8389] RAX: ffffffffffffffda RBX: 00007f2ce9e25fa0 RCX: 00007f2ce9b9e0d9 [ 256.381932][ T8389] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 000000000000001a [ 256.389970][ T8389] RBP: 00007f2ce7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 256.398210][ T8389] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 256.406244][ T8389] R13: 00007f2ce9e26038 R14: 00007f2ce9e25fa0 R15: 00007ffce1c52f68 [ 256.414340][ T8389] [ 256.613683][ T5088] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 257.039954][ T8406] __nla_validate_parse: 5 callbacks suppressed [ 257.039973][ T8406] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.833'. [ 257.326452][ T8410] FAULT_INJECTION: forcing a failure. [ 257.326452][ T8410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.349122][ T8410] CPU: 1 PID: 8410 Comm: syz.3.834 Not tainted syzkaller #0 [ 257.356549][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.366751][ T8410] Call Trace: [ 257.370077][ T8410] [ 257.373094][ T8410] dump_stack_lvl+0x18c/0x250 [ 257.377842][ T8410] ? show_regs_print_info+0x20/0x20 [ 257.383129][ T8410] ? load_image+0x420/0x420 [ 257.387712][ T8410] ? __might_fault+0xaa/0x120 [ 257.392457][ T8410] ? __lock_acquire+0x7d80/0x7d80 [ 257.397575][ T8410] should_fail_ex+0x394/0x4c0 [ 257.402347][ T8410] _copy_from_iter+0x1cd/0x1290 [ 257.407277][ T8410] ? rcu_is_watching+0x15/0xb0 [ 257.412105][ T8410] ? copyout_mc+0x70/0x70 [ 257.416494][ T8410] ? __virt_addr_valid+0x10c/0x380 [ 257.421657][ T8410] ? __virt_addr_valid+0x10c/0x380 [ 257.426844][ T8410] ? __virt_addr_valid+0x10c/0x380 [ 257.431996][ T8410] ? __check_object_size+0x4fc/0xa40 [ 257.437318][ T8410] netlink_sendmsg+0x76b/0xbf0 [ 257.442226][ T8410] ? netlink_getsockopt+0x590/0x590 [ 257.447450][ T8410] ? apparmor_socket_sendmsg+0x8e/0x330 [ 257.453060][ T8410] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 257.458381][ T8410] ? security_socket_sendmsg+0x80/0xa0 [ 257.463882][ T8410] ? netlink_getsockopt+0x590/0x590 [ 257.469106][ T8410] ____sys_sendmsg+0x61b/0x980 [ 257.473907][ T8410] ? __asan_memset+0x22/0x40 [ 257.478564][ T8410] ? __sys_sendmsg_sock+0x30/0x30 [ 257.483645][ T8410] ? __import_iovec+0x5f2/0x850 [ 257.488543][ T8410] ? import_iovec+0x73/0xa0 [ 257.493107][ T8410] ___sys_sendmsg+0x2a6/0x360 [ 257.497835][ T8410] ? get_pid_task+0x20/0x1e0 [ 257.502496][ T8410] ? __sys_sendmsg+0x2b0/0x2b0 [ 257.507311][ T8410] ? __lock_acquire+0x7d80/0x7d80 [ 257.512385][ T8410] __se_sys_sendmsg+0x1d0/0x2c0 [ 257.517483][ T8410] ? __x64_sys_sendmsg+0x80/0x80 [ 257.522557][ T8410] ? lockdep_hardirqs_on+0x98/0x150 [ 257.527837][ T8410] do_syscall_64+0x55/0xb0 [ 257.532895][ T8410] ? clear_bhb_loop+0x40/0x90 [ 257.537629][ T8410] ? clear_bhb_loop+0x40/0x90 [ 257.542373][ T8410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.548309][ T8410] RIP: 0033:0x7f2ce9b9e0d9 [ 257.552762][ T8410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.572664][ T8410] RSP: 002b:00007f2ce7dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.581124][ T8410] RAX: ffffffffffffffda RBX: 00007f2ce9e26090 RCX: 00007f2ce9b9e0d9 [ 257.589141][ T8410] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 257.597157][ T8410] RBP: 00007f2ce7dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 257.605250][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.613371][ T8410] R13: 00007f2ce9e26128 R14: 00007f2ce9e26090 R15: 00007ffce1c52f68 [ 257.621514][ T8410] [ 257.715678][ T8419] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.836'. [ 257.726435][ T8414] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.832'. [ 257.819750][ T8414] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.832'. [ 257.879535][ T8403] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.832'. [ 258.189471][ T8426] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.838'. [ 258.560275][ T8441] validate_nla: 10 callbacks suppressed [ 258.560298][ T8441] netlink: 'syz.0.844': attribute type 3 has an invalid length. [ 258.578669][ T8441] netlink: 'syz.0.844': attribute type 6 has an invalid length. [ 258.602525][ T8441] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.844'. [ 259.087836][ T8452] netlink: 'syz.3.848': attribute type 39 has an invalid length. [ 259.697470][ T8462] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.848'. [ 259.775763][ T8462] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.848'. [ 259.835634][ T8452] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.848'. [ 260.037447][ T8469] netlink: 'syz.3.854': attribute type 3 has an invalid length. [ 260.064893][ T8469] netlink: 'syz.3.854': attribute type 6 has an invalid length. [ 260.527467][ T8484] netlink: 'syz.1.860': attribute type 10 has an invalid length. [ 260.595356][ T8484] netlink: 'syz.1.860': attribute type 9 has an invalid length. [ 260.619496][ T8487] netlink: 'syz.3.862': attribute type 10 has an invalid length. [ 260.729193][ T8487] netlink: 'syz.3.862': attribute type 9 has an invalid length. [ 260.892771][ T8492] netlink: 'syz.2.863': attribute type 39 has an invalid length. [ 262.371072][ T8516] __nla_validate_parse: 7 callbacks suppressed [ 262.371092][ T8516] netlink: 179280 bytes leftover after parsing attributes in process `syz.1.872'. [ 263.175270][ T8535] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.885'. [ 263.192912][ T8532] FAULT_INJECTION: forcing a failure. [ 263.192912][ T8532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.207561][ T8532] CPU: 0 PID: 8532 Comm: syz.1.878 Not tainted syzkaller #0 [ 263.214916][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.225019][ T8532] Call Trace: [ 263.228363][ T8532] [ 263.231338][ T8532] dump_stack_lvl+0x18c/0x250 [ 263.236070][ T8532] ? show_regs_print_info+0x20/0x20 [ 263.241308][ T8532] ? load_image+0x420/0x420 [ 263.245943][ T8532] ? __lock_acquire+0x7d80/0x7d80 [ 263.251015][ T8532] ? snprintf+0xe9/0x140 [ 263.255322][ T8532] should_fail_ex+0x394/0x4c0 [ 263.260042][ T8532] _copy_to_user+0x2f/0xa0 [ 263.264496][ T8532] simple_read_from_buffer+0xe7/0x150 [ 263.269933][ T8532] proc_fail_nth_read+0x1e8/0x260 [ 263.275017][ T8532] ? proc_fault_inject_write+0x360/0x360 [ 263.280690][ T8532] ? fsnotify_perm+0x271/0x5e0 [ 263.285490][ T8532] ? proc_fault_inject_write+0x360/0x360 [ 263.291175][ T8532] vfs_read+0x298/0x990 [ 263.295388][ T8532] ? kernel_read+0x1e0/0x1e0 [ 263.300048][ T8532] ? __fget_files+0x28/0x460 [ 263.304674][ T8532] ? __fget_files+0x3fc/0x460 [ 263.309408][ T8532] ? __fdget_pos+0x2a3/0x330 [ 263.314032][ T8532] ? ksys_read+0x74/0x260 [ 263.318398][ T8532] ksys_read+0x151/0x260 [ 263.322709][ T8532] ? vfs_write+0x9a0/0x9a0 [ 263.327173][ T8532] ? lockdep_hardirqs_on+0x98/0x150 [ 263.332427][ T8532] do_syscall_64+0x55/0xb0 [ 263.336886][ T8532] ? clear_bhb_loop+0x40/0x90 [ 263.341771][ T8532] ? clear_bhb_loop+0x40/0x90 [ 263.346480][ T8532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.352412][ T8532] RIP: 0033:0x7f6c8cf5e90e [ 263.356864][ T8532] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.376594][ T8532] RSP: 002b:00007f6c8debdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.385039][ T8532] RAX: ffffffffffffffda RBX: 00007f6c8debe6c0 RCX: 00007f6c8cf5e90e [ 263.393040][ T8532] RDX: 000000000000000f RSI: 00007f6c8debe0a0 RDI: 0000000000000007 [ 263.401036][ T8532] RBP: 00007f6c8debe090 R08: 0000000000000000 R09: 0000000000000000 [ 263.409052][ T8532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.417050][ T8532] R13: 00007f6c8d226038 R14: 00007f6c8d225fa0 R15: 00007ffd41b50158 [ 263.425066][ T8532] [ 263.431595][ T8531] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.876'. [ 263.445190][ T8531] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.876'. [ 263.490816][ T8528] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.876'. [ 263.697111][ T8540] validate_nla: 5 callbacks suppressed [ 263.697128][ T8540] netlink: 'syz.0.888': attribute type 39 has an invalid length. [ 264.474906][ T8550] netlink: 'syz.2.883': attribute type 3 has an invalid length. [ 264.521824][ T8550] netlink: 'syz.2.883': attribute type 6 has an invalid length. [ 264.529733][ T8550] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.883'. [ 264.576803][ T8552] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.888'. [ 264.601354][ T8552] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.888'. [ 264.613203][ T8540] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.888'. [ 264.964240][ T8563] netlink: 'syz.2.889': attribute type 3 has an invalid length. [ 265.009485][ T8563] netlink: 'syz.2.889': attribute type 6 has an invalid length. [ 265.027631][ T8563] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.889'. [ 265.562770][ T8580] netlink: 'syz.2.896': attribute type 39 has an invalid length. [ 265.955370][ T8584] netlink: 'syz.1.894': attribute type 33 has an invalid length. [ 266.606698][ T8601] netlink: 'syz.0.901': attribute type 3 has an invalid length. [ 266.641958][ T8601] netlink: 'syz.0.901': attribute type 6 has an invalid length. [ 267.225207][ T5088] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 267.580790][ T8630] netlink: 'syz.0.913': attribute type 3 has an invalid length. [ 267.666620][ T8630] __nla_validate_parse: 6 callbacks suppressed [ 267.666638][ T8630] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.913'. [ 267.922375][ T8635] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.915'. [ 268.690889][ T5088] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 269.065412][ T5088] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6 [ 270.028625][ T5088] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 270.299869][ T8689] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.934'. [ 271.223945][ T5088] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 271.427402][ T8712] validate_nla: 3 callbacks suppressed [ 271.427440][ T8712] netlink: 'syz.3.940': attribute type 33 has an invalid length. [ 271.689244][ T8712] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.940'. [ 273.064396][ T8726] FAULT_INJECTION: forcing a failure. [ 273.064396][ T8726] name failslab, interval 1, probability 0, space 0, times 0 [ 273.134555][ T8726] CPU: 1 PID: 8726 Comm: syz.0.948 Not tainted syzkaller #0 [ 273.141931][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.152076][ T8726] Call Trace: [ 273.155406][ T8726] [ 273.158393][ T8726] dump_stack_lvl+0x18c/0x250 [ 273.163143][ T8726] ? show_regs_print_info+0x20/0x20 [ 273.168406][ T8726] ? load_image+0x420/0x420 [ 273.173082][ T8726] should_fail_ex+0x394/0x4c0 [ 273.177839][ T8726] should_failslab+0x9/0x20 [ 273.182438][ T8726] slab_pre_alloc_hook+0x59/0x300 [ 273.187541][ T8726] kmem_cache_alloc+0x5a/0x2c0 [ 273.192369][ T8726] ? skb_clone+0x1eb/0x370 [ 273.196883][ T8726] skb_clone+0x1eb/0x370 [ 273.201189][ T8726] __netlink_deliver_tap+0x411/0x7f0 [ 273.206539][ T8726] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.211814][ T8726] netlink_deliver_tap+0x19c/0x1b0 [ 273.216984][ T8726] netlink_dump+0x95b/0xec0 [ 273.221551][ T8726] ? netlink_lookup+0x200/0x200 [ 273.226472][ T8726] ? __kasan_kmalloc+0x8f/0xa0 [ 273.231329][ T8726] ? __inet_diag_dump_start+0x886/0x9f0 [ 273.237065][ T8726] ? netlink_lookup+0x30/0x200 [ 273.241988][ T8726] __netlink_dump_start+0x57c/0x7a0 [ 273.247277][ T8726] inet_diag_rcv_msg_compat+0x215/0x440 [ 273.252896][ T8726] ? __inet_diag_dump+0x380/0x380 [ 273.257988][ T8726] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 273.263194][ T8726] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 273.268996][ T8726] ? inet_diag_dump_start_compat+0x20/0x20 [ 273.274861][ T8726] ? inet_diag_dump+0x50/0x50 [ 273.279610][ T8726] ? __inet_diag_dump+0x380/0x380 [ 273.284694][ T8726] sock_diag_rcv_msg+0x3d3/0x5f0 [ 273.289726][ T8726] netlink_rcv_skb+0x235/0x4c0 [ 273.294544][ T8726] ? sock_diag_bind+0xb0/0xb0 [ 273.299284][ T8726] ? netlink_ack+0x1160/0x1160 [ 273.304112][ T8726] ? __lock_acquire+0x7d80/0x7d80 [ 273.309207][ T8726] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.314469][ T8726] sock_diag_rcv+0x2a/0x40 [ 273.318945][ T8726] netlink_unicast+0x7b1/0x930 [ 273.323876][ T8726] netlink_sendmsg+0x8d0/0xbf0 [ 273.328711][ T8726] ? netlink_getsockopt+0x590/0x590 [ 273.333971][ T8726] ? apparmor_socket_sendmsg+0x8e/0x330 [ 273.339590][ T8726] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 273.344940][ T8726] ? security_socket_sendmsg+0x80/0xa0 [ 273.350453][ T8726] ? netlink_getsockopt+0x590/0x590 [ 273.355721][ T8726] ____sys_sendmsg+0x61b/0x980 [ 273.360555][ T8726] ? __asan_memset+0x22/0x40 [ 273.365215][ T8726] ? __sys_sendmsg_sock+0x30/0x30 [ 273.370307][ T8726] ? __import_iovec+0x5f2/0x850 [ 273.375243][ T8726] ? import_iovec+0x73/0xa0 [ 273.379847][ T8726] ___sys_sendmsg+0x2a6/0x360 [ 273.384586][ T8726] ? get_pid_task+0x20/0x1e0 [ 273.389238][ T8726] ? __sys_sendmsg+0x2b0/0x2b0 [ 273.395132][ T8726] ? __lock_acquire+0x7d80/0x7d80 [ 273.400242][ T8726] __se_sys_sendmsg+0x1d0/0x2c0 [ 273.405248][ T8726] ? __x64_sys_sendmsg+0x80/0x80 [ 273.410296][ T8726] ? lockdep_hardirqs_on+0x98/0x150 [ 273.415568][ T8726] do_syscall_64+0x55/0xb0 [ 273.420127][ T8726] ? clear_bhb_loop+0x40/0x90 [ 273.424864][ T8726] ? clear_bhb_loop+0x40/0x90 [ 273.429599][ T8726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.435547][ T8726] RIP: 0033:0x7f77d3f9e0d9 [ 273.440053][ T8726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.459718][ T8726] RSP: 002b:00007f77d4e39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.468284][ T8726] RAX: ffffffffffffffda RBX: 00007f77d4225fa0 RCX: 00007f77d3f9e0d9 [ 273.476313][ T8726] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 273.484345][ T8726] RBP: 00007f77d4e39090 R08: 0000000000000000 R09: 0000000000000000 [ 273.492391][ T8726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.500424][ T8726] R13: 00007f77d4226038 R14: 00007f77d4225fa0 R15: 00007ffe872bf558 [ 273.508483][ T8726] [ 273.544761][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 273.679617][ T8734] netlink: 'syz.1.953': attribute type 39 has an invalid length. [ 274.230005][ T51] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 274.575815][ T8746] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.953'. [ 274.633484][ T8746] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.953'. [ 274.758502][ T8734] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.953'. [ 274.812693][ T8748] netlink: 'syz.2.957': attribute type 10 has an invalid length. [ 274.838066][ T8748] netlink: 'syz.2.957': attribute type 9 has an invalid length. [ 274.875925][ T8748] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.957'. [ 275.583679][ T8763] netlink: 'syz.2.964': attribute type 3 has an invalid length. [ 275.630815][ T8763] netlink: 189132 bytes leftover after parsing attributes in process `syz.2.964'. [ 276.042132][ T51] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 276.108452][ T8770] netlink: 'syz.3.969': attribute type 39 has an invalid length. [ 276.261871][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 276.303076][ T8772] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.968'. [ 276.455922][ T8771] delete_channel: no stack [ 276.720222][ T8781] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.969'. [ 276.761596][ T8781] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.969'. [ 276.779714][ T8770] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.969'. [ 276.916841][ T8787] netlink: 'syz.2.972': attribute type 10 has an invalid length. [ 276.934001][ T8787] netlink: 'syz.2.972': attribute type 9 has an invalid length. [ 276.952731][ T8787] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.972'. [ 277.457391][ T8797] netlink: 'syz.1.976': attribute type 3 has an invalid length. [ 277.978796][ T8815] netlink: 'syz.2.982': attribute type 39 has an invalid length. [ 278.032888][ T8818] netlink: 'syz.1.984': attribute type 10 has an invalid length. [ 278.116502][ T8819] netlink: 'syz.1.984': attribute type 9 has an invalid length. [ 278.448954][ T8822] netlink: 'syz.3.985': attribute type 8 has an invalid length. [ 279.333114][ T8842] netlink: 'syz.3.992': attribute type 3 has an invalid length. [ 279.544065][ T8850] netlink: 'syz.1.995': attribute type 10 has an invalid length. [ 279.583418][ T8852] netlink: 'syz.3.996': attribute type 10 has an invalid length. [ 279.666562][ T8852] __nla_validate_parse: 7 callbacks suppressed [ 279.666584][ T8852] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.996'. [ 279.998015][ T8856] delete_channel: no stack [ 280.567437][ T8877] netlink: 179280 bytes leftover after parsing attributes in process `syz.1.1006'. [ 280.988804][ T8888] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1011'. [ 281.354475][ T5088] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 281.795590][ T8906] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.1019'. [ 282.456702][ T8923] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1022'. [ 282.466592][ T8923] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 282.733075][ T5088] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 282.861136][ T8933] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1028'. [ 282.877815][ T8933] FAULT_INJECTION: forcing a failure. [ 282.877815][ T8933] name failslab, interval 1, probability 0, space 0, times 0 [ 282.892716][ T8933] CPU: 1 PID: 8933 Comm: syz.3.1028 Not tainted syzkaller #0 [ 282.900161][ T8933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.910279][ T8933] Call Trace: [ 282.913703][ T8933] [ 282.916687][ T8933] dump_stack_lvl+0x18c/0x250 [ 282.921445][ T8933] ? show_regs_print_info+0x20/0x20 [ 282.926886][ T8933] ? load_image+0x420/0x420 [ 282.931565][ T8933] should_fail_ex+0x394/0x4c0 [ 282.936311][ T8933] should_failslab+0x9/0x20 [ 282.940875][ T8933] slab_pre_alloc_hook+0x59/0x300 [ 282.945977][ T8933] kmem_cache_alloc_node+0x5e/0x310 [ 282.951249][ T8933] ? __alloc_skb+0x103/0x2c0 [ 282.955905][ T8933] __alloc_skb+0x103/0x2c0 [ 282.960386][ T8933] rtmsg_ifinfo_build_skb+0x83/0x260 [ 282.965828][ T8933] ? __local_bh_enable_ip+0x13a/0x1c0 [ 282.971254][ T8933] rtmsg_ifinfo+0x8c/0x1a0 [ 282.975728][ T8933] __dev_notify_flags+0xf3/0x310 [ 282.980863][ T8933] ? __dev_change_flags+0x6a0/0x6a0 [ 282.986099][ T8933] ? __dev_change_flags+0x4d2/0x6a0 [ 282.991344][ T8933] ? dev_get_flags+0x1c0/0x1c0 [ 282.996239][ T8933] ? dev_set_alias+0x68/0x1d0 [ 283.000968][ T8933] ? dev_set_alias+0x88/0x1d0 [ 283.005700][ T8933] dev_change_flags+0xde/0x1a0 [ 283.010506][ T8933] do_setlink+0xb69/0x3f40 [ 283.014967][ T8933] ? load_image+0x420/0x420 [ 283.019511][ T8933] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 283.025788][ T8933] ? stack_trace_save+0xaa/0x100 [ 283.030790][ T8933] ? rcu_is_watching+0x15/0xb0 [ 283.035591][ T8933] ? do_trace_netlink_extack+0x7e/0x1a0 [ 283.041229][ T8933] ? __nla_validate+0x50/0x50 [ 283.045983][ T8933] ? validate_linkmsg+0x719/0x910 [ 283.051132][ T8933] ? nla_strscpy+0x109/0x160 [ 283.055767][ T8933] rtnl_newlink+0x1848/0x2170 [ 283.060508][ T8933] ? rtnl_newlink+0x4c1/0x2170 [ 283.065333][ T8933] ? rtnl_setlink+0x4e0/0x4e0 [ 283.070048][ T8933] ? trace_raw_output_contention_end+0xd0/0xd0 [ 283.076281][ T8933] ? rcu_is_watching+0x15/0xb0 [ 283.081088][ T8933] ? trace_contention_end+0x39/0xe0 [ 283.086315][ T8933] ? __mutex_lock+0x30d/0xc80 [ 283.091219][ T8933] ? rtnl_setlink+0x4e0/0x4e0 [ 283.095941][ T8933] rtnetlink_rcv_msg+0x843/0xf90 [ 283.100911][ T8933] ? rtnetlink_rcv_msg+0x220/0xf90 [ 283.106073][ T8933] ? rtnetlink_bind+0x80/0x80 [ 283.110792][ T8933] ? perf_trace_preemptirq_template+0xac/0x330 [ 283.117027][ T8933] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 283.123072][ T8933] ? lock_chain_count+0x20/0x20 [ 283.127985][ T8933] ? __local_bh_enable_ip+0x13a/0x1c0 [ 283.133399][ T8933] ? lockdep_hardirqs_on+0x98/0x150 [ 283.138657][ T8933] ? __local_bh_enable_ip+0x13a/0x1c0 [ 283.144080][ T8933] ? _local_bh_enable+0xa0/0xa0 [ 283.148976][ T8933] ? __dev_queue_xmit+0x275/0x3630 [ 283.154142][ T8933] ? __dev_queue_xmit+0x1bc2/0x3630 [ 283.159394][ T8933] ? __dev_queue_xmit+0x275/0x3630 [ 283.164561][ T8933] ? ref_tracker_free+0x686/0x830 [ 283.169622][ T8933] netlink_rcv_skb+0x235/0x4c0 [ 283.174424][ T8933] ? rtnetlink_bind+0x80/0x80 [ 283.179130][ T8933] ? netlink_ack+0x1160/0x1160 [ 283.183950][ T8933] ? __lock_acquire+0x7d80/0x7d80 [ 283.189034][ T8933] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.194281][ T8933] netlink_unicast+0x7b1/0x930 [ 283.199197][ T8933] netlink_sendmsg+0x8d0/0xbf0 [ 283.204014][ T8933] ? netlink_getsockopt+0x590/0x590 [ 283.209268][ T8933] ? apparmor_socket_sendmsg+0x8e/0x330 [ 283.214855][ T8933] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 283.220176][ T8933] ? security_socket_sendmsg+0x80/0xa0 [ 283.225660][ T8933] ? netlink_getsockopt+0x590/0x590 [ 283.230890][ T8933] ____sys_sendmsg+0x61b/0x980 [ 283.235691][ T8933] ? __asan_memset+0x22/0x40 [ 283.240312][ T8933] ? __sys_sendmsg_sock+0x30/0x30 [ 283.245369][ T8933] ? __import_iovec+0x3fa/0x850 [ 283.250262][ T8933] ? import_iovec+0x73/0xa0 [ 283.254825][ T8933] ___sys_sendmsg+0x2a6/0x360 [ 283.259528][ T8933] ? get_pid_task+0x20/0x1e0 [ 283.264153][ T8933] ? __sys_sendmsg+0x2b0/0x2b0 [ 283.268974][ T8933] ? __lock_acquire+0x7d80/0x7d80 [ 283.274053][ T8933] __se_sys_sendmsg+0x1d0/0x2c0 [ 283.278941][ T8933] ? __x64_sys_sendmsg+0x80/0x80 [ 283.283920][ T8933] ? lockdep_hardirqs_on+0x98/0x150 [ 283.289155][ T8933] do_syscall_64+0x55/0xb0 [ 283.293604][ T8933] ? clear_bhb_loop+0x40/0x90 [ 283.298312][ T8933] ? clear_bhb_loop+0x40/0x90 [ 283.303024][ T8933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.308971][ T8933] RIP: 0033:0x7f2ce9b9e0d9 [ 283.313434][ T8933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.333177][ T8933] RSP: 002b:00007f2ce7df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.341636][ T8933] RAX: ffffffffffffffda RBX: 00007f2ce9e25fa0 RCX: 00007f2ce9b9e0d9 [ 283.349656][ T8933] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 283.357664][ T8933] RBP: 00007f2ce7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 283.365673][ T8933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.373679][ T8933] R13: 00007f2ce9e26038 R14: 00007f2ce9e25fa0 R15: 00007ffce1c52f68 [ 283.381702][ T8933] [ 283.404682][ T8933] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 283.547265][ T8936] validate_nla: 5 callbacks suppressed [ 283.547284][ T8936] netlink: 'syz.3.1031': attribute type 10 has an invalid length. [ 283.586019][ T8936] netlink: 'syz.3.1031': attribute type 9 has an invalid length. [ 283.594747][ T8936] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.1031'. [ 284.359309][ T8953] FAULT_INJECTION: forcing a failure. [ 284.359309][ T8953] name failslab, interval 1, probability 0, space 0, times 0 [ 284.378942][ T8953] CPU: 0 PID: 8953 Comm: syz.1.1036 Not tainted syzkaller #0 [ 284.386420][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.396536][ T8953] Call Trace: [ 284.399875][ T8953] [ 284.402864][ T8953] dump_stack_lvl+0x18c/0x250 [ 284.407739][ T8953] ? show_regs_print_info+0x20/0x20 [ 284.413027][ T8953] ? load_image+0x420/0x420 [ 284.417647][ T8953] ? __might_sleep+0xe0/0xe0 [ 284.422321][ T8953] ? __lock_acquire+0x7d80/0x7d80 [ 284.427432][ T8953] should_fail_ex+0x394/0x4c0 [ 284.432196][ T8953] should_failslab+0x9/0x20 [ 284.436778][ T8953] slab_pre_alloc_hook+0x59/0x300 [ 284.441891][ T8953] ? kvmalloc_node+0x70/0x180 [ 284.446652][ T8953] ? kvmalloc_node+0x70/0x180 [ 284.451420][ T8953] __kmem_cache_alloc_node+0x53/0x250 [ 284.456897][ T8953] ? kvmalloc_node+0x70/0x180 [ 284.461661][ T8953] __kmalloc_node+0xa6/0x240 [ 284.466382][ T8953] kvmalloc_node+0x70/0x180 [ 284.470969][ T8953] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 284.476709][ T8953] ? 0xffffffffa0004740 [ 284.480938][ T8953] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 284.486940][ T8953] ? xdp_convert_md_to_buff+0x330/0x330 [ 284.492682][ T8953] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.498912][ T8953] ? lockdep_hardirqs_on+0x98/0x150 [ 284.504254][ T8953] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 284.510594][ T8953] ? bpf_prog_test_run_xdp+0x7b4/0x1140 [ 284.516266][ T8953] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 284.521740][ T8953] ? __lock_acquire+0x7d80/0x7d80 [ 284.526874][ T8953] ? dev_put+0x80/0x80 [ 284.531031][ T8953] ? dev_put+0x80/0x80 [ 284.535180][ T8953] bpf_prog_test_run+0x31f/0x390 [ 284.540195][ T8953] __sys_bpf+0x49d/0x890 [ 284.544504][ T8953] ? bpf_link_show_fdinfo+0x390/0x390 [ 284.549975][ T8953] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.556211][ T8953] __x64_sys_bpf+0x7c/0x90 [ 284.560688][ T8953] do_syscall_64+0x55/0xb0 [ 284.565167][ T8953] ? clear_bhb_loop+0x40/0x90 [ 284.569908][ T8953] ? clear_bhb_loop+0x40/0x90 [ 284.574646][ T8953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.580602][ T8953] RIP: 0033:0x7f6c8cf9e0d9 [ 284.585097][ T8953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.604787][ T8953] RSP: 002b:00007f6c8debe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 284.613268][ T8953] RAX: ffffffffffffffda RBX: 00007f6c8d225fa0 RCX: 00007f6c8cf9e0d9 [ 284.621371][ T8953] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 284.629446][ T8953] RBP: 00007f6c8debe090 R08: 0000000000000000 R09: 0000000000000000 [ 284.637488][ T8953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.645518][ T8953] R13: 00007f6c8d226038 R14: 00007f6c8d225fa0 R15: 00007ffd41b50158 [ 284.653583][ T8953] [ 284.741670][ T5088] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6 [ 285.062169][ T5088] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 285.163755][ T8964] netlink: 'syz.3.1039': attribute type 3 has an invalid length. [ 285.211561][ T8964] netlink: 189132 bytes leftover after parsing attributes in process `syz.3.1039'. [ 287.141974][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 287.962432][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 288.012930][ T5088] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 288.403970][ T5088] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 288.869234][ T9012] netlink: 'syz.2.1052': attribute type 3 has an invalid length. [ 288.916466][ T9012] netlink: 189132 bytes leftover after parsing attributes in process `syz.2.1052'. [ 289.738876][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 290.749027][ T5088] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 290.758345][ T5088] Bluetooth: hci2: unexpected event 0x12 length: 151 > 8 [ 291.726164][ T9057] netlink: 'syz.1.1066': attribute type 3 has an invalid length. [ 291.779250][ T9057] netlink: 189132 bytes leftover after parsing attributes in process `syz.1.1066'. [ 292.054446][ T9062] netlink: 'syz.1.1069': attribute type 8 has an invalid length. [ 292.075888][ T9062] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1069'. [ 292.332120][ T5088] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 292.646251][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1070'. [ 294.012824][ T9094] netlink: 'syz.1.1077': attribute type 3 has an invalid length. [ 294.020669][ T9094] netlink: 189132 bytes leftover after parsing attributes in process `syz.1.1077'. [ 295.651439][ T5088] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 296.024541][ T9113] FAULT_INJECTION: forcing a failure. [ 296.024541][ T9113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.099746][ T9113] CPU: 0 PID: 9113 Comm: syz.0.1082 Not tainted syzkaller #0 [ 296.107216][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.117356][ T9113] Call Trace: [ 296.120679][ T9113] [ 296.123655][ T9113] dump_stack_lvl+0x18c/0x250 [ 296.128407][ T9113] ? show_regs_print_info+0x20/0x20 [ 296.134022][ T9113] ? load_image+0x420/0x420 [ 296.138607][ T9113] ? __lock_acquire+0x7d80/0x7d80 [ 296.143693][ T9113] ? snprintf+0xe9/0x140 [ 296.148014][ T9113] should_fail_ex+0x394/0x4c0 [ 296.152758][ T9113] _copy_to_user+0x2f/0xa0 [ 296.157235][ T9113] simple_read_from_buffer+0xe7/0x150 [ 296.162892][ T9113] proc_fail_nth_read+0x1e8/0x260 [ 296.168036][ T9113] ? proc_fault_inject_write+0x360/0x360 [ 296.173747][ T9113] ? fsnotify_perm+0x271/0x5e0 [ 296.178596][ T9113] ? proc_fault_inject_write+0x360/0x360 [ 296.184310][ T9113] vfs_read+0x298/0x990 [ 296.188586][ T9113] ? kernel_read+0x1e0/0x1e0 [ 296.193257][ T9113] ? __fget_files+0x28/0x460 [ 296.197930][ T9113] ? __fget_files+0x3fc/0x460 [ 296.202765][ T9113] ? __fdget_pos+0x2a3/0x330 [ 296.207430][ T9113] ? ksys_read+0x74/0x260 [ 296.211838][ T9113] ksys_read+0x151/0x260 [ 296.216176][ T9113] ? vfs_write+0x9a0/0x9a0 [ 296.220661][ T9113] ? lockdep_hardirqs_on+0x98/0x150 [ 296.225925][ T9113] do_syscall_64+0x55/0xb0 [ 296.230403][ T9113] ? clear_bhb_loop+0x40/0x90 [ 296.235143][ T9113] ? clear_bhb_loop+0x40/0x90 [ 296.239876][ T9113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.245834][ T9113] RIP: 0033:0x7f77d3f5e90e [ 296.250302][ T9113] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 296.270098][ T9113] RSP: 002b:00007f77d4e38fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 296.278583][ T9113] RAX: ffffffffffffffda RBX: 00007f77d4e396c0 RCX: 00007f77d3f5e90e [ 296.286618][ T9113] RDX: 000000000000000f RSI: 00007f77d4e390a0 RDI: 0000000000000003 [ 296.294673][ T9113] RBP: 00007f77d4e39090 R08: 0000000000000000 R09: 0000000000000000 [ 296.302707][ T9113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.310780][ T9113] R13: 00007f77d4226038 R14: 00007f77d4225fa0 R15: 00007ffe872bf558 [ 296.319006][ T9113] [ 298.022722][ T9118] netlink: 'syz.2.1084': attribute type 10 has an invalid length. [ 298.116079][ T9119] netlink: 'syz.2.1084': attribute type 9 has an invalid length. [ 298.129984][ T9119] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.1084'. [ 298.263203][ T9123] netlink: 'syz.3.1086': attribute type 3 has an invalid length. [ 298.332548][ T9123] netlink: 189132 bytes leftover after parsing attributes in process `syz.3.1086'. [ 298.731778][ T5088] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 299.112812][ T5088] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 299.318625][ T9130] netlink: 'syz.1.1087': attribute type 9 has an invalid length. [ 299.361398][ T9130] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1087'. [ 299.752724][ T9152] netlink: 'syz.3.1097': attribute type 3 has an invalid length. [ 299.760717][ T9152] netlink: 189132 bytes leftover after parsing attributes in process `syz.3.1097'. [ 300.090156][ T9157] netlink: 'syz.0.1098': attribute type 10 has an invalid length. [ 300.151154][ T9157] netlink: 'syz.0.1098': attribute type 9 has an invalid length. [ 300.212617][ T9157] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.1098'. [ 300.293166][ T5088] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 300.678423][ T9168] netlink: 'syz.3.1101': attribute type 39 has an invalid length. [ 301.051519][ T9173] netlink: 'syz.2.1103': attribute type 10 has an invalid length. [ 301.084499][ T9173] netlink: 'syz.2.1103': attribute type 9 has an invalid length. [ 301.118529][ T9173] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.1103'. [ 301.224680][ T9176] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1101'. [ 301.260563][ T9175] netlink: 'syz.0.1104': attribute type 10 has an invalid length. [ 301.280052][ T9176] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1101'. [ 301.321093][ T9168] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1101'. [ 301.376055][ T9179] netlink: 'syz.0.1104': attribute type 9 has an invalid length. [ 301.385475][ T9179] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.1104'. [ 301.688654][ T9186] netlink: 'syz.2.1107': attribute type 3 has an invalid length. [ 302.823174][ T5088] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 303.286817][ T9204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.605517][ T9212] __nla_validate_parse: 1 callbacks suppressed [ 304.605538][ T9212] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1114'. [ 304.670740][ T9212] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1114'. [ 304.693011][ T9209] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1114'. [ 304.769478][ T9224] validate_nla: 2 callbacks suppressed [ 304.769499][ T9224] netlink: 'syz.3.1118': attribute type 3 has an invalid length. [ 304.819822][ T9224] netlink: 189132 bytes leftover after parsing attributes in process `syz.3.1118'. [ 305.285781][ T9226] netlink: 'syz.2.1117': attribute type 9 has an invalid length. [ 305.302410][ T9226] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1117'. [ 305.538292][ T5088] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 307.035559][ T9259] netlink: 'syz.3.1128': attribute type 39 has an invalid length. [ 307.330815][ T9261] netlink: 'syz.1.1129': attribute type 3 has an invalid length. [ 307.432817][ T9261] netlink: 189132 bytes leftover after parsing attributes in process `syz.1.1129'. [ 307.574908][ T9267] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1130'. [ 307.584097][ T9266] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1128'. [ 307.609667][ T9266] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1128'. [ 307.746309][ T9259] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1128'. [ 308.243972][ T5088] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 308.964649][ T9293] netlink: 'syz.0.1140': attribute type 3 has an invalid length. [ 309.491426][ T5088] Bluetooth: hci1: unexpected event for opcode 0x000f [ 309.511594][ T9300] netlink: 'syz.0.1141': attribute type 39 has an invalid length. [ 309.842607][ T9303] __nla_validate_parse: 1 callbacks suppressed [ 309.842629][ T9303] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1142'. [ 310.299417][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 310.507861][ T9309] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1143'. [ 310.540848][ T9315] FAULT_INJECTION: forcing a failure. [ 310.540848][ T9315] name failslab, interval 1, probability 0, space 0, times 0 [ 310.554562][ T9315] CPU: 1 PID: 9315 Comm: syz.2.1145 Not tainted syzkaller #0 [ 310.561997][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.572124][ T9315] Call Trace: [ 310.575450][ T9315] [ 310.578425][ T9315] dump_stack_lvl+0x18c/0x250 [ 310.583166][ T9315] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.589475][ T9315] ? show_regs_print_info+0x20/0x20 [ 310.594728][ T9315] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.601047][ T9315] should_fail_ex+0x394/0x4c0 [ 310.605793][ T9315] should_failslab+0x9/0x20 [ 310.610342][ T9315] slab_pre_alloc_hook+0x59/0x300 [ 310.615502][ T9315] kmem_cache_alloc_node+0x5e/0x310 [ 310.620746][ T9315] ? __alloc_skb+0x103/0x2c0 [ 310.625393][ T9315] __alloc_skb+0x103/0x2c0 [ 310.629845][ T9315] alloc_skb_with_frags+0xcd/0x7a0 [ 310.634998][ T9315] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 310.640893][ T9315] sock_alloc_send_pskb+0x883/0x9a0 [ 310.646166][ T9315] ? lock_chain_count+0x20/0x20 [ 310.651060][ T9315] ? sock_kzfree_s+0x50/0x50 [ 310.655685][ T9315] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.661894][ T9315] ? __ip6_append_data+0x2adb/0x3d40 [ 310.667351][ T9315] __ip6_append_data+0x2b18/0x3d40 [ 310.672572][ T9315] ? __in6_dev_get+0xd0/0xd0 [ 310.677293][ T9315] ? ip6_mtu+0x7d/0x3f0 [ 310.681492][ T9315] ? ip6_setup_cork+0xff0/0xff0 [ 310.686407][ T9315] ? __lock_acquire+0x7d80/0x7d80 [ 310.691474][ T9315] ip6_append_data+0x1b0/0x350 [ 310.696278][ T9315] ? __in6_dev_get+0xd0/0xd0 [ 310.700910][ T9315] icmp6_send+0x1384/0x1b60 [ 310.705466][ T9315] ? icmp6_send+0x236/0x1b60 [ 310.710212][ T9315] ? icmpv6_push_pending_frames+0x3f0/0x3f0 [ 310.716152][ T9315] ? mark_lock+0x94/0x320 [ 310.720523][ T9315] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 310.726554][ T9315] ? lockdep_hardirqs_on+0x98/0x150 [ 310.731795][ T9315] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.737989][ T9315] ? ip6_negative_advice+0x310/0x310 [ 310.743324][ T9315] ip6_link_failure+0x3b/0x4c0 [ 310.748129][ T9315] ? ip6_negative_advice+0x310/0x310 [ 310.753456][ T9315] vti6_tnl_xmit+0x135f/0x19c0 [ 310.758329][ T9315] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.764525][ T9315] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.770720][ T9315] ? vti6_dev_uninit+0x120/0x120 [ 310.775881][ T9315] dev_hard_start_xmit+0x269/0x790 [ 310.781041][ T9315] ? __dev_queue_xmit+0x275/0x3630 [ 310.786189][ T9315] __dev_queue_xmit+0x198c/0x3630 [ 310.791257][ T9315] ? lockdep_hardirqs_on+0x98/0x150 [ 310.796498][ T9315] ? __dev_queue_xmit+0x275/0x3630 [ 310.801827][ T9315] ? read_seqbegin+0x184/0x250 [ 310.806635][ T9315] ? read_seqbegin+0x1b6/0x250 [ 310.811443][ T9315] ? netdev_core_pick_tx+0x370/0x370 [ 310.816796][ T9315] ? ___neigh_create+0x1dab/0x23d0 [ 310.821948][ T9315] ? neigh_connected_output+0x3b7/0x460 [ 310.827572][ T9315] ip6_finish_output2+0xe2e/0x1620 [ 310.832731][ T9315] ? ip6_finish_output2+0x642/0x1620 [ 310.838066][ T9315] ? nf_hook+0x390/0x390 [ 310.842343][ T9315] ? ip6_mtu+0x321/0x3f0 [ 310.846633][ T9315] ? ip6_finish_output+0x567/0x7f0 [ 310.851797][ T9315] ? ip6_send_skb+0x10a/0x380 [ 310.856516][ T9315] ip6_send_skb+0x1cd/0x380 [ 310.861063][ T9315] udp_v6_send_skb+0xbd8/0x1810 [ 310.865988][ T9315] udp_v6_push_pending_frames+0x133/0x220 [ 310.871756][ T9315] udpv6_sendmsg+0xdd8/0x2350 [ 310.876479][ T9315] ? __lock_acquire+0x7d80/0x7d80 [ 310.881555][ T9315] ? udpv6_sendmsg+0x2350/0x2350 [ 310.886529][ T9315] ? __might_sleep+0xe0/0xe0 [ 310.891159][ T9315] ? udp_v6_early_demux+0xf90/0xf90 [ 310.896410][ T9315] ? trace_call_bpf+0xc3/0x6c0 [ 310.901265][ T9315] ? aa_af_perm+0x330/0x330 [ 310.905820][ T9315] ? sock_rps_record_flow+0x19/0x3f0 [ 310.911244][ T9315] ? inet_send_prepare+0x5b/0x250 [ 310.916411][ T9315] ? inet6_sendmsg+0x5f/0xd0 [ 310.921033][ T9315] sock_write_iter+0x2dc/0x420 [ 310.925859][ T9315] ? sock_read_iter+0x3f0/0x3f0 [ 310.930791][ T9315] vfs_write+0x474/0x9a0 [ 310.935079][ T9315] ? file_end_write+0x250/0x250 [ 310.939971][ T9315] ? __fget_files+0x3fc/0x460 [ 310.944692][ T9315] ? __fdget_pos+0x1d8/0x330 [ 310.949320][ T9315] ? ksys_write+0x74/0x260 [ 310.953777][ T9315] ksys_write+0x151/0x260 [ 310.958146][ T9315] ? __ia32_sys_read+0x90/0x90 [ 310.962955][ T9315] ? syscall_enter_from_user_mode+0x2e/0x80 [ 310.968891][ T9315] do_syscall_64+0x55/0xb0 [ 310.973693][ T9315] ? clear_bhb_loop+0x40/0x90 [ 310.978408][ T9315] ? clear_bhb_loop+0x40/0x90 [ 310.983121][ T9315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.989047][ T9315] RIP: 0033:0x7f004b59e0d9 [ 310.993489][ T9315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.013283][ T9315] RSP: 002b:00007f00497f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.022104][ T9315] RAX: ffffffffffffffda RBX: 00007f004b825fa0 RCX: 00007f004b59e0d9 [ 311.030137][ T9315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 311.038164][ T9315] RBP: 00007f00497f6090 R08: 0000000000000000 R09: 0000000000000000 [ 311.046172][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.054181][ T9315] R13: 00007f004b826038 R14: 00007f004b825fa0 R15: 00007ffc1a85a658 [ 311.062267][ T9315] [ 311.424906][ T9322] netlink: 'syz.1.1147': attribute type 10 has an invalid length. [ 311.555691][ T9326] netlink: 'syz.0.1149': attribute type 3 has an invalid length. [ 311.582292][ T9326] netlink: 189132 bytes leftover after parsing attributes in process `syz.0.1149'. [ 313.027740][ T9346] netlink: 'syz.2.1154': attribute type 39 has an invalid length. [ 313.039293][ T9339] netlink: 'syz.3.1152': attribute type 10 has an invalid length. [ 313.588213][ T5088] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 313.597837][ T5088] Bluetooth: hci1: Injecting HCI hardware error event [ 313.606543][ T5088] Bluetooth: hci1: hardware error 0x00 [ 314.089403][ T9352] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1154'. [ 314.225138][ T9352] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1154'. [ 314.270576][ T9346] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1154'. [ 314.438197][ T9363] netlink: 'syz.3.1159': attribute type 3 has an invalid length. [ 314.458366][ T9363] netlink: 189132 bytes leftover after parsing attributes in process `syz.3.1159'. [ 314.482109][ T9362] netlink: 'syz.0.1166': attribute type 39 has an invalid length. [ 315.108122][ T9370] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1166'. [ 315.140799][ T9370] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1166'. [ 315.181772][ T9368] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1158'. [ 315.204360][ T9362] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1166'. [ 315.796867][ T5088] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 315.878114][ T9394] netlink: 'syz.0.1168': attribute type 10 has an invalid length. [ 315.903287][ T9398] netlink: 'syz.1.1170': attribute type 3 has an invalid length. [ 315.989918][ T9398] netlink: 189132 bytes leftover after parsing attributes in process `syz.1.1170'. [ 316.784008][ T9412] netlink: 'syz.2.1172': attribute type 39 has an invalid length. [ 316.875209][ T9413] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1172'. [ 316.921867][ T9413] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1172'. [ 317.012705][ T9417] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1174'. [ 317.071384][ T9417] ksmbd: Unknown IPC event: 0, ignore. [ 317.485541][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.492198][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.838319][ T9434] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1177'. [ 317.976205][ T9436] netlink: 'syz.2.1179': attribute type 3 has an invalid length. [ 318.028587][ T9436] netlink: 189132 bytes leftover after parsing attributes in process `syz.2.1179'. [ 319.001871][ T9450] netlink: 'syz.2.1184': attribute type 10 has an invalid length. [ 319.617459][ T9452] FAULT_INJECTION: forcing a failure. [ 319.617459][ T9452] name failslab, interval 1, probability 0, space 0, times 0 [ 319.637729][ T9452] CPU: 0 PID: 9452 Comm: syz.1.1187 Not tainted syzkaller #0 [ 319.645312][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.655533][ T9452] Call Trace: [ 319.658885][ T9452] [ 319.661871][ T9452] dump_stack_lvl+0x18c/0x250 [ 319.666622][ T9452] ? show_regs_print_info+0x20/0x20 [ 319.671887][ T9452] ? load_image+0x420/0x420 [ 319.676462][ T9452] ? __might_sleep+0xe0/0xe0 [ 319.681121][ T9452] ? __lock_acquire+0x7d80/0x7d80 [ 319.686222][ T9452] should_fail_ex+0x394/0x4c0 [ 319.691001][ T9452] should_failslab+0x9/0x20 [ 319.695573][ T9452] slab_pre_alloc_hook+0x59/0x300 [ 319.700696][ T9452] ? page_pool_create+0x71/0x5c0 [ 319.705737][ T9452] __kmem_cache_alloc_node+0x53/0x250 [ 319.711186][ T9452] ? page_pool_create+0x71/0x5c0 [ 319.716191][ T9452] kmalloc_node_trace+0x26/0xe0 [ 319.721126][ T9452] page_pool_create+0x71/0x5c0 [ 319.725960][ T9452] bpf_test_run_xdp_live+0x203/0x1b30 [ 319.731406][ T9452] ? 0xffffffffa0004740 [ 319.735607][ T9452] ? 0xffffffffa0004740 [ 319.739804][ T9452] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 319.745728][ T9452] ? xdp_convert_md_to_buff+0x330/0x330 [ 319.751366][ T9452] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 319.757679][ T9452] ? _copy_from_user+0xa5/0xe0 [ 319.762498][ T9452] ? bpf_test_init+0x119/0x140 [ 319.767316][ T9452] ? xdp_convert_md_to_buff+0x5b/0x330 [ 319.772849][ T9452] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 319.778301][ T9452] ? __lock_acquire+0x7d80/0x7d80 [ 319.783432][ T9452] ? dev_put+0x80/0x80 [ 319.787573][ T9452] ? dev_put+0x80/0x80 [ 319.791722][ T9452] bpf_prog_test_run+0x31f/0x390 [ 319.796725][ T9452] __sys_bpf+0x49d/0x890 [ 319.801022][ T9452] ? bpf_link_show_fdinfo+0x390/0x390 [ 319.806458][ T9452] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.812754][ T9452] __x64_sys_bpf+0x7c/0x90 [ 319.817483][ T9452] do_syscall_64+0x55/0xb0 [ 319.821978][ T9452] ? clear_bhb_loop+0x40/0x90 [ 319.826716][ T9452] ? clear_bhb_loop+0x40/0x90 [ 319.831455][ T9452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.837399][ T9452] RIP: 0033:0x7f6c8cf9e0d9 [ 319.841869][ T9452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.861542][ T9452] RSP: 002b:00007f6c8debe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 319.870112][ T9452] RAX: ffffffffffffffda RBX: 00007f6c8d225fa0 RCX: 00007f6c8cf9e0d9 [ 319.878147][ T9452] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 319.886444][ T9452] RBP: 00007f6c8debe090 R08: 0000000000000000 R09: 0000000000000000 [ 319.894495][ T9452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.902528][ T9452] R13: 00007f6c8d226038 R14: 00007f6c8d225fa0 R15: 00007ffd41b50158 [ 319.910602][ T9452] [ 320.113326][ T9463] netlink: 'syz.1.1188': attribute type 39 has an invalid length. [ 320.512049][ T9472] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1188'. [ 320.521559][ T9472] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1188'. [ 320.779967][ T5088] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6 [ 321.800976][ T9500] netlink: 'syz.0.1201': attribute type 39 has an invalid length. [ 321.873708][ T9502] netlink: 'syz.2.1202': attribute type 21 has an invalid length. [ 322.223543][ T9511] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1201'. [ 322.245547][ T9511] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1201'. [ 322.510738][ T9519] FAULT_INJECTION: forcing a failure. [ 322.510738][ T9519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.530714][ T9519] CPU: 0 PID: 9519 Comm: syz.2.1205 Not tainted syzkaller #0 [ 322.538207][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.548318][ T9519] Call Trace: [ 322.551653][ T9519] [ 322.554631][ T9519] dump_stack_lvl+0x18c/0x250 [ 322.559367][ T9519] ? show_regs_print_info+0x20/0x20 [ 322.564653][ T9519] ? load_image+0x420/0x420 [ 322.569226][ T9519] ? __lock_acquire+0x7d80/0x7d80 [ 322.574318][ T9519] should_fail_ex+0x394/0x4c0 [ 322.579070][ T9519] _copy_from_user+0x2f/0xe0 [ 322.583710][ T9519] __copy_msghdr+0x388/0x560 [ 322.588371][ T9519] ___sys_sendmsg+0x214/0x360 [ 322.593173][ T9519] ? __sys_sendmsg+0x2b0/0x2b0 [ 322.598022][ T9519] ? __lock_acquire+0x7d80/0x7d80 [ 322.603176][ T9519] __se_sys_sendmsg+0x1d0/0x2c0 [ 322.608090][ T9519] ? __x64_sys_sendmsg+0x80/0x80 [ 322.613118][ T9519] ? lockdep_hardirqs_on+0x98/0x150 [ 322.618361][ T9519] do_syscall_64+0x55/0xb0 [ 322.622873][ T9519] ? clear_bhb_loop+0x40/0x90 [ 322.627616][ T9519] ? clear_bhb_loop+0x40/0x90 [ 322.632349][ T9519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.638291][ T9519] RIP: 0033:0x7f004b59e0d9 [ 322.642734][ T9519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.662561][ T9519] RSP: 002b:00007f00497f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.671068][ T9519] RAX: ffffffffffffffda RBX: 00007f004b825fa0 RCX: 00007f004b59e0d9 [ 322.679098][ T9519] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000003 [ 322.687142][ T9519] RBP: 00007f00497f6090 R08: 0000000000000000 R09: 0000000000000000 [ 322.695195][ T9519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.703211][ T9519] R13: 00007f004b826038 R14: 00007f004b825fa0 R15: 00007ffc1a85a658 [ 322.711263][ T9519] [ 322.919344][ T9526] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1207'. [ 323.349081][ T9541] netlink: 'syz.0.1213': attribute type 10 has an invalid length. [ 323.363359][ T9541] netlink: 'syz.0.1213': attribute type 9 has an invalid length. [ 323.371554][ T9541] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.1213'. [ 323.582251][ T9546] netlink: 'syz.3.1214': attribute type 39 has an invalid length. [ 323.902380][ T9557] FAULT_INJECTION: forcing a failure. [ 323.902380][ T9557] name failslab, interval 1, probability 0, space 0, times 0 [ 323.915167][ T9557] CPU: 1 PID: 9557 Comm: syz.2.1217 Not tainted syzkaller #0 [ 323.922587][ T9557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.932699][ T9557] Call Trace: [ 323.936027][ T9557] [ 323.939003][ T9557] dump_stack_lvl+0x18c/0x250 [ 323.943750][ T9557] ? show_regs_print_info+0x20/0x20 [ 323.949091][ T9557] ? load_image+0x420/0x420 [ 323.953691][ T9557] ? netdev_core_pick_tx+0x370/0x370 [ 323.959090][ T9557] should_fail_ex+0x394/0x4c0 [ 323.963840][ T9557] should_failslab+0x9/0x20 [ 323.968410][ T9557] slab_pre_alloc_hook+0x59/0x300 [ 323.973514][ T9557] kmem_cache_alloc+0x5a/0x2c0 [ 323.978357][ T9557] ? skb_clone+0x1eb/0x370 [ 323.982844][ T9557] skb_clone+0x1eb/0x370 [ 323.987193][ T9557] bpf_clone_redirect+0x16d/0x4a0 [ 323.992305][ T9557] bpf_prog_e97454e6a39c6b06+0x61/0x66 [ 323.997845][ T9557] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 324.003907][ T9557] ? __lock_acquire+0x7d80/0x7d80 [ 324.008990][ T9557] ? lock_chain_count+0x20/0x20 [ 324.013915][ T9557] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 324.020036][ T9557] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 324.025368][ T9557] ? lock_chain_count+0x20/0x20 [ 324.030279][ T9557] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 324.036565][ T9557] ? __local_bh_disable_ip+0x108/0x1a0 [ 324.042059][ T9557] ? __cant_sleep+0x220/0x220 [ 324.046835][ T9557] ? __local_bh_enable_ip+0x13a/0x1c0 [ 324.052239][ T9557] ? _local_bh_enable+0xa0/0xa0 [ 324.057141][ T9557] ? bpf_test_timer_continue+0x135/0x380 [ 324.057981][ T9558] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1214'. [ 324.062824][ T9557] ? bpf_test_run+0x174/0x870 [ 324.062858][ T9557] bpf_test_run+0x2df/0x870 [ 324.062900][ T9557] ? bpf_test_run+0x174/0x870 [ 324.062931][ T9557] ? dst_hold+0x70/0x70 [ 324.062963][ T9557] ? eth_get_headlen+0x210/0x210 [ 324.074068][ T9558] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1214'. [ 324.076883][ T9557] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 324.076994][ T9557] ? cpu_online+0x60/0x60 [ 324.083363][ T9546] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1214'. [ 324.090343][ T9557] bpf_prog_test_run+0x31f/0x390 [ 324.090388][ T9557] __sys_bpf+0x49d/0x890 [ 324.090419][ T9557] ? bpf_link_show_fdinfo+0x390/0x390 [ 324.090469][ T9557] ? lock_chain_count+0x20/0x20 [ 324.090511][ T9557] __x64_sys_bpf+0x7c/0x90 [ 324.090539][ T9557] do_syscall_64+0x55/0xb0 [ 324.090565][ T9557] ? clear_bhb_loop+0x40/0x90 [ 324.090593][ T9557] ? clear_bhb_loop+0x40/0x90 [ 324.090622][ T9557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.090649][ T9557] RIP: 0033:0x7f004b59e0d9 [ 324.090672][ T9557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.090694][ T9557] RSP: 002b:00007f00497f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.090722][ T9557] RAX: ffffffffffffffda RBX: 00007f004b825fa0 RCX: 00007f004b59e0d9 [ 324.090749][ T9557] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 324.090766][ T9557] RBP: 00007f00497f6090 R08: 0000000000000000 R09: 0000000000000000 [ 324.090781][ T9557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.090796][ T9557] R13: 00007f004b826038 R14: 00007f004b825fa0 R15: 00007ffc1a85a658 [ 324.090833][ T9557] [ 325.520588][ T9577] syz.2.1224 uses obsolete (PF_INET,SOCK_PACKET) [ 325.537782][ T9580] netlink: 'syz.3.1226': attribute type 39 has an invalid length. [ 325.565857][ T9578] netlink: 'syz.0.1225': attribute type 10 has an invalid length. [ 325.645146][ T9578] netlink: 'syz.0.1225': attribute type 9 has an invalid length. [ 325.711398][ T9578] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.1225'. [ 326.139190][ T9587] netlink: 'syz.1.1227': attribute type 21 has an invalid length. [ 326.293859][ T9581] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1226'. [ 326.313176][ T9581] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1226'. [ 326.337741][ T9580] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1226'. [ 326.945594][ T9600] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1231'. [ 327.406605][ T9616] netlink: 'syz.0.1237': attribute type 10 has an invalid length. [ 327.450040][ T9616] netlink: 'syz.0.1237': attribute type 9 has an invalid length. [ 327.466231][ T9622] netlink: 'syz.2.1238': attribute type 39 has an invalid length. [ 327.477372][ T9616] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.1237'. [ 327.812963][ T9626] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1238'. [ 328.181981][ T9626] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1238'. [ 328.230506][ T9622] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1238'. [ 328.476180][ T9633] netlink: 'syz.3.1241': attribute type 21 has an invalid length. [ 328.845562][ T9645] FAULT_INJECTION: forcing a failure. [ 328.845562][ T9645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.891635][ T9645] CPU: 1 PID: 9645 Comm: syz.2.1245 Not tainted syzkaller #0 [ 328.899106][ T9645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.909219][ T9645] Call Trace: [ 328.912558][ T9645] [ 328.915547][ T9645] dump_stack_lvl+0x18c/0x250 [ 328.920289][ T9645] ? show_regs_print_info+0x20/0x20 [ 328.925543][ T9645] ? load_image+0x420/0x420 [ 328.930110][ T9645] ? __lock_acquire+0x7d80/0x7d80 [ 328.935188][ T9645] should_fail_ex+0x394/0x4c0 [ 328.939936][ T9645] _copy_from_user+0x2f/0xe0 [ 328.944562][ T9645] __copy_msghdr+0x388/0x560 [ 328.949213][ T9645] ___sys_sendmsg+0x214/0x360 [ 328.953923][ T9645] ? get_pid_task+0x20/0x1e0 [ 328.958554][ T9645] ? __sys_sendmsg+0x2b0/0x2b0 [ 328.963365][ T9645] ? __lock_acquire+0x7d80/0x7d80 [ 328.968446][ T9645] __se_sys_sendmsg+0x1d0/0x2c0 [ 328.973347][ T9645] ? __x64_sys_sendmsg+0x80/0x80 [ 328.978330][ T9645] ? lockdep_hardirqs_on+0x98/0x150 [ 328.983567][ T9645] do_syscall_64+0x55/0xb0 [ 328.988008][ T9645] ? clear_bhb_loop+0x40/0x90 [ 328.993239][ T9645] ? clear_bhb_loop+0x40/0x90 [ 328.997958][ T9645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.003882][ T9645] RIP: 0033:0x7f004b59e0d9 [ 329.008360][ T9645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.028122][ T9645] RSP: 002b:00007f00497f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.036589][ T9645] RAX: ffffffffffffffda RBX: 00007f004b825fa0 RCX: 00007f004b59e0d9 [ 329.044611][ T9645] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000003 [ 329.052630][ T9645] RBP: 00007f00497f6090 R08: 0000000000000000 R09: 0000000000000000 [ 329.060638][ T9645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.068845][ T9645] R13: 00007f004b826038 R14: 00007f004b825fa0 R15: 00007ffc1a85a658 [ 329.076865][ T9645] [ 330.067798][ T9669] netlink: 'syz.2.1251': attribute type 39 has an invalid length. [ 330.188860][ T9670] netlink: 'syz.0.1250': attribute type 10 has an invalid length. [ 330.285056][ T9670] netlink: 'syz.0.1250': attribute type 9 has an invalid length. [ 330.345418][ T9670] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.1250'. [ 330.792277][ T9679] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1251'. [ 330.818634][ T9679] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1251'. [ 330.863094][ T9669] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1251'. [ 331.164088][ T9686] netlink: 'syz.3.1256': attribute type 1 has an invalid length. [ 331.197960][ T9686] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1256'. [ 332.004990][ T9697] netlink: 'syz.0.1257': attribute type 41 has an invalid length. [ 333.431939][ T9713] netlink: 'syz.3.1263': attribute type 39 has an invalid length. [ 333.765706][ T9714] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1263'. [ 333.898850][ T9714] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1263'. [ 334.186832][ T9713] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1263'. [ 334.645956][ T9727] netlink: 'syz.2.1267': attribute type 10 has an invalid length. [ 334.683070][ T9729] netlink: 'syz.3.1266': attribute type 10 has an invalid length. [ 334.733815][ T9730] netlink: 'syz.2.1267': attribute type 9 has an invalid length. [ 334.761396][ T9730] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.1267'. [ 335.155513][ T9731] netlink: 'syz.3.1266': attribute type 9 has an invalid length. [ 335.173082][ T9731] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.1266'. [ 335.850236][ T9742] netlink: 'syz.2.1271': attribute type 10 has an invalid length. [ 336.475850][ T9749] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1273'. [ 336.577395][ T9749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.780283][ T9751] netlink: 'syz.0.1274': attribute type 39 has an invalid length. [ 336.841568][ T9758] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1275'. [ 336.990078][ T9756] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1274'. [ 337.107249][ T9758] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1275'. [ 337.168586][ T9762] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1275'. [ 337.216696][ T9756] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1274'. [ 337.948536][ T9773] netlink: 'syz.0.1280': attribute type 10 has an invalid length. [ 337.999978][ T9773] netlink: 'syz.0.1280': attribute type 9 has an invalid length. [ 338.032664][ T5088] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 338.078153][ T9773] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.1280'. [ 338.825296][ T5088] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 339.078178][ T9793] netlink: 'syz.2.1288': attribute type 39 has an invalid length. [ 340.034607][ T9796] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1287'. [ 340.098353][ T9802] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1288'. [ 340.107724][ T9802] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1288'. [ 340.520197][ T9810] netlink: 'syz.2.1291': attribute type 3 has an invalid length. [ 341.157131][ T9820] netlink: 'syz.1.1293': attribute type 10 has an invalid length. [ 341.397518][ T9820] netlink: 'syz.1.1293': attribute type 9 has an invalid length. [ 341.428224][ T9825] C: renamed from team_slave_0 [ 341.517578][ T9825] netlink: 'syz.3.1296': attribute type 3 has an invalid length. [ 341.553050][ T9825] __nla_validate_parse: 5 callbacks suppressed [ 341.553158][ T9825] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1296'. [ 341.619231][ T9825] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 342.071436][ T9836] netlink: 'syz.0.1298': attribute type 28 has an invalid length. [ 342.091741][ T9836] netlink: 'syz.0.1298': attribute type 4 has an invalid length. [ 342.099581][ T9836] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1298'. [ 342.196961][ T9836] netlink: 'syz.0.1298': attribute type 10 has an invalid length. [ 342.232208][ T9836] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1298'. [ 342.256867][ T9836] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 342.266767][ T9839] netlink: 'syz.2.1299': attribute type 39 has an invalid length. [ 342.302242][ T9835] delete_channel: no stack [ 343.429619][ T9843] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1302'. [ 343.442201][ T9843] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1302'. [ 343.463042][ T9848] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1299'. [ 343.502034][ T9848] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1299'. [ 343.541628][ T9843] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1302'. [ 343.568277][ T9839] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1299'. [ 345.212350][ T9879] netlink: 'syz.0.1309': attribute type 10 has an invalid length. [ 345.259187][ T9879] netlink: 'syz.0.1309': attribute type 9 has an invalid length. [ 345.281812][ T9879] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.1309'. [ 345.305070][ T9881] netlink: 'syz.2.1312': attribute type 7 has an invalid length. [ 345.326401][ T9881] FAULT_INJECTION: forcing a failure. [ 345.326401][ T9881] name failslab, interval 1, probability 0, space 0, times 0 [ 345.369091][ T9881] CPU: 0 PID: 9881 Comm: syz.2.1312 Not tainted syzkaller #0 [ 345.376565][ T9881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.386692][ T9881] Call Trace: [ 345.390021][ T9881] [ 345.393017][ T9881] dump_stack_lvl+0x18c/0x250 [ 345.397760][ T9881] ? show_regs_print_info+0x20/0x20 [ 345.403008][ T9881] ? load_image+0x420/0x420 [ 345.407571][ T9881] ? __might_sleep+0xe0/0xe0 [ 345.412218][ T9881] ? __lock_acquire+0x7d80/0x7d80 [ 345.417310][ T9881] should_fail_ex+0x394/0x4c0 [ 345.422056][ T9881] should_failslab+0x9/0x20 [ 345.426624][ T9881] slab_pre_alloc_hook+0x59/0x300 [ 345.431705][ T9881] ? lockdep_hardirqs_on+0x98/0x150 [ 345.436962][ T9881] kmem_cache_alloc_node+0x5e/0x310 [ 345.442221][ T9881] ? __alloc_skb+0x103/0x2c0 [ 345.446877][ T9881] __alloc_skb+0x103/0x2c0 [ 345.451353][ T9881] netlink_ack+0x377/0x1160 [ 345.455956][ T9881] ? netlink_dump+0xec0/0xec0 [ 345.460684][ T9881] ? perf_trace_lock+0xfc/0x3b0 [ 345.465595][ T9881] netlink_rcv_skb+0x2b3/0x4c0 [ 345.470418][ T9881] ? rtnetlink_bind+0x80/0x80 [ 345.475158][ T9881] ? netlink_ack+0x1160/0x1160 [ 345.479984][ T9881] ? __lock_acquire+0x7d80/0x7d80 [ 345.485071][ T9881] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.490334][ T9881] netlink_unicast+0x7b1/0x930 [ 345.495182][ T9881] netlink_sendmsg+0x8d0/0xbf0 [ 345.500010][ T9881] ? netlink_getsockopt+0x590/0x590 [ 345.505264][ T9881] ? apparmor_socket_sendmsg+0x8e/0x330 [ 345.510869][ T9881] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 345.516212][ T9881] ? security_socket_sendmsg+0x80/0xa0 [ 345.521721][ T9881] ? netlink_getsockopt+0x590/0x590 [ 345.526973][ T9881] ____sys_sendmsg+0x61b/0x980 [ 345.531805][ T9881] ? __asan_memset+0x22/0x40 [ 345.536459][ T9881] ? __sys_sendmsg_sock+0x30/0x30 [ 345.541535][ T9881] ? __import_iovec+0x5f2/0x850 [ 345.546439][ T9881] ? import_iovec+0x73/0xa0 [ 345.550985][ T9881] ___sys_sendmsg+0x2a6/0x360 [ 345.555712][ T9881] ? __sys_sendmsg+0x2b0/0x2b0 [ 345.560641][ T9881] ? __lock_acquire+0x7d80/0x7d80 [ 345.565734][ T9881] __se_sys_sendmsg+0x1d0/0x2c0 [ 345.570633][ T9881] ? __x64_sys_sendmsg+0x80/0x80 [ 345.575735][ T9881] ? lockdep_hardirqs_on+0x98/0x150 [ 345.580981][ T9881] do_syscall_64+0x55/0xb0 [ 345.585435][ T9881] ? clear_bhb_loop+0x40/0x90 [ 345.590142][ T9881] ? clear_bhb_loop+0x40/0x90 [ 345.594857][ T9881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.600790][ T9881] RIP: 0033:0x7f004b59e0d9 [ 345.605249][ T9881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.624907][ T9881] RSP: 002b:00007f00497f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.633363][ T9881] RAX: ffffffffffffffda RBX: 00007f004b825fa0 RCX: 00007f004b59e0d9 [ 345.641420][ T9881] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 345.649422][ T9881] RBP: 00007f00497f6090 R08: 0000000000000000 R09: 0000000000000000 [ 345.657437][ T9881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.665493][ T9881] R13: 00007f004b826038 R14: 00007f004b825fa0 R15: 00007ffc1a85a658 [ 345.673691][ T9881] [ 345.825256][ T9889] netlink: 'syz.2.1313': attribute type 39 has an invalid length. [ 346.362509][ T9894] netlink: 'syz.0.1314': attribute type 2 has an invalid length. [ 346.370323][ T9894] netlink: 'syz.0.1314': attribute type 1 has an invalid length. [ 346.949893][ T9908] C: renamed from team_slave_0 [ 346.983851][ T9908] netlink: 'syz.2.1316': attribute type 3 has an invalid length. [ 346.993957][ T9908] __nla_validate_parse: 4 callbacks suppressed [ 346.993993][ T9908] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1316'. [ 347.010570][ T9908] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 347.219300][ T9914] netlink: 'syz.0.1319': attribute type 153 has an invalid length. [ 347.259088][ T9914] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1319'. [ 347.483702][ T9920] netlink: 'syz.0.1323': attribute type 10 has an invalid length. [ 347.533875][ T9920] netlink: 'syz.0.1323': attribute type 9 has an invalid length. [ 347.561445][ T9920] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.1323'. [ 348.383002][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 348.384138][ T9930] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1324'. [ 348.475828][ T9930] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1324'. [ 348.517809][ T9932] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1326'. [ 348.579502][ T9939] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1326'. [ 348.612451][ T9926] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1324'. [ 349.566030][ T9963] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1334'. [ 349.943903][ T9963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.042568][ T9963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.146766][ T9963] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 350.300285][ T9963] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 350.608256][ T9963] bond0 (unregistering): Released all slaves [ 350.783282][ T9968] validate_nla: 1 callbacks suppressed [ 350.783299][ T9968] netlink: 'syz.0.1337': attribute type 39 has an invalid length. [ 350.829868][ T9968] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1337'. [ 351.999457][T10005] netlink: 'syz.2.1349': attribute type 39 has an invalid length. [ 352.115586][T10003] delete_channel: no stack [ 353.105934][T10020] netlink: 'syz.1.1353': attribute type 10 has an invalid length. [ 353.147164][T10020] macvlan0: entered promiscuous mode [ 353.154119][T10020] macvlan0: entered allmulticast mode [ 353.155144][T10019] __nla_validate_parse: 4 callbacks suppressed [ 353.155159][T10019] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1349'. [ 353.180195][T10024] FAULT_INJECTION: forcing a failure. [ 353.180195][T10024] name failslab, interval 1, probability 0, space 0, times 0 [ 353.195982][T10024] CPU: 1 PID: 10024 Comm: syz.3.1354 Not tainted syzkaller #0 [ 353.203533][T10024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.213633][T10024] Call Trace: [ 353.217048][T10024] [ 353.220104][T10024] dump_stack_lvl+0x18c/0x250 [ 353.224858][T10024] ? show_regs_print_info+0x20/0x20 [ 353.230115][T10024] ? load_image+0x420/0x420 [ 353.234709][T10024] ? __might_sleep+0xe0/0xe0 [ 353.239401][T10024] ? __lock_acquire+0x7d80/0x7d80 [ 353.244764][T10024] ? __asan_memset+0x22/0x40 [ 353.249624][T10024] should_fail_ex+0x394/0x4c0 [ 353.254366][T10024] should_failslab+0x9/0x20 [ 353.258920][T10024] slab_pre_alloc_hook+0x59/0x300 [ 353.263994][T10024] kmem_cache_alloc+0x5a/0x2c0 [ 353.268805][T10024] ? security_inode_alloc+0x34/0x110 [ 353.274150][T10024] security_inode_alloc+0x34/0x110 [ 353.279324][T10024] inode_init_always+0x914/0xc90 [ 353.284319][T10024] new_inode_pseudo+0x95/0x1d0 [ 353.289171][T10024] __sock_create+0x12d/0x940 [ 353.293805][T10024] ? perf_trace_lock+0xfc/0x3b0 [ 353.298726][T10024] mptcp_subflow_create_socket+0x10c/0xad0 [ 353.304692][T10024] ? trace_event_raw_event_lock+0x240/0x240 [ 353.310736][T10024] ? __mptcp_subflow_connect+0x14d0/0x14d0 [ 353.316593][T10024] ? mark_lock+0x94/0x320 [ 353.320978][T10024] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 353.326999][T10024] __mptcp_nmpc_sk+0x157/0x720 [ 353.331807][T10024] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 353.338607][T10024] ? __local_bh_enable_ip+0x13a/0x1c0 [ 353.344049][T10024] ? lockdep_hardirqs_on+0x98/0x150 [ 353.349320][T10024] ? __local_bh_enable_ip+0x13a/0x1c0 [ 353.354753][T10024] mptcp_sendmsg_fastopen+0x7c/0x4c0 [ 353.360093][T10024] mptcp_sendmsg+0x144c/0x1670 [ 353.364923][T10024] ? aa_sk_perm+0x83c/0x970 [ 353.369496][T10024] ? aa_sk_perm+0x83c/0x970 [ 353.374060][T10024] ? aa_af_perm+0x330/0x330 [ 353.378610][T10024] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 353.385078][T10024] ? mptcp_shutdown+0x80/0x80 [ 353.389841][T10024] ? sock_rps_record_flow+0x19/0x3f0 [ 353.395193][T10024] ? inet_sendmsg+0xce/0x2a0 [ 353.399831][T10024] ? inet_send_prepare+0x250/0x250 [ 353.404994][T10024] ____sys_sendmsg+0x61b/0x980 [ 353.409806][T10024] ? __asan_memset+0x22/0x40 [ 353.414450][T10024] ? __sys_sendmsg_sock+0x30/0x30 [ 353.419510][T10024] ? __import_iovec+0x3fa/0x850 [ 353.424418][T10024] ? import_iovec+0x73/0xa0 [ 353.429002][T10024] ___sys_sendmsg+0x2a6/0x360 [ 353.433742][T10024] ? __sys_sendmsg+0x2b0/0x2b0 [ 353.438559][T10024] ? __lock_acquire+0x7d80/0x7d80 [ 353.443642][T10024] __se_sys_sendmsg+0x1d0/0x2c0 [ 353.448529][T10024] ? __x64_sys_sendmsg+0x80/0x80 [ 353.453521][T10024] ? lockdep_hardirqs_on+0x98/0x150 [ 353.458863][T10024] do_syscall_64+0x55/0xb0 [ 353.463313][T10024] ? clear_bhb_loop+0x40/0x90 [ 353.468022][T10024] ? clear_bhb_loop+0x40/0x90 [ 353.472744][T10024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.478671][T10024] RIP: 0033:0x7f2ce9b9e0d9 [ 353.483130][T10024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.502959][T10024] RSP: 002b:00007f2ce7df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.511715][T10024] RAX: ffffffffffffffda RBX: 00007f2ce9e25fa0 RCX: 00007f2ce9b9e0d9 [ 353.519750][T10024] RDX: 00000000240048cd RSI: 0000200000000240 RDI: 0000000000000003 [ 353.528063][T10024] RBP: 00007f2ce7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 353.536159][T10024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.544168][T10024] R13: 00007f2ce9e26038 R14: 00007f2ce9e25fa0 R15: 00007ffce1c52f68 [ 353.552277][T10024] [ 353.578850][T10020] veth1_vlan: entered allmulticast mode [ 353.585410][T10024] socket: no more sockets [ 353.657864][T10020] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 353.695408][T10019] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1349'. [ 353.731012][T10005] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1349'. [ 354.311106][T10037] delete_channel: no stack [ 354.767758][T10057] netlink: 'syz.0.1367': attribute type 39 has an invalid length. [ 355.546117][T10061] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1367'. [ 355.571386][T10061] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1367'. [ 355.584340][T10067] netlink: 'syz.3.1369': attribute type 10 has an invalid length. [ 355.601024][T10067] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1369'. [ 355.633240][T10067] hsr0: entered promiscuous mode [ 355.639012][T10057] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1367'. [ 356.582541][T10083] delete_channel: no stack [ 356.919698][T10096] netlink: 'syz.2.1380': attribute type 39 has an invalid length. [ 357.470207][T10107] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1380'. [ 357.496186][T10107] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1380'. [ 357.516342][T10096] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1380'. [ 357.940058][ T5088] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 358.340619][ T5088] Bluetooth: hci2: ISO packet for unknown connection handle 48 [ 358.655996][T10140] netlink: 'syz.2.1395': attribute type 39 has an invalid length. [ 359.153199][T10143] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1395'. [ 359.185527][T10143] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1395'. [ 359.219861][T10140] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1395'. [ 359.500561][T10158] netlink: 'syz.2.1399': attribute type 46 has an invalid length. [ 359.540276][T10158] netlink: 'syz.2.1399': attribute type 46 has an invalid length. [ 359.822811][T10166] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 359.834044][T10162] FAULT_INJECTION: forcing a failure. [ 359.834044][T10162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.834213][T10162] CPU: 0 PID: 10162 Comm: syz.0.1401 Not tainted syzkaller #0 [ 359.834236][T10162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.834250][T10162] Call Trace: [ 359.834258][T10162] [ 359.834268][T10162] dump_stack_lvl+0x18c/0x250 [ 359.834302][T10162] ? show_regs_print_info+0x20/0x20 [ 359.834329][T10162] ? load_image+0x420/0x420 [ 359.834364][T10162] ? __might_fault+0xaa/0x120 [ 359.834391][T10162] ? __lock_acquire+0x7d80/0x7d80 [ 359.834424][T10162] should_fail_ex+0x394/0x4c0 [ 359.834460][T10162] _copy_from_user+0x2f/0xe0 [ 359.834488][T10162] __sys_bpf+0x23e/0x890 [ 359.834518][T10162] ? bpf_link_show_fdinfo+0x390/0x390 [ 359.834559][T10162] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 359.834607][T10162] __x64_sys_bpf+0x7c/0x90 [ 359.834633][T10162] do_syscall_64+0x55/0xb0 [ 359.834656][T10162] ? clear_bhb_loop+0x40/0x90 [ 359.834680][T10162] ? clear_bhb_loop+0x40/0x90 [ 359.834707][T10162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.834731][T10162] RIP: 0033:0x7f77d3f9e0d9 [ 359.834752][T10162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.834772][T10162] RSP: 002b:00007f77d4e39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.834797][T10162] RAX: ffffffffffffffda RBX: 00007f77d4225fa0 RCX: 00007f77d3f9e0d9 [ 359.834814][T10162] RDX: 000000000000000a RSI: 00002000000005c0 RDI: 000000000000001c [ 359.834828][T10162] RBP: 00007f77d4e39090 R08: 0000000000000000 R09: 0000000000000000 [ 359.834843][T10162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.834856][T10162] R13: 00007f77d4226038 R14: 00007f77d4225fa0 R15: 00007ffe872bf558 [ 359.834890][T10162] [ 360.748366][T10175] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1404'. [ 360.762716][T10179] netlink: 'syz.1.1406': attribute type 10 has an invalid length. [ 360.784918][T10179] netlink: 'syz.1.1406': attribute type 9 has an invalid length. [ 360.806167][T10179] netlink: 179280 bytes leftover after parsing attributes in process `syz.1.1406'. [ 360.835315][T10181] netlink: 'syz.0.1407': attribute type 39 has an invalid length. [ 361.197253][T10186] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1407'. [ 361.221507][T10186] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1407'. [ 361.271618][T10181] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1407'. [ 361.572991][ T5088] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 361.674191][T10203] FAULT_INJECTION: forcing a failure. [ 361.674191][T10203] name failslab, interval 1, probability 0, space 0, times 0 [ 361.694405][T10203] CPU: 1 PID: 10203 Comm: syz.1.1413 Not tainted syzkaller #0 [ 361.701937][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.712135][T10203] Call Trace: [ 361.715455][T10203] [ 361.718433][T10203] dump_stack_lvl+0x18c/0x250 [ 361.723167][T10203] ? show_regs_print_info+0x20/0x20 [ 361.728413][T10203] ? load_image+0x420/0x420 [ 361.733007][T10203] ? __lock_acquire+0x7d80/0x7d80 [ 361.738115][T10203] should_fail_ex+0x394/0x4c0 [ 361.742854][T10203] should_failslab+0x9/0x20 [ 361.747428][T10203] slab_pre_alloc_hook+0x59/0x300 [ 361.752554][T10203] kmem_cache_alloc+0x5a/0x2c0 [ 361.757387][T10203] ? alloc_empty_file+0x9e/0x1d0 [ 361.762385][T10203] alloc_empty_file+0x9e/0x1d0 [ 361.767224][T10203] path_openat+0x120/0x3270 [ 361.771830][T10203] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 361.777604][T10203] ? verify_lock_unused+0x140/0x140 [ 361.782853][T10203] ? do_filp_open+0x430/0x430 [ 361.787594][T10203] ? perf_trace_lock+0xfc/0x3b0 [ 361.792514][T10203] do_filp_open+0x1f2/0x430 [ 361.797078][T10203] ? vfs_tmpfile+0x620/0x620 [ 361.801777][T10203] ? _raw_spin_unlock+0x28/0x40 [ 361.806691][T10203] ? alloc_fd+0x590/0x640 [ 361.811108][T10203] do_sys_openat2+0x134/0x1d0 [ 361.815847][T10203] ? do_sys_open+0xe0/0xe0 [ 361.820336][T10203] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 361.826373][T10203] ? lock_chain_count+0x20/0x20 [ 361.831288][T10203] __x64_sys_openat+0x139/0x160 [ 361.836222][T10203] do_syscall_64+0x55/0xb0 [ 361.840702][T10203] ? clear_bhb_loop+0x40/0x90 [ 361.845433][T10203] ? clear_bhb_loop+0x40/0x90 [ 361.850196][T10203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.856152][T10203] RIP: 0033:0x7f6c8cf9e0d9 [ 361.860620][T10203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.880276][T10203] RSP: 002b:00007f6c8debe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 361.888736][T10203] RAX: ffffffffffffffda RBX: 00007f6c8d225fa0 RCX: 00007f6c8cf9e0d9 [ 361.896847][T10203] RDX: 000000000000275a RSI: 00002000000002c0 RDI: 0000000000000004 [ 361.904893][T10203] RBP: 00007f6c8debe090 R08: 0000000000000000 R09: 0000000000000000 [ 361.913008][T10203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.921013][T10203] R13: 00007f6c8d226038 R14: 00007f6c8d225fa0 R15: 00007ffd41b50158 [ 361.929071][T10203] [ 362.903157][ T5088] Bluetooth: hci3: ISO packet for unknown connection handle 20 [ 362.992949][T10218] netlink: 'syz.0.1418': attribute type 10 has an invalid length. [ 363.007366][T10218] netlink: 'syz.0.1418': attribute type 9 has an invalid length. [ 363.016676][T10218] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.1418'. [ 363.287879][T10223] netlink: 'syz.3.1420': attribute type 39 has an invalid length. [ 363.617439][T10226] netlink: 'syz.1.1419': attribute type 10 has an invalid length. [ 363.708120][T10226] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1419'. [ 363.776166][T10226] hsr0: entered promiscuous mode [ 364.646805][T10254] __nla_validate_parse: 3 callbacks suppressed [ 364.646907][T10254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1429'. [ 364.727082][T10254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1429'. [ 364.802271][T10252] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1428'. [ 364.821907][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1429'. [ 364.842719][T10259] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1430'. [ 364.852181][T10257] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1429'. [ 364.870824][T10259] netlink: 'syz.3.1430': attribute type 10 has an invalid length. [ 364.918683][T10259] netlink: 'syz.3.1430': attribute type 9 has an invalid length. [ 364.927566][T10259] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.1430'. [ 365.140103][T10265] netlink: 'syz.1.1432': attribute type 39 has an invalid length. [ 365.289737][ T5088] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 365.795019][T10274] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1432'. [ 365.890708][T10274] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1432'. [ 365.928934][T10265] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1432'. [ 366.416110][T10295] netlink: 'syz.0.1442': attribute type 10 has an invalid length. [ 366.447146][T10295] netlink: 'syz.0.1442': attribute type 9 has an invalid length. [ 366.970348][T10305] netlink: 'syz.0.1445': attribute type 39 has an invalid length. [ 368.413273][T10329] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 368.837821][T10336] netlink: 'syz.2.1453': attribute type 10 has an invalid length. [ 368.862309][T10336] hsr0: entered promiscuous mode [ 368.954737][T10340] netlink: 'syz.0.1454': attribute type 10 has an invalid length. [ 368.969352][T10340] netlink: 'syz.0.1454': attribute type 9 has an invalid length. [ 369.829074][T10354] netlink: 'syz.3.1462': attribute type 11 has an invalid length. [ 369.872152][T10354] __nla_validate_parse: 18 callbacks suppressed [ 369.872192][T10354] netlink: 212788 bytes leftover after parsing attributes in process `syz.3.1462'. [ 370.448890][T10371] netlink: 'syz.0.1465': attribute type 10 has an invalid length. [ 370.498899][T10371] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1465'. [ 370.531582][T10371] hsr0: entered promiscuous mode [ 370.724024][T10374] netlink: 'syz.1.1466': attribute type 10 has an invalid length. [ 370.747888][T10374] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1466'. [ 371.262392][ T5088] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 371.809167][T10400] netlink: 'syz.1.1472': attribute type 10 has an invalid length. [ 371.857718][T10400] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1472'. [ 371.925665][T10405] netlink: 'syz.0.1475': attribute type 11 has an invalid length. [ 371.935068][T10405] netlink: 212788 bytes leftover after parsing attributes in process `syz.0.1475'. [ 372.218724][T10414] netlink: 'syz.0.1478': attribute type 10 has an invalid length. [ 372.242982][T10414] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1478'. [ 372.507411][T10419] netlink: 'syz.0.1487': attribute type 10 has an invalid length. [ 372.531274][T10419] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1487'. [ 372.725153][T10424] netlink: 'syz.2.1481': attribute type 10 has an invalid length. [ 372.761633][T10424] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1481'. [ 374.429716][T10454] netlink: 'syz.3.1489': attribute type 10 has an invalid length. [ 374.461432][T10454] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1489'. [ 374.571016][T10460] netlink: 'syz.0.1491': attribute type 10 has an invalid length. [ 374.579618][T10460] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1491'. [ 374.809756][ T5088] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 375.099164][T10466] netlink: 'syz.2.1493': attribute type 11 has an invalid length. [ 375.175713][T10466] netlink: 212788 bytes leftover after parsing attributes in process `syz.2.1493'. [ 375.364190][T10477] netlink: 'syz.3.1495': attribute type 10 has an invalid length. [ 375.867276][T10494] netlink: 'syz.2.1503': attribute type 10 has an invalid length. [ 375.886005][T10494] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1503'. [ 376.212441][ T5088] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 376.588352][T10506] netlink: 'syz.1.1508': attribute type 11 has an invalid length. [ 376.637804][T10506] netlink: 212788 bytes leftover after parsing attributes in process `syz.1.1508'. [ 376.752258][T10514] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1510'. [ 376.763189][T10514] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1510'. [ 376.780988][T10514] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1510'. [ 376.792648][T10514] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1510'. [ 376.931561][T10517] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1511'. [ 377.700625][ T5088] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 378.906397][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.924060][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.485166][T10550] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 380.493627][T10550] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1518'. [ 381.226558][ T5088] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 382.177515][T10596] netlink: 'syz.3.1535': attribute type 10 has an invalid length. [ 382.270697][T10596] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1535'. [ 382.344609][ T5088] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 383.256269][T10620] netlink: 'syz.3.1540': attribute type 7 has an invalid length. [ 384.686696][T10647] netlink: 'syz.2.1548': attribute type 10 has an invalid length. [ 384.756696][T10647] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1548'. Stopping sshd: stopped /usr/sbin/sshd (pid 5529) OK Stopping crond: [ 385.781120][T10672] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1556'. stopped /usr/sbin/crond (pid 5516) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5437) [ 386.258548][ T5088] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 387.788775][T10709] netlink: 'syz.1.1563': attribute type 10 has an invalid length. [ 387.901277][T10709] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1563'. Stopping network: [ 388.788580][ T5088] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 389.811841][T10762] FAULT_INJECTION: forcing a failure. [ 389.811841][T10762] name failslab, interval 1, probability 0, space 0, times 0 [ 389.961409][T10762] CPU: 1 PID: 10762 Comm: syz.0.1577 Not tainted syzkaller #0 [ 389.968971][T10762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.979086][T10762] Call Trace: [ 389.982410][T10762] [ 389.985434][T10762] dump_stack_lvl+0x18c/0x250 [ 389.990230][T10762] ? show_regs_print_info+0x20/0x20 [ 389.995509][T10762] ? load_image+0x420/0x420 [ 390.000097][T10762] ? mark_lock+0x94/0x320 [ 390.004500][T10762] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 390.010666][T10762] should_fail_ex+0x394/0x4c0 [ 390.015429][T10762] should_failslab+0x9/0x20 [ 390.020019][T10762] slab_pre_alloc_hook+0x59/0x300 [ 390.025122][T10762] ? lockdep_hardirqs_on+0x98/0x150 [ 390.030370][T10762] kmem_cache_alloc+0x5a/0x2c0 [ 390.035190][T10762] ? dst_alloc+0x105/0x170 [ 390.039942][T10762] dst_alloc+0x105/0x170 [ 390.044248][T10762] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 390.050476][T10762] ? ip_route_output_key_hash_rcu+0x1281/0x2350 [ 390.056785][T10762] ? ip_route_output_key_hash+0x13d/0x330 [ 390.062642][T10762] ip_route_output_key_hash+0x1f3/0x330 [ 390.068234][T10762] ? ip_route_input_rcu+0x3120/0x3120 [ 390.073766][T10762] tcp_v4_connect+0x6c1/0x18a0 [ 390.078662][T10762] ? tcp_twsk_unique+0x970/0x970 [ 390.083638][T10762] ? mptcp_token_new_connect+0x4b9/0x620 [ 390.089321][T10762] mptcp_connect+0x403/0x5e0 [ 390.093982][T10762] __inet_stream_connect+0x254/0xdf0 [ 390.099322][T10762] ? inet_dgram_connect+0x340/0x340 [ 390.104576][T10762] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 390.109902][T10762] mptcp_sendmsg_fastopen+0x121/0x4c0 [ 390.115324][T10762] mptcp_sendmsg+0x144c/0x1670 [ 390.120133][T10762] ? aa_sk_perm+0x83c/0x970 [ 390.124676][T10762] ? aa_sk_perm+0x83c/0x970 [ 390.129237][T10762] ? aa_af_perm+0x330/0x330 [ 390.133778][T10762] ? mptcp_shutdown+0x80/0x80 [ 390.138495][T10762] ? sock_rps_record_flow+0x19/0x3f0 [ 390.143832][T10762] ? inet_sendmsg+0xce/0x2a0 [ 390.148461][T10762] ? inet_send_prepare+0x250/0x250 [ 390.153613][T10762] ____sys_sendmsg+0x61b/0x980 [ 390.158418][T10762] ? __asan_memset+0x22/0x40 [ 390.163048][T10762] ? __sys_sendmsg_sock+0x30/0x30 [ 390.168117][T10762] ? __import_iovec+0x3fa/0x850 [ 390.173026][T10762] ? import_iovec+0x73/0xa0 [ 390.177597][T10762] ___sys_sendmsg+0x2a6/0x360 [ 390.182405][T10762] ? __sys_sendmsg+0x2b0/0x2b0 [ 390.187241][T10762] __se_sys_sendmsg+0x1d0/0x2c0 [ 390.192129][T10762] ? __x64_sys_sendmsg+0x80/0x80 [ 390.197114][T10762] ? syscall_enter_from_user_mode+0x2e/0x80 [ 390.203047][T10762] do_syscall_64+0x55/0xb0 [ 390.207506][T10762] ? clear_bhb_loop+0x40/0x90 [ 390.212214][T10762] ? clear_bhb_loop+0x40/0x90 [ 390.216941][T10762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.222880][T10762] RIP: 0033:0x7f77d3f9e0d9 [ 390.227355][T10762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.247010][T10762] RSP: 002b:00007f77d4e39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.255572][T10762] RAX: ffffffffffffffda RBX: 00007f77d4225fa0 RCX: 00007f77d3f9e0d9 [ 390.264238][T10762] RDX: 000000003406c096 RSI: 0000200000000240 RDI: 0000000000000003 [ 390.272320][T10762] RBP: 00007f77d4e39090 R08: 0000000000000000 R09: 0000000000000000 [ 390.280452][T10762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.288563][T10762] R13: 00007f77d4226038 R14: 00007f77d4225fa0 R15: 00007ffe872bf558 [ 390.296855][T10762] [ 390.501959][T10770] netlink: 'syz.3.1576': attribute type 10 has an invalid length. [ 390.542309][T10770] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1576'. OK Stopping iptables: OK Stopping system message bus: [ 391.526486][T10785] netlink: 'syz.0.1581': attribute type 41 has an invalid length. [ 392.040135][T10801] netlink: 'syz.3.1584': attribute type 41 has an invalid length. [ 392.050429][T10801] FAULT_INJECTION: forcing a failure. [ 392.050429][T10801] name failslab, interval 1, probability 0, space 0, times 0 [ 392.063677][T10801] CPU: 1 PID: 10801 Comm: syz.3.1584 Not tainted syzkaller #0 [ 392.071251][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.081382][T10801] Call Trace: [ 392.084718][T10801] [ 392.087714][T10801] dump_stack_lvl+0x18c/0x250 [ 392.092481][T10801] ? show_regs_print_info+0x20/0x20 [ 392.097757][T10801] ? load_image+0x420/0x420 [ 392.102372][T10801] ? __might_sleep+0xe0/0xe0 [ 392.107063][T10801] ? __lock_acquire+0x7d80/0x7d80 [ 392.112185][T10801] should_fail_ex+0x394/0x4c0 [ 392.116960][T10801] should_failslab+0x9/0x20 [ 392.121613][T10801] slab_pre_alloc_hook+0x59/0x300 [ 392.126753][T10801] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 392.132568][T10801] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 392.138364][T10801] __kmem_cache_alloc_node+0x53/0x250 [ 392.143838][T10801] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 392.149740][T10801] __kmalloc+0xa7/0x240 [ 392.153992][T10801] tomoyo_realpath_from_path+0xe6/0x5c0 [ 392.159722][T10801] ? tomoyo_domain+0xd6/0x120 [ 392.164497][T10801] tomoyo_path_number_perm+0x248/0x5e0 [ 392.170040][T10801] ? tomoyo_path_number_perm+0x217/0x5e0 [ 392.175755][T10801] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 392.181405][T10801] ? ksys_write+0x1d2/0x260 [ 392.186064][T10801] ? __fget_files+0x28/0x460 [ 392.190761][T10801] security_file_ioctl+0x70/0xa0 [ 392.195787][T10801] __se_sys_ioctl+0x48/0x170 [ 392.200540][T10801] do_syscall_64+0x55/0xb0 [ 392.205030][T10801] ? clear_bhb_loop+0x40/0x90 [ 392.209827][T10801] ? clear_bhb_loop+0x40/0x90 [ 392.214590][T10801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.220554][T10801] RIP: 0033:0x7f2ce9b9e0d9 [ 392.225038][T10801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.244722][T10801] RSP: 002b:00007f2ce7dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.253221][T10801] RAX: ffffffffffffffda RBX: 00007f2ce9e26090 RCX: 00007f2ce9b9e0d9 [ 392.261303][T10801] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 000000000000000c [ 392.269516][T10801] RBP: 00007f2ce7dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 392.277655][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.285709][T10801] R13: 00007f2ce9e26128 R14: 00007f2ce9e26090 R15: 00007ffce1c52f68 [ 392.293790][T10801] [ 392.322134][T10801] ERROR: Out of memory at tomoyo_realpath_from_path. [ 392.445730][T10809] netlink: 'syz.2.1586': attribute type 39 has an invalid length. done [ 393.058682][T10817] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1586'. [ 393.107061][T10817] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1586'. [ 393.181282][T10809] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1586'. [ 393.878202][T10835] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1594'. [ 393.930152][T10835] netlink: 'syz.0.1594': attribute type 10 has an invalid length. [ 393.964802][T10838] netlink: 'syz.2.1595': attribute type 3 has an invalid length. [ 393.981602][T10838] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.1595'. [ 394.007762][T10835] netlink: 'syz.0.1594': attribute type 9 has an invalid length. [ 394.053673][T10839] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1593'. [ 394.076082][T10835] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.1594'. Stopping klogd: [ 394.902534][T10856] netlink: 'syz.3.1599': attribute type 39 has an invalid length. [ 395.320187][T10862] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1599'. [ 395.346979][T10862] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1599'. [ 395.485680][T10856] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1599'. OK Stopping acpid: [ 395.608689][ T5088] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 396.268479][T10883] netlink: 'syz.0.1605': attribute type 3 has an invalid length. [ 396.624857][T10893] netlink: 'syz.1.1608': attribute type 10 has an invalid length. [ 396.755008][T10893] netlink: 'syz.1.1608': attribute type 9 has an invalid length. [ 396.919687][T10901] netlink: 'syz.2.1611': attribute type 39 has an invalid length. OK Stopping syslogd: [ 397.162870][ T5088] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 397.885758][T10920] netlink: 'syz.3.1617': attribute type 3 has an invalid length. stopped /sbin/syslogd (pid 5125) OK [ 398.624721][T10940] __nla_validate_parse: 4 callbacks suppressed [ 398.624741][T10940] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1622'. [ 398.736307][T10940] netlink: 'syz.1.1622': attribute type 10 has an invalid length. [ 398.772251][T10940] netlink: 179280 bytes leftover after parsing attributes in process `syz.1.1622'. umount: can't remount debugfs read-only [ 399.173316][ T5088] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 399.363567][T10951] validate_nla: 1 callbacks suppressed [ 399.363587][T10951] netlink: 'syz.3.1626': attribute type 39 has an invalid length. [ 399.410881][T10953] netlink: 'syz.2.1627': attribute type 3 has an invalid length. [ 399.426519][T10953] netlink: 199628 bytes leftover after parsing attributes in process `syz.2.1627'. [ 401.350339][T10978] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1634'. [ 401.491757][T10978] netlink: 'syz.1.1634': attribute type 10 has an invalid length. [ 401.546120][T10978] netlink: 'syz.1.1634': attribute type 9 has an invalid length. [ 401.587304][T10978] netlink: 179280 bytes leftover after parsing attributes in process `syz.1.1634'. [ 402.259035][ T5088] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 402.369308][T10999] netlink: 'syz.2.1640': attribute type 39 has an invalid length. [ 402.434708][T11000] netlink: 'syz.3.1639': attribute type 3 has an invalid length. [ 402.541344][T11000] netlink: 199628 bytes leftover after parsing attributes in process `syz.3.1639'. [ 404.585997][T11030] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1647'. [ 404.632789][T11030] netlink: 'syz.0.1647': attribute type 10 has an invalid length. [ 404.680074][T11030] netlink: 'syz.0.1647': attribute type 9 has an invalid length. [ 404.721350][T11030] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.1647'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.16 closed by remote host. Sent SIGKILL to all processes Requesting system poweroff [ 406.220834][ T3488] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.333166][ T3488] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.484553][ T3488] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.577971][ T3488] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.131674][T11037] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 407.149709][T11037] ACPI: PM: Preparing to enter system sleep state S5 [ 407.169225][T11037] kvm: exiting hardware virtualization [ 407.175570][T11037] reboot: Power down serialport: VM disconnected.