last executing test programs: 11.072918654s ago: executing program 0 (id=3393): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xffffffffffffffa6, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000021006bcd210000006e04000081000000f0ffffff7aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r4) socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r4) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r1], 0x48}, 0x20028814) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f00000006c0), 0x4) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=ANY=[], 0x1160}, 0x24000001) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, r7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r7, 0x24, 0x0, 0x5, &(0x7f0000000440)=[0x0], 0x3ffffe70, 0x0, 0x0, 0x0, 0x0}, 0x40) 10.452166483s ago: executing program 0 (id=3397): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) recvmsg$unix(r1, 0x0, 0x2020) (async) recvmsg$unix(r1, 0x0, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000a40)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000001c0), 0x4) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) socketpair(0x10, 0x3, 0x2d49, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123900000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 6.07793717s ago: executing program 0 (id=3410): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800000000a1ffffff000000653a", 0x36}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) 3.748222983s ago: executing program 2 (id=3423): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee080", 0x52}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)="81", 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'b'}], 0x18, 0x5dc}, 0x41) 3.537155999s ago: executing program 1 (id=3424): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000440), 0x3d) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000100), 0x120) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x13440, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), 0x0}, 0x20) close(r1) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x0, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="b8", 0x1}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x2}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0xa, 0x1, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x14, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@alu={0x4, 0x1, 0xa, 0x8, 0xa, 0x40, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='GPL\x00', 0x5, 0x83, &(0x7f0000000ac0)=""/131, 0x41100, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8a8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000dc0)={@fallback=r5, 0x15, 0x1, 0xe0f0, &(0x7f0000000cc0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000d00)=[0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0], 0x0}, 0x40) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000e40)='freezer.state\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="000000ef4f0000000000000ad14e23fff1c110ea1083ed09cec1cf6e4168d52cf1eb1c221b7bc7afd5f36350a0e59805771144a9e044ce9c8100121f771ae5070196f20cab3f29d990c31ac93d3910013e43b1611bb2b59efb7cb80faae8f8b8dd1c46a0", @ANYRES32=r9, @ANYBLOB, @ANYRES64=r8], 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) r10 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_subtree(r10, 0x0, 0xc) sendmsg$sock(r6, &(0x7f0000000980)={&(0x7f00000000c0)=@llc={0x1a, 0x2, 0x0, 0x6, 0xd8, 0x8, @multicast}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000380)}, {&(0x7f0000000580)="fc4a9b9b188564", 0x7}, {&(0x7f0000000680)="a5d1041e57a59a5b8f1ed80f5d1e8437d5666836a305f850ea08cb5e05688a17d083c3a2", 0x24}, {&(0x7f00000006c0)="2d6a3282fe302f594217111d7c483c75c376eed0cbb41e928809be106f99d22db9fc942f8563ccd6d99eb0366d79575693a27a2f97b6ed6f7305d062549e0dd9c70b3524d843463232b6bb80f0d83451e934ad712150364ee3cd", 0x5a}, {0x0}, {&(0x7f00000007c0)="7a0c1121b0b06e2bd72e020c937d40dac1fafa4c4290765faf8bbf2d9194eb0adafac811151eb8a857ae4c5c56181af84e2bbe02d3fe9d612e1895ad56b9ce101f", 0x41}, {&(0x7f0000000840)="297505fd01cf57c3cb1f3f36994e11c81852eea05a0a5cf2755e", 0x1a}], 0x7, &(0x7f0000000900)=[@txtime={{0x18, 0x1, 0x3d, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x4800000}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x78}, 0x2064) 3.379978844s ago: executing program 2 (id=3426): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b12d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x10c}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r6}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f00000002c0)=r7}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB="972626d92e"], 0x50) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe10000ba00638977fb430500017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2102) write$cgroup_subtree(r12, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) ioctl$PERF_EVENT_IOC_ID(r12, 0x80082407, &(0x7f0000000100)) 2.384410195s ago: executing program 1 (id=3428): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x7fffffffefff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.271843318s ago: executing program 2 (id=3429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'virt_wifi0\x00'}) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r1, 0x19, 0x0, 0x3ff, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x3ff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r5, r2, 0x2f, 0x2020, 0x0, @void, @void, @value=r6, @void, r4}, 0x20) close(r3) sendmsg$kcm(r2, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000440)="b12ef97abbd815524345a25e604202e96241557e5ca022c6b07120a81d3ea1b535438c2f493240c55605287f299b3af2c83c8f4a6a698bf79391042a2934ee46d67f8eb8a3996d0822f056ad8cd66c", 0x4f}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="c73a92181805f484b320adff0e1adb7923912f35048cd4d09fb6d4d8eb609f9e1e9555bfc46f27955d546556a602a540ba6e63afbea0e2c74efa3c4893c8e3c164fe83738f1029834dedab32ff910882b72c4738c37616e41583391f2e282af5afa2aa0988388e1e65c3f98f1751e48b7356a3bec4d57b1008c1e07ce219667bc1a3a1037d1be8f030d07ec597832968a06969343dd8f241d99424f0748b0ee57a569ecc47aa3d71a9fc35c3c74bfd9493ff58137f9afe4210017cd4ac26da07e0846364a10a8c476d9ce6566444a9bf802c9a807ea44413b541dfc5139a6c612390632c2892f85f20", 0xe9}, {&(0x7f00000015c0)="984688ae2bb00c345ede05a7a5fae642487fc02dbb8b8c3d26f6da5c9c57320ebc6a027e9c8dd6daf3fbc6d8cf164a5816c9779a43ee6909d6bba46bf908b888c3bc2ec0f07bc6fb6f221ab6388d02782cf4593c93ddd7f8a120a479cc9de86a29356a40974cb94167a8df4b5c7fb4c3fb821b601190f50710b1ad167f8ac347592f22feacfbdcfad8dc8f5657b7a378ee47d7da1f13f02153b99c4c5aef71dcfbabfdae0db5f01eb32295ad610978fb893528927c88036db1b2a10ae807d33217f2aa53a0b715ca6163053c9614e74e5ec149f5fe4c6934f2d1a50a941474", 0xdf}, {&(0x7f00000016c0)="dc1ff88b25fe87ca13f5abdc5ba9802c5d8c85bb11e6290bed17cbefb80be6ff16dafd8b1db9cec321c94d4720cf2df0bab88b2005738e02a3", 0x39}, {&(0x7f0000001700)="3f3ee79875df6b6dbb0531eab603c42796d160829f6a0f9236e8c62b3fab624321ed86b69ea26ab05ca15d2318ff2e165600beb604516d45af6d8269ac5df6516177b54916cadef27a7b1ad775aa5ff6aa4500241f327a2a64d1465c2d926b097fc3ded6fc3ef240c5f994e4814dcd5463afa7f8ce41", 0x76}, {&(0x7f0000001780)="a1690071edabbd0d4a7b9387924983c3afc13581eb47963804a4df6c61ad90287f2fdca6e39a0c3b778d92b8e0bec3c1c6e4c797b78e2226015b41e859f54bc19e02f0816b008fa4ffa0424dbc4ca20b2e0a6de2adcb7490577616b49dc29a8fa2196fba44c52aa1f22ca994fef5eeef4fbf1c4cc7acefe02d97f5e490309c5865630b35cac6830ae81b2b844db8e434850d8d45b3f2b14bec65c2a05564cfd25c0fbe31239fab7efa160a421f96aa13b58d0a3ef4ed42093587", 0xba}], 0x7, &(0x7f00000018c0)=[{0x10, 0x0, 0x401}, {0x98, 0x114, 0x8, "115258dc93a9f77676d1566b2fa071f5341202910467af03a2bbbf510458cd0c34fca9b561968d5570402d5b4a9cb538507b5585dc266cd6b9bebc5afd2ac384b7a97bad35393ed5d01a6f217c64cf65af4e89300162390f1f04ad66d290270e2702634fd036f9a9f3ca70b3cbd17791de1642526a80317d409555d1469a7a9246d922a3089246"}, {0xc8, 0x18, 0x3, "43c5ae1d1b4d3d262b28553c1086f95ca001612635ce7f22f71f414885484667b9c86848cbdfaed169a96521839a21192656b397dac7660efb2541e198e18acd592623b3dd00fa55fe277396c8daa7903dc17a210ae4a54ef0349dcd164e5087ab48551fd080bbd823df01fff15007ed0910ee7746c8981a7b426c55e23f1171618a28f8f93a986365e94f6db24ef639ca830cb8973fcaa3e84c2bf8dbf189fda7bfcd387f91ab869bdd702727046cc87f9370e1adfbdc25"}, {0x50, 0x112, 0x5, "44100e443375028659419a2e123818ec55a1930be212ae0df6e7e60a36ad5fb6f9deab6aa502127800bed4970f73b09aec7ff2962fed8426ce0966f0"}, {0xe8, 0x104, 0xa1da, "73527b32e81f6b92b82888b5b3bde036fad448bf40689818b557f5817d39079b3dd109e46aa94ad4485b84ad71acf6216e25a54f23943961634e57bd8512d9dfa333702de6c9e1687807a2ed82a8bb718cb6caf74f590e42cefac4d3e5e5182efeb2a7b6eab77e1fe6538ba4f44e634fb7d5848cfb9656a26af71484803de2c2bab2116e811fbc4c97a5b993796f2c6e045c61abc7d5c201a5da48002bda65ee2ba9ce0e31fd4206d387879bcde243a029a17f7a1307a4c23a898f861c61fa26f61a3c8b0e8c705712a0499a2505291401eb336a"}, {0x48, 0x84, 0x7ff, "154155d262980674333147cc6ee831bf7b2f943a36345196fba0cc692c59f6e979886df8bbea43b71b32d5387b048a7382d9240b5af6"}], 0x2f0}, 0x40) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000001c00)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001c40)={'dummy0\x00'}) r7 = openat$cgroup_ro(r3, &(0x7f0000001c80)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001f00)={r3, 0x58, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002000)=@o_path={&(0x7f0000001fc0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002040)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x8, '\x00', 0x0, r3, 0x1, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0xc, 0x1e, &(0x7f0000001cc0)=@raw=[@btf_id={0x18, 0xe, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000001dc0)='GPL\x00', 0xeb, 0x44, &(0x7f0000001e00)=""/68, 0x41100, 0x40, '\x00', r8, @fallback=0xa, r2, 0x8, &(0x7f0000001f40)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001f80)={0x1, 0x0, 0x80}, 0x10, 0xffffffffffffffff, r3, 0x4, &(0x7f00000020c0)=[r9, r5, r10, r3, r3, r2], &(0x7f0000002100)=[{0x0, 0x1, 0x3, 0x4}, {0x3, 0x4, 0xe, 0x8}, {0x4, 0x2, 0xc, 0x6}, {0x2, 0x3, 0xa, 0x8}], 0x10, 0x3}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002280)={0x0, r7, 0x0, 0x2, &(0x7f0000002240)='(\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002200)={@map=r7, r1, 0x1e, 0x20, r2, @void, @void, @void, @value=r11, r4}, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000022c0)={r3}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc, '\x00', r8, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002380)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x31a5, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002440)=@generic={&(0x7f0000002400)='./file0\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x18, 0x23, &(0x7f0000002480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3e}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x4, 0x1, 0x0, r9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}}, @jmp={0x5, 0x0, 0xd, 0x7, 0x3, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000025c0)='GPL\x00', 0x6, 0x93, &(0x7f0000002600)=""/147, 0x40f00, 0x40, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000026c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002700)=[0x1, r5, r7, r10], &(0x7f0000002740)=[{0x4, 0x5, 0x7, 0x4}, {0x4, 0x4, 0xf, 0x5}, {0x1, 0x5, 0xe, 0xd}, {0x3, 0x2}, {0x1, 0x2, 0x4, 0x7}], 0x10, 0x400}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002980)={@cgroup=r2, 0x20, 0x1, 0x8, &(0x7f0000002880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000028c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000029c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xbb, '\x00', r8, r7, 0x4, 0x2, 0x5}, 0x50) 2.172532772s ago: executing program 1 (id=3431): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4001, 0x0, @empty, 0xf5}, 0x80, 0x0}, 0x3004c041) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@rc={0x1f, @none, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="16645419018da357f351123f7969e3f71bdac3530fcafc060f3e633d372ddf7696eb3a08c60927f9ab8834bbf95537388d601aafc37f2450c884a9bbd4b23470c4f1ee79df832427fe60e21b22e828c7eb16a32ae0ee9106055d0706a64a1b3bb9385990de1b54e337ba06b790b91315584892c2d52b5e95", 0x78}], 0x1, &(0x7f0000000280)=[{0x80, 0x10f, 0x7, "dd2e0b8e7d1e91fcd5c14d706c20f0dc61b94301979a5ec3b8b0b4865e0e95523c08f8a0190191bbdcc87edc459c05ebc4e4f405a60eafd7ae5572c76dc3cacf996fd4911ea990fce72f1436da5a2b3c6bb212bb35ea6dfff960dfd338ceb9a89cbbc02e17383fd7d1af"}, {0xe0, 0x6, 0x6, "4327a3c6a8dbe4cce9dd64ca573e1583b23ed4dfef7968cbc225389c6ac6b2e9b11df1f0c24967c57caca38388b57db26cbe5c00303a7586c8d0ef2006e3c548601166c6d121e214c9f8e79cacb94f9a73ebc4c100c7531c9d0392b941d3b61eb8e15563a762eca0bbb09656741402e5fb991aeafa30a5042102d37d4ab6c34ab721190a1961ce539440de1c9b975fd0fce6bf22ca20b2aeb8a778ff4dc6a6ecc2e857f2aa08d73893f843f1685642936cade4a4e997ac4ebd6c56f1746a993dca25ac6cbbbcc7fe4a972a56cc1a"}, {0x80, 0x112, 0x6, "488a2ec90d2ecf24548deaea9a0ecf3b27acbe190659105d690b2e7f5a4dad2557675660485955b46aad9d7153bdeba51666b7415e3832417fe5645902d27ee0247d9b5b28324c8e83c0869a797ed484051fe6679db3b39447c0fa354ebe3bb38b89d26c487577311791742c62b240fc"}], 0x1e0}, 0x4) close(0x3) 2.116241593s ago: executing program 2 (id=3432): r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x13072, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r0, 0xb) 2.014933987s ago: executing program 3 (id=3433): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02083300db5b6861589bcfe8875a060300000023fc00"], 0xfdef) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x19, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) 1.963918638s ago: executing program 1 (id=3434): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100904, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000f0000004000000040"], 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x754) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x1003, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r1, 0x0, &(0x7f0000000100)=""/31}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@ifindex, r3, 0x11, 0x20, r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="000000000000009500"/24], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) socket$kcm(0x2c, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) 1.528316232s ago: executing program 2 (id=3435): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x216, 0xc, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000016c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000711070000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4008, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x14}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r4, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0400000004000000080000000700000000000000636c19724557545802e38db714da25c9f87c0f82fbd8b59daea7d1f9c9b3c12ce67b51f8b7839b3c1950778150ff810d5220e7e10d2b054f87eed77b12bcd7eaf32391f37206b3a87a674ca0350d8c3eb4d3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x8901, &(0x7f0000000040)) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) 1.502604122s ago: executing program 3 (id=3436): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000340)='%d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000001001000001000000439d020000000000180000060100000010010000"], 0x30}, 0xfc00) 1.26966183s ago: executing program 3 (id=3437): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="05000000000000000000000000b267a98ebf275ff57100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001f80)={&(0x7f0000000100)="2c281e8df58cb78800a7befe1b2c8a2df2e35927ef", &(0x7f0000000280)=""/146, &(0x7f0000000e80)="612da6a56438d4994845f6b22d8674dbcc6fde1913d183010b099c5b310e367977389e59b3fec43105d8c9782b79a70f9dcb98309f94f35bfeac0af60ef265ef6c9f7d90d918239b452690afd47da7e844952dd472ed02dba4fe321d77b6dccb0ccbe069ffe0966b40b8e964c73afe4df0af5734f3d6b4d4486ebb45d3ca3a43a40ec8b4da04bd888ae32ed1d9b024a3971f07f37d5f6d8f1990a8fed238aae37053d2953bdb5a8b3d3124652b5d4546b2cb1511e537d496659a1b296d55b1271d396b753c07151c3127bf8a3612294383b08dfd2db1b81980429b5742fdf42a7f2ab9d1d44a7957f3e598344a9c52657df0b064991511b2817c21b5ed0cb1e479cc55a8ea50103a4658d0d55018c588aae99f7664d93bcf8ad566ca46d4ec15b0f6cf64d6f7103e69ec3d3525288fb9bbb5e29c4af5a04a1e62314d5a45f625864e6bd089d3ee7f8e07fc4932514584f0035de269566bfc5fbeea9d18fb32958f8dfcc2e0ef1cad3f56854da0b6c16b35b37601f2d8fa195dcf90f3091cb3918cf0bdfb30516194b08a7e22e67e73ca54b6f741099f4542f84daac9ce3331385cd9749dbeb35f2830bdf18f6286e0a438685bfc1174f6ca1c6ba3f1a7dfa6d755747be5f766efac3235c2352c0a03cb0e338f25a8de0c1055255acd67a1eb0d7b9019c494711047a9a602d27e033d6e72d4f1ee45b5049e880ee2b19f50a8ad878fbad489bc5cb96c38b153b796147d7e9fda13ed4d3c2f6e09d876ec10dbddf6d3bf5c7398646273a24681a185a25a41d90138ea1f9181c661d878d6d0e7908458ba12fe44a884cbbc79cc8adf648d336cad761812d515d67dd17e395537a6b197a8c11a3eefb341567117248dd7ff056ea60f9363f128b7dcb2b65bd73039a4d40d2900b60afff12648bb6cb12c505c24205d8f23ad6041ba818c154b6ee069d146d15a2c3b8b6889fc7f46751c76ce8aade78bc08f042662da68453f52ed7019d15bdda8e0368305d06a2ca62c9686ada96fbcac3a371aee7a95ff664da8d9d7e86a29666796f483f6347d8c44832c83849723010029d751a5d40b28e7aec2446a2cca9f4142d0ac740d0ee5965b789da19f0c5e53c15387621fa968bd32b7ea14161a036a6e572d940e8916545f8e84d1ed0e2cb1e4a50efa897e96b02285fbaad582647784665f9523142936658035bc532710f72a00ed7167d93bc3dd5a881497c6284d1b6da7522297ffdee290500d0d9b560d7a88a720b7eb10a388f5d5d37c07a4a15a15f411d8dfea90ecef8670581ea00128622373a20162d6b29fc8f5a9307ea23b673d04b3dd5acf5ee3c6b4b027c5299b495326157b780bac03ca4d8ed6a86ecf5aacaf7b1f07ab87a1e61ac433d7c13d0613f9da87df37b88644a8d9c01d41ebc2981060147330a15ed118f2096fa85fe39f4cc568afc5a15da121434b822a31e7c9e1075bebcd20161d417ca1c06a5ead739e1cedb5bcecd0f3839906fc0a86f715bc8e29ad33cc66470fbdf42614bf93b1fbfbaf7524cff0a748655e1e735a8ba7e0788dbb0422f676eaf08b8702009348103573bdd6bef53b0a461083c96462b24029fdedb9427d349b02e50358bb25451d3f3273ddd4b64fad80a5ffb9811ccf29c13d8e6be461f60dbe9c982568bced6ce7a8c77b1544aa986e9dc624cce5dbeffd8266f00a1e4d3e0dbc059479b839bb3e09150081f58c87cfee17786bf1bb6a4ba25277101aaadae0f1c7d026ab0d630b5250404f5caf101b7b3dd7b2634ecf658bb33094dda7a138fc6d7e82a5442525ac82539973a5a2731f44fa10e8e01e933a8426932c0b88ac04da875193c2312647add83d39e8791f2481f7ed647ddecac21a4c439979623f464133247471abbcf576550da44eb139235bbc09438ae67888f4f85053743f6b675f484bac307ceba1746ac76761a3b490cdc9d2ad07561e1a0a184f5b97db16a464451cecc4d1ea91bb1f702c924ab5064f72afe8b954a75687d26b58883cbbad57e45e901759a757edb0f1e00ccc8f22141d8bc752108111df2dfc4a01febf7e94f125ba5642c93946434a9233e40536092101200b5b523de7f891d202992325fc9101131172565b46db6de5ee27e1849322e51abce542f6e33c30d5cc072ebb7c6639d6d7f1d0c86266d05cd250d2b79fa9e6bfaaf7037f7ce037602756ca3848df44640ff59a0b4530295e79995e5472a9e1fd433d502ef235792354acacf6e5bffd005d5865a9f9d3d2884252235d882cf6bd85d2c0302518b4debd40baa8ccbba0a88f4f4e284d9656f274b78aee91912f148d38d7d76e9580e5a9dd4575fa2b76464b2443d4d7f6e842df31e112aeeb3c32a853fa97c58885b83b4f3edc1a0f0561e4b5041c7a57c213a1ed9bda20b16f06718fe6635c10a768cafd57172515b0d4d787843ee89e223755470e4348f953d8fa7f40b6f388c17e2e36c9088fc546473e4b8ec51abcafe080833f22df7eaed13cd3afe4c72b3c64f3acc47aaafbded387a48e0971f981da6e3aa4f5e0494b15c6d57336b86c851d9ae00dd74b18621f7be8001880fdd6c4e8f745e1b1b3d0ffce5a98ec83564bd4395a8b26259855ee604f90a16e429129336f28eacd98234ccfc2e319da8eb17a2a7b4e91db0ad23ae2aa7f4384bf8b5a813060ffa3dda481c7228ad34ee1c3617a20bc6475e324f146b37f84b0abcf695ec801c76ce78ff42416e65e201a9061a51e772246d35fadde654871edd22cd46974739a99235290485d3df915cbaa37520d55fb226c5d9f825d315bcd2378090b7f8e25e0f8c2b82af6a18e5637faba126beb738864e518a9e511fbd664b453c8e43c197a3faeff9ce5a116988614371d3c3096063d0ec52ae32b9d95b90b483182ced99735c230e408b66d366d4482d82eb939e60603a2588f0fb97a02feb8019f1617f94d396e7bce26e81111d0d85e0b1c4172b2c6e27225b6dec7f13b39fb1bdf1e480ab312d4a24574dd9e185d30622aa451076efa3da08a457faaea83cbfc33ee3ac1ca7c31e52afb24bb1fb3b04b68a8dfe741b376612ed00478403cfbd8752e0e57e0682f97e172ba2acf23160abfe7866ae8ec4c89c0e031f3a3d3b3c97cff4e3c90e4809f966e89a1b1ea15241d3f563acce2e097858b8f6bbd1eefdcfce68c5281ead859349ff14e0821e651f48850573e0edc6eca79853f7ad9ebf47e9a5ec4978e6ba47cd6845c1cf0a307c0572980a092b5a0011b6d5b99b625b916514776437f55114788ae3d21d546899af3ee470a9ab868479e0b59a599cae77101323adefe22984502423b812defcba8a5dc3f9577b90a9441a4c0f2505c9d2efcbf218403b5220a7d0904562ee6bf95891927dd3ab662acb76d5f788698d4580bed9d1c34cfb1d643b104c78564d8d37f079ce1466532feabf9fa7f08aaf62d195cb0e70f0d0f4eb2264f4c799786ff9ac7634640b7c03850b44b5303933ef58c80a9b6b7af30a39a6ee26dcd4e025a580a2176738fffe21a2d14fc331a7524c01cfabb93056b6ad36d53cd373fab4172c9b144c79e58dee44bc0b766eae8186070df4c6224c3cdeb9316a01ff86316c46dbe7276f3b41569a9b030866516a25a7b7b11e9eff29916e71793ecc37ab439bda516c6dd866d14ab26462d54d4ae7bebb10035905af79ed50614b805b65afa66175287e334941b66f68e4a122be523e48a3f325c5b202cc7b9f8108c8d333539cee7afe7e1c09f37154d87b1b5982cbfdc58c2436dd0e325b2e250b5520e3e11f13f75c3de6b5145b0bdc9257aefcccd400a5d148b1b0fbdc9d3de13c7389fcc23925935c4ee16a46289479577a547a57b751ae3fd3415efcca98365bee24694eea4f4573a762344596638c982f0941ad59da858bafa06d54dc8ad7e831e03a85ead32f4343b6e4cad8fc910b5da50c9aa19735e80ca980f1be4ce71a9d09fca59cc99ece4a3fede36e954e974636501fea3f31589229e0b5b9a45aa8256f994475ef280747e2982a43683c9bf61408b3f90ee1f11265e62b4482c7e495cfed22ac0dca45bd37ddd4fdf00ac8350b9bffea5be2b5f0a197782e73151d3830ea4851cf4d25e778d88616f1dc9a3de7bab7d4e3cc12e696edd58eb93104ca88774c977102a8b0bdc3dcb4bac3826534078efef620e09e1ad8dc6deac95ce20cc0c62b7c467a8ccbfd0af1a2f7b42c3f8c15126487b3f42f71afa9170072a00be6f82b52c7d90b5a27568534258bdc9d0e3b12374a52e7d27280cdeca109d01f731fb1b03db5665f400555572a3ab9d7ab3906dbb4142e762be9827274f0f4fa2b310ebd13496d17fe4621e780c6736504881107bca8f7f12e14c04385643cc6e87787133f2f7a450b3078eb5bacf4373f34fda635deb48eb7c50db762f0b312bf1cf062f46fef6721e1a1b331596a9cdde1f8ce49f714667937e6fd763c348bd783174997340c9b4c9a8084c48f42dfe8ab66e0be76c755ea51c4e33977ddc9c21c2432bc32e43159523854067bec7943874ff076a2229e0e2518350629221ba58cb76d296a22547a31b10f0d87af104564c95141f87d59478c9c0a6bdaf77fdc6a8010d293bdf790d67814325a057c09bc745f9994d74da5457b9089466fcdbc12326e753107fc3d8e5d60445006ace383c58308ef66622bdd3336939db4b699d46eaa37f2f598bc548e0bc9ef457f41d292bcfce68acc14b8ee68436efaeca3fed7568b540b2c46c4884cdba47d8e6442421c9ededfd799e7bb40d38d9d2ecd1a181ce97995a94980c19eb2b0a5bfbd50b4364b01197058d03e88ddce5357426aab879c94370259d7dd2584bc7294abc1b25892395dfd41064edb3cf9eedc145e8a8ef806596f702dc9f17f3f9be68dbb2b0633dea8ca6c9dd500489c4bc99bef851a3633d9f062fc15130d4b24ce0b8fd8aa232a1bb9dca8a4d62c35b89968a7240677396145ef5e8e6894a9b2a237a14e5c23c93aabcd1f8fa918fce28cc8912d76f84a529b2a5a003f12fe8a775cab18534f034bd0c8ab7926bd265cc7631f000bfd95bb537d2d803afacfcd30dbbc48f66e2c227738556b8e8e79fb3c677d356a860830b21299fd03e4100c0927c62611b963268dad04a13956abc3f0ae25f28fc2052e1fecff4ed57b9d553867d3f5dc3117efb182cc03468fb7bac0f0bc0dc77fb82907c68ac7bf5f413357ef53725820848555171a1b6299c1835b0c22d4e1781c7e593dc9f1aa8821311e1111f4c05dac8511347de52ce232424af38e2e1f762345dabc0e510659a32929ab94bddf014aaa433859f99b5f31c70c4122d97fde3fb568545d2d79557f059144df97e27d4e8f4ba7a431b7e0726384ce6be40a9f07fa83fdf5738625056626141881a4292ad850c0329f1668450a2ff4141841cd7167b61289ba76be6c46a23c2c6041f47afef2e00927ec15e24fa99b5bcd2b9a2c23b34db069add883f5f4f8dbcccf0f6d45e6078e3a765a53edb82b5a24ab52c16f540c0a74f5896d48a77463a90b6f387759fd2035d2733053ff1cd67e2ddf26a0ac1610d7cd25d5270ca393790abe0a743db0a4e30b1e4a3de746c6b9fdbc2bb0dc29af56f707174fe79d5e3f63c057e41830e91ac538155ffe28292eee49f355de91f61c97ed87e20f9bb7b469208f939ebaea973ed4bd0a7b94571c4a73484d042b058f7e57d1d662cdf37b6ba93c2d066ea3386a63445b29efdf5e8fe8d6be0f796195b0e77c58e14fe96227d937d25721d2f5bc1260cf02159922c7e8031b4b5ce5559", &(0x7f0000000340)="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", 0x0, r0, 0x4}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="05000000000000000000000000b267a98ebf275ff57100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001f80)={&(0x7f0000000100)="2c281e8df58cb78800a7befe1b2c8a2df2e35927ef", &(0x7f0000000280)=""/146, &(0x7f0000000e80)="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", &(0x7f0000000340)="315afccbe3b6bd93b346ec76fd6bc6705af495032e78b65c0de516e71cc95c894774ae9b7e0e4c4c7f0c2cd6982aabb00be961652c51951f8604007cd4d74d4cb3a5333bd73be9ea237ff8531321be624bbc6746fa6912a9be4877d5b20a240612fab65ccdc59f19de8f1719f564711118e89d8fdff02eebc96c7adb8c72b2a4355ad7ce86360d2a96dd0dad8bd92cb07ee1d9fde0178fe77c1077fce96629d5db7c22e056ff639a4e8aaa54c9c5fa858e2cba97f341149875a197299e6701804f9df06af4cdf08ad641e4668293fdb20d826c66421902d7bfdbf696102e1ea0c8b788166f87da4eb996b2f67ea3d160a5a56a80d5c58d4c424f224032b08d26ebfd2183b24d036b56855c0521aeb728c51c6ab4d39f04874e13d5241c6b68c7a9e404bd486a6d5baf97272627176a4fc7634a42d3e95774db830bdff5bc089045b788fd4c703753d7f308fc2ca20c516a55b6c3fc643eb2585e5eb929a956ac2d9af924c89e899f68c0fe539530423d72977eebdcd78fca1ce0c79c71ec1b31deb7c5f96715924c4c886b48b7757b3e4e5c898379042c9f6a409a0ebe819dd712b86e", 0x0, r0, 0x4}, 0x38) (async) 1.131255825s ago: executing program 1 (id=3438): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3b000000}, 0x50) 1.041490028s ago: executing program 3 (id=3439): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000fdffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000003500000095"], &(0x7f0000000140)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 702.908258ms ago: executing program 3 (id=3440): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000001b00)={&(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000019c0)}, 0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r1, 0x84, 0x65, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x41000000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) 133.516485ms ago: executing program 1 (id=3441): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5ae) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000c40)=ANY=[], 0x0, 0x2000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000100) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0)=r6, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xefff3000, @mcast1, 0x7, 0x40000}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x400800c) 130.072136ms ago: executing program 2 (id=3442): socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0800000001000000ff0100000f0000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000918000000000000000000006c0116a4a50dc8ea5967e2"], 0x50) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_procs(r2, &(0x7f0000000580)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0xf9, 0x66, 0x7, 0x3, 0x0, 0x2, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x7}, 0x910, 0x8, 0xae3343a, 0x9, 0x981, 0x40, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb}, r4, 0x2, r1, 0x1) write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12) r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff) r8 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f00000000c0)='THAWED\x00', 0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00", 0x1a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 0s ago: executing program 3 (id=3443): r0 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x3, 0x0, 0x0, 0x0, 0x400, 0x4552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x3}, 0x18, 0x0, 0xfffffffe, 0x5, 0x20000000000005, 0x8, 0x103, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={r2}) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f00000015c0)="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", 0x567}], 0x1, 0x0, 0x0, 0x97ffffff}, 0x4000) kernel console output (not intermixed with test programs): tlink: 'syz.1.1844': attribute type 13 has an invalid length. [ 394.663107][T11181] netlink: 'syz.1.1844': attribute type 58 has an invalid length. [ 394.674725][T11181] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1844'. [ 397.357868][T11290] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1857'. [ 398.312240][T11323] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1866'. [ 398.347066][T11323] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.1866'. [ 398.403195][T11330] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1869'. [ 398.573677][T11330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.605730][T11330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.709363][T11330] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 398.775990][T11330] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 398.805161][T11330] bond0 (unregistering): Released all slaves [ 398.877347][T11340] batadv0: entered promiscuous mode [ 398.883793][T11332] netlink: 'syz.0.1870': attribute type 10 has an invalid length. [ 398.915621][T11332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1870'. [ 398.942552][T11332] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 398.952079][T11332] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.986217][T11332] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 399.121375][T11332] syz.0.1870 (11332) used greatest stack depth: 18512 bytes left [ 399.315697][T11349] netlink: 'syz.3.1874': attribute type 15 has an invalid length. [ 399.348073][T11349] netlink: 'syz.3.1874': attribute type 7 has an invalid length. [ 399.806968][T11359] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1877'. [ 399.826925][T11356] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1877'. [ 399.836030][T11356] netlink: set zone limit has 4 unknown bytes [ 399.865558][T11359] netlink: set zone limit has 4 unknown bytes [ 400.054295][T11369] netlink: 'syz.2.1883': attribute type 10 has an invalid length. [ 400.152748][T11374] netlink: 'syz.1.1885': attribute type 3 has an invalid length. [ 400.161798][T11374] netlink: 'syz.1.1885': attribute type 1 has an invalid length. [ 400.169993][T11374] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1885'. [ 402.140505][T11392] netlink: 'syz.1.1890': attribute type 10 has an invalid length. [ 402.178163][T11392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1890'. [ 402.189605][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 402.244696][T11392] netlink: 'syz.1.1890': attribute type 10 has an invalid length. [ 402.543759][T11406] FAULT_INJECTION: forcing a failure. [ 402.543759][T11406] name failslab, interval 1, probability 0, space 0, times 0 [ 402.571077][T11402] syzkaller0: entered promiscuous mode [ 402.577015][T11406] CPU: 1 PID: 11406 Comm: syz.0.1896 Not tainted syzkaller #0 [ 402.584547][T11406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 402.594659][T11406] Call Trace: [ 402.598605][T11406] [ 402.601583][T11406] dump_stack_lvl+0x18c/0x250 [ 402.606319][T11406] ? show_regs_print_info+0x20/0x20 [ 402.611559][T11406] ? load_image+0x420/0x420 [ 402.616108][T11406] ? __might_sleep+0xe0/0xe0 [ 402.620741][T11406] ? __lock_acquire+0x7d40/0x7d40 [ 402.625816][T11406] should_fail_ex+0x39d/0x4d0 [ 402.630547][T11406] should_failslab+0x9/0x20 [ 402.635088][T11406] slab_pre_alloc_hook+0x59/0x310 [ 402.640163][T11406] kmem_cache_alloc+0x5a/0x2d0 [ 402.644964][T11406] ? security_inode_alloc+0x34/0x110 [ 402.650303][T11406] security_inode_alloc+0x34/0x110 [ 402.655469][T11406] inode_init_always+0x8fc/0xc90 [ 402.660475][T11406] new_inode_pseudo+0x95/0x1d0 [ 402.665280][T11406] __sock_create+0x12d/0x940 [ 402.670036][T11406] ? __asan_memset+0x22/0x40 [ 402.674691][T11406] udp_sock_create4+0xcb/0x480 [ 402.679613][T11406] ? erspan_exit_batch_net+0x30/0x30 [ 402.685002][T11406] rxrpc_lookup_local+0xd1f/0x1610 [ 402.690316][T11406] ? rxrpc_local_dont_fragment+0x70/0x70 [ 402.696006][T11406] ? lockdep_hardirqs_on+0x98/0x150 [ 402.701246][T11406] ? _local_bh_enable+0xa0/0xa0 [ 402.706150][T11406] rxrpc_sendmsg+0x30a/0x5b0 [ 402.710782][T11406] ? rxrpc_getsockopt+0x150/0x150 [ 402.715845][T11406] ____sys_sendmsg+0x5ba/0x960 [ 402.720655][T11406] ? __sys_sendmsg_sock+0x30/0x30 [ 402.725715][T11406] ? __import_iovec+0x3fa/0x850 [ 402.730639][T11406] ? import_iovec+0x73/0xa0 [ 402.735173][T11406] ___sys_sendmsg+0x2a6/0x360 [ 402.739881][T11406] ? get_pid_task+0x20/0x1e0 [ 402.744808][T11406] ? __sys_sendmsg+0x2a0/0x2a0 [ 402.749630][T11406] ? __lock_acquire+0x7d40/0x7d40 [ 402.754716][T11406] __se_sys_sendmsg+0x1c2/0x2b0 [ 402.759608][T11406] ? __x64_sys_sendmsg+0x80/0x80 [ 402.764593][T11406] ? lockdep_hardirqs_on+0x98/0x150 [ 402.769834][T11406] do_syscall_64+0x55/0xb0 [ 402.774284][T11406] ? clear_bhb_loop+0x40/0x90 [ 402.779042][T11406] ? clear_bhb_loop+0x40/0x90 [ 402.783763][T11406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.789700][T11406] RIP: 0033:0x7fef2e79ce59 [ 402.794147][T11406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.813839][T11406] RSP: 002b:00007fef2f579028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.822412][T11406] RAX: ffffffffffffffda RBX: 00007fef2ea15fa0 RCX: 00007fef2e79ce59 [ 402.830414][T11406] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000003 [ 402.838432][T11406] RBP: 00007fef2f579090 R08: 0000000000000000 R09: 0000000000000000 [ 402.846468][T11406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.854490][T11406] R13: 00007fef2ea16038 R14: 00007fef2ea15fa0 R15: 00007fff192b2b68 [ 402.862558][T11406] [ 402.873824][T11402] syzkaller0: entered allmulticast mode [ 402.884849][T11406] socket: no more sockets [ 407.864500][T11475] __nla_validate_parse: 2 callbacks suppressed [ 407.864522][T11475] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1919'. [ 407.935052][T11475] netlink: 'syz.2.1919': attribute type 33 has an invalid length. [ 407.951594][T11475] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1919'. [ 409.417402][T11269] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 412.306481][T11515] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1934'. [ 414.109901][T11539] netlink: 'syz.0.1942': attribute type 3 has an invalid length. [ 414.144231][T11539] netlink: 'syz.0.1942': attribute type 1 has an invalid length. [ 414.166323][T11539] netlink: 198800 bytes leftover after parsing attributes in process `syz.0.1942'. [ 414.210140][T11539] netlink: 'syz.0.1942': attribute type 29 has an invalid length. [ 414.236774][T11539] netlink: 'syz.0.1942': attribute type 29 has an invalid length. [ 414.256437][T11539] netlink: 'syz.0.1942': attribute type 29 has an invalid length. [ 414.265958][T11539] netlink: 'syz.0.1942': attribute type 29 has an invalid length. [ 419.773395][T11594] netlink: 'syz.0.1962': attribute type 10 has an invalid length. [ 419.786591][T11594] team0: Device geneve1 is up. Set it down before adding it as a team port [ 426.779852][T11667] syzkaller0: entered promiscuous mode [ 426.786059][T11667] syzkaller0: entered allmulticast mode [ 429.032603][T11684] netlink: 'syz.3.1997': attribute type 2 has an invalid length. [ 429.042806][T11684] netlink: 'syz.3.1997': attribute type 8 has an invalid length. [ 429.051266][T11684] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1997'. [ 429.212658][T11695] sctp: [Deprecated]: syz.2.2001 (pid 11695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.212658][T11695] Use struct sctp_sack_info instead [ 429.768760][T11715] FAULT_INJECTION: forcing a failure. [ 429.768760][T11715] name failslab, interval 1, probability 0, space 0, times 0 [ 429.799213][T11715] CPU: 1 PID: 11715 Comm: syz.0.2008 Not tainted syzkaller #0 [ 429.806765][T11715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 429.816919][T11715] Call Trace: [ 429.820240][T11715] [ 429.823207][T11715] dump_stack_lvl+0x18c/0x250 [ 429.827942][T11715] ? show_regs_print_info+0x20/0x20 [ 429.833192][T11715] ? load_image+0x420/0x420 [ 429.837758][T11715] ? __might_sleep+0xe0/0xe0 [ 429.842414][T11715] ? __lock_acquire+0x7d40/0x7d40 [ 429.847501][T11715] should_fail_ex+0x39d/0x4d0 [ 429.852240][T11715] should_failslab+0x9/0x20 [ 429.856809][T11715] slab_pre_alloc_hook+0x59/0x310 [ 429.861901][T11715] ? sk_prot_alloc+0xe7/0x210 [ 429.866676][T11715] ? sk_prot_alloc+0xe7/0x210 [ 429.871454][T11715] __kmem_cache_alloc_node+0x53/0x250 [ 429.876910][T11715] ? sk_prot_alloc+0xe7/0x210 [ 429.881653][T11715] __kmalloc+0xa4/0x230 [ 429.885872][T11715] sk_prot_alloc+0xe7/0x210 [ 429.890436][T11715] ? sk_alloc+0x24/0x360 [ 429.894736][T11715] sk_alloc+0x3a/0x360 [ 429.898875][T11715] ? bpf_ctx_init+0x163/0x1a0 [ 429.903628][T11715] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 429.909236][T11715] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 429.914680][T11715] ? __fget_files+0x28/0x4b0 [ 429.919333][T11715] ? __fget_files+0x28/0x4b0 [ 429.923983][T11715] ? __fget_files+0x43d/0x4b0 [ 429.928730][T11715] ? cpu_online+0x60/0x60 [ 429.933119][T11715] bpf_prog_test_run+0x321/0x390 [ 429.938119][T11715] __sys_bpf+0x49d/0x890 [ 429.942411][T11715] ? bpf_link_show_fdinfo+0x390/0x390 [ 429.947850][T11715] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.954084][T11715] __x64_sys_bpf+0x7c/0x90 [ 429.958559][T11715] do_syscall_64+0x55/0xb0 [ 429.963018][T11715] ? clear_bhb_loop+0x40/0x90 [ 429.967755][T11715] ? clear_bhb_loop+0x40/0x90 [ 429.972493][T11715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.978445][T11715] RIP: 0033:0x7fef2e79ce59 [ 429.982913][T11715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.002571][T11715] RSP: 002b:00007fef2f579028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.011047][T11715] RAX: ffffffffffffffda RBX: 00007fef2ea15fa0 RCX: 00007fef2e79ce59 [ 430.019067][T11715] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 430.027084][T11715] RBP: 00007fef2f579090 R08: 0000000000000000 R09: 0000000000000000 [ 430.035099][T11715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.043124][T11715] R13: 00007fef2ea16038 R14: 00007fef2ea15fa0 R15: 00007fff192b2b68 [ 430.051158][T11715] [ 430.314895][T11725] netlink: 'syz.0.2012': attribute type 29 has an invalid length. [ 430.356277][T11725] netlink: 'syz.0.2012': attribute type 29 has an invalid length. [ 430.632488][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2020'. [ 430.870859][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2022'. [ 431.509656][T11764] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2027'. [ 431.853357][T11779] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2032'. [ 433.234954][T11794] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.2039'. [ 433.247328][T11794] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 436.160650][T11827] netlink: 'syz.1.2052': attribute type 33 has an invalid length. [ 436.169048][T11827] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2052'. [ 436.178755][T11827] `: renamed from ip6tnl0 (while UP) [ 436.190019][T11827] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 436.209869][T11838] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2056'. [ 436.528078][T11846] netlink: 11006 bytes leftover after parsing attributes in process `syz.2.2059'. [ 436.565198][T11846] netlink: 'syz.2.2059': attribute type 3 has an invalid length. [ 436.573603][T11846] netlink: 12403 bytes leftover after parsing attributes in process `syz.2.2059'. [ 436.966062][T11859] netlink: 'syz.0.2064': attribute type 10 has an invalid length. [ 436.980165][T11859] team0: Device veth1_vlan is up. Set it down before adding it as a team port [ 437.106892][T11868] FAULT_INJECTION: forcing a failure. [ 437.106892][T11868] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 437.148405][T11868] CPU: 0 PID: 11868 Comm: syz.0.2066 Not tainted syzkaller #0 [ 437.156075][T11868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.166222][T11868] Call Trace: [ 437.169581][T11868] [ 437.172597][T11868] dump_stack_lvl+0x18c/0x250 [ 437.177403][T11868] ? show_regs_print_info+0x20/0x20 [ 437.182694][T11868] ? load_image+0x420/0x420 [ 437.187305][T11868] ? __lock_acquire+0x7d40/0x7d40 [ 437.192412][T11868] ? perf_trace_lock+0xfc/0x3b0 [ 437.197388][T11868] should_fail_ex+0x39d/0x4d0 [ 437.202187][T11868] prepare_alloc_pages+0x1e2/0x5f0 [ 437.207417][T11868] __alloc_pages+0x134/0x460 [ 437.212113][T11868] ? zone_statistics+0x170/0x170 [ 437.217268][T11868] ? alloc_pages+0x4dc/0x740 [ 437.221948][T11868] ? do_raw_spin_unlock+0x121/0x230 [ 437.227270][T11868] __get_free_pages+0xc/0x30 [ 437.231944][T11868] kasan_populate_vmalloc_pte+0x35/0x100 [ 437.237694][T11868] __apply_to_page_range+0x860/0xdd0 [ 437.243168][T11868] ? kasan_populate_vmalloc+0x70/0x70 [ 437.248654][T11868] ? apply_to_page_range+0x50/0x50 [ 437.253871][T11868] ? do_raw_spin_unlock+0x121/0x230 [ 437.259157][T11868] alloc_vmap_area+0x1d0c/0x1e30 [ 437.264233][T11868] ? vm_map_ram+0xcb0/0xcb0 [ 437.268805][T11868] ? rcu_is_watching+0x15/0xb0 [ 437.273669][T11868] __get_vm_area_node+0x162/0x370 [ 437.278782][T11868] __vmalloc_node_range+0x36e/0x1330 [ 437.284135][T11868] ? sock_hash_alloc+0x261/0x4d0 [ 437.289217][T11868] ? free_vm_area+0x50/0x50 [ 437.293803][T11868] ? bpf_map_area_alloc+0x5e/0x110 [ 437.298977][T11868] ? rcu_is_watching+0x15/0xb0 [ 437.303799][T11868] ? bpf_map_area_alloc+0x5e/0x110 [ 437.309012][T11868] bpf_map_area_alloc+0xf1/0x110 [ 437.314024][T11868] ? sock_hash_alloc+0x261/0x4d0 [ 437.319027][T11868] sock_hash_alloc+0x261/0x4d0 [ 437.323875][T11868] map_create+0x877/0x12f0 [ 437.328351][T11868] ? bpf_lsm_bpf+0x9/0x10 [ 437.332766][T11868] __sys_bpf+0x651/0x890 [ 437.337077][T11868] ? bpf_link_show_fdinfo+0x390/0x390 [ 437.342552][T11868] ? lock_chain_count+0x20/0x20 [ 437.347489][T11868] __x64_sys_bpf+0x7c/0x90 [ 437.351967][T11868] do_syscall_64+0x55/0xb0 [ 437.356452][T11868] ? clear_bhb_loop+0x40/0x90 [ 437.361205][T11868] ? clear_bhb_loop+0x40/0x90 [ 437.365947][T11868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.371909][T11868] RIP: 0033:0x7fef2e79ce59 [ 437.376406][T11868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.396092][T11868] RSP: 002b:00007fef2f579028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 437.404582][T11868] RAX: ffffffffffffffda RBX: 00007fef2ea15fa0 RCX: 00007fef2e79ce59 [ 437.412618][T11868] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 0000000000000000 [ 437.420655][T11868] RBP: 00007fef2f579090 R08: 0000000000000000 R09: 0000000000000000 [ 437.428708][T11868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 437.436730][T11868] R13: 00007fef2ea16038 R14: 00007fef2ea15fa0 R15: 00007fff192b2b68 [ 437.444812][T11868] [ 440.342825][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.349553][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.388277][T11916] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 440.532792][T11922] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.2088'. [ 440.586579][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2089'. [ 440.763145][ T5776] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 441.147655][T11943] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2095'. [ 441.191273][T11931] netlink: 'syz.2.2092': attribute type 10 has an invalid length. [ 441.246895][T11946] Dead loop on virtual device ip6_vti0, fix it urgently! [ 441.993085][T11979] netlink: 'syz.2.2108': attribute type 29 has an invalid length. [ 442.027373][T11979] netlink: 'syz.2.2108': attribute type 29 has an invalid length. [ 442.473224][T11995] netlink: 'syz.2.2115': attribute type 10 has an invalid length. [ 442.816507][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 443.063811][T12017] netlink: 'syz.1.2120': attribute type 1 has an invalid length. [ 443.076367][T12017] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2120'. [ 443.387343][T12031] netlink: 'syz.1.2127': attribute type 27 has an invalid length. [ 443.395275][T12031] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2127'. [ 443.597158][T12028] netlink: 'syz.3.2126': attribute type 10 has an invalid length. [ 444.145504][T12054] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2135'. [ 444.161737][T12054] netlink: zone id is out of range [ 444.167622][T12054] netlink: zone id is out of range [ 444.173791][T12054] netlink: zone id is out of range [ 444.187316][T12054] netlink: zone id is out of range [ 444.196452][T12054] netlink: zone id is out of range [ 444.201654][T12054] netlink: zone id is out of range [ 444.213878][T12054] netlink: zone id is out of range [ 444.219621][T12054] netlink: zone id is out of range [ 444.225039][T12054] netlink: zone id is out of range [ 444.392714][T12058] sctp: [Deprecated]: syz.2.2137 (pid 12058) Use of int in maxseg socket option. [ 444.392714][T12058] Use struct sctp_assoc_value instead [ 444.559703][T12062] netlink: 'syz.1.2139': attribute type 27 has an invalid length. [ 444.572501][T12062] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2139'. [ 444.741075][T12071] netlink: 'syz.2.2142': attribute type 12 has an invalid length. [ 445.228691][T12078] syzkaller0: entered promiscuous mode [ 445.234272][T12078] syzkaller0: entered allmulticast mode [ 446.180677][T12103] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2149'. [ 450.060315][T12098] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2150'. [ 450.070024][T12098] bridge_slave_1: default FDB implementation only supports local addresses [ 450.365919][T12119] netlink: 'syz.0.2158': attribute type 15 has an invalid length. [ 450.385875][T12119] netlink: 'syz.0.2158': attribute type 7 has an invalid length. [ 450.477097][T12123] netlink: 'syz.2.2160': attribute type 10 has an invalid length. [ 450.690397][T12133] FAULT_INJECTION: forcing a failure. [ 450.690397][T12133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.746680][T12133] CPU: 0 PID: 12133 Comm: syz.0.2161 Not tainted syzkaller #0 [ 450.754244][T12133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.764355][T12133] Call Trace: [ 450.767682][T12133] [ 450.770655][T12133] dump_stack_lvl+0x18c/0x250 [ 450.775386][T12133] ? show_regs_print_info+0x20/0x20 [ 450.780651][T12133] ? load_image+0x420/0x420 [ 450.785229][T12133] ? __lock_acquire+0x7d40/0x7d40 [ 450.790311][T12133] ? snprintf+0xe9/0x140 [ 450.794651][T12133] should_fail_ex+0x39d/0x4d0 [ 450.799398][T12133] _copy_to_user+0x2f/0xa0 [ 450.803881][T12133] simple_read_from_buffer+0xe7/0x150 [ 450.809328][T12133] proc_fail_nth_read+0x1e8/0x260 [ 450.814454][T12133] ? proc_fault_inject_write+0x360/0x360 [ 450.820161][T12133] ? fsnotify_perm+0x271/0x5e0 [ 450.824985][T12133] ? proc_fault_inject_write+0x360/0x360 [ 450.830687][T12133] vfs_read+0x28b/0x970 [ 450.834911][T12133] ? kernel_read+0x1e0/0x1e0 [ 450.839562][T12133] ? __fget_files+0x28/0x4b0 [ 450.844214][T12133] ? __fget_files+0x28/0x4b0 [ 450.848863][T12133] ? __fget_files+0x43d/0x4b0 [ 450.853612][T12133] ? __fdget_pos+0x2a3/0x330 [ 450.858260][T12133] ? ksys_read+0x75/0x260 [ 450.862666][T12133] ksys_read+0x150/0x260 [ 450.867005][T12133] ? vfs_write+0x990/0x990 [ 450.871513][T12133] ? lockdep_hardirqs_on+0x98/0x150 [ 450.876801][T12133] do_syscall_64+0x55/0xb0 [ 450.881286][T12133] ? clear_bhb_loop+0x40/0x90 [ 450.886063][T12133] ? clear_bhb_loop+0x40/0x90 [ 450.890817][T12133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.896790][T12133] RIP: 0033:0x7fef2e75d68e [ 450.901268][T12133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 450.920954][T12133] RSP: 002b:00007fef2c9d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.929455][T12133] RAX: ffffffffffffffda RBX: 00007fef2c9d56c0 RCX: 00007fef2e75d68e [ 450.937506][T12133] RDX: 000000000000000f RSI: 00007fef2c9d50a0 RDI: 0000000000000007 [ 450.945539][T12133] RBP: 00007fef2c9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 450.953570][T12133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.961615][T12133] R13: 00007fef2ea16218 R14: 00007fef2ea16180 R15: 00007fff192b2b68 [ 450.969685][T12133] [ 452.136793][T12156] netlink: 'syz.1.2171': attribute type 10 has an invalid length. [ 452.287518][T12161] netlink: 'syz.1.2174': attribute type 7 has an invalid length. [ 452.424635][T12164] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2173'. [ 452.716442][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 454.518988][T12188] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2185'. [ 454.574354][T12192] FAULT_INJECTION: forcing a failure. [ 454.574354][T12192] name failslab, interval 1, probability 0, space 0, times 0 [ 454.606389][T12192] CPU: 1 PID: 12192 Comm: syz.0.2186 Not tainted syzkaller #0 [ 454.613961][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 454.624094][T12192] Call Trace: [ 454.627427][T12192] [ 454.630400][T12192] dump_stack_lvl+0x18c/0x250 [ 454.635137][T12192] ? show_regs_print_info+0x20/0x20 [ 454.640413][T12192] ? load_image+0x420/0x420 [ 454.645179][T12192] ? __might_sleep+0xe0/0xe0 [ 454.649843][T12192] ? __lock_acquire+0x7d40/0x7d40 [ 454.654934][T12192] should_fail_ex+0x39d/0x4d0 [ 454.659689][T12192] should_failslab+0x9/0x20 [ 454.664261][T12192] slab_pre_alloc_hook+0x59/0x310 [ 454.669371][T12192] ? percpu_ref_put+0x12/0x100 [ 454.674193][T12192] ? apparmor_sk_alloc_security+0x77/0x100 [ 454.680097][T12192] __kmem_cache_alloc_node+0x53/0x250 [ 454.685556][T12192] ? apparmor_sk_alloc_security+0x77/0x100 [ 454.691441][T12192] kmalloc_trace+0x2a/0xe0 [ 454.695930][T12192] apparmor_sk_alloc_security+0x77/0x100 [ 454.701641][T12192] security_sk_alloc+0x6e/0xa0 [ 454.706482][T12192] sk_prot_alloc+0x101/0x210 [ 454.711167][T12192] sk_alloc+0x3a/0x360 [ 454.715313][T12192] inet_create+0x7a0/0xfe0 [ 454.719830][T12192] ? inet_create+0x9c/0xfe0 [ 454.724422][T12192] __sock_create+0x4a6/0x940 [ 454.729092][T12192] udp_sock_create4+0xcb/0x480 [ 454.733918][T12192] ? erspan_exit_batch_net+0x30/0x30 [ 454.739255][T12192] rxrpc_lookup_local+0xd1f/0x1610 [ 454.744419][T12192] ? rxrpc_local_dont_fragment+0x70/0x70 [ 454.750108][T12192] ? lockdep_hardirqs_on+0x98/0x150 [ 454.755354][T12192] ? _local_bh_enable+0xa0/0xa0 [ 454.760257][T12192] rxrpc_sendmsg+0x30a/0x5b0 [ 454.764913][T12192] ? rxrpc_getsockopt+0x150/0x150 [ 454.770016][T12192] ____sys_sendmsg+0x5ba/0x960 [ 454.774841][T12192] ? __sys_sendmsg_sock+0x30/0x30 [ 454.779906][T12192] ? __import_iovec+0x3fa/0x850 [ 454.784806][T12192] ? import_iovec+0x73/0xa0 [ 454.789348][T12192] ___sys_sendmsg+0x2a6/0x360 [ 454.794078][T12192] ? __sys_sendmsg+0x2a0/0x2a0 [ 454.798991][T12192] ? __lock_acquire+0x7d40/0x7d40 [ 454.804074][T12192] __se_sys_sendmsg+0x1c2/0x2b0 [ 454.808970][T12192] ? __x64_sys_sendmsg+0x80/0x80 [ 454.813959][T12192] ? lockdep_hardirqs_on+0x98/0x150 [ 454.819202][T12192] do_syscall_64+0x55/0xb0 [ 454.823656][T12192] ? clear_bhb_loop+0x40/0x90 [ 454.828376][T12192] ? clear_bhb_loop+0x40/0x90 [ 454.833214][T12192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.839164][T12192] RIP: 0033:0x7fef2e79ce59 [ 454.843624][T12192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.863284][T12192] RSP: 002b:00007fef2f579028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.871769][T12192] RAX: ffffffffffffffda RBX: 00007fef2ea15fa0 RCX: 00007fef2e79ce59 [ 454.879825][T12192] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000003 [ 454.887836][T12192] RBP: 00007fef2f579090 R08: 0000000000000000 R09: 0000000000000000 [ 454.895877][T12192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.903894][T12192] R13: 00007fef2ea16038 R14: 00007fef2ea15fa0 R15: 00007fff192b2b68 [ 454.911930][T12192] [ 455.158431][T12196] syzkaller0: entered promiscuous mode [ 455.164489][T12196] syzkaller0: entered allmulticast mode [ 455.194934][T12206] netlink: 'syz.3.2189': attribute type 10 has an invalid length. [ 455.203354][T12206] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2189'. [ 455.265788][T12206] netlink: 'syz.3.2189': attribute type 10 has an invalid length. [ 455.275731][T12206] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2189'. [ 455.422767][T12213] netlink: 'syz.1.2191': attribute type 21 has an invalid length. [ 455.436011][T12213] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2191'. [ 455.461218][T12213] netlink: 'syz.1.2191': attribute type 4 has an invalid length. [ 456.201481][T12233] net_ratelimit: 217 callbacks suppressed [ 456.201511][T12233] sock: sock_set_timeout: `syz.1.2197' (pid 12233) tries to set negative timeout [ 459.185908][T12261] syzkaller0: entered promiscuous mode [ 459.242568][T12261] syzkaller0: entered allmulticast mode [ 460.826781][T12300] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2221'. [ 460.984611][T12302] netlink: 'syz.1.2222': attribute type 8 has an invalid length. [ 461.006351][T12302] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2222'. [ 461.222276][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.239139][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.248261][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.263310][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.275994][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 461.290636][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.379245][T11225] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.508982][T11225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.591345][T11225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.740253][T11225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.231121][T12310] chnl_net:caif_netlink_parms(): no params data found [ 462.489090][T12333] netlink: 'syz.0.2228': attribute type 21 has an invalid length. [ 462.548175][T12332] netlink: 'syz.0.2228': attribute type 2 has an invalid length. [ 462.569760][T12332] netlink: 'syz.0.2228': attribute type 11 has an invalid length. [ 462.592423][T12332] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2228'. [ 462.746469][T11225] tipc: Left network mode [ 463.394499][ T5778] Bluetooth: hci1: command tx timeout [ 463.400942][T12310] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.435209][T12310] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.526508][T12310] bridge_slave_0: entered allmulticast mode [ 463.566649][T12310] bridge_slave_0: entered promiscuous mode [ 463.591777][T12348] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2231'. [ 463.726917][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'. [ 463.754734][T12310] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.782855][T12310] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.802928][T12310] bridge_slave_1: entered allmulticast mode [ 463.819330][T12352] netlink: 'syz.1.2231': attribute type 1 has an invalid length. [ 463.836854][T12310] bridge_slave_1: entered promiscuous mode [ 463.854131][T12352] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.2231'. [ 463.993389][T12310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.350937][T12310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.464196][ T5778] Bluetooth: hci1: command tx timeout [ 465.472913][T12371] Dead loop on virtual device ip6_vti0, fix it urgently! [ 465.590720][T12310] team0: Port device team_slave_0 added [ 465.621444][T12310] team0: Port device team_slave_1 added [ 465.749736][T12310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.778135][T12310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.864920][T12310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.926946][T12310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.940356][T12310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.972457][T12310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.018531][T12388] netlink: 'syz.0.2239': attribute type 10 has an invalid length. [ 466.189674][T12310] hsr_slave_0: entered promiscuous mode [ 466.211737][T12310] hsr_slave_1: entered promiscuous mode [ 466.231958][T12310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.250166][T12310] Cannot create hsr debugfs directory [ 467.392887][T12421] netlink: 'syz.1.2249': attribute type 9 has an invalid length. [ 467.407054][T12421] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2249'. [ 467.536936][ T5778] Bluetooth: hci1: command tx timeout [ 469.616939][ T5778] Bluetooth: hci1: command tx timeout [ 470.864778][T12441] netlink: 'syz.1.2256': attribute type 10 has an invalid length. [ 470.883679][T11225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.914228][T11225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.944882][T11225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.966879][T11225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.982443][T11225] bridge_slave_1: left allmulticast mode [ 471.006777][T11225] bridge_slave_1: left promiscuous mode [ 471.012652][T11225] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.040258][T11225] bridge_slave_0: left allmulticast mode [ 471.046022][T11225] bridge_slave_0: left promiscuous mode [ 471.184209][T11225] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.090745][T11225] veth1_macvtap: left allmulticast mode [ 473.102520][T11225] veth1_macvtap: left promiscuous mode [ 473.110809][T11225] veth0_macvtap: left promiscuous mode [ 473.430826][T11225] .` (unregistering): (slave geneve0): Releasing backup interface [ 473.965213][T11225] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.025187][T11225] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.438579][T11225] .` (unregistering): Released all slaves [ 474.577129][T12455] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2259'. [ 474.592211][T12455] bridge_slave_1: default FDB implementation only supports local addresses [ 474.888602][T12488] sctp: [Deprecated]: syz.0.2266 (pid 12488) Use of int in maxseg socket option. [ 474.888602][T12488] Use struct sctp_assoc_value instead [ 475.150166][T12494] netlink: 'syz.0.2268': attribute type 27 has an invalid length. [ 475.179935][T12494] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2268'. [ 475.528500][T12310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 475.549769][T12310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 475.564979][T12310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 475.590499][T12310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 475.724743][T12310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.774444][T12310] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.799214][T11264] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.806494][T11264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.848842][T11264] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.856064][T11264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.493204][T12533] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2275'. [ 476.531903][T12533] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.2275'. [ 476.575875][T12533] tipc: Started in network mode [ 476.585175][T12533] tipc: Node identity b, cluster identity 73 [ 476.600545][T12533] tipc: Node number set to 11 [ 476.683576][T12310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.961662][T12310] veth0_vlan: entered promiscuous mode [ 477.010736][T12310] veth1_vlan: entered promiscuous mode [ 477.153810][T12310] veth0_macvtap: entered promiscuous mode [ 477.192220][T12310] veth1_macvtap: entered promiscuous mode [ 477.263131][T12310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.291721][T12310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.311461][T12310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.424550][T12548] syzkaller0: entered promiscuous mode [ 477.432854][T12548] syzkaller0: entered allmulticast mode [ 477.457732][T12310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.489622][T12310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.501655][T12310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.532932][T12310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.553064][T12310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.573163][T12310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.585519][T12310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.869135][T12310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.881816][T12310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.906361][T12310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.925963][T12310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.167136][T11264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.175046][T11264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.248428][T12586] netlink: 'syz.3.2286': attribute type 10 has an invalid length. [ 481.344450][T11244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.361893][T11244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.607950][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2289'. [ 481.856534][T12604] netlink: 'syz.0.2291': attribute type 29 has an invalid length. [ 481.895793][T12604] netlink: 'syz.0.2291': attribute type 29 has an invalid length. [ 482.679990][T12608] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2292'. [ 482.717498][T12608] bridge_slave_1: default FDB implementation only supports local addresses [ 485.002348][T12638] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2294'. [ 485.391638][T12652] FAULT_INJECTION: forcing a failure. [ 485.391638][T12652] name failslab, interval 1, probability 0, space 0, times 0 [ 485.426101][T12652] CPU: 1 PID: 12652 Comm: syz.0.2298 Not tainted syzkaller #0 [ 485.433659][T12652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.443768][T12652] Call Trace: [ 485.447091][T12652] [ 485.450069][T12652] dump_stack_lvl+0x18c/0x250 [ 485.454808][T12652] ? show_regs_print_info+0x20/0x20 [ 485.460059][T12652] ? load_image+0x420/0x420 [ 485.464626][T12652] ? __might_sleep+0xe0/0xe0 [ 485.469268][T12652] ? __lock_acquire+0x7d40/0x7d40 [ 485.474341][T12652] ? __asan_memset+0x22/0x40 [ 485.479040][T12652] should_fail_ex+0x39d/0x4d0 [ 485.483787][T12652] should_failslab+0x9/0x20 [ 485.488341][T12652] slab_pre_alloc_hook+0x59/0x310 [ 485.493424][T12652] ? trace_call_bpf+0xc3/0x6c0 [ 485.498280][T12652] ? __kthread_create_on_node+0x116/0x3f0 [ 485.504050][T12652] __kmem_cache_alloc_node+0x53/0x250 [ 485.509485][T12652] ? __kthread_create_on_node+0x116/0x3f0 [ 485.515258][T12652] kmalloc_trace+0x2a/0xe0 [ 485.519730][T12652] ? rxrpc_direct_abort+0x330/0x330 [ 485.524987][T12652] __kthread_create_on_node+0x116/0x3f0 [ 485.530595][T12652] ? kthread_create_on_node+0x140/0x140 [ 485.536200][T12652] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 485.542235][T12652] ? rxrpc_direct_abort+0x330/0x330 [ 485.547503][T12652] ? rxrpc_direct_abort+0x330/0x330 [ 485.552748][T12652] kthread_create_on_node+0xec/0x140 [ 485.558071][T12652] ? __local_bh_enable_ip+0x13a/0x1c0 [ 485.563488][T12652] ? tsk_fork_get_node+0x70/0x70 [ 485.568464][T12652] ? __local_bh_enable_ip+0x13a/0x1c0 [ 485.573894][T12652] rxrpc_lookup_local+0xff3/0x1610 [ 485.579066][T12652] ? rxrpc_local_dont_fragment+0x70/0x70 [ 485.584754][T12652] ? none_clear+0x10/0x10 [ 485.589149][T12652] ? rxrpc_client_conn_reap_timeout+0xd0/0xd0 [ 485.595272][T12652] ? lockdep_hardirqs_on+0x98/0x150 [ 485.600520][T12652] ? _local_bh_enable+0xa0/0xa0 [ 485.605433][T12652] rxrpc_sendmsg+0x30a/0x5b0 [ 485.610073][T12652] ? rxrpc_getsockopt+0x150/0x150 [ 485.615142][T12652] ____sys_sendmsg+0x5ba/0x960 [ 485.619948][T12652] ? __sys_sendmsg_sock+0x30/0x30 [ 485.625017][T12652] ? __import_iovec+0x3fa/0x850 [ 485.629915][T12652] ? import_iovec+0x73/0xa0 [ 485.634461][T12652] ___sys_sendmsg+0x2a6/0x360 [ 485.639196][T12652] ? __sys_sendmsg+0x2a0/0x2a0 [ 485.644025][T12652] ? trace_call_bpf+0xc3/0x6c0 [ 485.648869][T12652] __se_sys_sendmsg+0x1c2/0x2b0 [ 485.653777][T12652] ? __x64_sys_sendmsg+0x80/0x80 [ 485.658781][T12652] ? lockdep_hardirqs_on+0x98/0x150 [ 485.664032][T12652] do_syscall_64+0x55/0xb0 [ 485.668490][T12652] ? clear_bhb_loop+0x40/0x90 [ 485.673213][T12652] ? clear_bhb_loop+0x40/0x90 [ 485.677967][T12652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.683908][T12652] RIP: 0033:0x7fef2e79ce59 [ 485.688374][T12652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.708034][T12652] RSP: 002b:00007fef2f579028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.716504][T12652] RAX: ffffffffffffffda RBX: 00007fef2ea15fa0 RCX: 00007fef2e79ce59 [ 485.724539][T12652] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000003 [ 485.732540][T12652] RBP: 00007fef2f579090 R08: 0000000000000000 R09: 0000000000000000 [ 485.740549][T12652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.748568][T12652] R13: 00007fef2ea16038 R14: 00007fef2ea15fa0 R15: 00007fff192b2b68 [ 485.756602][T12652] [ 487.247114][T12681] netlink: 'syz.2.2305': attribute type 10 has an invalid length. [ 487.520654][T12681] geneve0: entered promiscuous mode [ 487.725726][T12689] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.2307'. [ 487.757011][T12689] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 488.080039][T12703] netlink: 'syz.2.2312': attribute type 10 has an invalid length. [ 488.162324][T12703] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 492.066963][T12747] sctp: [Deprecated]: syz.2.2324 (pid 12747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.066963][T12747] Use struct sctp_sack_info instead [ 494.280538][T12797] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2345'. [ 494.293308][T12797] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2345'. [ 494.318336][T12797] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2345'. [ 494.334808][T12797] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2345'. [ 494.907922][T12810] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.2350'. [ 495.186405][T12812] netlink: 'syz.3.2352': attribute type 10 has an invalid length. [ 495.261322][T12812] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 495.280413][T12812] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 498.586615][T12833] netlink: 'syz.0.2359': attribute type 21 has an invalid length. [ 498.594573][T12833] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2359'. [ 498.975946][T12846] tap0: tun_chr_ioctl cmd 1074025677 [ 499.003460][T12846] tap0: linktype set to 270 [ 499.397663][T12861] netlink: 'syz.2.2370': attribute type 21 has an invalid length. [ 499.414539][T12861] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2370'. [ 499.531647][T12863] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.2371'. [ 499.552940][T12863] netlink: 'syz.2.2371': attribute type 10 has an invalid length. [ 499.571740][T12863] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2371'. [ 499.598141][T12863] batman_adv: batadv0: Adding interface: veth0_vlan [ 499.616852][T12863] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.647238][T12863] batman_adv: batadv0: Interface activated: veth0_vlan [ 501.371344][T12909] netlink: 'syz.3.2390': attribute type 3 has an invalid length. [ 501.380153][T12909] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2390'. [ 501.603478][T12917] sctp: [Deprecated]: syz.3.2394 (pid 12917) Use of int in maxseg socket option. [ 501.603478][T12917] Use struct sctp_assoc_value instead [ 501.833705][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.840271][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.385705][T12945] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2403'. [ 502.406883][T12945] bridge_slave_1: default FDB implementation only supports local addresses [ 502.866833][T12957] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2410'. [ 503.002746][T12959] netlink: 'syz.1.2411': attribute type 15 has an invalid length. [ 503.019862][T12959] netlink: 'syz.1.2411': attribute type 7 has an invalid length. [ 503.708701][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 503.726548][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 503.734114][T12969] netlink: 'syz.0.2415': attribute type 21 has an invalid length. [ 503.750435][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 503.763941][T12976] netlink: 'syz.1.2416': attribute type 3 has an invalid length. [ 503.780194][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 503.790662][T12969] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2415'. [ 503.800607][T12976] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2416'. [ 503.810435][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 503.818950][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 503.893184][T11264] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.050644][T11264] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.183373][T11264] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.185426][T12995] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2421'. [ 504.321322][T11264] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.498083][T12974] chnl_net:caif_netlink_parms(): no params data found [ 504.845046][T12974] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.872814][T12974] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.886698][T12974] bridge_slave_0: entered allmulticast mode [ 504.894363][T12974] bridge_slave_0: entered promiscuous mode [ 504.933256][T12974] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.948798][T12974] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.960222][T12974] bridge_slave_1: entered allmulticast mode [ 504.988479][T12974] bridge_slave_1: entered promiscuous mode [ 504.997249][T11264] tipc: Left network mode [ 505.188721][T12974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.294373][T12974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.348234][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'. [ 505.371067][T13024] netlink: 'syz.0.2427': attribute type 3 has an invalid length. [ 505.387158][T13024] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2427'. [ 505.509542][T13031] netlink: 'syz.1.2430': attribute type 29 has an invalid length. [ 505.575734][T12974] team0: Port device team_slave_0 added [ 505.591865][T13031] netlink: 'syz.1.2430': attribute type 29 has an invalid length. [ 505.626876][T12974] team0: Port device team_slave_1 added [ 505.856794][ T5776] Bluetooth: hci0: command tx timeout [ 505.948241][T12974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.955287][T12974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.987041][T12974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.031935][T12974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.040222][T12974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.068471][T12974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.361053][T12974] hsr_slave_0: entered promiscuous mode [ 506.374494][T12974] hsr_slave_1: entered promiscuous mode [ 506.386626][T12974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.395414][T12974] Cannot create hsr debugfs directory [ 506.781299][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'. [ 507.127504][T11264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.158998][T11264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.177582][T11264] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 507.202873][T11264] batman_adv: batadv0: Removing interface: veth0_vlan [ 507.219024][T11264] batman_adv: batadv0: Interface deactivated: macvlan1 [ 507.240387][T11264] batman_adv: batadv0: Removing interface: macvlan1 [ 507.261648][T11264] bridge_slave_0: left allmulticast mode [ 507.275691][T11264] bridge_slave_0: left promiscuous mode [ 507.283672][T11264] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.339085][T11264] veth1_macvtap: left promiscuous mode [ 507.355557][T11264] veth1_vlan: left promiscuous mode [ 507.371332][T11264] veth0_vlan: left promiscuous mode [ 507.936577][ T5776] Bluetooth: hci0: command tx timeout [ 507.936626][T13088] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2444'. [ 509.247214][T13101] netlink: 'syz.1.2448': attribute type 10 has an invalid length. [ 509.270624][T13101] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2448'. [ 509.315892][T13102] netlink: 'syz.1.2448': attribute type 10 has an invalid length. [ 509.324066][T13102] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2448'. [ 509.453992][T13109] FAULT_INJECTION: forcing a failure. [ 509.453992][T13109] name failslab, interval 1, probability 0, space 0, times 0 [ 509.472166][T13109] CPU: 0 PID: 13109 Comm: syz.2.2450 Not tainted syzkaller #0 [ 509.479731][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 509.489847][T13109] Call Trace: [ 509.493176][T13109] [ 509.496148][T13109] dump_stack_lvl+0x18c/0x250 [ 509.500897][T13109] ? show_regs_print_info+0x20/0x20 [ 509.506155][T13109] ? load_image+0x420/0x420 [ 509.510728][T13109] ? __lock_acquire+0x7d40/0x7d40 [ 509.515802][T13109] ? number+0xd0c/0xf60 [ 509.520032][T13109] should_fail_ex+0x39d/0x4d0 [ 509.524783][T13109] should_failslab+0x9/0x20 [ 509.529350][T13109] slab_pre_alloc_hook+0x59/0x310 [ 509.534435][T13109] ? __kthread_create_on_node+0x1d0/0x3f0 [ 509.540197][T13109] ? __kthread_create_on_node+0x1d0/0x3f0 [ 509.545979][T13109] __kmem_cache_alloc_node+0x53/0x250 [ 509.551402][T13109] ? __kthread_create_on_node+0x1d0/0x3f0 [ 509.557154][T13109] __kmalloc_node_track_caller+0xa2/0x230 [ 509.562923][T13109] kvasprintf+0xec/0x1a0 [ 509.567229][T13109] ? bust_spinlocks+0xd0/0xd0 [ 509.571985][T13109] __kthread_create_on_node+0x1d0/0x3f0 [ 509.577566][T13109] ? kthread_create_on_node+0x140/0x140 [ 509.583150][T13109] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 509.589168][T13109] ? rxrpc_direct_abort+0x330/0x330 [ 509.594404][T13109] ? rxrpc_direct_abort+0x330/0x330 [ 509.599639][T13109] kthread_create_on_node+0xec/0x140 [ 509.604963][T13109] ? __local_bh_enable_ip+0x13a/0x1c0 [ 509.610369][T13109] ? tsk_fork_get_node+0x70/0x70 [ 509.615335][T13109] ? __local_bh_enable_ip+0x13a/0x1c0 [ 509.620750][T13109] rxrpc_lookup_local+0xff3/0x1610 [ 509.625911][T13109] ? rxrpc_local_dont_fragment+0x70/0x70 [ 509.631582][T13109] ? none_clear+0x10/0x10 [ 509.635953][T13109] ? rxrpc_client_conn_reap_timeout+0xd0/0xd0 [ 509.642062][T13109] ? lockdep_hardirqs_on+0x98/0x150 [ 509.647301][T13109] ? _local_bh_enable+0xa0/0xa0 [ 509.652194][T13109] rxrpc_sendmsg+0x30a/0x5b0 [ 509.656824][T13109] ? rxrpc_getsockopt+0x150/0x150 [ 509.661973][T13109] ____sys_sendmsg+0x5ba/0x960 [ 509.666780][T13109] ? __sys_sendmsg_sock+0x30/0x30 [ 509.671836][T13109] ? __import_iovec+0x3fa/0x850 [ 509.676755][T13109] ? import_iovec+0x73/0xa0 [ 509.681320][T13109] ___sys_sendmsg+0x2a6/0x360 [ 509.686052][T13109] ? __sys_sendmsg+0x2a0/0x2a0 [ 509.690875][T13109] ? trace_call_bpf+0xc3/0x6c0 [ 509.695709][T13109] __se_sys_sendmsg+0x1c2/0x2b0 [ 509.700603][T13109] ? __x64_sys_sendmsg+0x80/0x80 [ 509.705626][T13109] ? lockdep_hardirqs_on+0x98/0x150 [ 509.710897][T13109] do_syscall_64+0x55/0xb0 [ 509.715391][T13109] ? clear_bhb_loop+0x40/0x90 [ 509.720111][T13109] ? clear_bhb_loop+0x40/0x90 [ 509.724831][T13109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.730792][T13109] RIP: 0033:0x7fa5b599ce59 [ 509.735248][T13109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.754889][T13109] RSP: 002b:00007fa5b6831028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.763343][T13109] RAX: ffffffffffffffda RBX: 00007fa5b5c15fa0 RCX: 00007fa5b599ce59 [ 509.771390][T13109] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000003 [ 509.779394][T13109] RBP: 00007fa5b6831090 R08: 0000000000000000 R09: 0000000000000000 [ 509.787395][T13109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 509.795464][T13109] R13: 00007fa5b5c16038 R14: 00007fa5b5c15fa0 R15: 00007fff427ed2a8 [ 509.803494][T13109] [ 510.018641][ T5776] Bluetooth: hci0: command tx timeout [ 510.569531][T12974] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 510.630458][T12974] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 510.678053][T12974] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 510.714598][T12974] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 511.125653][T12974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.171768][T12974] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.205926][T11231] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.213472][T11231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.250993][T11231] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.258325][T11231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.732876][T12974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.897989][T12974] veth0_vlan: entered promiscuous mode [ 511.925318][T12974] veth1_vlan: entered promiscuous mode [ 512.032571][T12974] veth0_macvtap: entered promiscuous mode [ 512.060646][T12974] veth1_macvtap: entered promiscuous mode [ 512.096744][ T5776] Bluetooth: hci0: command tx timeout [ 512.133750][T12974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.183686][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.211806][T12974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.234757][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.254526][T12974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.290698][T12974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.310576][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.329367][T12974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.343206][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.360706][T12974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.373316][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.392018][T12974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.445516][T12974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.485616][T12974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.510287][T12974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.543451][T12974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.571411][T13168] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2463'. [ 512.584373][T13171] netlink: 'syz.2.2463': attribute type 10 has an invalid length. [ 512.601192][T13171] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2463'. [ 512.614988][T13171] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 513.140240][T13171] batman_adv: batadv0: Removing interface: veth0_vlan [ 513.429808][T11264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.458261][T11264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.575372][T11237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.603683][T11237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.921385][T13216] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2409'. [ 513.931245][T13216] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.2409'. [ 513.955887][T13216] tipc: Started in network mode [ 513.963342][T13216] tipc: Node identity b, cluster identity 73 [ 513.973958][T13216] tipc: Node number set to 11 [ 513.981040][T13217] netlink: 'syz.2.2474': attribute type 10 has an invalid length. [ 514.204394][T13226] FAULT_INJECTION: forcing a failure. [ 514.204394][T13226] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 514.218068][T13226] CPU: 1 PID: 13226 Comm: syz.3.2476 Not tainted syzkaller #0 [ 514.225593][T13226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 514.235706][T13226] Call Trace: [ 514.239040][T13226] [ 514.242026][T13226] dump_stack_lvl+0x18c/0x250 [ 514.246765][T13226] ? show_regs_print_info+0x20/0x20 [ 514.252030][T13226] ? load_image+0x420/0x420 [ 514.256597][T13226] ? __lock_acquire+0x7d40/0x7d40 [ 514.261693][T13226] should_fail_ex+0x39d/0x4d0 [ 514.266442][T13226] prepare_alloc_pages+0x1e2/0x5f0 [ 514.271614][T13226] __alloc_pages+0x134/0x460 [ 514.276265][T13226] ? zone_statistics+0x170/0x170 [ 514.281271][T13226] ? alloc_pages+0x4dc/0x740 [ 514.285914][T13226] ? do_raw_spin_unlock+0x121/0x230 [ 514.291179][T13226] __get_free_pages+0xc/0x30 [ 514.295825][T13226] kasan_populate_vmalloc_pte+0x35/0x100 [ 514.301528][T13226] __apply_to_page_range+0x860/0xdd0 [ 514.306892][T13226] ? kasan_populate_vmalloc+0x70/0x70 [ 514.312338][T13226] ? apply_to_page_range+0x50/0x50 [ 514.317521][T13226] ? do_raw_spin_unlock+0x121/0x230 [ 514.322788][T13226] alloc_vmap_area+0x1d0c/0x1e30 [ 514.327831][T13226] ? vm_map_ram+0xcb0/0xcb0 [ 514.332398][T13226] ? rcu_is_watching+0x15/0xb0 [ 514.337235][T13226] __get_vm_area_node+0x162/0x370 [ 514.342329][T13226] __vmalloc_node_range+0x36e/0x1330 [ 514.347673][T13226] ? sock_hash_alloc+0x261/0x4d0 [ 514.352704][T13226] ? free_vm_area+0x50/0x50 [ 514.357304][T13226] ? bpf_map_area_alloc+0x5e/0x110 [ 514.362474][T13226] ? rcu_is_watching+0x15/0xb0 [ 514.367297][T13226] ? bpf_map_area_alloc+0x5e/0x110 [ 514.372474][T13226] bpf_map_area_alloc+0xf1/0x110 [ 514.377475][T13226] ? sock_hash_alloc+0x261/0x4d0 [ 514.382482][T13226] sock_hash_alloc+0x261/0x4d0 [ 514.387311][T13226] map_create+0x877/0x12f0 [ 514.391783][T13226] ? bpf_lsm_bpf+0x9/0x10 [ 514.396180][T13226] __sys_bpf+0x651/0x890 [ 514.400479][T13226] ? bpf_link_show_fdinfo+0x390/0x390 [ 514.405916][T13226] ? lock_chain_count+0x20/0x20 [ 514.410846][T13226] __x64_sys_bpf+0x7c/0x90 [ 514.415318][T13226] do_syscall_64+0x55/0xb0 [ 514.419784][T13226] ? clear_bhb_loop+0x40/0x90 [ 514.424529][T13226] ? clear_bhb_loop+0x40/0x90 [ 514.429271][T13226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.435311][T13226] RIP: 0033:0x7fcdac79ce59 [ 514.439794][T13226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.459449][T13226] RSP: 002b:00007fcdad5e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 514.468338][T13226] RAX: ffffffffffffffda RBX: 00007fcdaca15fa0 RCX: 00007fcdac79ce59 [ 514.476363][T13226] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 0000000000000000 [ 514.484385][T13226] RBP: 00007fcdad5e0090 R08: 0000000000000000 R09: 0000000000000000 [ 514.492397][T13226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 514.500410][T13226] R13: 00007fcdaca16038 R14: 00007fcdaca15fa0 R15: 00007ffca2c5adf8 [ 514.508438][T13226] [ 515.146942][T13240] netlink: 'syz.3.2481': attribute type 10 has an invalid length. [ 515.155718][T13240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2481'. [ 515.191368][T13240] batman_adv: batadv0: Adding interface: veth0_vlan [ 515.211928][T13240] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.251081][T13240] batman_adv: batadv0: Interface activated: veth0_vlan [ 515.700953][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 515.727693][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 515.741272][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 515.760346][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 515.772228][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 515.781105][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 515.836976][T13256] netlink: 'syz.2.2486': attribute type 21 has an invalid length. [ 515.972976][T11231] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.135590][T11231] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.294663][T11231] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.319043][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2492'. [ 516.413070][T11231] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.461942][T13276] delete_channel: no stack [ 516.466927][T13276] delete_channel: no stack [ 516.603228][T13250] chnl_net:caif_netlink_parms(): no params data found [ 517.105176][T13250] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.126761][T13250] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.134090][T13250] bridge_slave_0: entered allmulticast mode [ 517.217268][T13250] bridge_slave_0: entered promiscuous mode [ 517.238671][T13250] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.277543][T13250] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.316244][T13250] bridge_slave_1: entered allmulticast mode [ 517.323807][T13250] bridge_slave_1: entered promiscuous mode [ 517.480977][T13250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.867490][ T5778] Bluetooth: hci2: command tx timeout [ 519.543981][T13250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.936545][ T5778] Bluetooth: hci2: command tx timeout [ 522.016462][ T5778] Bluetooth: hci2: command tx timeout [ 522.118081][T13250] team0: Port device team_slave_0 added [ 522.243189][T13250] team0: Port device team_slave_1 added [ 522.776103][T13250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.886498][T13250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.070720][T13250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.171771][T13250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.236649][T13250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.269015][T13250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.292531][T13333] netlink: 'syz.3.2507': attribute type 10 has an invalid length. [ 523.918864][T13333] team0: Port device wlan1 added [ 524.096734][ T5778] Bluetooth: hci2: command tx timeout [ 524.580211][T13250] hsr_slave_0: entered promiscuous mode [ 524.605746][T13250] hsr_slave_1: entered promiscuous mode [ 524.628569][T13250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.645330][T13250] Cannot create hsr debugfs directory [ 524.681981][T13346] tap0: tun_chr_ioctl cmd 1074025677 [ 524.697795][T13346] tap0: linktype set to 270 [ 524.705797][T13349] netlink: 'syz.0.2511': attribute type 10 has an invalid length. [ 524.732652][T13349] team0: Device geneve1 is up. Set it down before adding it as a team port [ 526.261863][T11231] hsr_slave_0: left promiscuous mode [ 526.284083][T13380] netlink: 'syz.0.2521': attribute type 3 has an invalid length. [ 526.318477][T13380] netlink: 'syz.0.2521': attribute type 6 has an invalid length. [ 526.333132][T11231] hsr_slave_1: left promiscuous mode [ 526.343498][T13380] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2521'. [ 526.366976][T11231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.374489][T11231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.417440][T11231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.424946][T11231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.454880][T11231] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 526.480296][T11231] batman_adv: batadv0: Removing interface: veth0_vlan [ 526.499018][T11231] batman_adv: batadv0: Interface deactivated: macvlan1 [ 526.506001][T11231] batman_adv: batadv0: Removing interface: macvlan1 [ 526.557357][T11231] bridge_slave_1: left allmulticast mode [ 526.570466][T11231] bridge_slave_1: left promiscuous mode [ 526.586679][T11231] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.620185][T11231] bridge_slave_0: left allmulticast mode [ 526.625930][T11231] bridge_slave_0: left promiscuous mode [ 526.662046][T11231] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.811443][T11231] veth1_macvtap: left promiscuous mode [ 526.826801][T11231] veth0_macvtap: left promiscuous mode [ 526.832834][T11231] veth1_vlan: left promiscuous mode [ 526.863286][T11231] veth0_vlan: left promiscuous mode [ 528.348119][T13388] netlink: 'syz.2.2523': attribute type 15 has an invalid length. [ 528.366309][T13388] netlink: 'syz.2.2523': attribute type 7 has an invalid length. [ 529.038602][T13250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 529.067672][T13250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 529.090322][T13250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 529.119740][T13250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 529.370405][T13250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.414155][T13250] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.468477][T11231] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.475779][T11231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.544098][T11231] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.551419][T11231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.342066][T13250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.443417][T13443] netlink: 'syz.3.2539': attribute type 10 has an invalid length. [ 530.542315][T13250] veth0_vlan: entered promiscuous mode [ 530.594013][T13250] veth1_vlan: entered promiscuous mode [ 530.749257][T13250] veth0_macvtap: entered promiscuous mode [ 530.772726][T13250] veth1_macvtap: entered promiscuous mode [ 530.853088][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.883054][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.903196][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.920150][T13465] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2544'. [ 530.932626][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.950214][T13250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.960066][T13464] netlink: 'syz.2.2543': attribute type 4 has an invalid length. [ 531.032459][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.059850][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.081888][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.105961][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.124295][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.140949][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.155045][T13250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.180876][T13250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.190110][T13250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.200734][T13250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.211633][T13250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.470909][T13481] netlink: 'syz.0.2553': attribute type 10 has an invalid length. [ 531.517245][T13485] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2547'. [ 531.543867][T13481] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 531.607858][T11231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.615793][T11231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.702028][T11237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.729621][T11237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.959743][T13499] netlink: 'syz.1.2479': attribute type 27 has an invalid length. [ 533.617399][T13530] FAULT_INJECTION: forcing a failure. [ 533.617399][T13530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.709685][T13530] CPU: 0 PID: 13530 Comm: syz.1.2557 Not tainted syzkaller #0 [ 533.717250][T13530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 533.727365][T13530] Call Trace: [ 533.730748][T13530] [ 533.733727][T13530] dump_stack_lvl+0x18c/0x250 [ 533.738466][T13530] ? show_regs_print_info+0x20/0x20 [ 533.743714][T13530] ? load_image+0x420/0x420 [ 533.748281][T13530] ? __lock_acquire+0x7d40/0x7d40 [ 533.753356][T13530] ? snprintf+0xe9/0x140 [ 533.757661][T13530] should_fail_ex+0x39d/0x4d0 [ 533.762413][T13530] _copy_to_user+0x2f/0xa0 [ 533.766883][T13530] simple_read_from_buffer+0xe7/0x150 [ 533.772324][T13530] proc_fail_nth_read+0x1e8/0x260 [ 533.777405][T13530] ? proc_fault_inject_write+0x360/0x360 [ 533.783101][T13530] ? fsnotify_perm+0x271/0x5e0 [ 533.787913][T13530] ? proc_fault_inject_write+0x360/0x360 [ 533.793648][T13530] vfs_read+0x28b/0x970 [ 533.797873][T13530] ? kernel_read+0x1e0/0x1e0 [ 533.802523][T13530] ? __fget_files+0x28/0x4b0 [ 533.807169][T13530] ? __fget_files+0x28/0x4b0 [ 533.811816][T13530] ? __fget_files+0x43d/0x4b0 [ 533.816566][T13530] ? __fdget_pos+0x2a3/0x330 [ 533.821210][T13530] ? ksys_read+0x75/0x260 [ 533.825607][T13530] ksys_read+0x150/0x260 [ 533.829908][T13530] ? vfs_write+0x990/0x990 [ 533.834387][T13530] ? lockdep_hardirqs_on+0x98/0x150 [ 533.839650][T13530] do_syscall_64+0x55/0xb0 [ 533.844117][T13530] ? clear_bhb_loop+0x40/0x90 [ 533.848936][T13530] ? clear_bhb_loop+0x40/0x90 [ 533.853669][T13530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.859629][T13530] RIP: 0033:0x7f619075d68e [ 533.864108][T13530] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 533.883782][T13530] RSP: 002b:00007f619162efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 533.892265][T13530] RAX: ffffffffffffffda RBX: 00007f619162f6c0 RCX: 00007f619075d68e [ 533.900324][T13530] RDX: 000000000000000f RSI: 00007f619162f0a0 RDI: 0000000000000004 [ 533.908357][T13530] RBP: 00007f619162f090 R08: 0000000000000000 R09: 0000000000000000 [ 533.916436][T13530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 533.924464][T13530] R13: 00007f6190a16038 R14: 00007f6190a15fa0 R15: 00007ffd61dd1c78 [ 533.932523][T13530] [ 535.867508][T13558] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.2566'. [ 535.885005][T13558] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 540.772771][T13601] netlink: 'syz.1.2582': attribute type 10 has an invalid length. [ 540.793345][T13601] team0: Device ipvlan1 failed to register rx_handler [ 541.046020][T13617] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2586'. [ 541.086508][T13617] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.2586'. [ 541.341221][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2593'. [ 542.367187][T13654] Dead loop on virtual device ip6_vti0, fix it urgently! [ 544.181783][T13689] syzkaller0: entered promiscuous mode [ 544.199829][T13689] syzkaller0: entered allmulticast mode [ 544.217503][T13691] C: renamed from team_slave_0 (while UP) [ 544.332322][T13691] netlink: 'syz.1.2616': attribute type 3 has an invalid length. [ 544.351207][T13691] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2616'. [ 548.417632][T13708] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 548.424803][T13708] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 549.144163][T13727] netlink: 'syz.2.2629': attribute type 10 has an invalid length. [ 549.328888][T13731] netlink: 'syz.1.2632': attribute type 27 has an invalid length. [ 549.379322][T13731] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2632'. [ 549.552725][T13727] team0 (unregistering): Port device team_slave_0 removed [ 549.662961][T13727] team0 (unregistering): Port device team_slave_1 removed [ 549.760981][T13730] netlink: 'syz.3.2631': attribute type 10 has an invalid length. [ 549.769369][T13730] team0: Device geneve1 is up. Set it down before adding it as a team port [ 549.815524][T13739] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 549.838091][T13739] dvmrp1: persist disabled [ 550.010990][T13745] sctp: [Deprecated]: syz.2.2636 (pid 13745) Use of int in maxseg socket option. [ 550.010990][T13745] Use struct sctp_assoc_value instead [ 550.141340][T13749] netlink: 'syz.1.2637': attribute type 2 has an invalid length. [ 550.150516][T13749] netlink: 'syz.1.2637': attribute type 8 has an invalid length. [ 550.206203][T13749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2637'. [ 552.027796][T13799] delete_channel: no stack [ 552.049462][T13799] delete_channel: no stack [ 552.140510][T13803] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2658'. [ 552.500926][T13816] \: renamed from bond_slave_0 (while UP) [ 552.574854][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2665'. [ 552.681834][T13826] netlink: 'syz.1.2667': attribute type 15 has an invalid length. [ 552.690023][T13826] netlink: 'syz.1.2667': attribute type 7 has an invalid length. [ 552.955168][T13836] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.2666'. [ 553.205521][T13851] netlink: 'syz.1.2677': attribute type 10 has an invalid length. [ 553.661353][T13869] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2684'. [ 553.679419][T13863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2683'. [ 554.543317][T13898] netlink: 'syz.2.2693': attribute type 10 has an invalid length. [ 554.561355][T13898] bond0: (slave dummy0): Releasing backup interface [ 555.161568][T13911] netlink: 'syz.0.2699': attribute type 10 has an invalid length. [ 555.179748][T13911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2699'. [ 555.207649][T13911] macvlan1: entered promiscuous mode [ 555.222289][T13911] batman_adv: batadv0: Adding interface: macvlan1 [ 555.242503][T13911] batman_adv: batadv0: The MTU of interface macvlan1 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.321968][T13911] batman_adv: batadv0: Interface activated: macvlan1 [ 555.349745][T13912] netlink: 'syz.0.2699': attribute type 10 has an invalid length. [ 555.364420][T13912] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2699'. [ 555.991380][T13921] netlink: 'syz.1.2702': attribute type 29 has an invalid length. [ 556.010056][T13921] netlink: 'syz.1.2702': attribute type 29 has an invalid length. [ 557.023538][T13936] netlink: 'syz.0.2707': attribute type 10 has an invalid length. [ 557.061420][T13936] geneve0: entered promiscuous mode [ 557.200405][T13944] netlink: 'syz.1.2711': attribute type 29 has an invalid length. [ 557.243293][T13944] netlink: 'syz.1.2711': attribute type 29 has an invalid length. [ 557.254019][T13947] netlink: 'syz.0.2712': attribute type 29 has an invalid length. [ 557.262385][T13948] netlink: 'syz.1.2711': attribute type 29 has an invalid length. [ 559.159997][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2720'. [ 560.846847][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2737'. [ 561.654716][ T5778] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 562.822969][T14051] Ÿë: port 1(gretap0) entered blocking state [ 562.848295][T14051] Ÿë: port 1(gretap0) entered disabled state [ 562.861018][T14051] gretap0: entered allmulticast mode [ 562.889926][T14051] gretap0: entered promiscuous mode [ 563.221683][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.228492][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.696696][ T5778] Bluetooth: hci0: command tx timeout [ 563.985848][T14098] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2773'. [ 565.198932][T14114] syzkaller0: entered promiscuous mode [ 565.224994][T14114] syzkaller0: entered allmulticast mode [ 567.506701][T14138] Ÿë: port 1(gretap0) entered blocking state [ 567.516455][T14138] Ÿë: port 1(gretap0) entered disabled state [ 567.541159][T14138] gretap0: entered allmulticast mode [ 567.555707][T14138] gretap0: entered promiscuous mode [ 567.613167][T14141] sctp: [Deprecated]: syz.3.2786 (pid 14141) Use of int in maxseg socket option. [ 567.613167][T14141] Use struct sctp_assoc_value instead [ 567.711554][T14145] validate_nla: 3 callbacks suppressed [ 567.711572][T14145] netlink: 'syz.1.2788': attribute type 21 has an invalid length. [ 567.744357][T14145] IPv6: NLM_F_CREATE should be specified when creating new route [ 568.140668][T14150] netlink: 'syz.3.2790': attribute type 10 has an invalid length. [ 568.194587][T14157] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2791'. [ 568.738286][T14158] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2791'. [ 569.035304][T14174] netlink: 'syz.2.2805': attribute type 21 has an invalid length. [ 569.097913][T14174] netlink: 'syz.2.2805': attribute type 10 has an invalid length. [ 569.155131][T14177] Ÿë: port 1(gretap0) entered blocking state [ 569.172825][T14177] Ÿë: port 1(gretap0) entered disabled state [ 569.185551][T14177] gretap0: entered allmulticast mode [ 569.233781][T14177] gretap0: entered promiscuous mode [ 569.989710][T14194] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2806'. [ 570.074592][T14199] netlink: 'syz.1.2807': attribute type 1 has an invalid length. [ 570.100035][T14199] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2807'. [ 572.401902][T14232] IPv6: Can't replace route, no match found [ 573.368276][T14256] netlink: 'syz.2.2828': attribute type 10 has an invalid length. [ 573.391185][T14256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2828'. [ 573.417006][T14256] netlink: 'syz.2.2828': attribute type 10 has an invalid length. [ 573.439077][T14256] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2828'. [ 574.540141][T14262] FAULT_INJECTION: forcing a failure. [ 574.540141][T14262] name failslab, interval 1, probability 0, space 0, times 0 [ 574.571146][T14262] CPU: 0 PID: 14262 Comm: syz.3.2830 Not tainted syzkaller #0 [ 574.578722][T14262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 574.588824][T14262] Call Trace: [ 574.592151][T14262] [ 574.595123][T14262] dump_stack_lvl+0x18c/0x250 [ 574.599866][T14262] ? show_regs_print_info+0x20/0x20 [ 574.605125][T14262] ? load_image+0x420/0x420 [ 574.609744][T14262] ? __might_sleep+0xe0/0xe0 [ 574.614392][T14262] ? __lock_acquire+0x7d40/0x7d40 [ 574.619477][T14262] ? rcu_is_watching+0x15/0xb0 [ 574.624311][T14262] should_fail_ex+0x39d/0x4d0 [ 574.629095][T14262] should_failslab+0x9/0x20 [ 574.633658][T14262] slab_pre_alloc_hook+0x59/0x310 [ 574.638759][T14262] kmem_cache_alloc_node+0x60/0x320 [ 574.644026][T14262] ? __alloc_skb+0x103/0x2c0 [ 574.648678][T14262] __alloc_skb+0x103/0x2c0 [ 574.653151][T14262] netlink_dump+0x1ec/0xe50 [ 574.657814][T14262] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 574.664026][T14262] ? lockdep_hardirqs_on+0x98/0x150 [ 574.669290][T14262] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 574.675524][T14262] ? netlink_lookup+0x200/0x200 [ 574.680457][T14262] ? slab_free_freelist_hook+0x130/0x1a0 [ 574.686239][T14262] ? netlink_recvmsg+0x5e7/0xe60 [ 574.691296][T14262] ? kmem_cache_free+0xf8/0x270 [ 574.696312][T14262] netlink_recvmsg+0x693/0xe60 [ 574.701163][T14262] ? netlink_sendmsg+0xbf0/0xbf0 [ 574.706166][T14262] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 574.712206][T14262] ? aa_af_perm+0x330/0x330 [ 574.716807][T14262] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 574.722156][T14262] ? security_socket_recvmsg+0x89/0xb0 [ 574.727682][T14262] ? netlink_sendmsg+0xbf0/0xbf0 [ 574.732687][T14262] ____sys_recvmsg+0x2ce/0x5e0 [ 574.737530][T14262] ? __sys_recvmsg_sock+0x50/0x50 [ 574.742633][T14262] ? import_iovec+0x73/0xa0 [ 574.747198][T14262] ___sys_recvmsg+0x216/0x590 [ 574.751949][T14262] ? __sys_recvmsg+0x2a0/0x2a0 [ 574.756769][T14262] ? trace_call_bpf+0xc3/0x6c0 [ 574.761602][T14262] ? trace_call_bpf+0x5e9/0x6c0 [ 574.766536][T14262] ? __fget_files+0x43d/0x4b0 [ 574.771307][T14262] __x64_sys_recvmsg+0x20c/0x2e0 [ 574.776302][T14262] ? ___sys_recvmsg+0x590/0x590 [ 574.781232][T14262] ? syscall_enter_from_user_mode+0x2e/0x80 [ 574.787208][T14262] do_syscall_64+0x55/0xb0 [ 574.791690][T14262] ? clear_bhb_loop+0x40/0x90 [ 574.796439][T14262] ? clear_bhb_loop+0x40/0x90 [ 574.801185][T14262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.807158][T14262] RIP: 0033:0x7fcdac79ce59 [ 574.811638][T14262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.831307][T14262] RSP: 002b:00007fcdad5e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 574.839791][T14262] RAX: ffffffffffffffda RBX: 00007fcdaca15fa0 RCX: 00007fcdac79ce59 [ 574.847824][T14262] RDX: 0000000000001e20 RSI: 0000200000000500 RDI: 0000000000000007 [ 574.855848][T14262] RBP: 00007fcdad5e0090 R08: 0000000000000000 R09: 0000000000000000 [ 574.863874][T14262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.871905][T14262] R13: 00007fcdaca16038 R14: 00007fcdaca15fa0 R15: 00007ffca2c5adf8 [ 574.879947][T14262] [ 575.081920][T14278] netlink: 'syz.3.2835': attribute type 10 has an invalid length. [ 575.130219][T14278] geneve0: entered promiscuous mode [ 575.644675][T14297] netlink: 'syz.1.2844': attribute type 3 has an invalid length. [ 576.468065][T14312] netlink: 'syz.1.2849': attribute type 21 has an invalid length. [ 576.496767][T14312] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2849'. [ 577.270896][T14322] netlink: 'syz.2.2851': attribute type 10 has an invalid length. [ 577.298354][T14321] netlink: 'syz.2.2851': attribute type 10 has an invalid length. [ 578.471306][T14360] FAULT_INJECTION: forcing a failure. [ 578.471306][T14360] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 578.493796][T14360] CPU: 1 PID: 14360 Comm: syz.3.2867 Not tainted syzkaller #0 [ 578.501355][T14360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 578.511466][T14360] Call Trace: [ 578.514812][T14360] [ 578.517793][T14360] dump_stack_lvl+0x18c/0x250 [ 578.522528][T14360] ? show_regs_print_info+0x20/0x20 [ 578.527783][T14360] ? load_image+0x420/0x420 [ 578.532347][T14360] ? __lock_acquire+0x7d40/0x7d40 [ 578.537431][T14360] should_fail_ex+0x39d/0x4d0 [ 578.542168][T14360] prepare_alloc_pages+0x1e2/0x5f0 [ 578.547361][T14360] __alloc_pages+0x134/0x460 [ 578.552000][T14360] ? zone_statistics+0x170/0x170 [ 578.556994][T14360] ? alloc_pages+0x4dc/0x740 [ 578.561627][T14360] ? do_raw_spin_unlock+0x121/0x230 [ 578.566880][T14360] __get_free_pages+0xc/0x30 [ 578.571521][T14360] kasan_populate_vmalloc_pte+0x35/0x100 [ 578.577221][T14360] __apply_to_page_range+0x860/0xdd0 [ 578.582583][T14360] ? kasan_populate_vmalloc+0x70/0x70 [ 578.588024][T14360] ? apply_to_page_range+0x50/0x50 [ 578.593215][T14360] ? do_raw_spin_unlock+0x121/0x230 [ 578.598491][T14360] alloc_vmap_area+0x1d0c/0x1e30 [ 578.603511][T14360] ? vm_map_ram+0xcb0/0xcb0 [ 578.608078][T14360] ? rcu_is_watching+0x15/0xb0 [ 578.612908][T14360] __get_vm_area_node+0x162/0x370 [ 578.618000][T14360] __vmalloc_node_range+0x36e/0x1330 [ 578.623341][T14360] ? sock_hash_alloc+0x261/0x4d0 [ 578.628379][T14360] ? free_vm_area+0x50/0x50 [ 578.632985][T14360] ? bpf_map_area_alloc+0x5e/0x110 [ 578.638160][T14360] ? rcu_is_watching+0x15/0xb0 [ 578.642989][T14360] ? bpf_map_area_alloc+0x5e/0x110 [ 578.648162][T14360] bpf_map_area_alloc+0xf1/0x110 [ 578.653155][T14360] ? sock_hash_alloc+0x261/0x4d0 [ 578.658144][T14360] sock_hash_alloc+0x261/0x4d0 [ 578.662969][T14360] map_create+0x877/0x12f0 [ 578.667435][T14360] ? bpf_lsm_bpf+0x9/0x10 [ 578.671829][T14360] __sys_bpf+0x651/0x890 [ 578.676128][T14360] ? bpf_link_show_fdinfo+0x390/0x390 [ 578.681564][T14360] ? lock_chain_count+0x20/0x20 [ 578.686479][T14360] __x64_sys_bpf+0x7c/0x90 [ 578.690947][T14360] do_syscall_64+0x55/0xb0 [ 578.695411][T14360] ? clear_bhb_loop+0x40/0x90 [ 578.700143][T14360] ? clear_bhb_loop+0x40/0x90 [ 578.704886][T14360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 578.710838][T14360] RIP: 0033:0x7fcdac79ce59 [ 578.715301][T14360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.734968][T14360] RSP: 002b:00007fcdad5e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 578.743439][T14360] RAX: ffffffffffffffda RBX: 00007fcdaca15fa0 RCX: 00007fcdac79ce59 [ 578.751511][T14360] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 0000000000000000 [ 578.759539][T14360] RBP: 00007fcdad5e0090 R08: 0000000000000000 R09: 0000000000000000 [ 578.767570][T14360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 578.775596][T14360] R13: 00007fcdaca16038 R14: 00007fcdaca15fa0 R15: 00007ffca2c5adf8 [ 578.783687][T14360] [ 579.122258][T14371] netlink: 'syz.2.2872': attribute type 10 has an invalid length. [ 580.765896][T14404] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2884'. [ 580.786050][T14404] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 580.873516][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2885'. [ 580.927501][T14409] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2886'. [ 580.939991][T14409] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2886'. [ 580.950236][T14409] tipc: Started in network mode [ 580.955193][T14409] tipc: Node identity b, cluster identity 73 [ 580.963648][T14409] tipc: Node number set to 11 [ 582.105630][T14433] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.2896'. [ 582.116442][T14433] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 582.135482][ T5778] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 582.215879][T14438] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2899'. [ 582.357824][T14438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.395341][T14438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.424625][T14438] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 582.480274][T14438] bond0 (unregistering): Released all slaves [ 582.659337][T14445] Dead loop on virtual device ip6_vti0, fix it urgently! [ 583.135645][T14457] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.2907'. [ 583.151317][T14457] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 584.057385][T14479] netlink: 'syz.3.2914': attribute type 21 has an invalid length. [ 584.083331][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2914'. [ 584.177149][ T5778] Bluetooth: hci2: command tx timeout [ 585.791493][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 585.850946][T14514] netlink: 'syz.0.2930': attribute type 10 has an invalid length. [ 585.875474][T14514] team0: Device geneve1 is up. Set it down before adding it as a team port [ 585.900698][T14513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2931'. [ 586.284504][T14521] netlink: 'syz.0.2933': attribute type 2 has an invalid length. [ 586.353008][T14521] netlink: 'syz.0.2933': attribute type 8 has an invalid length. [ 586.440280][T14521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2933'. [ 587.037593][T14528] syzkaller0: entered promiscuous mode [ 587.043170][T14528] syzkaller0: entered allmulticast mode [ 587.339763][T14544] netlink: 'syz.3.2937': attribute type 10 has an invalid length. [ 592.417341][T14564] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2948'. [ 592.722890][T14576] IPv6: Can't replace route, no match found [ 596.068871][T14642] netlink: 'syz.3.2975': attribute type 29 has an invalid length. [ 596.359623][T14642] netlink: 'syz.3.2975': attribute type 29 has an invalid length. [ 598.042443][T14643] netlink: 'syz.3.2975': attribute type 29 has an invalid length. [ 598.352963][T14677] FAULT_INJECTION: forcing a failure. [ 598.352963][T14677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 598.395079][T14677] CPU: 0 PID: 14677 Comm: syz.0.2985 Not tainted syzkaller #0 [ 598.402639][T14677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.412748][T14677] Call Trace: [ 598.416064][T14677] [ 598.419035][T14677] dump_stack_lvl+0x18c/0x250 [ 598.423760][T14677] ? show_regs_print_info+0x20/0x20 [ 598.428988][T14677] ? load_image+0x420/0x420 [ 598.432917][T14680] netlink: 'syz.2.2987': attribute type 10 has an invalid length. [ 598.433536][T14677] ? __lock_acquire+0x7d40/0x7d40 [ 598.446447][T14677] should_fail_ex+0x39d/0x4d0 [ 598.451193][T14677] prepare_alloc_pages+0x1e2/0x5f0 [ 598.456359][T14677] __alloc_pages+0x134/0x460 [ 598.461010][T14677] ? zone_statistics+0x170/0x170 [ 598.466009][T14677] ? alloc_pages+0x4dc/0x740 [ 598.470654][T14677] ? do_raw_spin_unlock+0x121/0x230 [ 598.475911][T14677] __get_free_pages+0xc/0x30 [ 598.480544][T14677] kasan_populate_vmalloc_pte+0x35/0x100 [ 598.486230][T14677] __apply_to_page_range+0x860/0xdd0 [ 598.491588][T14677] ? kasan_populate_vmalloc+0x70/0x70 [ 598.497022][T14677] ? apply_to_page_range+0x50/0x50 [ 598.502198][T14677] ? do_raw_spin_unlock+0x121/0x230 [ 598.507462][T14677] alloc_vmap_area+0x1d0c/0x1e30 [ 598.512471][T14677] ? vm_map_ram+0xcb0/0xcb0 [ 598.517023][T14677] ? rcu_is_watching+0x15/0xb0 [ 598.521843][T14677] __get_vm_area_node+0x162/0x370 [ 598.526932][T14677] __vmalloc_node_range+0x36e/0x1330 [ 598.532267][T14677] ? sock_hash_alloc+0x261/0x4d0 [ 598.537289][T14677] ? free_vm_area+0x50/0x50 [ 598.541842][T14677] ? bpf_map_area_alloc+0x5e/0x110 [ 598.547004][T14677] ? rcu_is_watching+0x15/0xb0 [ 598.551821][T14677] ? bpf_map_area_alloc+0x5e/0x110 [ 598.557009][T14677] bpf_map_area_alloc+0xf1/0x110 [ 598.562039][T14677] ? sock_hash_alloc+0x261/0x4d0 [ 598.567046][T14677] sock_hash_alloc+0x261/0x4d0 [ 598.571877][T14677] map_create+0x877/0x12f0 [ 598.576355][T14677] ? bpf_lsm_bpf+0x9/0x10 [ 598.580751][T14677] __sys_bpf+0x651/0x890 [ 598.585055][T14677] ? bpf_link_show_fdinfo+0x390/0x390 [ 598.590497][T14677] ? lock_chain_count+0x20/0x20 [ 598.595411][T14677] __x64_sys_bpf+0x7c/0x90 [ 598.599877][T14677] do_syscall_64+0x55/0xb0 [ 598.604341][T14677] ? clear_bhb_loop+0x40/0x90 [ 598.609073][T14677] ? clear_bhb_loop+0x40/0x90 [ 598.613817][T14677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.619767][T14677] RIP: 0033:0x7fef2e79ce59 [ 598.624235][T14677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.643900][T14677] RSP: 002b:00007fef2f579028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.652386][T14677] RAX: ffffffffffffffda RBX: 00007fef2ea15fa0 RCX: 00007fef2e79ce59 [ 598.660414][T14677] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 0000000000000000 [ 598.668449][T14677] RBP: 00007fef2f579090 R08: 0000000000000000 R09: 0000000000000000 [ 598.676463][T14677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 598.684478][T14677] R13: 00007fef2ea16038 R14: 00007fef2ea15fa0 R15: 00007fff192b2b68 [ 598.692517][T14677] [ 599.106178][T14693] netlink: 'syz.2.2989': attribute type 10 has an invalid length. [ 600.625226][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3003'. [ 600.762903][T14730] netlink: 'syz.2.3005': attribute type 27 has an invalid length. [ 601.282317][T14757] netlink: 'syz.0.3013': attribute type 10 has an invalid length. [ 601.365089][T14762] Dead loop on virtual device ip6_vti0, fix it urgently! [ 601.659300][T14769] netlink: 'syz.1.3017': attribute type 29 has an invalid length. [ 602.265133][T14769] netlink: 'syz.1.3017': attribute type 29 has an invalid length. [ 602.327862][T14771] netlink: 'syz.1.3017': attribute type 29 has an invalid length. [ 602.412839][T14774] netlink: 'syz.1.3017': attribute type 29 has an invalid length. [ 602.998397][T14825] netlink: 'syz.1.3032': attribute type 2 has an invalid length. [ 603.019647][T14825] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3032'. [ 603.142947][T14829] netlink: 'syz.0.3034': attribute type 153 has an invalid length. [ 603.157917][T14829] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3034'. [ 603.421899][T14836] netlink: 'syz.1.3036': attribute type 21 has an invalid length. [ 603.656366][T14843] netlink: 'syz.3.3039': attribute type 10 has an invalid length. [ 603.681505][T14843] team0: Device geneve1 is up. Set it down before adding it as a team port [ 603.918866][T14851] netlink: 'syz.3.3042': attribute type 2 has an invalid length. [ 603.933366][T14851] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3042'. [ 605.404218][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3057'. [ 605.575915][T14903] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3063'. [ 605.590721][T14901] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3063'. [ 606.143228][T14915] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3065'. [ 606.693918][T14925] validate_nla: 3 callbacks suppressed [ 606.693977][T14925] netlink: 'syz.1.3070': attribute type 10 has an invalid length. [ 606.750159][T14925] mac80211_hwsim hwsim28 wlan1: left promiscuous mode [ 606.757984][T14925] mac80211_hwsim hwsim28 wlan1: left allmulticast mode [ 606.885725][T14925] team0: Port device wlan1 added [ 607.208984][T14933] syzkaller0: entered promiscuous mode [ 607.230358][T14933] syzkaller0: entered allmulticast mode [ 607.863956][T14940] delete_channel: no stack [ 610.508767][T14989] netlink: 'syz.0.3089': attribute type 10 has an invalid length. [ 612.027320][T15023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3101'. [ 612.631788][T15026] FAULT_INJECTION: forcing a failure. [ 612.631788][T15026] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 612.666382][T15026] CPU: 1 PID: 15026 Comm: syz.3.3102 Not tainted syzkaller #0 [ 612.673940][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.684050][T15026] Call Trace: [ 612.687369][T15026] [ 612.690335][T15026] dump_stack_lvl+0x18c/0x250 [ 612.695068][T15026] ? show_regs_print_info+0x20/0x20 [ 612.700319][T15026] ? load_image+0x420/0x420 [ 612.704899][T15026] ? __lock_acquire+0x7d40/0x7d40 [ 612.709996][T15026] should_fail_ex+0x39d/0x4d0 [ 612.714755][T15026] prepare_alloc_pages+0x1e2/0x5f0 [ 612.719936][T15026] __alloc_pages+0x134/0x460 [ 612.724595][T15026] ? zone_statistics+0x170/0x170 [ 612.729596][T15026] ? alloc_pages+0x4dc/0x740 [ 612.734234][T15026] ? do_raw_spin_unlock+0x121/0x230 [ 612.739496][T15026] __get_free_pages+0xc/0x30 [ 612.744143][T15026] kasan_populate_vmalloc_pte+0x35/0x100 [ 612.749843][T15026] __apply_to_page_range+0x860/0xdd0 [ 612.755208][T15026] ? kasan_populate_vmalloc+0x70/0x70 [ 612.760650][T15026] ? apply_to_page_range+0x50/0x50 [ 612.765832][T15026] ? do_raw_spin_unlock+0x121/0x230 [ 612.771104][T15026] alloc_vmap_area+0x1d0c/0x1e30 [ 612.776122][T15026] ? vm_map_ram+0xcb0/0xcb0 [ 612.780692][T15026] ? rcu_is_watching+0x15/0xb0 [ 612.785524][T15026] __get_vm_area_node+0x162/0x370 [ 612.790628][T15026] __vmalloc_node_range+0x36e/0x1330 [ 612.795975][T15026] ? sock_hash_alloc+0x261/0x4d0 [ 612.800993][T15026] ? free_vm_area+0x50/0x50 [ 612.805559][T15026] ? bpf_map_area_alloc+0x5e/0x110 [ 612.810725][T15026] ? rcu_is_watching+0x15/0xb0 [ 612.815551][T15026] ? bpf_map_area_alloc+0x5e/0x110 [ 612.820722][T15026] bpf_map_area_alloc+0xf1/0x110 [ 612.825719][T15026] ? sock_hash_alloc+0x261/0x4d0 [ 612.830721][T15026] sock_hash_alloc+0x261/0x4d0 [ 612.835564][T15026] map_create+0x877/0x12f0 [ 612.840061][T15026] ? bpf_lsm_bpf+0x9/0x10 [ 612.844462][T15026] __sys_bpf+0x651/0x890 [ 612.848759][T15026] ? bpf_link_show_fdinfo+0x390/0x390 [ 612.854201][T15026] ? lock_chain_count+0x20/0x20 [ 612.859114][T15026] __x64_sys_bpf+0x7c/0x90 [ 612.863591][T15026] do_syscall_64+0x55/0xb0 [ 612.868055][T15026] ? clear_bhb_loop+0x40/0x90 [ 612.872963][T15026] ? clear_bhb_loop+0x40/0x90 [ 612.877710][T15026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 612.883670][T15026] RIP: 0033:0x7fcdac79ce59 [ 612.888140][T15026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.907808][T15026] RSP: 002b:00007fcdad5e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 612.916283][T15026] RAX: ffffffffffffffda RBX: 00007fcdaca15fa0 RCX: 00007fcdac79ce59 [ 612.924312][T15026] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 0000000000000000 [ 612.932340][T15026] RBP: 00007fcdad5e0090 R08: 0000000000000000 R09: 0000000000000000 [ 612.940434][T15026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 612.948437][T15026] R13: 00007fcdaca16038 R14: 00007fcdaca15fa0 R15: 00007ffca2c5adf8 [ 612.956455][T15026] [ 614.059730][T15068] Dead loop on virtual device ip6_vti0, fix it urgently! [ 614.214520][T15077] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3119'. [ 614.241150][T15074] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3121'. [ 614.256250][T15074] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3121'. [ 614.265574][T15074] tipc: Started in network mode [ 614.296786][T15074] tipc: Node identity b, cluster identity 73 [ 614.316594][T15074] tipc: Node number set to 11 [ 615.022448][T15105] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.3132'. [ 615.571545][ T5776] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 616.554563][T15160] netlink: 'syz.2.3152': attribute type 10 has an invalid length. [ 616.850784][T15162] netlink: 'syz.3.3153': attribute type 27 has an invalid length. [ 616.862605][T15162] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3153'. [ 616.889281][T15167] sctp: [Deprecated]: syz.0.3155 (pid 15167) Use of int in maxseg socket option. [ 616.889281][T15167] Use struct sctp_assoc_value instead [ 617.110358][T15170] IPv6: NLM_F_CREATE should be specified when creating new route [ 617.166403][T15170] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3156'. [ 617.617421][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 617.771265][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3168'. [ 618.301627][T15210] netlink: 'syz.0.3172': attribute type 15 has an invalid length. [ 618.356675][T15210] netlink: 'syz.0.3172': attribute type 7 has an invalid length. [ 618.489706][T15217] netlink: 'syz.1.3176': attribute type 10 has an invalid length. [ 618.682922][T15225] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3181'. [ 618.773661][T15227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3180'. [ 619.259319][T15241] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3186'. [ 619.551008][T15249] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3187'. [ 619.664178][T15255] FAULT_INJECTION: forcing a failure. [ 619.664178][T15255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.706405][T15255] CPU: 1 PID: 15255 Comm: syz.1.3192 Not tainted syzkaller #0 [ 619.713960][T15255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.724076][T15255] Call Trace: [ 619.727405][T15255] [ 619.730379][T15255] dump_stack_lvl+0x18c/0x250 [ 619.735130][T15255] ? show_regs_print_info+0x20/0x20 [ 619.740384][T15255] ? load_image+0x420/0x420 [ 619.744954][T15255] ? __might_fault+0xaa/0x120 [ 619.749691][T15255] ? __lock_acquire+0x7d40/0x7d40 [ 619.754774][T15255] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 619.761084][T15255] should_fail_ex+0x39d/0x4d0 [ 619.765834][T15255] _copy_from_user+0x2f/0xe0 [ 619.770489][T15255] __sys_bpf+0x23e/0x890 [ 619.774794][T15255] ? bpf_link_show_fdinfo+0x390/0x390 [ 619.780247][T15255] ? lock_chain_count+0x20/0x20 [ 619.785154][T15255] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 619.791203][T15255] __x64_sys_bpf+0x7c/0x90 [ 619.795690][T15255] do_syscall_64+0x55/0xb0 [ 619.800172][T15255] ? clear_bhb_loop+0x40/0x90 [ 619.804914][T15255] ? clear_bhb_loop+0x40/0x90 [ 619.809667][T15255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.815634][T15255] RIP: 0033:0x7f619079ce59 [ 619.820108][T15255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.839777][T15255] RSP: 002b:00007f619162f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 619.848264][T15255] RAX: ffffffffffffffda RBX: 00007f6190a15fa0 RCX: 00007f619079ce59 [ 619.856302][T15255] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 619.864337][T15255] RBP: 00007f619162f090 R08: 0000000000000000 R09: 0000000000000000 [ 619.872380][T15255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.880427][T15255] R13: 00007f6190a16038 R14: 00007f6190a15fa0 R15: 00007ffd61dd1c78 [ 619.888511][T15255] [ 620.518114][T15261] netlink: 'syz.3.3194': attribute type 1 has an invalid length. [ 620.526055][T15261] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3194'. [ 620.795773][T15264] netlink: 'syz.1.3195': attribute type 29 has an invalid length. [ 620.831147][T15264] netlink: 'syz.1.3195': attribute type 29 has an invalid length. [ 620.871870][T15264] netlink: 'syz.1.3195': attribute type 29 has an invalid length. [ 623.004170][T15283] syzkaller0: entered promiscuous mode [ 623.013354][T15283] syzkaller0: entered allmulticast mode [ 624.662516][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.686850][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.741337][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 626.815761][T15328] netlink: 'syz.0.3218': attribute type 21 has an invalid length. [ 626.859199][T15328] netlink: 16174 bytes leftover after parsing attributes in process `syz.0.3218'. [ 627.129531][T15338] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3218'. [ 627.217746][T15338] netlink: 'syz.0.3218': attribute type 2 has an invalid length. [ 628.173487][T15360] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3228'. [ 628.216440][T15360] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3228'. [ 628.247567][T15360] tipc: Started in network mode [ 628.252561][T15360] tipc: Node identity b, cluster identity 73 [ 628.280979][T15360] tipc: Node number set to 11 [ 628.791570][T15373] netlink: 'syz.3.3234': attribute type 19 has an invalid length. [ 628.813184][T15373] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3234'. [ 630.587366][ T5778] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 631.115246][T15450] netlink: 'syz.0.3265': attribute type 10 has an invalid length. [ 631.131431][T15450] team0: Device geneve1 is up. Set it down before adding it as a team port [ 631.571388][T15460] netlink: 'syz.2.3268': attribute type 2 has an invalid length. [ 631.579425][T15460] netlink: 'syz.2.3268': attribute type 8 has an invalid length. [ 631.587543][T15460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3268'. [ 631.712080][T15462] netlink: 'syz.3.3269': attribute type 27 has an invalid length. [ 631.725151][T15462] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3269'. [ 631.830608][T15468] netlink: 'syz.2.3272': attribute type 1 has an invalid length. [ 631.843364][T15468] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.3272'. [ 632.055586][T15474] netlink: 'syz.2.3276': attribute type 11 has an invalid length. [ 632.069978][T15474] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.3276'. [ 632.216471][T15482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3277'. [ 632.511797][T15489] netlink: 'syz.0.3288': attribute type 15 has an invalid length. [ 632.533527][T15489] netlink: 'syz.0.3288': attribute type 7 has an invalid length. [ 632.656389][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 632.823431][T15495] netlink: 'syz.0.3282': attribute type 2 has an invalid length. [ 632.882594][T15495] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3282'. [ 633.831944][T15507] netlink: 'syz.2.3285': attribute type 10 has an invalid length. [ 633.872649][T15507] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3285'. [ 634.790938][T15521] netlink: 'syz.2.3291': attribute type 10 has an invalid length. [ 635.063817][T15528] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3294'. [ 635.109638][T15529] netlink: 'syz.1.3293': attribute type 29 has an invalid length. [ 635.127159][T15529] netlink: 'syz.1.3293': attribute type 29 has an invalid length. [ 635.255552][T15538] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3298'. [ 635.751440][T15559] syzkaller0: entered promiscuous mode [ 635.936027][T15559] syzkaller0: entered allmulticast mode [ 637.792224][T15595] netlink: 'syz.3.3318': attribute type 46 has an invalid length. [ 639.359612][T15593] netlink: 'syz.1.3316': attribute type 10 has an invalid length. [ 639.369403][T15593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3316'. [ 639.379019][T15593] macvlan1: entered promiscuous mode [ 639.385868][T15593] batman_adv: batadv0: Adding interface: macvlan1 [ 639.394793][T15593] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.429335][T15593] batman_adv: batadv0: Interface activated: macvlan1 [ 639.443578][T15596] netlink: 'syz.1.3316': attribute type 10 has an invalid length. [ 639.451877][T15596] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3316'. [ 639.489189][T15571] delete_channel: no stack [ 639.509850][T15595] netlink: 'syz.3.3318': attribute type 46 has an invalid length. [ 639.706308][T15611] netlink: 'syz.1.3320': attribute type 10 has an invalid length. [ 639.723515][T15611] geneve0: entered promiscuous mode [ 639.913947][T15623] netlink: 'syz.1.3326': attribute type 10 has an invalid length. [ 639.943341][T15625] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3325'. [ 640.397318][T15623] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.426412][T15623] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.440564][T15623] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.449832][T15623] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.498794][T15623] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.515776][T15623] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.533353][T15623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.551412][T15623] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.590677][T15623] team0: Port device geneve1 added [ 640.788882][T15636] FAULT_INJECTION: forcing a failure. [ 640.788882][T15636] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 640.862673][T15636] CPU: 1 PID: 15636 Comm: syz.3.3330 Not tainted syzkaller #0 [ 640.870229][T15636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 640.880391][T15636] Call Trace: [ 640.883711][T15636] [ 640.886683][T15636] dump_stack_lvl+0x18c/0x250 [ 640.891423][T15636] ? show_regs_print_info+0x20/0x20 [ 640.896692][T15636] ? load_image+0x420/0x420 [ 640.901269][T15636] ? __lock_acquire+0x7d40/0x7d40 [ 640.906357][T15636] should_fail_ex+0x39d/0x4d0 [ 640.911104][T15636] prepare_alloc_pages+0x1e2/0x5f0 [ 640.916281][T15636] __alloc_pages+0x134/0x460 [ 640.920927][T15636] ? zone_statistics+0x170/0x170 [ 640.925929][T15636] ? alloc_pages+0x4dc/0x740 [ 640.930568][T15636] ? do_raw_spin_unlock+0x121/0x230 [ 640.935816][T15636] __get_free_pages+0xc/0x30 [ 640.940448][T15636] kasan_populate_vmalloc_pte+0x35/0x100 [ 640.946149][T15636] __apply_to_page_range+0x860/0xdd0 [ 640.951525][T15636] ? kasan_populate_vmalloc+0x70/0x70 [ 640.956997][T15636] ? apply_to_page_range+0x50/0x50 [ 640.962182][T15636] ? do_raw_spin_unlock+0x121/0x230 [ 640.967457][T15636] alloc_vmap_area+0x1d0c/0x1e30 [ 640.972485][T15636] ? vm_map_ram+0xcb0/0xcb0 [ 640.977057][T15636] ? rcu_is_watching+0x15/0xb0 [ 640.981887][T15636] __get_vm_area_node+0x162/0x370 [ 640.986973][T15636] __vmalloc_node_range+0x36e/0x1330 [ 640.992324][T15636] ? sock_hash_alloc+0x261/0x4d0 [ 640.997352][T15636] ? free_vm_area+0x50/0x50 [ 641.001918][T15636] ? bpf_map_area_alloc+0x5e/0x110 [ 641.007090][T15636] ? rcu_is_watching+0x15/0xb0 [ 641.011915][T15636] ? bpf_map_area_alloc+0x5e/0x110 [ 641.017095][T15636] bpf_map_area_alloc+0xf1/0x110 [ 641.022093][T15636] ? sock_hash_alloc+0x261/0x4d0 [ 641.027091][T15636] sock_hash_alloc+0x261/0x4d0 [ 641.031923][T15636] map_create+0x877/0x12f0 [ 641.036399][T15636] ? bpf_lsm_bpf+0x9/0x10 [ 641.040785][T15636] __sys_bpf+0x651/0x890 [ 641.045083][T15636] ? bpf_link_show_fdinfo+0x390/0x390 [ 641.050552][T15636] ? lock_chain_count+0x20/0x20 [ 641.055451][T15636] __x64_sys_bpf+0x7c/0x90 [ 641.059905][T15636] do_syscall_64+0x55/0xb0 [ 641.064350][T15636] ? clear_bhb_loop+0x40/0x90 [ 641.069060][T15636] ? clear_bhb_loop+0x40/0x90 [ 641.073774][T15636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.079704][T15636] RIP: 0033:0x7fcdac79ce59 [ 641.084152][T15636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.103799][T15636] RSP: 002b:00007fcdad5e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 641.112246][T15636] RAX: ffffffffffffffda RBX: 00007fcdaca15fa0 RCX: 00007fcdac79ce59 [ 641.120258][T15636] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 0000000000000000 [ 641.128261][T15636] RBP: 00007fcdad5e0090 R08: 0000000000000000 R09: 0000000000000000 [ 641.136263][T15636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 641.144265][T15636] R13: 00007fcdaca16038 R14: 00007fcdaca15fa0 R15: 00007ffca2c5adf8 [ 641.152284][T15636] [ 641.472969][T15648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3335'. [ 641.513900][T15654] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.3334'. [ 642.143565][T15669] netlink: 'syz.1.3342': attribute type 9 has an invalid length. [ 642.167030][T15669] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3342'. [ 642.183955][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 642.304004][T15675] syzkaller0: entered promiscuous mode [ 642.336939][T15675] syzkaller0: entered allmulticast mode [ 642.540489][T15682] syzkaller0: entered promiscuous mode [ 642.546194][T15682] syzkaller0: entered allmulticast mode [ 643.334717][T15701] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3353'. [ 643.445684][T15704] Dead loop on virtual device ip6_vti0, fix it urgently! [ 645.185088][T15701] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3353'. [ 645.432704][T15716] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3358'. [ 648.524939][T15716] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3358'. [ 648.534691][T15728] netlink: 'syz.1.3361': attribute type 21 has an invalid length. [ 648.544918][T15732] netlink: 'syz.0.3364': attribute type 28 has an invalid length. [ 648.581776][T15733] netlink: 'syz.0.3364': attribute type 39 has an invalid length. [ 649.262674][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3377'. [ 649.313423][T15769] netlink: 'syz.1.3379': attribute type 15 has an invalid length. [ 649.343168][T15769] netlink: 'syz.1.3379': attribute type 7 has an invalid length. [ 649.409012][T15773] netlink: 'syz.2.3378': attribute type 10 has an invalid length. [ 649.497477][T15777] netlink: 'syz.3.3381': attribute type 28 has an invalid length. [ 649.559975][T15777] netlink: 'syz.3.3381': attribute type 39 has an invalid length. [ 650.085208][T15797] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3387'. [ 650.105500][T15797] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3387'. [ 650.129390][T15796] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3387'. [ 650.162214][T15797] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3387'. [ 650.204074][T15796] syz.1.3387: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 650.236344][T15796] CPU: 0 PID: 15796 Comm: syz.1.3387 Not tainted syzkaller #0 [ 650.243914][T15796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 650.254027][T15796] Call Trace: [ 650.257357][T15796] [ 650.260336][T15796] dump_stack_lvl+0x18c/0x250 [ 650.265068][T15796] ? show_regs_print_info+0x20/0x20 [ 650.270328][T15796] ? load_image+0x420/0x420 [ 650.274902][T15796] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 650.281389][T15796] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 650.287963][T15796] warn_alloc+0x246/0x340 [ 650.292367][T15796] ? stack_trace_save+0xaa/0x100 [ 650.297375][T15796] ? zone_watermark_ok_safe+0x230/0x230 [ 650.303001][T15796] ? kasan_set_track+0x5f/0x70 [ 650.307828][T15796] ? kasan_set_track+0x4e/0x70 [ 650.312655][T15796] ? __kasan_kmalloc+0x8f/0xa0 [ 650.317479][T15796] ? xsk_init_queue+0xad/0x100 [ 650.322411][T15796] ? xsk_setsockopt+0x4e5/0x760 [ 650.327326][T15796] ? do_sock_setsockopt+0x175/0x1a0 [ 650.332581][T15796] ? __x64_sys_setsockopt+0x182/0x200 [ 650.338017][T15796] __vmalloc_node_range+0x126/0x1330 [ 650.343402][T15796] ? free_vm_area+0x50/0x50 [ 650.347997][T15796] vmalloc_user+0x74/0x80 [ 650.352385][T15796] ? xskq_create+0xbf/0x170 [ 650.356947][T15796] xskq_create+0xbf/0x170 [ 650.361343][T15796] xsk_init_queue+0xad/0x100 [ 650.365996][T15796] xsk_setsockopt+0x4e5/0x760 [ 650.370743][T15796] ? xsk_poll+0x680/0x680 [ 650.375132][T15796] ? aa_sock_opt_perm+0x17/0x100 [ 650.380132][T15796] ? __sanitizer_cov_trace_pc+0x36/0x60 [ 650.385740][T15796] ? aa_sock_opt_perm+0x74/0x100 [ 650.390783][T15796] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 650.396399][T15796] ? security_socket_setsockopt+0x7e/0xa0 [ 650.402172][T15796] ? xsk_poll+0x680/0x680 [ 650.406573][T15796] do_sock_setsockopt+0x175/0x1a0 [ 650.411664][T15796] ? __fdget+0x180/0x210 [ 650.415979][T15796] __x64_sys_setsockopt+0x182/0x200 [ 650.421268][T15796] do_syscall_64+0x55/0xb0 [ 650.425750][T15796] ? clear_bhb_loop+0x40/0x90 [ 650.430493][T15796] ? clear_bhb_loop+0x40/0x90 [ 650.435242][T15796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.441204][T15796] RIP: 0033:0x7f619079ce59 [ 650.445676][T15796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.465408][T15796] RSP: 002b:00007f619162f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 650.473896][T15796] RAX: ffffffffffffffda RBX: 00007f6190a15fa0 RCX: 00007f619079ce59 [ 650.481933][T15796] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 650.489968][T15796] RBP: 00007f6190832d6f R08: 0000000000000004 R09: 0000000000000000 [ 650.498002][T15796] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 650.506037][T15796] R13: 00007f6190a16038 R14: 00007f6190a15fa0 R15: 00007ffd61dd1c78 [ 650.514124][T15796] [ 650.596595][T15796] Mem-Info: [ 650.600326][T15796] active_anon:11006 inactive_anon:0 isolated_anon:0 [ 650.600326][T15796] active_file:18874 inactive_file:40175 isolated_file:0 [ 650.600326][T15796] unevictable:768 dirty:96 writeback:0 [ 650.600326][T15796] slab_reclaimable:10601 slab_unreclaimable:93344 [ 650.600326][T15796] mapped:29483 shmem:6309 pagetables:571 [ 650.600326][T15796] sec_pagetables:0 bounce:0 [ 650.600326][T15796] kernel_misc_reclaimable:0 [ 650.600326][T15796] free:1343760 free_pcp:4824 free_cma:0 [ 650.684309][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3392'. [ 650.693951][T15796] Node 0 active_anon:44824kB inactive_anon:0kB active_file:75496kB inactive_file:160496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118732kB dirty:380kB writeback:0kB shmem:24500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11052kB pagetables:2284kB sec_pagetables:0kB all_unreclaimable? no [ 650.694181][T15796] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 650.694356][T15796] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 650.694571][T15796] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 650.846058][T15796] Node 0 DMA32 free:1454744kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:45384kB inactive_anon:0kB active_file:75496kB inactive_file:159672kB unevictable:1536kB writepending:380kB present:3129332kB managed:2586944kB mlocked:0kB bounce:0kB free_pcp:7060kB local_pcp:2432kB free_cma:0kB [ 650.894992][T15796] lowmem_reserve[]: 0 0 0 0 0 [ 650.935483][T15796] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 651.006360][T15796] lowmem_reserve[]: 0 0 0 0 0 [ 651.013729][T15796] Node 1 Normal free:3903424kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11744kB local_pcp:9824kB free_cma:0kB [ 651.126219][T15796] lowmem_reserve[]: 0 0 0 0 0 [ 651.146662][T15796] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 651.165148][T15815] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3395'. [ 651.199525][T15796] Node 0 DMA32: 1079*4kB (UM) 520*8kB (U) 397*16kB (UME) 548*32kB (UME) 1132*64kB (UME) 701*128kB (UME) 128*256kB (UM) 27*512kB (UM) 20*1024kB (UM) 4*2048kB (UM) 288*4096kB (UM) = 1449452kB [ 651.266363][T15796] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 651.286343][T15796] Node 1 Normal: 200*4kB (UME) 46*8kB (UME) 33*16kB (UME) 215*32kB (UME) 47*64kB (UE) 11*128kB (UME) 1*256kB (U) 2*512kB (UM) 0*1024kB 1*2048kB (U) 949*4096kB (ME) = 3903424kB [ 651.310818][T15796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.321859][T15796] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 651.335228][T15796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.345064][T15796] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 651.373613][T15796] 67567 total pagecache pages [ 651.380921][T15819] netlink: 'syz.2.3396': attribute type 10 has an invalid length. [ 651.381089][T15796] 0 pages in swap cache [ 651.400061][T15796] Free swap = 124996kB [ 651.404425][T15796] Total swap = 124996kB [ 651.409913][T15796] 2097051 pages RAM [ 651.413877][T15796] 0 pages HighMem/MovableOnly [ 651.424061][T15796] 416929 pages reserved [ 651.429625][T15796] 0 pages cma reserved [ 651.550201][T15824] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3399'. [ 651.565383][T15825] netlink: 'syz.1.3398': attribute type 28 has an invalid length. [ 652.625414][T15845] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3406'. [ 655.720745][T15859] validate_nla: 1 callbacks suppressed [ 655.720767][T15859] netlink: 'syz.0.3410': attribute type 29 has an invalid length. [ 655.747214][T15859] netlink: 'syz.0.3410': attribute type 29 has an invalid length. [ 656.222571][T15862] netlink: 'syz.2.3411': attribute type 10 has an invalid length. [ 656.749314][T14794] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.761588][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 656.771926][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 656.781016][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 656.790439][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 656.799435][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 656.820616][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 657.024526][T14794] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.093497][T15888] netlink: 'syz.2.3420': attribute type 10 has an invalid length. [ 657.438905][T15885] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3418'. [ 657.501320][T14794] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.749994][T14794] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.818695][T15895] netlink: 'syz.2.3421': attribute type 10 has an invalid length. [ 658.357023][T14794] tipc: Left network mode [ 658.381128][T15884] chnl_net:caif_netlink_parms(): no params data found [ 658.906571][ T5776] Bluetooth: hci3: command tx timeout [ 659.697063][T15884] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.715510][T15884] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.744939][T15884] bridge_slave_0: entered allmulticast mode [ 659.757797][T15884] bridge_slave_0: entered promiscuous mode [ 659.960556][T15884] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.976460][T15884] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.983855][T15884] bridge_slave_1: entered allmulticast mode [ 659.992699][T15884] bridge_slave_1: entered promiscuous mode [ 660.271771][T15884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.363645][T15884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.732683][T15953] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.3435'. [ 660.976479][ T5776] Bluetooth: hci3: command tx timeout [ 661.580146][T15884] team0: Port device team_slave_0 added [ 661.609559][T15884] team0: Port device team_slave_1 added [ 661.676734][T15971] Dead loop on virtual device ip6_vti0, fix it urgently! [ 661.774545][T14794] [ 661.776961][T14794] ====================================================== [ 661.784020][T14794] WARNING: possible circular locking dependency detected [ 661.791098][T14794] syzkaller #0 Not tainted [ 661.795535][T14794] ------------------------------------------------------ [ 661.802570][T14794] kworker/u4:31/14794 is trying to acquire lock: [ 661.808951][T14794] ffff88802fc68d00 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 661.818454][T14794] [ 661.818454][T14794] but task is already holding lock: [ 661.825837][T14794] ffff88805d628768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 661.836331][T14794] [ 661.836331][T14794] which lock already depends on the new lock. [ 661.836331][T14794] [ 661.846763][T14794] [ 661.846763][T14794] the existing dependency chain (in reverse order) is: [ 661.855808][T14794] [ 661.855808][T14794] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 661.863567][T14794] __mutex_lock+0x136/0xcc0 [ 661.868694][T14794] ieee80211_open+0x144/0x200 [ 661.873915][T14794] __dev_open+0x2cb/0x430 [ 661.878850][T14794] dev_open+0xab/0x190 [ 661.883463][T14794] team_add_slave+0x75f/0x29a0 [ 661.888775][T14794] do_setlink+0xdfe/0x4130 [ 661.893837][T14794] rtnl_newlink+0x17da/0x20a0 [ 661.899056][T14794] rtnetlink_rcv_msg+0x869/0xfa0 [ 661.904570][T14794] netlink_rcv_skb+0x241/0x4d0 [ 661.909902][T14794] netlink_unicast+0x751/0x8d0 [ 661.915234][T14794] netlink_sendmsg+0x8d0/0xbf0 [ 661.920571][T14794] ____sys_sendmsg+0x5ba/0x960 [ 661.925875][T14794] ___sys_sendmsg+0x2a6/0x360 [ 661.931096][T14794] __se_sys_sendmsg+0x1c2/0x2b0 [ 661.936488][T14794] do_syscall_64+0x55/0xb0 [ 661.941441][T14794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.947882][T14794] [ 661.947882][T14794] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 661.955895][T14794] __lock_acquire+0x2df1/0x7d40 [ 661.961298][T14794] lock_acquire+0x19e/0x420 [ 661.966343][T14794] __mutex_lock+0x136/0xcc0 [ 661.971386][T14794] team_del_slave+0x32/0x1c0 [ 661.976521][T14794] team_device_event+0x28d/0xa20 [ 661.982027][T14794] notifier_call_chain+0x197/0x380 [ 661.987703][T14794] unregister_netdevice_many_notify+0x100d/0x1900 [ 661.994681][T14794] unregister_netdevice_queue+0x32c/0x370 [ 662.000959][T14794] _cfg80211_unregister_wdev+0x16b/0x580 [ 662.007231][T14794] ieee80211_remove_interfaces+0x49e/0x690 [ 662.013583][T14794] ieee80211_unregister_hw+0x5d/0x2a0 [ 662.019548][T14794] mac80211_hwsim_del_radio+0x289/0x480 [ 662.025650][T14794] hwsim_exit_net+0x58d/0x650 [ 662.030877][T14794] cleanup_net+0x70a/0xbb0 [ 662.035834][T14794] process_scheduled_works+0xa5d/0x15d0 [ 662.041931][T14794] worker_thread+0xa55/0xfc0 [ 662.047066][T14794] kthread+0x2fa/0x390 [ 662.051674][T14794] ret_from_fork+0x48/0x80 [ 662.056662][T14794] ret_from_fork_asm+0x11/0x20 [ 662.061987][T14794] [ 662.061987][T14794] other info that might help us debug this: [ 662.061987][T14794] [ 662.072230][T14794] Possible unsafe locking scenario: [ 662.072230][T14794] [ 662.079708][T14794] CPU0 CPU1 [ 662.085087][T14794] ---- ---- [ 662.090474][T14794] lock(&rdev->wiphy.mtx); [ 662.095001][T14794] lock(team->team_lock_key); [ 662.102313][T14794] lock(&rdev->wiphy.mtx); [ 662.109356][T14794] lock(team->team_lock_key); [ 662.114145][T14794] [ 662.114145][T14794] *** DEADLOCK *** [ 662.114145][T14794] [ 662.122317][T14794] 5 locks held by kworker/u4:31/14794: [ 662.127793][T14794] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 662.138711][T14794] #1: ffffc9000f487d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 662.149274][T14794] #2: ffffffff8e3b6a50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 662.158698][T14794] #3: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 662.168649][T14794] #4: ffff88805d628768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 662.179468][T14794] [ 662.179468][T14794] stack backtrace: [ 662.185371][T14794] CPU: 1 PID: 14794 Comm: kworker/u4:31 Not tainted syzkaller #0 [ 662.193108][T14794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 662.203187][T14794] Workqueue: netns cleanup_net [ 662.207983][T14794] Call Trace: [ 662.211287][T14794] [ 662.214243][T14794] dump_stack_lvl+0x18c/0x250 [ 662.218950][T14794] ? load_image+0x420/0x420 [ 662.223482][T14794] ? show_regs_print_info+0x20/0x20 [ 662.228705][T14794] ? print_circular_bug+0x12b/0x1a0 [ 662.233935][T14794] check_noncircular+0x2fc/0x400 [ 662.238923][T14794] ? print_deadlock_bug+0x5d0/0x5d0 [ 662.244154][T14794] ? lockdep_lock+0xf5/0x230 [ 662.248773][T14794] ? __lock_acquire+0x1273/0x7d40 [ 662.253833][T14794] ? _find_first_zero_bit+0xd3/0x100 [ 662.259144][T14794] __lock_acquire+0x2df1/0x7d40 [ 662.264035][T14794] ? verify_lock_unused+0x140/0x140 [ 662.269261][T14794] ? verify_lock_unused+0x140/0x140 [ 662.274493][T14794] lock_acquire+0x19e/0x420 [ 662.279025][T14794] ? team_del_slave+0x32/0x1c0 [ 662.283814][T14794] ? __might_sleep+0xe0/0xe0 [ 662.288430][T14794] ? read_lock_is_recursive+0x20/0x20 [ 662.293834][T14794] __mutex_lock+0x136/0xcc0 [ 662.298359][T14794] ? team_del_slave+0x32/0x1c0 [ 662.303148][T14794] ? __lock_acquire+0x7d40/0x7d40 [ 662.308194][T14794] ? rcu_is_watching+0x15/0xb0 [ 662.312988][T14794] ? trace_contention_end+0x39/0xe0 [ 662.318208][T14794] ? __mutex_lock+0x315/0xcc0 [ 662.322909][T14794] ? team_del_slave+0x32/0x1c0 [ 662.327692][T14794] ? mutex_lock_nested+0x20/0x20 [ 662.332650][T14794] ? bond_netdev_event+0xeb/0xf20 [ 662.337709][T14794] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 662.343367][T14794] team_del_slave+0x32/0x1c0 [ 662.347986][T14794] team_device_event+0x28d/0xa20 [ 662.352947][T14794] notifier_call_chain+0x197/0x380 [ 662.358088][T14794] unregister_netdevice_many_notify+0x100d/0x1900 [ 662.364532][T14794] ? lock_chain_count+0x20/0x20 [ 662.369409][T14794] ? unregister_netdevice_many+0x20/0x20 [ 662.375075][T14794] ? kernfs_remove_by_name_ns+0x117/0x150 [ 662.380834][T14794] ? __lock_acquire+0x7d40/0x7d40 [ 662.385885][T14794] unregister_netdevice_queue+0x32c/0x370 [ 662.391632][T14794] ? list_netdevice+0x730/0x730 [ 662.396505][T14794] ? kernfs_remove_by_name_ns+0x117/0x150 [ 662.402256][T14794] _cfg80211_unregister_wdev+0x16b/0x580 [ 662.407941][T14794] ieee80211_remove_interfaces+0x49e/0x690 [ 662.413774][T14794] ? ieee80211_do_stop+0x1e20/0x1e20 [ 662.419107][T14794] ? rcu_is_watching+0x15/0xb0 [ 662.423927][T14794] ieee80211_unregister_hw+0x5d/0x2a0 [ 662.429324][T14794] mac80211_hwsim_del_radio+0x289/0x480 [ 662.434897][T14794] ? rhashtable_remove_fast+0xc00/0xc00 [ 662.440470][T14794] hwsim_exit_net+0x58d/0x650 [ 662.445172][T14794] ? hwsim_init_net+0x90/0x90 [ 662.449878][T14794] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 662.455811][T14794] cleanup_net+0x70a/0xbb0 [ 662.460251][T14794] ? ops_free_list+0x3b0/0x3b0 [ 662.465041][T14794] ? _raw_spin_unlock_irq+0x23/0x50 [ 662.470262][T14794] ? process_scheduled_works+0x96f/0x15d0 [ 662.476008][T14794] ? process_scheduled_works+0x96f/0x15d0 [ 662.481754][T14794] process_scheduled_works+0xa5d/0x15d0 [ 662.487337][T14794] ? worker_attach_to_pool+0x380/0x380 [ 662.492821][T14794] ? assign_work+0x3d2/0x5d0 [ 662.497435][T14794] worker_thread+0xa55/0xfc0 [ 662.502059][T14794] kthread+0x2fa/0x390 [ 662.506148][T14794] ? pr_cont_work+0x560/0x560 [ 662.510851][T14794] ? kthread_blkcg+0xd0/0xd0 [ 662.515465][T14794] ret_from_fork+0x48/0x80 [ 662.519913][T14794] ? kthread_blkcg+0xd0/0xd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 662.524524][T14794] ret_from_fork_asm+0x11/0x20 [ 662.529320][T14794] [ 662.557274][T14794] team0: Port device ..ãc¤± removed [ 662.618657][T15884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.625684][T15884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.748036][T15884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.056248][ T5776] Bluetooth: hci3: command tx timeout [ 663.445020][T14794] hsr_slave_0: left promiscuous mode [ 663.458917][T14794] hsr_slave_1: left promiscuous mode [ 663.483888][T14794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.506152][T14794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.546936][T14794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.554418][T14794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.586269][T14794] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 663.593842][T14794] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 663.603225][T14794] batman_adv: batadv0: Interface deactivated: macvlan1 [ 663.617968][T14794] batman_adv: batadv0: Removing interface: macvlan1 [ 663.625688][T14794] bridge_slave_1: left allmulticast mode [ 663.655694][T14794] bridge_slave_1: left promiscuous mode [ 663.663581][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.680696][T14794] bridge_slave_0: left allmulticast mode [ 663.688098][T14794] bridge_slave_0: left promiscuous mode [ 663.693891][T14794] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.710048][T14794] veth1_macvtap: left promiscuous mode [ 663.715796][T14794] veth1_vlan: left promiscuous mode [ 663.723240][T14794] veth0_vlan: left promiscuous mode [ 663.943651][T14794] team0 (unregistering): Port device team_slave_1 removed [ 664.685838][T14794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.739551][T14794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.792599][T14794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.871088][T14794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.000909][T14794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.063450][T14794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.119557][T14794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.179077][T14794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.285846][T14794] tipc: Left network mode [ 665.297336][T14794] tipc: Left network mode [ 665.815418][T14794] gretap0 (unregistering): left allmulticast mode [ 665.822090][T14794] gretap0 (unregistering): left promiscuous mode [ 665.831911][T14794] Ÿë: port 1(gretap0) entered disabled state [ 665.849335][T14794] gretap0 (unregistering): left allmulticast mode [ 665.861365][T14794] gretap0 (unregistering): left promiscuous mode [ 665.868172][T14794] Ÿë: port 1(gretap0) entered disabled state [ 666.345480][T14794] team0: Port device wlan1 removed [ 666.480187][T14794] hsr_slave_0: left promiscuous mode [ 666.490044][T14794] hsr_slave_1: left promiscuous mode [ 666.498556][T14794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.506020][T14794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.515397][T14794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.524507][T14794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.532738][T14794] bridge_slave_1: left allmulticast mode [ 666.538588][T14794] bridge_slave_1: left promiscuous mode [ 666.544332][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.553065][T14794] bridge_slave_0: left allmulticast mode [ 666.559008][T14794] bridge_slave_0: left promiscuous mode [ 666.564703][T14794] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.574243][T14794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.582071][T14794] bridge_slave_1: left allmulticast mode [ 666.588772][T14794] bridge_slave_1: left promiscuous mode [ 666.594463][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.602921][T14794] bridge_slave_0: left allmulticast mode [ 666.608691][T14794] bridge_slave_0: left promiscuous mode [ 666.614408][T14794] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.627938][T14794] hsr_slave_0: left promiscuous mode [ 666.633809][T14794] hsr_slave_1: left promiscuous mode [ 666.639925][T14794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.647652][T14794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.655500][T14794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.663232][T14794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.671114][T14794] batman_adv: batadv0: Interface deactivated: macvlan1 [ 666.678065][T14794] batman_adv: batadv0: Removing interface: macvlan1 [ 666.685328][T14794] bridge_slave_1: left allmulticast mode [ 666.691175][T14794] bridge_slave_1: left promiscuous mode [ 666.696958][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.705511][T14794] bridge_slave_0: left allmulticast mode [ 666.711461][T14794] bridge_slave_0: left promiscuous mode [ 666.717425][T14794] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.730365][T14794] veth1_macvtap: left promiscuous mode [ 666.735903][T14794] veth0_macvtap: left promiscuous mode [ 666.743797][T14794] veth1_macvtap: left promiscuous mode [ 666.750296][T14794] veth0_macvtap: left promiscuous mode [ 666.755992][T14794] veth1_vlan: left promiscuous mode [ 666.761691][T14794] veth0_vlan: left promiscuous mode [ 667.128095][T14794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.161783][T14794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.261589][T14794] bond0 (unregistering): Released all slaves [ 667.344846][T14794] team0 (unregistering): Port device team_slave_1 removed [ 667.362360][T14794] team0 (unregistering): Port device team_slave_0 removed [ 667.392713][T14794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.424693][T14794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.501584][T14794] bond0 (unregistering): Released all slaves [ 667.586718][T14794] team0 (unregistering): Port device geneve1 removed [ 667.724480][T14794] team0 (unregistering): Port device team_slave_1 removed [ 667.743162][T14794] team0 (unregistering): Port device C removed [ 667.771602][T14794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.804839][T14794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.908952][T14794] bond0 (unregistering): Released all slaves