last executing test programs: 2.59243044s ago: executing program 0 (id=9979): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x7, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x30, 0x0, &(0x7f00000011c0)="b9ffddc10000000000000008888edfcef6e296510cff24fc83428137", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.491204383s ago: executing program 3 (id=9981): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x298}, 0xc004) 2.490684773s ago: executing program 4 (id=9983): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000400), 0x12) 2.382509957s ago: executing program 0 (id=9984): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db565"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x300, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff8100632f430586dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 2.2712899s ago: executing program 3 (id=9987): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f000000e080)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602600000000e000a0010000000", 0x28}, {&(0x7f0000002300)="fc39ca0e30105a7d2ea952ef36dd71ce30af3e80dc9b5a38e5ad1246869b79", 0x1f}], 0x2}, 0x0) 2.27063232s ago: executing program 4 (id=9988): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd831, 0x4, @perf_config_ext={0x10000, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x1ff, 0x0, 0xe, 0x0, 0xc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x15, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<=0||!') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x34000}], 0x1}, 0xc8d4) sendmsg$inet(r4, &(0x7f0000000b80)={&(0x7f00000004c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000680)="82", 0x1}], 0x1}, 0x810) r5 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x1005, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0xc000000000, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffff8dbbfc60, 0x1}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0x2, 0x5, 0x0, 0x400, 0x0, 0x8000000000000001}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xbba0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000003, 0x7}, 0x2005, 0x8000000000000, 0xfffffffb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x1, 0xd, 0x82, 0x0, 0x58, 0x91, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x57, 0x2, @perf_config_ext={0x401, 0xde}, 0x1e0a, 0x6b7, 0x20e7, 0x9, 0x1, 0x3ff, 0x5, 0x0, 0x3ff, 0x0, 0xad}, 0x0, 0x2, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.148719913s ago: executing program 0 (id=9989): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e430"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/134, 0x86}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80)={0x0, r2}, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8ff3807e129571d1738c48d1f2329feb01001800020000000000"], 0x0, 0x1a, 0x0, 0x0, 0x1, 0x10000, @value=r5}, 0x28) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r8, 0x0, 0x0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r9 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x8, &(0x7f00000001c0)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f0000000100)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000740)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x6, 0x9, 0x2}, 0x10, 0xdd1, r8, 0x8, 0x0, &(0x7f0000000880)=[{0x4, 0x3, 0x5, 0xb}, {0x3, 0x3, 0xf, 0xb}, {0x3, 0x4, 0x2, 0x5}, {0x4, 0x5, 0x7, 0xb}, {0x2, 0x3, 0xe, 0x9}, {0x5, 0x5, 0x2, 0x5}, {0x2, 0x5, 0xb, 0x1}, {0x5, 0x4, 0x6, 0xa}], 0x10, 0x5e94}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000240), &(0x7f0000000000)=""/1, 0x2}, 0x20) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000709000000000000", @ANYRES32=r12], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r13, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x9, &(0x7f0000000ac0)=ANY=[@ANYBLOB="186300000800000000000000020000001c5a0900000000000000000009000000006200000000080006050e0020b2bb441843000006000017a1f8ff04000000"], &(0x7f0000000b40)='syzkaller\x00', 0x1, 0xfc, &(0x7f0000000b80)=""/252, 0x41100, 0x20, '\x00', r11, 0x0, r6, 0x8, &(0x7f0000000c80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x5, 0x5, 0x9d954c2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d00)=[r7, r13, r9], &(0x7f0000000d40)=[{0x2, 0x3, 0x6, 0xa}, {0x1, 0x1, 0x7, 0x5}, {0x2, 0x3, 0xd, 0xb}, {0x5, 0x4, 0x8, 0x7}], 0x10, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x200, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="ac141411e000000100000000200000000000000000000000070000"], 0x40}, 0x20002880) 2.087732296s ago: executing program 2 (id=9990): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x100000001}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0xfffffffc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)="1400000016001963d25a80648c56915a4eaa2bfe", 0x14}], 0x1}, 0x0) socket$kcm(0x2b, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a0000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000400"}) close(0xffffffffffffffff) r4 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0xa, @remote, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x7ff737f4}}], 0x18}, 0x8814) r5 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000940)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@cgroup=r6, 0x30, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0]}, 0x40) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503", 0x4e}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x3}, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x7c46}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="8510000006000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000000000070100a55c6800f8ffffffbfa4deff00000000b2f6df5a3e0243932c880bc3f7ec208107040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000006b07f000e000000"], &(0x7f0000000280)='GPL\x00', 0x6, 0x7f, &(0x7f00000002c0)=""/127, 0x41100, 0x10, '\x00', r9, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x18496, 0xffffffffffffffff, 0x5, &(0x7f0000000540)=[r7, r7, r7, r7, r7], &(0x7f0000000580)=[{0x3, 0x1, 0x10, 0x1}, {0x5, 0x1, 0x1, 0x2}, {0x5, 0x5, 0x7, 0xa}, {0x4, 0x5, 0x1, 0x6}, {0x3, 0x1, 0xa, 0x2}]}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000", 0x17}], 0x1}, 0x20008800) 2.036542027s ago: executing program 3 (id=9991): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5c00000014006b030231a6080c000af32c0cae936c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f68e12ec63c9f4d4938037e786a6d1000000e665050b38", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$kcm(0x1e, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="070000000400000000090000010000"], 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x18}, 0x48) setsockopt$sock_attach_bpf(r3, 0x84, 0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000cbffefff00000000000000008500000041000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x4000, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000840)={&(0x7f0000000280)=@rc={0x1f, @any, 0x1}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000380)="fd3c646b062f77864fe21317ead3f403ed152d03d39ca51d7013f3e46450526c99b91ae2c39b236d931e61c98728d942a18657356c71e15cddacae7a715cf0d1a3c1f1a2f7d26a0ea89143da", 0x4c}, {&(0x7f0000000680)="0123e4a3ddf0771056ba5dc0fa0cb74fc9463e1ce88512dd574bcdf0f3d764bceeb1db8727d4eb55abde90297140f1a16b346c3d1a9a8aa7016ebdc79225bb9096b3d2bf27e19785a4cc4a9b55ec6803411e370d27d3add250d60f7cc68a3a8faa8f20fb4a9d357c629e6bc5e523f824ad846e98c495a6ea67b8dab561f16ba9464453", 0x83}, {&(0x7f0000000740)}, {&(0x7f0000000780)="08bd0c20002ca629c81fa56c55a06793c50fb78f7e177f4ce9b770a3015945c3aff7bf3b54bc38de9f14260b074b8d56fb452f7ec427b25b195de9cbc6ad2f8761d026db9d45268c17aae57464b4103b6744516417340efbf4f0db3e9c19031eac2a82538bec84334597eee8559b25a7e4ee4399f1752c7eb9", 0x79}], 0x4}, 0x24040004) perf_event_open(&(0x7f0000000200)={0x7, 0x80, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x0, @perf_config_ext={0x8, 0x3e12365a}, 0x110000, 0x1, 0xff, 0x7, 0x2, 0xfffffffe, 0xb}, 0x0, 0x0, r6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000340)="caaa538534d92392e7666aaf876a", 0x0, 0x8ef3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x4}, 0x50) 1.987157529s ago: executing program 1 (id=9992): socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xf}, 0x50) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$kcm(r0, &(0x7f0000000ac0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)="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", 0xfb}], 0x2, &(0x7f00000008c0)=[{0x80, 0x115, 0xe613, "07d12b27f7964f88857ce3795e6f5373897a58f5599c786bca493de723e8a26f497e7e850c9f76aabadf1a1742f6365d633186af6bd12e87143356bca95f94f7f6dc89049fd8286d9eac6f0d490c415686e2f2b2ee15c50e191a4576443875c0ad6181de03bd9dcd238cf33bce85"}, {0x90, 0x10a, 0xa, "bdb2f8becb2d79e67766f60f59909db6c33115e00d5bd0c513512bfc23d447c780a64012fc388ffe038212eed66c906ce5663060405832124f505a8c5c0bf3319da78a648dacfa96c2879333f663600e61467bbeb1c28793121a018a868b969e09ae91a62041588784abe27a1de48c5d88622e539e1d363fcafb3bc5"}], 0x110}, 0x4040000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1, 0x0, 0x21}, 0x0) 1.430012156s ago: executing program 2 (id=9993): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x102101, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000940)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 1.418956516s ago: executing program 0 (id=9994): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x7, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x30, 0x0, &(0x7f00000011c0)="b9ffddc10000000000000008888edfcef6e296510cff24fc83428137", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.27510893s ago: executing program 1 (id=9995): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), 0x4) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0xe, 0x6, 0x0, 0x1, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_config_ext={0x8, 0x4}, 0x31, 0x100000001, 0x3, 0x8, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0x1000a, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x8014) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @ldst={0x1, 0x1, 0x3, 0x0, 0x1, 0x96}]}, &(0x7f0000000fc0)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x41100, 0xa}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c022, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0xb, 0x0, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20040040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = socket$kcm(0xa, 0x3, 0x3a) recvmsg$kcm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)}, 0x100) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='syzkaller\x00'}, 0x94) 1.102504416s ago: executing program 1 (id=9996): bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x9, 0x5, 0x1000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.076998237s ago: executing program 4 (id=9997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, 0x90) 967.26406ms ago: executing program 3 (id=9998): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000400), 0x12) 966.92563ms ago: executing program 0 (id=9999): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x300, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff8100632f430586dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 957.4452ms ago: executing program 2 (id=10000): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff1f}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 889.750692ms ago: executing program 1 (id=10001): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xc, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @alu={0x7, 0x0, 0x2, 0x5, 0xa, 0x40, 0x1}]}, &(0x7f0000000fc0)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x41100, 0xa}, 0x94) 827.123294ms ago: executing program 4 (id=10002): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x10000, 0x0, 0x4000, 0x8, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ff, 0xb8}, 0x0, 0x0, 0x3, 0x1, 0x2004}, 0x0, 0x0, r0, 0x3) 803.419445ms ago: executing program 0 (id=10003): close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1000000000000}, 0x104080, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0xffff, 0x2, 0x0, 0x200, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @rr={0x7, 0x3, 0x22}]}}}], 0x38}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100fef74b0000000000080005007a010401a80016002000024004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r6}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x17, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001540)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0x400b8c8) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91024fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 777.676886ms ago: executing program 3 (id=10004): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x200, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000002400000008000000", @ANYRES32=r0, @ANYBLOB="ac141411e000000100000000200000000000000000000000070000"], 0x40}, 0x20002880) 667.088349ms ago: executing program 2 (id=10005): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) 658.81655ms ago: executing program 1 (id=10006): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) close(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f00000002c0)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000380)="9019cd079abc0e49b528f7b08762e350260820f6f71fcd7edce816b4d061dad51615ccdb05fb803d11a175cf7ffc228f78d4e6cc44ad9adc03968c417950d73d5425100bc60392232678dfc0039fe72498e8b34c175160d99cd81fba9cf960f9db67de6d9dbb965284960d194ca26f1deb56fb2a5f9fd5cfb0fb9c18227edfbf7644f8425d6ca41c0167b8eca714e76ef484e70d8fb2281a479189", 0x9b}, {&(0x7f0000000540)="b155eeba8f3357e410a7567586dd809ff83d927664231b9e114593a828499212d1bdd09448234318e3da3a", 0x2b}, {&(0x7f0000000880)="7c9963779e78955b0d6938f63e716bcd434843b3f78df3d376b805d59f394aba4013df84403193933c96c17663e47d058b72feee29ef3b65f6cb230daadfed4d039621569ca73e75682891a997db95d6d2c27139d91123fcf70bebb69f2d2cf78b4d7bffdd2eccdc2324161c3417bf64a3190933f8f8a709b9a37a6765ababc1b95961e7bfb0646dd9013a7e84fc5b5de32dc99779c33ea0360a60e3ab2d2e63335cd49176d3496080a2734b32a0b477f51387248d44d7b72863d85e86894db6465b98ff1dd6b32ea0615aee7b299dd86dc37effc0e1c26075bc475e324503352c", 0xe1}, {&(0x7f0000000980)="c58af1e62ee1f605aa2121d99eec83e5193e48bfbdf9eba12ffd8afaae3a481195019c4e293aa4e13c4cf2a9f18277336f783e47bc9c66f66e5b20d79c5b625eb516f4aeb3389097a8f7d5543767398e7880aea2588b10a1894fa29e2d7b35d2476a890718a6e0b4e8019b72bc5e1007dde0dc99a18b73318b3bce45677dbf9b3fce632c92a896c3a7a878578bc439e6b38208d9516adb07a1d5affb15571c2fd1ca0eb0151cbedf1dce2752d2def4f1008cb7fe2a", 0xb5}, {&(0x7f0000000a40)="a67bade3c0c67ef0a09ab935c004883ccbc1e1fec50d31eaa742af4f5b00df85eda770347317a3fff873101b65c23fdbf512cbc6071d99ed242ee17a32338581675ae9a07755e716e8742ddab2d596e43651009f2f8c56d71ca4f78ea2c4337b9cb83b6e7c0d096e3c1568a85f92c99c9ccb16ad798df9be558e43fabbce57a549f5399abed8f16bb75685cdfae4b6ae87f78046024eb15119444a4b92c3e0e60c2ed455f330a4cb04dda4ca406ad1a34ab29934b1ff3806678f8ecc1ffb811a3853e3180b20d5af80733be902da81b2a2f609118eab31b62932a1dae4987d35fdf162b96b6a497a184615447012e1", 0xef}, {&(0x7f0000000b40)="db3b6e1446451f0d30047b392a69be0a1b2ae9f43590993e021f26bb91e2ca", 0x1f}, {&(0x7f0000000b80)="a531ff5702c497b041abba286af7b96c4b400c0f18731fd373721c149cac0c134d7c4a9bf8a07ccabedf2aa587a0d4851f6905599d899bba7b6db1097ec3b8ccce41ed61d9261564e513b8421164b533fb031eccab660477301610661c512f3082033296b213cc910b37f05026e9825c08128c179509bde45c16bdd2cfe6cda7", 0x80}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="eb934699ccee6ab1889517b4f7bec8df3901a8f6e14b3a199d183949e98dc0258101a80dabea336608df694debddb14b3c904d1fa5917745478a46faabc6daf6cfca501040409d7caefa8fc28109b2885548ee5865e787433f6e0118a7a847d6efee1fb90275d094663d9d86cc4060d9eff1be2628ea52111c5ba79f76836e52c0ca", 0x82}, {&(0x7f0000001cc0)="c5763f316398c470962810a3039b9ea09ea95a8a114675cb25c3637381ac873fc15f1f749dce45e32ab4ddb7cc39634eab00daec73c65c8ee2c012b956ab524bb8cdb69ddfd07fcd68af81d0ba4544c71a1c501fe21186f5e42d87260c224fc91f9399b144c56c8ecb681132853bf31e4c5d2f07faa46b09f4a6c71344443aee18ad6008889c6aee686daa18ed97de04bc67f9f88c73fe8473914ff98273308c63ee2310bd", 0xa5}], 0xa, &(0x7f0000001f80)=ANY=[@ANYBLOB="50000000000000000d010000030000007a2327f61b9bf05208c4a1387c2b06714b347062bde58f6c8d2dbca74ea972737cde7506704679e37751e68fc12315925310b51f02cf3286610000000000000088000000000000001701000008008000d60821f351f9a8ec0e2cc1f863cb1bc7495c6f8e7dd10b596f9909238d20b97a179301b0ea081849257f1db53655e361f8865048731d0158b8924b04fe24a5a72be1e107e32f6b7e750f9a67881f8c580bc434ad1ffe0a98432393aa9e0d88ac194c10791743826f4ea28beba1e731dfd01f30490800000006090feff7a1eb2a73c56081c39752e4533c8cda61b44877998125a872aff0484b11e137efa42847fa7dee4458e032a0a8d2ca1dce38d5c5b9b58e747a896b338351d6027f86022f031158207455733c1323fb12f529fe2f0f591c78fadd700c5d2e306b4afe"], 0xd8}, 0x20000050) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8940) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x4004010) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) (async) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xe4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b40d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x0) 569.080372ms ago: executing program 3 (id=10007): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b0, &(0x7f0000000080)) r1 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map, r1, 0x32, 0x20, r2}, 0x20) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x7) 485.233715ms ago: executing program 4 (id=10008): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$kcm(0x1e, 0x4, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x18, 0x110, 0xa, ')'}], 0x18}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000033c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003400)={&(0x7f0000000640)="743b6b9991a08fa0272b0f2c9fe51e4791ed8a857224d48e623c4db867caf55e39af2569740b94da4f027f7fa37bbb1bc79e98c9a6e51861c30c7fe6b4a5f05223de7bf1412c14340bc1ccdd33624329e7d7989c92dca09233c90f7a7233c728d16b843d7f8dcaade8179dd0fbf70c3b6109cf565b8a495fdad5963411d188f650d12cf9f15439453c9d6b62792051335be8f73e36c0d708674bea587fabacd6a958b8e0bfebda33fe37bda0012097cec88a8c9e698b3818757ae130a10309a0a45d5db605f497c07c5954184939df35fcdac7daadb4dbb772ca0c72543f13cc689457d5baece7b9a15c558159", &(0x7f0000000740)=""/198, &(0x7f0000002340)="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", &(0x7f0000003340)="6b809c20ba784a8c029f77b944ef7ac77d6a1cefb5a98626aca063945306475b1fab3eb31cbc74fa197c582305855bfd4c5dd14273e800d80dc891c8143f26eb8461aa241631c30814ed36ef1c03", 0x4a, r2, 0xf27821f50d569c68}, 0x38) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000002300)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x4, 0x4, 0x2, 0x2}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)="11d99a1f770bf913f45005f1b6989d9773d7bb9111d0954906b2a3ca975c26879e9d918b35bf13071f0865434043c660d43e9edced8af5a084d6c2596ca699de3e391dac8432bd9fb5a123e1f2ba53cfbbe3aa308f8e4420e08fe74321fb4be853f63aef075019610b445e9835133a3bfdcfbea9302b4b6d6ade0baa0c2cb857b078706c3a545904c82825640d0a29710720c906b219753a2c20add83320e83be13b06da441ab9938ad7c713e622bd8519cbbb254170938f0200dc56b674beeec568", 0xc2}, {&(0x7f0000000540)="3f66e0164fb31cd6ed6ab81581d1c4e92777b6b0d434105a55e9483aab8c5356eea8269e0bbe7d708b382dc2e9854482247ca7a264e1c8ef65f8b522fac9b8a6a4e35574e1b593afa547fa2acc0b6a04e958fd6117756eca226f53a02b747e671f4fb9d6d0ad143e60897f088f8a84c68b866e0dd5d7fbf288d7932468b0cfc2869f55e53d0e292b93f7c3dd252f3445b5e1bd", 0x93}], 0x2, &(0x7f0000001140)=[{0x60, 0x101, 0x3, "ac68539b54ece8644f68a7a2941543f1d10ac3f20e890d0cd1ca4fefbf2a414715dbf94362fec3745decb7f8e6e25ae3cee628c2d45608f506111b90afcd69eb75a12a6abf2e6445b5"}, {0x1010, 0x18e, 0x6, "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"}, {0x20, 0x11, 0x2, "d03fb4d3eb7e4d0a5bd4"}, {0xa8, 0x84, 0x3588f9d4, "b7a1893853ab0141bf79a79263877451632232bd25cbf055ef78a97b35c93e7f1f301172ce5bd4d1b43ada89ee2726a4b02f4b07d07b422ac596142b5f764f4a3da9f9921f6a177e67778079686b38aaf03d20920eeba15ed66e643ff3ea5552cf9983999845c1d64cd2a5a0983033a57d27292e3ec849fa5ec0f25c11c76c605992fc800bb97c67ca3c275e303e10e8259c1da6bc"}, {0x50, 0x103, 0x4, "b8e4df844f3d95a6022c1a9bebc077146ddb2fed9e354ab9de31265dcf39b9d480dfc3f3e31fd9395c9f277d87bb018dec09ae15dc4ce4c0ebaca4b86149ed47"}], 0x1188}, 0x40) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0xc, "8f"}], 0x28}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5945}}, 0x0, 0xccf9, 0x96, &(0x7f0000000f00)=""/150, 0x40f00, 0x9}, 0x94) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYBLOB=','], 0x31) 429.300217ms ago: executing program 2 (id=10009): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x88, 0x0, 0x0) 339.585889ms ago: executing program 1 (id=10010): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4000001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1d, 0x2, 0x3ff, &(0x7f0000000b00)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="95"], 0x0, 0x81, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 55.095128ms ago: executing program 2 (id=10011): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f000000040e0000000000000200000002000000000000040000000000"], 0x0, 0x45, 0x0, 0x1}, 0x28) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x29, 0xa530e6b8dda7f74, 0x0) sendmsg$kcm(r1, &(0x7f0000000ac0)={&(0x7f0000000500)=@xdp={0x2c, 0xe, 0x0, 0x16}, 0x80, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[{0x10, 0x1, 0x86}], 0x10}, 0x40000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 0s ago: executing program 4 (id=10012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) kernel console output (not intermixed with test programs): op+0x60/0xb0 [ 1480.801058][T27794] ? clear_bhb_loop+0x60/0xb0 [ 1480.805790][T27794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1480.811722][T27794] RIP: 0033:0x7f3a6c39ce59 [ 1480.816180][T27794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.835830][T27794] RSP: 002b:00007f3a6d231028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1480.844292][T27794] RAX: ffffffffffffffda RBX: 00007f3a6c616090 RCX: 00007f3a6c39ce59 [ 1480.852307][T27794] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000003 [ 1480.860320][T27794] RBP: 00007f3a6d231090 R08: 0000000000000000 R09: 0000000000000000 [ 1480.868336][T27794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1480.876359][T27794] R13: 00007f3a6c616128 R14: 00007f3a6c616090 R15: 00007ffe7d348448 [ 1480.884397][T27794] [ 1484.388739][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.395178][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.675495][T27801] netlink: 'syz.4.7910': attribute type 21 has an invalid length. [ 1485.683496][T27804] netlink: 'syz.1.7911': attribute type 39 has an invalid length. [ 1485.692354][T27816] IPv6: Can't replace route, no match found [ 1486.242722][T27853] device syzkaller0 entered promiscuous mode [ 1489.241045][T27856] netlink: 'syz.1.7930': attribute type 21 has an invalid length. [ 1489.255244][T27858] netlink: 'syz.2.7931': attribute type 39 has an invalid length. [ 1489.555814][T27887] netlink: 'syz.1.7935': attribute type 21 has an invalid length. [ 1489.600870][T27882] delete_channel: no stack [ 1490.222232][T27904] netlink: 'syz.3.7945': attribute type 21 has an invalid length. [ 1491.082835][T27913] device syzkaller0 entered promiscuous mode [ 1491.092856][T27915] netlink: 'syz.4.7947': attribute type 39 has an invalid length. [ 1491.472826][T27923] delete_channel: no stack [ 1494.000268][T27929] device syzkaller0 entered promiscuous mode [ 1494.007813][T27948] netlink: 'syz.2.7956': attribute type 21 has an invalid length. [ 1494.018042][T27957] netlink: 'syz.1.7958': attribute type 21 has an invalid length. [ 1494.194328][T27961] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7959'. [ 1495.267913][T27974] delete_channel: no stack [ 1495.314811][T27979] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7966'. [ 1497.050865][T27979] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7966'. [ 1497.157664][T27986] device syzkaller0 entered promiscuous mode [ 1497.628120][T28010] delete_channel: no stack [ 1497.666247][ T5378] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1499.514891][T28001] netlink: 'syz.4.7972': attribute type 21 has an invalid length. [ 1499.523633][T28020] netlink: 'syz.3.7980': attribute type 21 has an invalid length. [ 1499.768047][T28024] device veth1_macvtap left promiscuous mode [ 1499.823187][T28035] device veth1_macvtap entered promiscuous mode [ 1499.853558][T28035] device macsec0 entered promiscuous mode [ 1499.873413][T28037] netlink: 'syz.3.7983': attribute type 3 has an invalid length. [ 1499.902534][T28037] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7983'. [ 1500.153127][T28044] delete_channel: no stack [ 1500.276287][T28047] netlink: 'syz.1.7989': attribute type 39 has an invalid length. [ 1500.451442][T28056] netlink: 'syz.4.7993': attribute type 21 has an invalid length. [ 1500.791264][T28063] device syzkaller0 entered promiscuous mode [ 1500.832307][T28066] netlink: 'syz.0.7994': attribute type 21 has an invalid length. [ 1501.668396][T28085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7999'. [ 1501.745815][T22119] wlan1: Trigger new scan to find an IBSS to join [ 1502.382266][T28097] delete_channel: no stack [ 1502.936784][T28107] netlink: 'syz.0.8006': attribute type 1 has an invalid length. [ 1502.944795][T28107] netlink: 'syz.0.8006': attribute type 1 has an invalid length. [ 1502.953098][T28107] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.8006'. [ 1504.413249][T28109] netlink: 'syz.0.8007': attribute type 21 has an invalid length. [ 1504.721008][T28126] netlink: 'syz.4.8010': attribute type 21 has an invalid length. [ 1504.785101][ T5378] wlan1: Trigger new scan to find an IBSS to join [ 1505.332094][T28149] netlink: 'syz.2.8021': attribute type 21 has an invalid length. [ 1505.537814][T28155] netlink: 'syz.0.8023': attribute type 39 has an invalid length. [ 1505.916141][T28161] netlink: 'syz.4.8026': attribute type 10 has an invalid length. [ 1506.000635][T28161] team0: Port device dummy0 added [ 1506.063161][T28166] netlink: 'syz.4.8026': attribute type 10 has an invalid length. [ 1506.418831][T28166] team0: Port device dummy0 removed [ 1506.486647][T28170] netlink: 'syz.3.8029': attribute type 21 has an invalid length. [ 1507.050324][T28185] netlink: 'syz.3.8034': attribute type 10 has an invalid length. [ 1507.259741][T28193] netlink: 'syz.3.8038': attribute type 39 has an invalid length. [ 1507.584053][T28206] FAULT_INJECTION: forcing a failure. [ 1507.584053][T28206] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.597309][T28206] CPU: 1 PID: 28206 Comm: syz.4.8039 Not tainted syzkaller #0 [ 1507.604813][T28206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1507.614907][T28206] Call Trace: [ 1507.618248][T28206] [ 1507.621219][T28206] dump_stack_lvl+0x188/0x24e [ 1507.625961][T28206] ? trace_event_raw_event_lock+0x250/0x250 [ 1507.631902][T28206] ? show_regs_print_info+0x12/0x12 [ 1507.637160][T28206] ? load_image+0x400/0x400 [ 1507.641739][T28206] should_fail_ex+0x399/0x4d0 [ 1507.646471][T28206] should_failslab+0x5/0x20 [ 1507.651022][T28206] slab_pre_alloc_hook+0x59/0x310 [ 1507.656096][T28206] kmem_cache_alloc+0x56/0x2f0 [ 1507.660883][T28206] ? __nf_conntrack_alloc+0x99/0x380 [ 1507.666280][T28206] __nf_conntrack_alloc+0x99/0x380 [ 1507.671414][T28206] init_conntrack+0x25b/0x11a0 [ 1507.676206][T28206] ? early_drop+0x870/0x870 [ 1507.680734][T28206] ? nf_conntrack_find_get+0x670/0x670 [ 1507.686229][T28206] ? __siphash_unaligned+0x25b/0x3a0 [ 1507.691547][T28206] nf_conntrack_in+0xd3e/0x17b0 [ 1507.696442][T28206] ? nf_ct_pernet+0x270/0x270 [ 1507.701168][T28206] ? ip6t_alloc_initial_table+0x640/0x640 [ 1507.707015][T28206] ? ipv6_defrag+0x2d2/0x3a0 [ 1507.711666][T28206] ? ipv4_confirm+0x380/0x380 [ 1507.716395][T28206] nf_hook_slow_list+0x272/0x5b0 [ 1507.721377][T28206] ? nf_hook_slow+0x200/0x200 [ 1507.726103][T28206] ip6_sublist_rcv+0x1050/0x1170 [ 1507.731137][T28206] ? ip6_sublist_rcv+0xed0/0x1170 [ 1507.736200][T28206] ? __lock_acquire+0x7d10/0x7d10 [ 1507.741255][T28206] ? ipv6_parse_hopopts+0x308/0x5f0 [ 1507.746549][T28206] ? ipv6_list_rcv+0x440/0x440 [ 1507.751442][T28206] ? net_zcopy_put_abort+0x90/0x90 [ 1507.756586][T28206] ? ip6_rcv_core+0xc5/0x1750 [ 1507.761299][T28206] ipv6_list_rcv+0x3f1/0x440 [ 1507.765940][T28206] ? NF_HOOK+0x3b0/0x3b0 [ 1507.770229][T28206] ? NF_HOOK+0x3b0/0x3b0 [ 1507.774505][T28206] __netif_receive_skb_list_core+0x57f/0x750 [ 1507.780566][T28206] ? set_rps_cpu+0x670/0x670 [ 1507.785191][T28206] netif_receive_skb_list_internal+0x93f/0xca0 [ 1507.791375][T28206] ? netif_receive_skb_list_internal+0x4ad/0xca0 [ 1507.797731][T28206] ? netif_receive_skb_core+0x230/0x230 [ 1507.803304][T28206] ? dev_gro_receive+0x1a67/0x24c0 [ 1507.808461][T28206] ? eth_type_trans+0x37e/0x740 [ 1507.813407][T28206] napi_complete_done+0x378/0x850 [ 1507.818467][T28206] ? __napi_schedule_irqoff+0x80/0x80 [ 1507.823870][T28206] ? napi_gro_frags+0x843/0xf50 [ 1507.828763][T28206] tun_get_user+0x26d6/0x3c70 [ 1507.833479][T28206] ? tun_get_user+0x249b/0x3c70 [ 1507.838377][T28206] ? rcu_read_unlock+0xa0/0xa0 [ 1507.843178][T28206] ? tun_get+0x1c/0x2e0 [ 1507.847366][T28206] ? __lock_acquire+0x7d10/0x7d10 [ 1507.852430][T28206] ? tun_get+0x1c/0x2e0 [ 1507.856625][T28206] tun_chr_write_iter+0x112/0x1f0 [ 1507.861696][T28206] vfs_write+0x4b1/0xa30 [ 1507.865978][T28206] ? file_end_write+0x250/0x250 [ 1507.870863][T28206] ? __fget_files+0x43d/0x4b0 [ 1507.875571][T28206] ? __fdget_pos+0x1d4/0x360 [ 1507.880189][T28206] ? ksys_write+0x71/0x250 [ 1507.884640][T28206] ksys_write+0x14c/0x250 [ 1507.889005][T28206] ? __ia32_sys_read+0x80/0x80 [ 1507.893822][T28206] ? lockdep_hardirqs_on+0x94/0x140 [ 1507.899075][T28206] do_syscall_64+0x4c/0xa0 [ 1507.903537][T28206] ? clear_bhb_loop+0x60/0xb0 [ 1507.908264][T28206] ? clear_bhb_loop+0x60/0xb0 [ 1507.913027][T28206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1507.918959][T28206] RIP: 0033:0x7f3b4599ce59 [ 1507.923397][T28206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.943046][T28206] RSP: 002b:00007f3b43bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1507.951489][T28206] RAX: ffffffffffffffda RBX: 00007f3b45c16090 RCX: 00007f3b4599ce59 [ 1507.959484][T28206] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000003 [ 1507.967476][T28206] RBP: 00007f3b43bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.975473][T28206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.983461][T28206] R13: 00007f3b45c16128 R14: 00007f3b45c16090 R15: 00007fffcc169b58 [ 1507.991497][T28206] [ 1509.190126][T28224] netlink: 'syz.3.8044': attribute type 21 has an invalid length. [ 1512.686040][T28247] netlink: 'syz.2.8051': attribute type 39 has an invalid length. [ 1513.433036][T28274] netlink: 'syz.4.8058': attribute type 21 has an invalid length. [ 1513.650079][T28284] netlink: 'syz.1.8062': attribute type 39 has an invalid length. [ 1514.193047][T28294] netlink: 'syz.4.8066': attribute type 39 has an invalid length. [ 1515.639118][T28321] netlink: 'syz.0.8075': attribute type 2 has an invalid length. [ 1515.658219][T28321] netlink: 'syz.0.8075': attribute type 8 has an invalid length. [ 1515.687693][T28321] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8075'. [ 1515.731967][T28327] netlink: 'syz.0.8075': attribute type 2 has an invalid length. [ 1515.751689][T28327] netlink: 'syz.0.8075': attribute type 8 has an invalid length. [ 1515.796086][T28327] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8075'. [ 1515.826296][T28328] netlink: 'syz.1.8076': attribute type 21 has an invalid length. [ 1516.183991][T28336] netlink: 'syz.3.8079': attribute type 39 has an invalid length. [ 1517.326021][T28360] FAULT_INJECTION: forcing a failure. [ 1517.326021][T28360] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.355891][T28360] CPU: 1 PID: 28360 Comm: syz.0.8089 Not tainted syzkaller #0 [ 1517.363438][T28360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1517.373520][T28360] Call Trace: [ 1517.376825][T28360] [ 1517.379776][T28360] dump_stack_lvl+0x188/0x24e [ 1517.384495][T28360] ? show_regs_print_info+0x12/0x12 [ 1517.389726][T28360] ? load_image+0x400/0x400 [ 1517.394271][T28360] ? __might_sleep+0xd0/0xd0 [ 1517.398901][T28360] ? __lock_acquire+0x7d10/0x7d10 [ 1517.403956][T28360] should_fail_ex+0x399/0x4d0 [ 1517.408659][T28360] should_failslab+0x5/0x20 [ 1517.413270][T28360] slab_pre_alloc_hook+0x59/0x310 [ 1517.418341][T28360] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1517.424087][T28360] __kmem_cache_alloc_node+0x4f/0x260 [ 1517.429488][T28360] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1517.435259][T28360] __kmalloc+0xa0/0x240 [ 1517.439457][T28360] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1517.445062][T28360] ? tomoyo_path_number_perm+0x205/0x650 [ 1517.450729][T28360] tomoyo_path_number_perm+0x22f/0x650 [ 1517.456213][T28360] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1517.461706][T28360] ? ksys_write+0x1c0/0x250 [ 1517.466236][T28360] ? common_file_perm+0x171/0x1c0 [ 1517.471302][T28360] ? __fget_files+0x28/0x4b0 [ 1517.475922][T28360] ? __fget_files+0x28/0x4b0 [ 1517.480555][T28360] security_file_ioctl+0x6c/0xa0 [ 1517.485517][T28360] __se_sys_ioctl+0x48/0x170 [ 1517.490215][T28360] do_syscall_64+0x4c/0xa0 [ 1517.494655][T28360] ? clear_bhb_loop+0x60/0xb0 [ 1517.499356][T28360] ? clear_bhb_loop+0x60/0xb0 [ 1517.504088][T28360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1517.510002][T28360] RIP: 0033:0x7f81fa39ce59 [ 1517.514449][T28360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1517.534071][T28360] RSP: 002b:00007f81fb285028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1517.542512][T28360] RAX: ffffffffffffffda RBX: 00007f81fa615fa0 RCX: 00007f81fa39ce59 [ 1517.550497][T28360] RDX: 0000200000000080 RSI: 00000000000089a1 RDI: 0000000000000005 [ 1517.558486][T28360] RBP: 00007f81fb285090 R08: 0000000000000000 R09: 0000000000000000 [ 1517.566471][T28360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1517.574469][T28360] R13: 00007f81fa616038 R14: 00007f81fa615fa0 R15: 00007ffcf3f06008 [ 1517.582479][T28360] [ 1517.648614][T28360] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1517.738201][T28366] device virt_wifi0 entered promiscuous mode [ 1517.774332][T28372] netlink: 'syz.3.8094': attribute type 39 has an invalid length. [ 1518.383083][T28383] device syzkaller0 entered promiscuous mode [ 1520.977851][T28409] tipc: Started in network mode [ 1520.982972][T28409] tipc: Node identity 9215a268, cluster identity 4711 [ 1520.990873][T28409] tipc: Node number set to 2450891368 [ 1520.996930][T28412] netlink: 'syz.0.8107': attribute type 21 has an invalid length. [ 1521.004963][T28417] netlink: 'syz.4.8109': attribute type 10 has an invalid length. [ 1521.013428][T28423] netlink: 'syz.2.8111': attribute type 21 has an invalid length. [ 1521.308104][T28435] FAULT_INJECTION: forcing a failure. [ 1521.308104][T28435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1521.371370][T28435] CPU: 0 PID: 28435 Comm: syz.3.8115 Not tainted syzkaller #0 [ 1521.378959][T28435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1521.389074][T28435] Call Trace: [ 1521.392415][T28435] [ 1521.395400][T28435] dump_stack_lvl+0x188/0x24e [ 1521.400133][T28435] ? show_regs_print_info+0x12/0x12 [ 1521.405388][T28435] ? load_image+0x400/0x400 [ 1521.409943][T28435] ? __lock_acquire+0x7d10/0x7d10 [ 1521.415020][T28435] should_fail_ex+0x399/0x4d0 [ 1521.419743][T28435] _copy_from_user+0x2c/0x170 [ 1521.424481][T28435] ___sys_sendmsg+0x1c3/0x360 [ 1521.429208][T28435] ? __sys_sendmsg+0x290/0x290 [ 1521.434038][T28435] ? __lock_acquire+0x7d10/0x7d10 [ 1521.439129][T28435] __se_sys_sendmsg+0x1bb/0x2a0 [ 1521.444031][T28435] ? __x64_sys_sendmsg+0x80/0x80 [ 1521.449011][T28435] ? lockdep_hardirqs_on+0x94/0x140 [ 1521.454241][T28435] do_syscall_64+0x4c/0xa0 [ 1521.458685][T28435] ? clear_bhb_loop+0x60/0xb0 [ 1521.463385][T28435] ? clear_bhb_loop+0x60/0xb0 [ 1521.468109][T28435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.474042][T28435] RIP: 0033:0x7f3a6c39ce59 [ 1521.478491][T28435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1521.498120][T28435] RSP: 002b:00007f3a6d252028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1521.506557][T28435] RAX: ffffffffffffffda RBX: 00007f3a6c615fa0 RCX: 00007f3a6c39ce59 [ 1521.514593][T28435] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000008 [ 1521.522581][T28435] RBP: 00007f3a6d252090 R08: 0000000000000000 R09: 0000000000000000 [ 1521.530570][T28435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.538558][T28435] R13: 00007f3a6c616038 R14: 00007f3a6c615fa0 R15: 00007ffe7d348448 [ 1521.546568][T28435] [ 1521.965578][T28452] netlink: 'syz.3.8122': attribute type 21 has an invalid length. [ 1521.994174][T28454] netlink: 'syz.1.8123': attribute type 10 has an invalid length. [ 1522.063594][T28465] netlink: 'syz.0.8124': attribute type 21 has an invalid length. [ 1522.291167][T28470] netlink: 'syz.1.8126': attribute type 3 has an invalid length. [ 1522.328770][T28470] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8126'. [ 1522.527864][T28482] netlink: 'syz.0.8132': attribute type 27 has an invalid length. [ 1522.542652][T28481] delete_channel: no stack [ 1523.371201][T28493] FAULT_INJECTION: forcing a failure. [ 1523.371201][T28493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1523.415633][T28493] CPU: 0 PID: 28493 Comm: syz.1.8136 Not tainted syzkaller #0 [ 1523.423198][T28493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1523.433291][T28493] Call Trace: [ 1523.436602][T28493] [ 1523.439577][T28493] dump_stack_lvl+0x188/0x24e [ 1523.444339][T28493] ? show_regs_print_info+0x12/0x12 [ 1523.449590][T28493] ? load_image+0x400/0x400 [ 1523.454138][T28493] ? __lock_acquire+0x7d10/0x7d10 [ 1523.459238][T28493] should_fail_ex+0x399/0x4d0 [ 1523.463961][T28493] _copy_from_user+0x2c/0x170 [ 1523.468682][T28493] ___sys_sendmsg+0x1c3/0x360 [ 1523.473413][T28493] ? __sys_sendmsg+0x290/0x290 [ 1523.478250][T28493] ? __lock_acquire+0x7d10/0x7d10 [ 1523.483348][T28493] __se_sys_sendmsg+0x1bb/0x2a0 [ 1523.488238][T28493] ? ct_nmi_exit+0x145/0x1c0 [ 1523.492873][T28493] ? __x64_sys_sendmsg+0x80/0x80 [ 1523.497895][T28493] ? lockdep_hardirqs_on+0x94/0x140 [ 1523.503162][T28493] do_syscall_64+0x4c/0xa0 [ 1523.507635][T28493] ? clear_bhb_loop+0x60/0xb0 [ 1523.512372][T28493] ? clear_bhb_loop+0x60/0xb0 [ 1523.517092][T28493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1523.523042][T28493] RIP: 0033:0x7effc559ce59 [ 1523.527500][T28493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.547153][T28493] RSP: 002b:00007effc64c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1523.555617][T28493] RAX: ffffffffffffffda RBX: 00007effc5815fa0 RCX: 00007effc559ce59 [ 1523.563634][T28493] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 1523.571654][T28493] RBP: 00007effc64c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.579667][T28493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1523.587679][T28493] R13: 00007effc5816038 R14: 00007effc5815fa0 R15: 00007ffe452aef18 [ 1523.595704][T28493] [ 1523.611610][T28501] netlink: 'syz.4.8139': attribute type 21 has an invalid length. [ 1523.643777][T28492] delete_channel: no stack [ 1523.708205][T28504] netlink: 'syz.0.8140': attribute type 10 has an invalid length. [ 1523.773619][T28504] team0: Port device wlan1 added [ 1524.099656][T28515] netlink: 'syz.1.8142': attribute type 21 has an invalid length. [ 1524.339787][T28517] netlink: 'syz.2.8141': attribute type 22 has an invalid length. [ 1524.963146][T28528] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.8146'. [ 1524.998313][T28528] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.8146'. [ 1525.029131][T28528] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1525.085070][T28528] device syzkaller0 entered promiscuous mode [ 1525.599059][T28555] netlink: 'syz.0.8154': attribute type 21 has an invalid length. [ 1526.008879][T28553] device syzkaller0 entered promiscuous mode [ 1526.323335][T28565] netlink: 'syz.3.8155': attribute type 21 has an invalid length. [ 1528.619463][T28595] netlink: 'syz.1.8166': attribute type 39 has an invalid length. [ 1528.686298][T28600] netlink: 'syz.3.8167': attribute type 21 has an invalid length. [ 1528.815544][T28603] netlink: 'syz.4.8169': attribute type 10 has an invalid length. [ 1528.891148][T28603] team0: Port device dummy0 added [ 1528.911143][T28603] netlink: 'syz.4.8169': attribute type 10 has an invalid length. [ 1529.056411][T28603] team0: Port device dummy0 removed [ 1529.121714][T28603] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1530.002740][T28630] device syzkaller0 entered promiscuous mode [ 1532.341433][T28635] netlink: 'syz.4.8181': attribute type 39 has an invalid length. [ 1532.604531][T28663] netlink: 'syz.0.8186': attribute type 21 has an invalid length. [ 1533.822342][T28687] device syzkaller0 entered promiscuous mode [ 1533.851457][T28692] netlink: 'syz.0.8201': attribute type 39 has an invalid length. [ 1537.373744][T28714] device syzkaller0 entered promiscuous mode [ 1537.388790][T28739] netlink: 'syz.3.8216': attribute type 39 has an invalid length. [ 1537.397310][T28741] netlink: 'syz.1.8217': attribute type 39 has an invalid length. [ 1537.894703][T28758] FAULT_INJECTION: forcing a failure. [ 1537.894703][T28758] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.908997][T28758] CPU: 1 PID: 28758 Comm: syz.2.8222 Not tainted syzkaller #0 [ 1537.916517][T28758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1537.926597][T28758] Call Trace: [ 1537.929903][T28758] [ 1537.932850][T28758] dump_stack_lvl+0x188/0x24e [ 1537.937565][T28758] ? show_regs_print_info+0x12/0x12 [ 1537.942798][T28758] ? load_image+0x400/0x400 [ 1537.947331][T28758] ? __might_sleep+0xd0/0xd0 [ 1537.951945][T28758] ? __lock_acquire+0x7d10/0x7d10 [ 1537.957019][T28758] should_fail_ex+0x399/0x4d0 [ 1537.961720][T28758] should_failslab+0x5/0x20 [ 1537.966241][T28758] slab_pre_alloc_hook+0x59/0x310 [ 1537.971291][T28758] ? tomoyo_encode+0x27e/0x540 [ 1537.976106][T28758] __kmem_cache_alloc_node+0x4f/0x260 [ 1537.981531][T28758] ? tomoyo_encode+0x27e/0x540 [ 1537.986316][T28758] __kmalloc+0xa0/0x240 [ 1537.990506][T28758] tomoyo_encode+0x27e/0x540 [ 1537.995149][T28758] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1538.000865][T28758] ? tomoyo_path_number_perm+0x205/0x650 [ 1538.006543][T28758] tomoyo_path_number_perm+0x22f/0x650 [ 1538.012042][T28758] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1538.017539][T28758] ? ksys_write+0x1c0/0x250 [ 1538.022106][T28758] ? __fget_files+0x28/0x4b0 [ 1538.026737][T28758] ? __fget_files+0x28/0x4b0 [ 1538.031371][T28758] security_file_ioctl+0x6c/0xa0 [ 1538.036348][T28758] __se_sys_ioctl+0x48/0x170 [ 1538.040976][T28758] do_syscall_64+0x4c/0xa0 [ 1538.045426][T28758] ? clear_bhb_loop+0x60/0xb0 [ 1538.050139][T28758] ? clear_bhb_loop+0x60/0xb0 [ 1538.054846][T28758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1538.060774][T28758] RIP: 0033:0x7f1849b9ce59 [ 1538.065219][T28758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1538.084869][T28758] RSP: 002b:00007f184aa53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1538.093314][T28758] RAX: ffffffffffffffda RBX: 00007f1849e16090 RCX: 00007f1849b9ce59 [ 1538.101305][T28758] RDX: 0000200000000080 RSI: 00000000000089a1 RDI: 0000000000000005 [ 1538.109297][T28758] RBP: 00007f184aa53090 R08: 0000000000000000 R09: 0000000000000000 [ 1538.117288][T28758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1538.125284][T28758] R13: 00007f1849e16128 R14: 00007f1849e16090 R15: 00007ffcb3e7a848 [ 1538.133291][T28758] [ 1538.152522][T28757] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8223'. [ 1538.162162][T28758] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1540.524244][T28757] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8223'. [ 1540.652802][T28775] device syzkaller0 entered promiscuous mode [ 1542.780423][T28782] netlink: 'syz.3.8230': attribute type 39 has an invalid length. [ 1545.818420][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.824867][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.441754][T28832] FAULT_INJECTION: forcing a failure. [ 1546.441754][T28832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1546.521537][T28836] netlink: 'syz.3.8249': attribute type 10 has an invalid length. [ 1546.554844][T28832] CPU: 0 PID: 28832 Comm: syz.4.8247 Not tainted syzkaller #0 [ 1546.562405][T28832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1546.572506][T28832] Call Trace: [ 1546.575828][T28832] [ 1546.578801][T28832] dump_stack_lvl+0x188/0x24e [ 1546.583525][T28832] ? show_regs_print_info+0x12/0x12 [ 1546.588756][T28832] ? load_image+0x400/0x400 [ 1546.593313][T28832] ? __lock_acquire+0x7d10/0x7d10 [ 1546.598405][T28832] should_fail_ex+0x399/0x4d0 [ 1546.603126][T28832] _copy_from_user+0x2c/0x170 [ 1546.607869][T28832] iovec_from_user+0x143/0x360 [ 1546.612684][T28832] __import_iovec+0x6d/0x500 [ 1546.617326][T28832] import_iovec+0x6f/0xa0 [ 1546.617583][T28836] team0: Port device wlan1 added [ 1546.621688][T28832] ___sys_sendmsg+0x252/0x360 [ 1546.621733][T28832] ? __sys_sendmsg+0x290/0x290 [ 1546.621840][T28832] ? __lock_acquire+0x7d10/0x7d10 [ 1546.641300][T28832] __se_sys_sendmsg+0x1bb/0x2a0 [ 1546.646211][T28832] ? ct_nmi_exit+0x145/0x1c0 [ 1546.650846][T28832] ? __x64_sys_sendmsg+0x80/0x80 [ 1546.655840][T28832] ? lockdep_hardirqs_on+0x94/0x140 [ 1546.661061][T28832] do_syscall_64+0x4c/0xa0 [ 1546.665521][T28832] ? clear_bhb_loop+0x60/0xb0 [ 1546.670226][T28832] ? clear_bhb_loop+0x60/0xb0 [ 1546.674940][T28832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1546.680860][T28832] RIP: 0033:0x7f3b4599ce59 [ 1546.685306][T28832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.704935][T28832] RSP: 002b:00007f3b4678e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1546.713375][T28832] RAX: ffffffffffffffda RBX: 00007f3b45c15fa0 RCX: 00007f3b4599ce59 [ 1546.721362][T28832] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 1546.729368][T28832] RBP: 00007f3b4678e090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.737357][T28832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.745345][T28832] R13: 00007f3b45c16038 R14: 00007f3b45c15fa0 R15: 00007fffcc169b58 [ 1546.753348][T28832] [ 1546.763626][T28838] netlink: 'syz.0.8246': attribute type 39 has an invalid length. [ 1546.936290][T28840] device syzkaller0 entered promiscuous mode [ 1546.978835][T28830] delete_channel: no stack [ 1548.188669][T28858] netlink: 'syz.3.8255': attribute type 16 has an invalid length. [ 1548.197128][T28858] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8255'. [ 1548.989174][T28857] delete_channel: no stack [ 1549.909586][T28858] netlink: 'syz.3.8255': attribute type 10 has an invalid length. [ 1549.948266][T28858] team0: Port device macvlan0 added [ 1550.097564][T28861] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8256'. [ 1550.493593][T28878] netlink: 'syz.4.8263': attribute type 39 has an invalid length. [ 1550.596594][T28886] netlink: 'syz.2.8266': attribute type 10 has an invalid length. [ 1550.687307][T28886] team0: Port device dummy0 added [ 1550.706949][T28888] netlink: 'syz.2.8266': attribute type 10 has an invalid length. [ 1550.780905][T28888] team0: Port device dummy0 removed [ 1551.031381][T28900] device syzkaller0 entered promiscuous mode [ 1551.041879][T28904] FAULT_INJECTION: forcing a failure. [ 1551.041879][T28904] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.068560][T28900] syzkaller0: tun_net_xmit 1280 [ 1551.074993][T28900] syzkaller0: create flow: hash 1981729029 index 2 [ 1551.082032][T28904] CPU: 1 PID: 28904 Comm: syz.1.8273 Not tainted syzkaller #0 [ 1551.089525][T28904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1551.099613][T28904] Call Trace: [ 1551.102916][T28904] [ 1551.105861][T28904] dump_stack_lvl+0x188/0x24e [ 1551.110567][T28904] ? show_regs_print_info+0x12/0x12 [ 1551.115796][T28904] ? load_image+0x400/0x400 [ 1551.120326][T28904] ? __lock_acquire+0x7d10/0x7d10 [ 1551.125394][T28904] should_fail_ex+0x399/0x4d0 [ 1551.130096][T28904] should_failslab+0x5/0x20 [ 1551.134609][T28904] slab_pre_alloc_hook+0x59/0x310 [ 1551.139666][T28904] ? verify_lock_unused+0x140/0x140 [ 1551.144888][T28904] ? bpf_test_init+0x9f/0x140 [ 1551.149591][T28904] __kmem_cache_alloc_node+0x4f/0x260 [ 1551.154991][T28904] ? bpf_test_init+0x9f/0x140 [ 1551.159689][T28904] __kmalloc+0xa0/0x240 [ 1551.163876][T28904] bpf_test_init+0x9f/0x140 [ 1551.168426][T28904] bpf_prog_test_run_xdp+0x484/0xf10 [ 1551.173743][T28904] ? dev_put+0x80/0x80 [ 1551.177845][T28904] ? dev_put+0x80/0x80 [ 1551.181952][T28904] bpf_prog_test_run+0x31e/0x390 [ 1551.186918][T28904] __sys_bpf+0x62b/0x780 [ 1551.191207][T28904] ? bpf_link_show_fdinfo+0x380/0x380 [ 1551.196640][T28904] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1551.202835][T28904] __x64_sys_bpf+0x78/0x90 [ 1551.207274][T28904] do_syscall_64+0x4c/0xa0 [ 1551.211717][T28904] ? clear_bhb_loop+0x60/0xb0 [ 1551.216441][T28904] ? clear_bhb_loop+0x60/0xb0 [ 1551.221155][T28904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1551.227079][T28904] RIP: 0033:0x7effc559ce59 [ 1551.231514][T28904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.251135][T28904] RSP: 002b:00007effc64c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1551.259605][T28904] RAX: ffffffffffffffda RBX: 00007effc5815fa0 RCX: 00007effc559ce59 [ 1551.267595][T28904] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1551.275582][T28904] RBP: 00007effc64c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1551.283574][T28904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1551.291558][T28904] R13: 00007effc5816038 R14: 00007effc5815fa0 R15: 00007ffe452aef18 [ 1551.299561][T28904] [ 1551.748586][T28912] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8274'. [ 1551.933304][T28899] syzkaller0: delete flow: hash 1981729029 index 2 [ 1554.034870][T28919] netlink: 'syz.2.8278': attribute type 39 has an invalid length. [ 1554.943743][T28974] device syzkaller0 entered promiscuous mode [ 1558.149072][T28982] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8300'. [ 1558.532748][T29007] netlink: 'syz.1.8305': attribute type 2 has an invalid length. [ 1558.561880][T29007] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.8305'. [ 1558.985235][T29026] netlink: 'syz.4.8313': attribute type 10 has an invalid length. [ 1559.206977][T29034] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8318'. [ 1559.797431][T29044] device syzkaller0 entered promiscuous mode [ 1560.895890][T29064] delete_channel: no stack [ 1562.293577][T29072] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8329'. [ 1562.302866][T29073] netlink: 'syz.3.8329': attribute type 27 has an invalid length. [ 1562.313747][T29078] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1562.341833][T29078] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1562.375446][T29078] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1562.726502][T29097] netlink: 'syz.3.8338': attribute type 1 has an invalid length. [ 1562.773690][T29097] netlink: 'syz.3.8338': attribute type 1 has an invalid length. [ 1562.908278][T29097] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.8338'. [ 1563.214131][T29102] netlink: 'syz.4.8341': attribute type 10 has an invalid length. [ 1563.298550][T29102] team0: Port device macvlan1 added [ 1563.506823][T29111] netlink: 'syz.3.8344': attribute type 10 has an invalid length. [ 1563.597800][T29119] FAULT_INJECTION: forcing a failure. [ 1563.597800][T29119] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.635327][T29119] CPU: 1 PID: 29119 Comm: syz.1.8348 Not tainted syzkaller #0 [ 1563.642881][T29119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1563.652984][T29119] Call Trace: [ 1563.656309][T29119] [ 1563.659297][T29119] dump_stack_lvl+0x188/0x24e [ 1563.664041][T29119] ? show_regs_print_info+0x12/0x12 [ 1563.669306][T29119] ? load_image+0x400/0x400 [ 1563.673865][T29119] ? __might_sleep+0xd0/0xd0 [ 1563.678501][T29119] ? __lock_acquire+0x7d10/0x7d10 [ 1563.683588][T29119] should_fail_ex+0x399/0x4d0 [ 1563.688315][T29119] should_failslab+0x5/0x20 [ 1563.692866][T29119] slab_pre_alloc_hook+0x59/0x310 [ 1563.697948][T29119] kmem_cache_alloc_node+0x5a/0x320 [ 1563.703190][T29119] ? __alloc_skb+0xfc/0x7e0 [ 1563.707764][T29119] __alloc_skb+0xfc/0x7e0 [ 1563.712142][T29119] ? netlink_autobind+0xda/0x300 [ 1563.717153][T29119] netlink_sendmsg+0x654/0xbd0 [ 1563.721985][T29119] ? netlink_getsockopt+0x550/0x550 [ 1563.727243][T29119] ? aa_sock_msg_perm+0x94/0x150 [ 1563.732232][T29119] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1563.737559][T29119] ? security_socket_sendmsg+0x7c/0xa0 [ 1563.743052][T29119] ? netlink_getsockopt+0x550/0x550 [ 1563.748273][T29119] ____sys_sendmsg+0x5be/0x970 [ 1563.753066][T29119] ? __sys_sendmsg_sock+0x30/0x30 [ 1563.758113][T29119] ? __import_iovec+0x315/0x500 [ 1563.762995][T29119] ? import_iovec+0x6f/0xa0 [ 1563.767523][T29119] ___sys_sendmsg+0x2a2/0x360 [ 1563.772241][T29119] ? __sys_sendmsg+0x290/0x290 [ 1563.777062][T29119] ? __lock_acquire+0x7d10/0x7d10 [ 1563.782124][T29119] __se_sys_sendmsg+0x1bb/0x2a0 [ 1563.787000][T29119] ? ct_nmi_exit+0x145/0x1c0 [ 1563.791611][T29119] ? __x64_sys_sendmsg+0x80/0x80 [ 1563.796581][T29119] ? lockdep_hardirqs_on+0x94/0x140 [ 1563.801799][T29119] do_syscall_64+0x4c/0xa0 [ 1563.806245][T29119] ? clear_bhb_loop+0x60/0xb0 [ 1563.810941][T29119] ? clear_bhb_loop+0x60/0xb0 [ 1563.815639][T29119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1563.821557][T29119] RIP: 0033:0x7effc559ce59 [ 1563.825985][T29119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.845610][T29119] RSP: 002b:00007effc64c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1563.854048][T29119] RAX: ffffffffffffffda RBX: 00007effc5815fa0 RCX: 00007effc559ce59 [ 1563.862042][T29119] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 1563.870030][T29119] RBP: 00007effc64c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1563.878026][T29119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1563.886018][T29119] R13: 00007effc5816038 R14: 00007effc5815fa0 R15: 00007ffe452aef18 [ 1563.894022][T29119] [ 1563.960163][T29125] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8349'. [ 1563.988711][T29114] delete_channel: no stack [ 1564.130473][T29125] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8349'. [ 1564.152397][T29134] netlink: 'syz.3.8349': attribute type 3 has an invalid length. [ 1564.179359][T29134] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8349'. [ 1564.237213][T29128] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8349'. [ 1564.273546][T29129] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8349'. [ 1564.358298][T29136] netlink: 'syz.0.8353': attribute type 10 has an invalid length. [ 1564.390038][T29136] device netdevsim0 entered promiscuous mode [ 1564.548763][T29145] netlink: 'syz.4.8358': attribute type 3 has an invalid length. [ 1564.576036][T29145] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8358'. [ 1565.199509][T29160] device syzkaller0 entered promiscuous mode [ 1568.814799][T29185] netlink: 'syz.1.8372': attribute type 10 has an invalid length. [ 1568.828102][T29188] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8374'. [ 1569.056312][T29200] netlink: 'syz.1.8375': attribute type 21 has an invalid length. [ 1569.075933][T29199] FAULT_INJECTION: forcing a failure. [ 1569.075933][T29199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1569.096911][T29200] netlink: 'syz.1.8375': attribute type 10 has an invalid length. [ 1569.121022][T29199] CPU: 0 PID: 29199 Comm: syz.0.8377 Not tainted syzkaller #0 [ 1569.128558][T29199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1569.136750][T29201] netlink: 'syz.3.8379': attribute type 21 has an invalid length. [ 1569.138677][T29199] Call Trace: [ 1569.138689][T29199] [ 1569.138698][T29199] dump_stack_lvl+0x188/0x24e [ 1569.138751][T29199] ? show_regs_print_info+0x12/0x12 [ 1569.162722][T29199] ? load_image+0x400/0x400 [ 1569.167280][T29199] ? __lock_acquire+0x7d10/0x7d10 [ 1569.172361][T29199] should_fail_ex+0x399/0x4d0 [ 1569.177086][T29199] _copy_from_user+0x2c/0x170 [ 1569.181810][T29199] iovec_from_user+0x143/0x360 [ 1569.186618][T29199] __import_iovec+0x6d/0x500 [ 1569.191266][T29199] import_iovec+0x6f/0xa0 [ 1569.195641][T29199] ___sys_sendmsg+0x252/0x360 [ 1569.200381][T29199] ? __sys_sendmsg+0x290/0x290 [ 1569.205264][T29199] __se_sys_sendmsg+0x1bb/0x2a0 [ 1569.210170][T29199] ? __x64_sys_sendmsg+0x80/0x80 [ 1569.215172][T29199] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1569.221121][T29199] do_syscall_64+0x4c/0xa0 [ 1569.225592][T29199] ? clear_bhb_loop+0x60/0xb0 [ 1569.230318][T29199] ? clear_bhb_loop+0x60/0xb0 [ 1569.235045][T29199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1569.240982][T29199] RIP: 0033:0x7f81fa39ce59 [ 1569.245430][T29199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.265141][T29199] RSP: 002b:00007f81fb285028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1569.273652][T29199] RAX: ffffffffffffffda RBX: 00007f81fa615fa0 RCX: 00007f81fa39ce59 [ 1569.281668][T29199] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 1569.289671][T29199] RBP: 00007f81fb285090 R08: 0000000000000000 R09: 0000000000000000 [ 1569.297682][T29199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.305687][T29199] R13: 00007f81fa616038 R14: 00007f81fa615fa0 R15: 00007ffcf3f06008 [ 1569.313737][T29199] [ 1569.598718][T29210] delete_channel: no stack [ 1569.682448][T29218] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.8382'. [ 1570.056238][T29228] device syzkaller0 entered promiscuous mode [ 1572.796941][T29252] netlink: 'syz.3.8394': attribute type 21 has an invalid length. [ 1572.807143][T29253] netlink: 'syz.3.8394': attribute type 10 has an invalid length. [ 1572.815343][T29266] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8399'. [ 1573.996823][T29317] netlink: 'syz.3.8416': attribute type 21 has an invalid length. [ 1574.047807][T29318] netlink: 'syz.0.8414': attribute type 39 has an invalid length. [ 1574.097341][T29317] netlink: 'syz.3.8416': attribute type 10 has an invalid length. [ 1574.187925][T29314] device syzkaller0 entered promiscuous mode [ 1574.301264][T29329] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8419'. [ 1574.338414][T29329] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8419'. [ 1576.982029][T29363] netlink: 'syz.4.8432': attribute type 21 has an invalid length. [ 1577.012972][T29363] netlink: 'syz.4.8432': attribute type 10 has an invalid length. [ 1577.034299][T29367] netlink: 'syz.2.8433': attribute type 10 has an invalid length. [ 1577.989661][T29398] FAULT_INJECTION: forcing a failure. [ 1577.989661][T29398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1578.004555][T29398] CPU: 0 PID: 29398 Comm: syz.4.8447 Not tainted syzkaller #0 [ 1578.012085][T29398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1578.022187][T29398] Call Trace: [ 1578.025503][T29398] [ 1578.028466][T29398] dump_stack_lvl+0x188/0x24e [ 1578.033192][T29398] ? show_regs_print_info+0x12/0x12 [ 1578.038442][T29398] ? load_image+0x400/0x400 [ 1578.043001][T29398] ? __lock_acquire+0x7d10/0x7d10 [ 1578.048078][T29398] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1578.053781][T29398] should_fail_ex+0x399/0x4d0 [ 1578.058516][T29398] _copy_from_user+0x2c/0x170 [ 1578.063243][T29398] ___sys_sendmsg+0x1c3/0x360 [ 1578.067970][T29398] ? __sys_sendmsg+0x290/0x290 [ 1578.072783][T29398] ? __lock_acquire+0x7d10/0x7d10 [ 1578.077859][T29398] __se_sys_sendmsg+0x1bb/0x2a0 [ 1578.082743][T29398] ? __x64_sys_sendmsg+0x80/0x80 [ 1578.087741][T29398] ? lockdep_hardirqs_on+0x94/0x140 [ 1578.092963][T29398] do_syscall_64+0x4c/0xa0 [ 1578.097407][T29398] ? clear_bhb_loop+0x60/0xb0 [ 1578.102108][T29398] ? clear_bhb_loop+0x60/0xb0 [ 1578.106815][T29398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1578.112737][T29398] RIP: 0033:0x7f3b4599ce59 [ 1578.117172][T29398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.136803][T29398] RSP: 002b:00007f3b4678e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1578.145244][T29398] RAX: ffffffffffffffda RBX: 00007f3b45c15fa0 RCX: 00007f3b4599ce59 [ 1578.153242][T29398] RDX: 000000002000c0d0 RSI: 0000200000000700 RDI: 0000000000000006 [ 1578.161232][T29398] RBP: 00007f3b4678e090 R08: 0000000000000000 R09: 0000000000000000 [ 1578.169235][T29398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1578.177227][T29398] R13: 00007f3b45c16038 R14: 00007f3b45c15fa0 R15: 00007fffcc169b58 [ 1578.185249][T29398] [ 1578.335758][T29392] device syzkaller0 entered promiscuous mode [ 1579.550508][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1579.560648][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1579.579379][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1579.590229][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1579.616608][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1579.630089][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1579.831954][T29432] delete_channel: no stack [ 1580.103213][T29436] netlink: 'syz.1.8459': attribute type 3 has an invalid length. [ 1580.113987][T29436] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8459'. [ 1581.349171][T29417] netlink: 'syz.3.8452': attribute type 21 has an invalid length. [ 1581.357298][T29419] netlink: 'syz.3.8452': attribute type 10 has an invalid length. [ 1581.367306][T29425] netlink: 'syz.4.8456': attribute type 10 has an invalid length. [ 1581.378361][T29425] device wlan1 left promiscuous mode [ 1581.406220][T29425] team0: Port device wlan1 added [ 1581.662367][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 1582.056538][T29427] chnl_net:caif_netlink_parms(): no params data found [ 1582.129882][T29463] netlink: 'syz.1.8469': attribute type 21 has an invalid length. [ 1582.152485][T29463] netlink: 'syz.1.8469': attribute type 10 has an invalid length. [ 1582.199801][T29427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.207562][T29427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.221631][T29427] device bridge_slave_0 entered promiscuous mode [ 1582.230864][T29427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.243957][T29427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.252560][T29427] device bridge_slave_1 entered promiscuous mode [ 1582.344308][T29427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1582.361456][T29427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.420590][T29427] team0: Port device team_slave_0 added [ 1582.432190][T29427] team0: Port device team_slave_1 added [ 1582.470643][T29427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1582.481384][T29427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1582.514216][T29427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1582.550733][T29427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1582.561906][T29427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1582.594855][T29427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.677807][T29427] device hsr_slave_0 entered promiscuous mode [ 1582.699246][T29427] device hsr_slave_1 entered promiscuous mode [ 1583.231122][T29427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.427438][T29427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.580881][T29427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.622760][T29493] netlink: 'syz.3.8481': attribute type 21 has an invalid length. [ 1583.666705][T29493] netlink: 'syz.3.8481': attribute type 10 has an invalid length. [ 1583.745012][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 1584.583581][T29427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.844574][T29511] netlink: 'syz.3.8487': attribute type 16 has an invalid length. [ 1584.864181][T29511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8487'. [ 1584.906290][T29510] delete_channel: no stack [ 1584.999616][T29427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1585.053104][T29427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1585.117069][T29427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1585.165513][T29427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1585.396923][T29533] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8494'. [ 1585.412140][T29427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1585.445554][T29538] netlink: 'syz.2.8496': attribute type 21 has an invalid length. [ 1585.478500][T29538] netlink: 'syz.2.8496': attribute type 10 has an invalid length. [ 1585.520683][T29533] device ip6gretap0 left promiscuous mode [ 1585.540903][T29533] : port 1(ip6gretap0) entered disabled state [ 1585.636168][T22119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1585.652889][T22119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1585.687992][T29427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1585.713190][T22119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1585.728224][T22119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1585.754376][T22119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.761644][T22119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.797781][T22119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1585.815899][T22119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1585.825096][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 1585.855462][T22119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1585.918061][T22119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.925297][T22119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.968801][T22119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1585.995173][T29555] netlink: 'syz.4.8502': attribute type 10 has an invalid length. [ 1586.055565][T29555] bond0: (slave dummy0): Releasing backup interface [ 1586.072292][T29555] team0: Port device dummy0 added [ 1586.085554][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1586.121867][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1586.144098][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1586.169384][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1586.192370][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1586.211416][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1586.224459][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1586.240948][T29556] netlink: 'syz.4.8502': attribute type 10 has an invalid length. [ 1586.277814][T29556] team0: Port device dummy0 removed [ 1586.304529][T29427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1586.340568][T29427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1586.366077][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1586.385360][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1586.405775][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1586.421838][T29566] netlink: 'syz.1.8506': attribute type 10 has an invalid length. [ 1586.967361][T29590] netlink: 'syz.3.8513': attribute type 21 has an invalid length. [ 1586.987021][T29590] netlink: 'syz.3.8513': attribute type 10 has an invalid length. [ 1587.155859][T29427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1587.203203][T22119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1587.211002][T22119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1587.236900][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1587.247395][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1587.281030][T29427] device veth0_vlan entered promiscuous mode [ 1587.313349][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1587.324388][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1587.344716][T29427] device veth1_vlan entered promiscuous mode [ 1587.354741][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1587.363966][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1587.373515][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1587.410877][T29427] device veth0_macvtap entered promiscuous mode [ 1587.423893][T29427] device veth1_macvtap entered promiscuous mode [ 1587.432869][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1587.447069][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1587.460212][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1587.470920][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1587.485281][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1587.895157][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 1588.223323][T29587] FAULT_INJECTION: forcing a failure. [ 1588.223323][T29587] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.242759][T29587] CPU: 1 PID: 29587 Comm: syz.1.8515 Not tainted syzkaller #0 [ 1588.250296][T29587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1588.260398][T29587] Call Trace: [ 1588.263719][T29587] [ 1588.266705][T29587] dump_stack_lvl+0x188/0x24e [ 1588.271469][T29587] ? show_regs_print_info+0x12/0x12 [ 1588.276750][T29587] ? load_image+0x400/0x400 [ 1588.281305][T29587] ? __might_sleep+0xd0/0xd0 [ 1588.285935][T29587] ? __lock_acquire+0x7d10/0x7d10 [ 1588.291032][T29587] should_fail_ex+0x399/0x4d0 [ 1588.295763][T29587] should_failslab+0x5/0x20 [ 1588.300310][T29587] slab_pre_alloc_hook+0x59/0x310 [ 1588.305382][T29587] ? __lock_acquire+0x7d10/0x7d10 [ 1588.310456][T29587] ? kvmalloc_node+0x6c/0x180 [ 1588.315273][T29587] __kmem_cache_alloc_node+0x4f/0x260 [ 1588.320686][T29587] ? schedule_delayed_monitor_work+0x160/0x160 [ 1588.326901][T29587] ? kvmalloc_node+0x6c/0x180 [ 1588.331631][T29587] __kmalloc_node+0xa0/0x240 [ 1588.336299][T29587] kvmalloc_node+0x6c/0x180 [ 1588.340861][T29587] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 1588.346285][T29587] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1588.351625][T29587] ? text_poke_copy+0x79/0x90 [ 1588.356444][T29587] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1588.361773][T29587] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1588.367096][T29587] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1588.373130][T29587] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1588.378466][T29587] ? xdp_convert_md_to_buff+0x330/0x330 [ 1588.384099][T29587] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1588.390391][T29587] ? bpf_test_init+0x119/0x140 [ 1588.395195][T29587] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1588.400704][T29587] bpf_prog_test_run_xdp+0x736/0xf10 [ 1588.406054][T29587] ? dev_put+0x80/0x80 [ 1588.410184][T29587] ? dev_put+0x80/0x80 [ 1588.414320][T29587] bpf_prog_test_run+0x31e/0x390 [ 1588.419312][T29587] __sys_bpf+0x62b/0x780 [ 1588.423606][T29587] ? bpf_link_show_fdinfo+0x380/0x380 [ 1588.429049][T29587] ? lock_chain_count+0x20/0x20 [ 1588.433974][T29587] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1588.440031][T29587] __x64_sys_bpf+0x78/0x90 [ 1588.444519][T29587] do_syscall_64+0x4c/0xa0 [ 1588.448997][T29587] ? clear_bhb_loop+0x60/0xb0 [ 1588.453725][T29587] ? clear_bhb_loop+0x60/0xb0 [ 1588.458455][T29587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1588.464406][T29587] RIP: 0033:0x7effc559ce59 [ 1588.468908][T29587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.488555][T29587] RSP: 002b:00007effc64c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1588.497022][T29587] RAX: ffffffffffffffda RBX: 00007effc5815fa0 RCX: 00007effc559ce59 [ 1588.505021][T29587] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1588.513018][T29587] RBP: 00007effc64c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.521031][T29587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1588.529023][T29587] R13: 00007effc5816038 R14: 00007effc5815fa0 R15: 00007ffe452aef18 [ 1588.537051][T29587] [ 1588.582838][T29427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1588.610523][T29427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.623112][T29427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1588.639950][T29427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.652155][T29427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1588.669721][T29427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.683906][T29427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1588.702183][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1588.718174][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1588.743545][T29427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1588.758507][T29427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.790630][T29427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1588.809149][T29427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.819411][T29427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1588.830234][T29427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.840959][T29427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1588.851801][T29427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.882729][T29427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1588.899242][T29601] netlink: 'syz.4.8517': attribute type 21 has an invalid length. [ 1588.937747][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1588.965979][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1588.990143][T29427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.014125][T29427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.025153][T29427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.034490][T29427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.045775][T29605] FAULT_INJECTION: forcing a failure. [ 1589.045775][T29605] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.119683][T29605] CPU: 1 PID: 29605 Comm: syz.3.8520 Not tainted syzkaller #0 [ 1589.127231][T29605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1589.137333][T29605] Call Trace: [ 1589.140650][T29605] [ 1589.143626][T29605] dump_stack_lvl+0x188/0x24e [ 1589.148379][T29605] ? show_regs_print_info+0x12/0x12 [ 1589.153635][T29605] ? load_image+0x400/0x400 [ 1589.158179][T29605] ? __might_sleep+0xd0/0xd0 [ 1589.162815][T29605] ? __lock_acquire+0x7d10/0x7d10 [ 1589.167920][T29605] should_fail_ex+0x399/0x4d0 [ 1589.172660][T29605] should_failslab+0x5/0x20 [ 1589.177207][T29605] slab_pre_alloc_hook+0x59/0x310 [ 1589.182282][T29605] kmem_cache_alloc_node+0x5a/0x320 [ 1589.187526][T29605] ? __alloc_skb+0xfc/0x7e0 [ 1589.192092][T29605] __alloc_skb+0xfc/0x7e0 [ 1589.196474][T29605] ? netlink_autobind+0xda/0x300 [ 1589.201441][T29605] netlink_sendmsg+0x654/0xbd0 [ 1589.206241][T29605] ? netlink_getsockopt+0x550/0x550 [ 1589.211481][T29605] ? aa_sock_msg_perm+0x94/0x150 [ 1589.216455][T29605] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1589.221760][T29605] ? security_socket_sendmsg+0x7c/0xa0 [ 1589.227255][T29605] ? netlink_getsockopt+0x550/0x550 [ 1589.232486][T29605] ____sys_sendmsg+0x5be/0x970 [ 1589.237295][T29605] ? __sys_sendmsg_sock+0x30/0x30 [ 1589.242349][T29605] ? __import_iovec+0x315/0x500 [ 1589.247237][T29605] ? import_iovec+0x6f/0xa0 [ 1589.251765][T29605] ___sys_sendmsg+0x2a2/0x360 [ 1589.256477][T29605] ? __sys_sendmsg+0x290/0x290 [ 1589.261288][T29605] ? ktime_get_real_ts64+0x440/0x440 [ 1589.266630][T29605] __se_sys_sendmsg+0x1bb/0x2a0 [ 1589.271507][T29605] ? ct_nmi_exit+0x145/0x1c0 [ 1589.276131][T29605] ? __x64_sys_sendmsg+0x80/0x80 [ 1589.281124][T29605] ? lockdep_hardirqs_on+0x94/0x140 [ 1589.286347][T29605] do_syscall_64+0x4c/0xa0 [ 1589.290799][T29605] ? clear_bhb_loop+0x60/0xb0 [ 1589.295504][T29605] ? clear_bhb_loop+0x60/0xb0 [ 1589.300208][T29605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1589.306122][T29605] RIP: 0033:0x7f3a6c39ce59 [ 1589.310570][T29605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.330202][T29605] RSP: 002b:00007f3a6d252028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1589.338646][T29605] RAX: ffffffffffffffda RBX: 00007f3a6c615fa0 RCX: 00007f3a6c39ce59 [ 1589.346635][T29605] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 1589.354621][T29605] RBP: 00007f3a6d252090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.362605][T29605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1589.370595][T29605] R13: 00007f3a6c616038 R14: 00007f3a6c615fa0 R15: 00007ffe7d348448 [ 1589.378625][T29605] [ 1589.545870][ T5384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.577356][ T5384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.647074][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1589.676305][T26932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.684203][T26932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.726349][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1590.056811][T29634] netlink: 'syz.4.8528': attribute type 21 has an invalid length. [ 1590.095798][T29634] netlink: 'syz.4.8528': attribute type 10 has an invalid length. [ 1590.581193][T29654] netlink: 'syz.2.8535': attribute type 25 has an invalid length. [ 1591.169547][T29660] netlink: 'syz.4.8540': attribute type 21 has an invalid length. [ 1591.194725][T29660] netlink: 'syz.4.8540': attribute type 1 has an invalid length. [ 1591.658493][T29702] netlink: 'syz.0.8550': attribute type 21 has an invalid length. [ 1591.686583][T29702] netlink: 'syz.0.8550': attribute type 10 has an invalid length. [ 1591.709386][T29702] 8021q: adding VLAN 0 to HW filter on device team0 [ 1591.744805][T29702] bond0: (slave team0): Enslaving as an active interface with an up link [ 1594.675680][T29729] netlink: 'syz.1.8559': attribute type 10 has an invalid length. [ 1594.690621][T29729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8559'. [ 1594.717067][T29729] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1594.802036][T29723] device syzkaller0 entered promiscuous mode [ 1595.382995][T29764] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.8571'. [ 1597.523258][T29766] netlink: 'syz.1.8568': attribute type 21 has an invalid length. [ 1597.531489][T29767] netlink: 'syz.0.8570': attribute type 39 has an invalid length. [ 1597.601423][T29768] netlink: 'syz.1.8568': attribute type 10 has an invalid length. [ 1597.610176][T29769] : port 1(ip6gretap0) entered blocking state [ 1597.627945][T29769] : port 1(ip6gretap0) entered disabled state [ 1597.647891][T29769] device ip6gretap0 entered promiscuous mode [ 1597.691599][T29774] device ip6gretap0 left promiscuous mode [ 1597.701808][T29774] : port 1(ip6gretap0) entered disabled state [ 1598.351550][T29785] netlink: 'syz.3.8576': attribute type 21 has an invalid length. [ 1598.516928][T29795] netlink: 'syz.4.8580': attribute type 10 has an invalid length. [ 1598.564655][T29797] tipc: Started in network mode [ 1598.591390][T29797] tipc: Node identity 9215a268, cluster identity 4711 [ 1598.614620][T29797] tipc: Node number set to 2450891368 [ 1598.821974][T29811] netlink: 'syz.4.8585': attribute type 21 has an invalid length. [ 1598.861800][T29811] netlink: 'syz.4.8585': attribute type 10 has an invalid length. [ 1599.425577][T29838] netlink: 'syz.4.8595': attribute type 10 has an invalid length. [ 1599.893142][T29859] netlink: 'syz.2.8602': attribute type 7 has an invalid length. [ 1600.104179][T29861] FAULT_INJECTION: forcing a failure. [ 1600.104179][T29861] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.137681][T29861] CPU: 0 PID: 29861 Comm: syz.3.8605 Not tainted syzkaller #0 [ 1600.145211][T29861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1600.155308][T29861] Call Trace: [ 1600.158618][T29861] [ 1600.161571][T29861] dump_stack_lvl+0x188/0x24e [ 1600.166289][T29861] ? show_regs_print_info+0x12/0x12 [ 1600.171559][T29861] ? load_image+0x400/0x400 [ 1600.176105][T29861] ? __might_sleep+0xd0/0xd0 [ 1600.180767][T29861] ? __lock_acquire+0x7d10/0x7d10 [ 1600.185849][T29861] should_fail_ex+0x399/0x4d0 [ 1600.190551][T29861] should_failslab+0x5/0x20 [ 1600.195073][T29861] slab_pre_alloc_hook+0x59/0x310 [ 1600.200160][T29861] kmem_cache_alloc_node+0x5a/0x320 [ 1600.205415][T29861] ? __alloc_skb+0xfc/0x7e0 [ 1600.209979][T29861] __alloc_skb+0xfc/0x7e0 [ 1600.214394][T29861] alloc_skb_with_frags+0xa7/0x710 [ 1600.219526][T29861] ? verify_lock_unused+0x140/0x140 [ 1600.224769][T29861] sock_alloc_send_pskb+0x87f/0x9a0 [ 1600.230006][T29861] ? sock_kzfree_s+0x50/0x50 [ 1600.234615][T29861] ? do_raw_spin_lock+0x128/0x2f0 [ 1600.239654][T29861] ? __rwlock_init+0x140/0x140 [ 1600.244450][T29861] ? do_raw_spin_unlock+0x11d/0x230 [ 1600.249695][T29861] unix_dgram_sendmsg+0x539/0x16e0 [ 1600.254855][T29861] ? is_dynamic_key+0x260/0x260 [ 1600.259782][T29861] ? aa_sk_perm+0x81f/0x950 [ 1600.264348][T29861] ? unix_dgram_poll+0x680/0x680 [ 1600.269336][T29861] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1600.275792][T29861] ? aa_sock_msg_perm+0x94/0x150 [ 1600.280757][T29861] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1600.286064][T29861] ? security_socket_sendmsg+0x7c/0xa0 [ 1600.291561][T29861] ? unix_dgram_poll+0x680/0x680 [ 1600.296528][T29861] ____sys_sendmsg+0x5be/0x970 [ 1600.301332][T29861] ? __sys_sendmsg_sock+0x30/0x30 [ 1600.306381][T29861] ? __import_iovec+0x315/0x500 [ 1600.311258][T29861] ? import_iovec+0x6f/0xa0 [ 1600.315797][T29861] ___sys_sendmsg+0x2a2/0x360 [ 1600.320507][T29861] ? __sys_sendmsg+0x290/0x290 [ 1600.325320][T29861] ? __lock_acquire+0x7d10/0x7d10 [ 1600.330392][T29861] __se_sys_sendmsg+0x1bb/0x2a0 [ 1600.335280][T29861] ? __x64_sys_sendmsg+0x80/0x80 [ 1600.340263][T29861] ? lockdep_hardirqs_on+0x94/0x140 [ 1600.345486][T29861] do_syscall_64+0x4c/0xa0 [ 1600.349938][T29861] ? clear_bhb_loop+0x60/0xb0 [ 1600.354640][T29861] ? clear_bhb_loop+0x60/0xb0 [ 1600.359345][T29861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1600.365264][T29861] RIP: 0033:0x7f3a6c39ce59 [ 1600.369702][T29861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1600.389333][T29861] RSP: 002b:00007f3a6d252028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1600.397767][T29861] RAX: ffffffffffffffda RBX: 00007f3a6c615fa0 RCX: 00007f3a6c39ce59 [ 1600.405766][T29861] RDX: 000000002000c0d0 RSI: 0000200000000700 RDI: 0000000000000006 [ 1600.413757][T29861] RBP: 00007f3a6d252090 R08: 0000000000000000 R09: 0000000000000000 [ 1600.421742][T29861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1600.429727][T29861] R13: 00007f3a6c616038 R14: 00007f3a6c615fa0 R15: 00007ffe7d348448 [ 1600.437768][T29861] [ 1600.776827][T29865] netlink: 'syz.4.8607': attribute type 12 has an invalid length. [ 1600.805166][T29865] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8607'. [ 1600.949675][T29875] FAULT_INJECTION: forcing a failure. [ 1600.949675][T29875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1600.991487][T29875] CPU: 1 PID: 29875 Comm: syz.2.8610 Not tainted syzkaller #0 [ 1600.999043][T29875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1601.009145][T29875] Call Trace: [ 1601.012462][T29875] [ 1601.015427][T29875] dump_stack_lvl+0x188/0x24e [ 1601.020173][T29875] ? show_regs_print_info+0x12/0x12 [ 1601.025429][T29875] ? load_image+0x400/0x400 [ 1601.029986][T29875] ? __might_fault+0xa6/0x120 [ 1601.034741][T29875] should_fail_ex+0x399/0x4d0 [ 1601.039475][T29875] copyin+0x1b/0x120 [ 1601.043431][T29875] _copy_from_iter+0x447/0x1130 [ 1601.048334][T29875] ? copyout_mc+0x110/0x110 [ 1601.052888][T29875] ? __virt_addr_valid+0x188/0x540 [ 1601.058054][T29875] ? __virt_addr_valid+0x188/0x540 [ 1601.063223][T29875] ? __virt_addr_valid+0x465/0x540 [ 1601.068394][T29875] ? __check_object_size+0x500/0xa40 [ 1601.073731][T29875] netlink_sendmsg+0x755/0xbd0 [ 1601.078563][T29875] ? netlink_getsockopt+0x550/0x550 [ 1601.083807][T29875] ? aa_sock_msg_perm+0x94/0x150 [ 1601.088774][T29875] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1601.094085][T29875] ? security_socket_sendmsg+0x7c/0xa0 [ 1601.099586][T29875] ? netlink_getsockopt+0x550/0x550 [ 1601.104820][T29875] ____sys_sendmsg+0x5be/0x970 [ 1601.109626][T29875] ? __sys_sendmsg_sock+0x30/0x30 [ 1601.114685][T29875] ? __import_iovec+0x315/0x500 [ 1601.119613][T29875] ? import_iovec+0x6f/0xa0 [ 1601.124141][T29875] ___sys_sendmsg+0x2a2/0x360 [ 1601.128858][T29875] ? __sys_sendmsg+0x290/0x290 [ 1601.133672][T29875] ? __lock_acquire+0x7d10/0x7d10 [ 1601.138749][T29875] __se_sys_sendmsg+0x1bb/0x2a0 [ 1601.143637][T29875] ? ct_nmi_exit+0x145/0x1c0 [ 1601.148276][T29875] ? __x64_sys_sendmsg+0x80/0x80 [ 1601.153264][T29875] ? lockdep_hardirqs_on+0x94/0x140 [ 1601.158501][T29875] do_syscall_64+0x4c/0xa0 [ 1601.162948][T29875] ? clear_bhb_loop+0x60/0xb0 [ 1601.167653][T29875] ? clear_bhb_loop+0x60/0xb0 [ 1601.172359][T29875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1601.178283][T29875] RIP: 0033:0x7f1849b9ce59 [ 1601.182743][T29875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.202370][T29875] RSP: 002b:00007f184aa74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1601.210808][T29875] RAX: ffffffffffffffda RBX: 00007f1849e15fa0 RCX: 00007f1849b9ce59 [ 1601.218801][T29875] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 1601.226791][T29875] RBP: 00007f184aa74090 R08: 0000000000000000 R09: 0000000000000000 [ 1601.234781][T29875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1601.242776][T29875] R13: 00007f1849e16038 R14: 00007f1849e15fa0 R15: 00007ffcb3e7a848 [ 1601.250781][T29875] [ 1601.466422][T29871] delete_channel: no stack [ 1601.696517][T29880] device syzkaller0 entered promiscuous mode [ 1601.834541][T29882] delete_channel: no stack [ 1602.192132][T29903] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.8619'. [ 1602.434782][T29906] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8620'. [ 1604.458689][T29912] validate_nla: 4 callbacks suppressed [ 1604.458712][T29912] netlink: 'syz.4.8623': attribute type 10 has an invalid length. [ 1604.484480][T29910] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8622'. [ 1604.515686][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1604.535965][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.558386][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1604.598508][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.613003][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1604.664054][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.704248][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1604.747246][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.787172][T29910] device batadv_slave_1 entered promiscuous mode [ 1604.872029][T29927] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.8628'. [ 1605.000748][T29927] : port 1(ip6gretap0) entered blocking state [ 1605.025829][T29927] : port 1(ip6gretap0) entered disabled state [ 1605.086143][T29927] device ip6gretap0 entered promiscuous mode [ 1605.270203][T29918] device syzkaller0 entered promiscuous mode [ 1605.286831][T29933] device ip6gretap0 left promiscuous mode [ 1605.294382][T29933] : port 1(ip6gretap0) entered disabled state [ 1606.194165][T29960] netlink: 'syz.2.8640': attribute type 16 has an invalid length. [ 1606.218987][T29960] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8640'. [ 1606.255968][T29958] delete_channel: no stack [ 1607.273720][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.280189][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.494739][T29973] netlink: 'syz.3.8643': attribute type 3 has an invalid length. [ 1607.504290][T29973] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8643'. [ 1609.612919][T29969] device syzkaller0 entered promiscuous mode [ 1609.751584][T29986] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.8646'. [ 1609.790776][T29985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8648'. [ 1611.999842][ T5388] tipc: Left network mode [ 1612.021309][T29993] : port 1(ip6gretap0) entered blocking state [ 1612.033685][T29993] : port 1(ip6gretap0) entered disabled state [ 1612.041534][T29993] device ip6gretap0 entered promiscuous mode [ 1612.075916][T29994] device ip6gretap0 left promiscuous mode [ 1612.082028][T29994] : port 1(ip6gretap0) entered disabled state [ 1612.332820][T30002] netlink: 'syz.2.8651': attribute type 10 has an invalid length. [ 1612.378250][T30002] team0: Port device dummy0 added [ 1612.474473][T30003] netlink: 'syz.2.8651': attribute type 10 has an invalid length. [ 1612.509717][T30003] team0: Port device dummy0 removed [ 1612.696241][T30008] netlink: 'syz.0.8655': attribute type 10 has an invalid length. [ 1613.352353][T12955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1613.383488][T12955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1613.399915][T12955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1613.408556][T12955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1613.420962][T12955] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1613.429755][T12955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1613.870156][ T5388] team0: Port device wlan1 removed [ 1614.215106][T30036] device sit0 entered promiscuous mode [ 1614.724082][T30042] netlink: 'syz.3.8666': attribute type 4 has an invalid length. [ 1614.738449][T30042] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1614.812396][ T5388] device hsr_slave_0 left promiscuous mode [ 1614.833386][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1614.863038][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1614.878369][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1614.894957][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1614.933280][ T5388] device bridge_slave_1 left promiscuous mode [ 1614.944727][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.976426][ T5388] device bridge_slave_0 left promiscuous mode [ 1614.983643][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.012986][ T5388] device veth1_macvtap left promiscuous mode [ 1615.022188][ T5388] device veth0_vlan left promiscuous mode [ 1615.494995][T12955] Bluetooth: hci3: command 0x0409 tx timeout [ 1615.582481][ T5388] team0 (unregistering): Port device macvlan0 removed [ 1615.831836][ T5388] team0 (unregistering): Port device team_slave_1 removed [ 1615.880983][ T5388] team0 (unregistering): Port device team_slave_0 removed [ 1615.931510][ T5388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.982133][ T5388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1616.320067][ T5388] bond0 (unregistering): (slave team0): Releasing backup interface [ 1616.331434][ T5388] team0 (unregistering): Port device bridge0 removed [ 1616.366230][ T5388] bond0 (unregistering): Released all slaves [ 1616.472424][T30021] chnl_net:caif_netlink_parms(): no params data found [ 1616.821087][T30021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.854443][T30021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.943058][T30021] device bridge_slave_0 entered promiscuous mode [ 1616.980970][T30021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.002527][T30021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.033046][T30021] device bridge_slave_1 entered promiscuous mode [ 1617.187464][T30021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1617.261665][T30021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1617.386847][T30021] team0: Port device team_slave_0 added [ 1617.430458][T30021] team0: Port device team_slave_1 added [ 1617.542066][T30021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1617.575239][T12955] Bluetooth: hci3: command 0x041b tx timeout [ 1617.581767][T30021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1617.622043][T30021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1617.654521][T30021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.668463][T30021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1617.825046][T30021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1618.176744][T30021] device hsr_slave_0 entered promiscuous mode [ 1618.184000][T30021] device hsr_slave_1 entered promiscuous mode [ 1618.191533][T30021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1618.202768][T30021] Cannot create hsr debugfs directory [ 1619.664916][T12955] Bluetooth: hci3: command 0x040f tx timeout [ 1620.808602][T30129] netlink: 'syz.3.8693': attribute type 39 has an invalid length. [ 1620.956291][ T5388] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.182638][ T5388] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.350404][ T5388] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.511469][ T5388] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.668466][T30162] netlink: 'syz.3.8704': attribute type 21 has an invalid length. [ 1621.696186][T30162] netlink: 'syz.3.8704': attribute type 10 has an invalid length. [ 1621.735008][T12955] Bluetooth: hci3: command 0x0419 tx timeout [ 1621.741629][T30165] netlink: 'syz.0.8705': attribute type 39 has an invalid length. [ 1621.922711][T30165] device hsr_slave_1 left promiscuous mode [ 1622.164796][T30171] device syzkaller0 entered promiscuous mode [ 1622.463472][ T5388] device 0 left promiscuous mode [ 1625.504507][ T5388] tipc: Left network mode [ 1625.864087][T30218] netlink: 'syz.4.8717': attribute type 39 has an invalid length. [ 1625.911298][T30227] netlink: 172 bytes leftover after parsing attributes in process `syz.3.8719'. [ 1626.153618][T30219] device syzkaller0 entered promiscuous mode [ 1627.401757][T30251] delete_channel: no stack [ 1629.518470][T30252] netlink: 'syz.2.8727': attribute type 27 has an invalid length. [ 1629.554788][T30267] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.8729'. [ 1629.702177][T30021] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1629.740688][T30021] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1629.777571][T30021] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1629.878913][T30021] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1630.012403][T30285] netlink: 'syz.4.8735': attribute type 29 has an invalid length. [ 1630.051242][T30285] netlink: 'syz.4.8735': attribute type 29 has an invalid length. [ 1630.075869][T30290] netlink: 'syz.4.8735': attribute type 29 has an invalid length. [ 1630.467582][T30301] netlink: 'syz.0.8739': attribute type 2 has an invalid length. [ 1630.506458][T30301] netlink: 119 bytes leftover after parsing attributes in process `syz.0.8739'. [ 1630.587062][T30301] sctp: [Deprecated]: syz.0.8739 (pid 30301) Use of int in max_burst socket option deprecated. [ 1630.587062][T30301] Use struct sctp_assoc_value instead [ 1630.740255][T30296] netlink: 23763 bytes leftover after parsing attributes in process `syz.0.8739'. [ 1630.803229][T30304] netlink: 'syz.3.8741': attribute type 10 has an invalid length. [ 1630.845228][T30304] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8741'. [ 1630.895106][T30304] device team0 entered promiscuous mode [ 1630.901067][T30304] device team_slave_0 entered promiscuous mode [ 1630.918676][T30304] device team_slave_1 entered promiscuous mode [ 1630.939212][T30304] device wlan1 entered promiscuous mode [ 1630.955156][T30304] device macvlan0 entered promiscuous mode [ 1630.962118][T30304] 8021q: adding VLAN 0 to HW filter on device team0 [ 1630.993892][T30304] bond0: (slave team0): Releasing backup interface [ 1631.034335][T30304] bridge0: port 3(team0) entered blocking state [ 1631.052218][T30304] bridge0: port 3(team0) entered disabled state [ 1631.147332][T30021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1631.160850][ T5388] device bridge_slave_1 left promiscuous mode [ 1631.176808][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.224778][ T5388] device bridge_slave_0 left promiscuous mode [ 1631.233575][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.313557][T30324] netlink: 'syz.2.8747': attribute type 16 has an invalid length. [ 1631.342425][ T5388] device veth1_macvtap left promiscuous mode [ 1631.353925][T30324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8747'. [ 1631.363996][ T5388] device veth1_vlan left promiscuous mode [ 1631.385959][ T5388] device veth0_vlan left promiscuous mode [ 1631.482881][T30323] delete_channel: no stack [ 1631.809643][T30344] netlink: 'syz.0.8753': attribute type 27 has an invalid length. [ 1631.835250][T30344] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8753'. [ 1632.242856][T30355] FAULT_INJECTION: forcing a failure. [ 1632.242856][T30355] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.290683][T30356] sctp: [Deprecated]: syz.3.8755 (pid 30356) Use of int in max_burst socket option deprecated. [ 1632.290683][T30356] Use struct sctp_assoc_value instead [ 1632.317248][T30355] CPU: 0 PID: 30355 Comm: syz.0.8756 Not tainted syzkaller #0 [ 1632.324805][T30355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1632.334901][T30355] Call Trace: [ 1632.338229][T30355] [ 1632.341193][T30355] dump_stack_lvl+0x188/0x24e [ 1632.345941][T30355] ? show_regs_print_info+0x12/0x12 [ 1632.351196][T30355] ? load_image+0x400/0x400 [ 1632.355757][T30355] ? __might_sleep+0xd0/0xd0 [ 1632.360390][T30355] ? __lock_acquire+0x7d10/0x7d10 [ 1632.365488][T30355] should_fail_ex+0x399/0x4d0 [ 1632.370230][T30355] should_failslab+0x5/0x20 [ 1632.374771][T30355] slab_pre_alloc_hook+0x59/0x310 [ 1632.379859][T30355] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1632.385465][T30355] __kmem_cache_alloc_node+0x4f/0x260 [ 1632.390911][T30355] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1632.396521][T30355] __kmalloc+0xa0/0x240 [ 1632.400746][T30355] bpf_prog_test_run_skb+0x234/0x12a0 [ 1632.406166][T30355] ? __fget_files+0x28/0x4b0 [ 1632.410808][T30355] ? __fget_files+0x28/0x4b0 [ 1632.415540][T30355] ? __fget_files+0x43d/0x4b0 [ 1632.420293][T30355] ? cpu_online+0xa0/0xa0 [ 1632.424683][T30355] bpf_prog_test_run+0x31e/0x390 [ 1632.429686][T30355] __sys_bpf+0x62b/0x780 [ 1632.433990][T30355] ? bpf_link_show_fdinfo+0x380/0x380 [ 1632.439450][T30355] ? lock_chain_count+0x20/0x20 [ 1632.444391][T30355] __x64_sys_bpf+0x78/0x90 [ 1632.448873][T30355] do_syscall_64+0x4c/0xa0 [ 1632.453343][T30355] ? clear_bhb_loop+0x60/0xb0 [ 1632.458068][T30355] ? clear_bhb_loop+0x60/0xb0 [ 1632.462802][T30355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1632.468746][T30355] RIP: 0033:0x7fda54b9ce59 [ 1632.473225][T30355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1632.492882][T30355] RSP: 002b:00007fda55a38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1632.501352][T30355] RAX: ffffffffffffffda RBX: 00007fda54e15fa0 RCX: 00007fda54b9ce59 [ 1632.509368][T30355] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1632.517382][T30355] RBP: 00007fda55a38090 R08: 0000000000000000 R09: 0000000000000000 [ 1632.525398][T30355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1632.533428][T30355] R13: 00007fda54e16038 R14: 00007fda54e15fa0 R15: 00007ffd00078d58 [ 1632.541501][T30355] [ 1633.570167][ T5388] team0 (unregistering): Port device macvlan0 removed [ 1633.929828][ T5388] team0 (unregistering): Port device team_slave_1 removed [ 1633.975676][ T5388] team0 (unregistering): Port device team_slave_0 removed [ 1634.031403][ T5388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1634.078347][ T5388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1634.364625][ T5388] bond0 (unregistering): (slave team0): Releasing backup interface [ 1634.401571][ T5388] bond0 (unregistering): Released all slaves [ 1634.497130][T30339] netlink: 'syz.4.8760': attribute type 10 has an invalid length. [ 1634.508699][T30339] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8760'. [ 1634.518219][T30339] device team0 entered promiscuous mode [ 1634.523818][T30339] device team_slave_0 entered promiscuous mode [ 1634.533899][T30339] device team_slave_1 entered promiscuous mode [ 1634.541269][T30339] device macvlan0 entered promiscuous mode [ 1634.552563][T30339] device macvlan1 entered promiscuous mode [ 1634.559964][T30339] device wlan1 entered promiscuous mode [ 1634.570665][T30339] 8021q: adding VLAN 0 to HW filter on device team0 [ 1634.578434][T30339] bond0: (slave team0): Releasing backup interface [ 1634.594635][T30339] bridge0: port 3(team0) entered blocking state [ 1634.601155][T30339] bridge0: port 3(team0) entered disabled state [ 1634.609262][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1634.622757][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1634.635810][T30352] netlink: 'syz.3.8755': attribute type 2 has an invalid length. [ 1634.645024][T30352] netlink: 119 bytes leftover after parsing attributes in process `syz.3.8755'. [ 1634.685090][T30353] netlink: 23763 bytes leftover after parsing attributes in process `syz.3.8755'. [ 1634.705584][T30021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1634.751607][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1634.813899][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1634.828716][T26932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1634.835944][T26932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1634.886666][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1634.905306][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1634.953291][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1634.971682][T30400] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8769'. [ 1634.985727][T26932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1634.992949][T26932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1635.040764][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1635.093327][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1635.131971][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1635.163794][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1635.200736][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1635.221492][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1635.256003][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1635.284450][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1635.315547][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1635.344083][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1635.383438][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1635.456351][T30021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1635.572565][T30414] netlink: 'syz.4.8773': attribute type 10 has an invalid length. [ 1635.667627][T30414] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1635.991861][T30419] netlink: 'syz.4.8774': attribute type 29 has an invalid length. [ 1636.195037][T30419] netlink: 'syz.4.8774': attribute type 29 has an invalid length. [ 1636.386170][T30430] netlink: 'syz.2.8776': attribute type 10 has an invalid length. [ 1636.435261][T30430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8776'. [ 1636.462849][T30430] device team0 entered promiscuous mode [ 1636.536493][T30430] device team_slave_0 entered promiscuous mode [ 1636.542884][T30430] device team_slave_1 entered promiscuous mode [ 1636.629931][T30430] device macvlan0 entered promiscuous mode [ 1636.683188][T30430] bond0: (slave team0): Releasing backup interface [ 1636.720679][T30430] bridge0: port 3(team0) entered blocking state [ 1636.731243][T30430] bridge0: port 3(team0) entered disabled state [ 1636.755440][T30445] netlink: 'syz.4.8778': attribute type 2 has an invalid length. [ 1636.804369][T30445] netlink: 119 bytes leftover after parsing attributes in process `syz.4.8778'. [ 1636.851534][T30441] netlink: 23763 bytes leftover after parsing attributes in process `syz.4.8778'. [ 1636.876085][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1636.885159][T30441] sctp: [Deprecated]: syz.4.8778 (pid 30441) Use of int in max_burst socket option deprecated. [ 1636.885159][T30441] Use struct sctp_assoc_value instead [ 1636.909547][T30451] FAULT_INJECTION: forcing a failure. [ 1636.909547][T30451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1636.916337][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1636.966526][T30451] CPU: 1 PID: 30451 Comm: syz.3.8781 Not tainted syzkaller #0 [ 1636.974122][T30451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1636.984242][T30451] Call Trace: [ 1636.987564][T30451] [ 1636.990537][T30451] dump_stack_lvl+0x188/0x24e [ 1636.995279][T30451] ? show_regs_print_info+0x12/0x12 [ 1637.000521][T30451] ? load_image+0x400/0x400 [ 1637.005069][T30451] ? __might_fault+0xa6/0x120 [ 1637.009784][T30451] should_fail_ex+0x399/0x4d0 [ 1637.014485][T30451] copyin+0x1b/0x120 [ 1637.018407][T30451] _copy_from_iter+0x447/0x1130 [ 1637.023289][T30451] ? copyout_mc+0x110/0x110 [ 1637.027828][T30451] ? __virt_addr_valid+0x188/0x540 [ 1637.032968][T30451] ? __virt_addr_valid+0x188/0x540 [ 1637.038105][T30451] ? __virt_addr_valid+0x465/0x540 [ 1637.043241][T30451] ? __check_object_size+0x500/0xa40 [ 1637.048551][T30451] netlink_sendmsg+0x755/0xbd0 [ 1637.053417][T30451] ? netlink_getsockopt+0x550/0x550 [ 1637.058647][T30451] ? aa_sock_msg_perm+0x94/0x150 [ 1637.063613][T30451] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1637.068919][T30451] ? security_socket_sendmsg+0x7c/0xa0 [ 1637.074405][T30451] ? netlink_getsockopt+0x550/0x550 [ 1637.079632][T30451] ____sys_sendmsg+0x5be/0x970 [ 1637.084433][T30451] ? __sys_sendmsg_sock+0x30/0x30 [ 1637.089481][T30451] ? __import_iovec+0x315/0x500 [ 1637.094359][T30451] ? import_iovec+0x6f/0xa0 [ 1637.098884][T30451] ___sys_sendmsg+0x2a2/0x360 [ 1637.103624][T30451] ? __sys_sendmsg+0x290/0x290 [ 1637.108439][T30451] ? __lock_acquire+0x7d10/0x7d10 [ 1637.113547][T30451] __se_sys_sendmsg+0x1bb/0x2a0 [ 1637.118440][T30451] ? __x64_sys_sendmsg+0x80/0x80 [ 1637.123439][T30451] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1637.129362][T30451] do_syscall_64+0x4c/0xa0 [ 1637.133810][T30451] ? clear_bhb_loop+0x60/0xb0 [ 1637.138518][T30451] ? clear_bhb_loop+0x60/0xb0 [ 1637.143216][T30451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1637.149135][T30451] RIP: 0033:0x7f3a6c39ce59 [ 1637.153567][T30451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.173193][T30451] RSP: 002b:00007f3a6d252028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1637.181627][T30451] RAX: ffffffffffffffda RBX: 00007f3a6c615fa0 RCX: 00007f3a6c39ce59 [ 1637.189621][T30451] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 1637.197606][T30451] RBP: 00007f3a6d252090 R08: 0000000000000000 R09: 0000000000000000 [ 1637.205607][T30451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.213589][T30451] R13: 00007f3a6c616038 R14: 00007f3a6c615fa0 R15: 00007ffe7d348448 [ 1637.221595][T30451] [ 1637.228700][T30021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1637.328664][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1637.338475][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1637.368466][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1637.391093][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1637.414152][T30021] device veth0_vlan entered promiscuous mode [ 1637.448625][T30021] device veth1_vlan entered promiscuous mode [ 1637.481654][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1637.497707][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1637.512771][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1637.551253][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1637.569728][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1637.600169][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1637.667850][T30021] device veth0_macvtap entered promiscuous mode [ 1637.696059][T30021] device veth1_macvtap entered promiscuous mode [ 1637.788283][T30021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1637.845035][T30021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.895119][T30021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1637.920586][T30021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.951102][T30021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1638.005150][T30021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.046209][T30021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1638.065392][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1638.078655][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1638.125938][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1638.167683][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1638.208772][T30021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.254314][T30021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.301313][T30021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.357242][T30021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.405400][T30021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.443163][T30021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.472868][T30021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.498857][T30021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.524264][T30021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1638.559162][T22119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1638.605419][T22119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1638.646851][T30021] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.690296][T30021] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.723721][T30021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.758612][T30021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.021046][T22119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.070197][T22119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.131039][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1639.147148][ T5391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.162877][ T5391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.188307][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1639.418991][T30523] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8654'. [ 1639.478279][T30523] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8654'. [ 1639.500398][T30526] netlink: 'syz.3.8802': attribute type 10 has an invalid length. [ 1639.532535][T30526] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8802'. [ 1639.570565][T30526] device macvlan1 entered promiscuous mode [ 1639.616640][T30526] batman_adv: batadv0: Adding interface: macvlan1 [ 1639.642049][T30526] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.721028][T30526] batman_adv: batadv0: Interface activated: macvlan1 [ 1639.739130][T30527] netlink: 'syz.3.8802': attribute type 10 has an invalid length. [ 1639.756369][T30527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8802'. [ 1639.785099][T30523] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8654'. [ 1640.373466][ T5391] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.483855][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1640.497343][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1640.497756][T30552] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8810'. [ 1640.514291][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1640.522325][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1640.532050][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1640.539744][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1640.854195][T30552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1640.947632][T30552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1641.018328][T30552] bond0 (unregistering): Released all slaves [ 1641.114288][ T5391] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.206348][T30572] netlink: 'syz.0.8816': attribute type 21 has an invalid length. [ 1641.342494][ T5391] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.381590][T30572] netlink: 'syz.0.8816': attribute type 10 has an invalid length. [ 1641.449336][T30580] netlink: 'syz.3.8820': attribute type 39 has an invalid length. [ 1641.521347][ T5391] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.663994][T30586] netlink: 'syz.2.8822': attribute type 39 has an invalid length. [ 1641.742110][T30588] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8823'. [ 1641.765998][T30588] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8823'. [ 1641.976876][T30550] chnl_net:caif_netlink_parms(): no params data found [ 1642.157060][ T5391] tipc: Left network mode [ 1642.450313][T30550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.468389][T30550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.495959][T30550] device bridge_slave_0 entered promiscuous mode [ 1642.592506][T30612] netlink: 'syz.2.8831': attribute type 39 has an invalid length. [ 1642.609972][T30550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.625103][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 1642.635905][T30550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.644171][T30550] device bridge_slave_1 entered promiscuous mode [ 1642.813054][T30624] netlink: 'syz.1.8832': attribute type 21 has an invalid length. [ 1642.836652][T30627] netlink: 'syz.1.8832': attribute type 10 has an invalid length. [ 1642.938422][T30627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1642.990864][T30627] bond0: (slave team0): Enslaving as an active interface with an up link [ 1643.122422][T30636] netlink: 'syz.2.8835': attribute type 39 has an invalid length. [ 1643.211857][T30637] netlink: 'syz.0.8836': attribute type 39 has an invalid length. [ 1643.224312][T30641] netlink: 'syz.3.8837': attribute type 10 has an invalid length. [ 1643.257980][T30550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.367446][T30550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.574251][T30550] team0: Port device team_slave_0 added [ 1643.607424][T30550] team0: Port device team_slave_1 added [ 1643.930699][T30550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1643.948344][T30550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1644.008336][T30550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1644.133374][T30669] netlink: 'syz.0.8845': attribute type 39 has an invalid length. [ 1644.153084][T30550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1644.163827][T30550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1644.258095][T30550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1644.445469][T30680] netlink: 'syz.2.8848': attribute type 21 has an invalid length. [ 1644.485272][T30681] device team0 left promiscuous mode [ 1644.490737][T30681] device team_slave_0 left promiscuous mode [ 1644.533303][T30681] device team_slave_1 left promiscuous mode [ 1644.552743][T30681] device macvlan0 left promiscuous mode [ 1644.573323][T30681] bridge0: port 3(team0) entered disabled state [ 1644.695012][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 1645.186101][T30681] bond0: (slave team0): Enslaving as an active interface with an up link [ 1645.651616][ T5391] device wlan1 left promiscuous mode [ 1645.668395][T30703] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8855'. [ 1645.696939][ T5391] team0: Port device wlan1 removed [ 1645.737574][T30550] device hsr_slave_0 entered promiscuous mode [ 1645.758995][T30550] device hsr_slave_1 entered promiscuous mode [ 1645.772714][T30550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1645.800397][T30550] Cannot create hsr debugfs directory [ 1646.330217][T30698] device syzkaller0 entered promiscuous mode [ 1646.775092][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 1648.863144][T12955] Bluetooth: hci1: command 0x0419 tx timeout [ 1650.134305][ T5391] device hsr_slave_0 left promiscuous mode [ 1650.165288][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1650.172775][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1650.226688][ T5391] bridge0: port 3(team0) entered disabled state [ 1650.263772][ T5391] device bridge_slave_1 left promiscuous mode [ 1650.285057][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.324257][ T5391] device bridge_slave_0 left promiscuous mode [ 1650.338596][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.426123][ T5391] device veth1_macvtap left promiscuous mode [ 1650.432530][ T5391] device veth0_vlan left promiscuous mode [ 1650.700843][T30765] validate_nla: 3 callbacks suppressed [ 1650.700862][T30765] netlink: 'syz.3.8870': attribute type 1 has an invalid length. [ 1650.715188][T30765] netlink: 'syz.3.8870': attribute type 1 has an invalid length. [ 1650.722965][T30765] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.8870'. [ 1653.829905][T30761] delete_channel: no stack [ 1653.888814][T30770] delete_channel: no stack [ 1653.914446][ T5391] device macvlan1 left promiscuous mode [ 1653.923157][ T5391] team0 (unregistering): Port device macvlan1 removed [ 1653.953677][ T5391] device macvlan0 left promiscuous mode [ 1653.960608][ T5391] team0 (unregistering): Port device macvlan0 removed [ 1654.147491][ T5391] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1654.194037][ T5391] device team_slave_1 left promiscuous mode [ 1654.201834][ T5391] team0 (unregistering): Port device team_slave_1 removed [ 1654.249690][ T5391] device team_slave_0 left promiscuous mode [ 1654.256663][ T5391] team0 (unregistering): Port device team_slave_0 removed [ 1654.299849][ T5391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1654.574790][ T5391] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1654.630465][ T5391] bond0 (unregistering): Released all slaves [ 1654.713776][T30747] netlink: 'syz.2.8863': attribute type 21 has an invalid length. [ 1654.722554][T30752] netlink: 'syz.2.8863': attribute type 10 has an invalid length. [ 1654.740564][T30762] netlink: 'syz.1.8867': attribute type 27 has an invalid length. [ 1654.748862][T30762] FAULT_INJECTION: forcing a failure. [ 1654.748862][T30762] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.755609][T30767] netlink: 'syz.0.8869': attribute type 46 has an invalid length. [ 1654.779003][T30762] CPU: 1 PID: 30762 Comm: syz.1.8867 Not tainted syzkaller #0 [ 1654.786537][T30762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1654.796632][T30762] Call Trace: [ 1654.799945][T30762] [ 1654.802903][T30762] dump_stack_lvl+0x188/0x24e [ 1654.807636][T30762] ? show_regs_print_info+0x12/0x12 [ 1654.812885][T30762] ? load_image+0x400/0x400 [ 1654.817446][T30762] ? __might_sleep+0xd0/0xd0 [ 1654.822072][T30762] ? __lock_acquire+0x7d10/0x7d10 [ 1654.827149][T30762] should_fail_ex+0x399/0x4d0 [ 1654.831866][T30762] should_failslab+0x5/0x20 [ 1654.836436][T30762] slab_pre_alloc_hook+0x59/0x310 [ 1654.841499][T30762] kmem_cache_alloc_node+0x5a/0x320 [ 1654.846735][T30762] ? __dev_queue_xmit+0x26b/0x37c0 [ 1654.851876][T30762] ? __alloc_skb+0xfc/0x7e0 [ 1654.856431][T30762] __alloc_skb+0xfc/0x7e0 [ 1654.860825][T30762] netlink_ack+0x372/0x1170 [ 1654.865379][T30762] ? ref_tracker_free+0x68c/0x840 [ 1654.870436][T30762] ? __copy_skb_header+0x3ba/0x4f0 [ 1654.875571][T30762] ? refcount_inc+0x70/0x70 [ 1654.880105][T30762] ? memcpy+0x3c/0x60 [ 1654.884106][T30762] ? netlink_dump+0xd00/0xd00 [ 1654.888804][T30762] ? __copy_skb_header+0x3ba/0x4f0 [ 1654.893958][T30762] ? __skb_clone+0x480/0x790 [ 1654.898578][T30762] netlink_rcv_skb+0x280/0x450 [ 1654.903367][T30762] ? rtnetlink_bind+0x80/0x80 [ 1654.908075][T30762] ? netlink_ack+0x1170/0x1170 [ 1654.912879][T30762] ? netlink_deliver_tap+0x2e/0x1b0 [ 1654.918124][T30762] netlink_unicast+0x74d/0x8d0 [ 1654.922940][T30762] netlink_sendmsg+0x8ad/0xbd0 [ 1654.927735][T30762] ? netlink_getsockopt+0x550/0x550 [ 1654.932963][T30762] ? aa_sock_msg_perm+0x94/0x150 [ 1654.937942][T30762] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1654.943248][T30762] ? security_socket_sendmsg+0x7c/0xa0 [ 1654.948732][T30762] ? netlink_getsockopt+0x550/0x550 [ 1654.953958][T30762] ____sys_sendmsg+0x5be/0x970 [ 1654.958766][T30762] ? __sys_sendmsg_sock+0x30/0x30 [ 1654.963833][T30762] ? __import_iovec+0x315/0x500 [ 1654.968751][T30762] ? import_iovec+0x6f/0xa0 [ 1654.973305][T30762] ___sys_sendmsg+0x2a2/0x360 [ 1654.978090][T30762] ? __sys_sendmsg+0x290/0x290 [ 1654.982982][T30762] ? __lock_acquire+0x7d10/0x7d10 [ 1654.988065][T30762] __se_sys_sendmsg+0x1bb/0x2a0 [ 1654.992949][T30762] ? ct_nmi_exit+0x145/0x1c0 [ 1654.997567][T30762] ? __x64_sys_sendmsg+0x80/0x80 [ 1655.002544][T30762] ? lockdep_hardirqs_on+0x94/0x140 [ 1655.007762][T30762] do_syscall_64+0x4c/0xa0 [ 1655.012203][T30762] ? clear_bhb_loop+0x60/0xb0 [ 1655.016898][T30762] ? clear_bhb_loop+0x60/0xb0 [ 1655.021595][T30762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1655.027526][T30762] RIP: 0033:0x7fd33079ce59 [ 1655.031966][T30762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.051596][T30762] RSP: 002b:00007fd3316b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1655.060022][T30762] RAX: ffffffffffffffda RBX: 00007fd330a15fa0 RCX: 00007fd33079ce59 [ 1655.068016][T30762] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 1655.076007][T30762] RBP: 00007fd3316b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.083992][T30762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.091987][T30762] R13: 00007fd330a16038 R14: 00007fd330a15fa0 R15: 00007ffca2019898 [ 1655.099990][T30762] [ 1655.397942][T30779] device syzkaller0 entered promiscuous mode [ 1655.747874][T30792] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.8877'. [ 1655.781000][T30792] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.8877'. [ 1655.839113][T30792] tc_dump_action: action bad kind [ 1658.302275][T30812] netlink: 'syz.2.8880': attribute type 21 has an invalid length. [ 1658.339017][T30815] netlink: 'syz.2.8880': attribute type 10 has an invalid length. [ 1658.648157][T30550] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1658.675880][T30550] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1658.824975][T30838] netlink: 'syz.3.8882': attribute type 21 has an invalid length. [ 1658.833130][T30840] netlink: 'syz.3.8882': attribute type 10 has an invalid length. [ 1658.905227][T30840] device team0 left promiscuous mode [ 1658.919049][T30840] device team_slave_0 left promiscuous mode [ 1658.934138][T30840] device team_slave_1 left promiscuous mode [ 1658.966983][T30840] device wlan1 left promiscuous mode [ 1658.972829][T30840] device macvlan0 left promiscuous mode [ 1658.979122][T30840] bridge0: port 3(team0) entered disabled state [ 1658.992942][T30550] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1659.024506][T30550] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1659.321428][T30550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1659.369938][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1659.378904][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1659.400462][T30550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1659.415799][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1659.429836][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1659.453576][ T5388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.460779][ T5388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1659.481826][T30860] netlink: 'syz.2.8890': attribute type 10 has an invalid length. [ 1659.496791][T30860] device wlan1 left promiscuous mode [ 1659.533479][T30860] team0: Port device wlan1 added [ 1659.549686][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1659.568858][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1659.598004][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1659.652208][ T5388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.659462][ T5388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1659.728333][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1659.761818][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1659.782209][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1659.819011][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1659.856170][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1659.874471][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1659.894585][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1659.933902][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1659.982299][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1660.008006][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1660.028634][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1660.052792][T30550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1660.191803][T30866] device syzkaller0 entered promiscuous mode [ 1662.593071][T30903] netlink: 'syz.2.8899': attribute type 21 has an invalid length. [ 1662.601655][T30905] netlink: 'syz.2.8899': attribute type 10 has an invalid length. [ 1662.730245][T30913] netlink: 'syz.3.8900': attribute type 10 has an invalid length. [ 1662.938123][T30921] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8904'. [ 1663.021972][T30921] device caif0 entered promiscuous mode [ 1663.052158][T30926] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8905'. [ 1663.061517][T30921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1663.107074][T30931] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.8906'. [ 1663.135684][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1663.143244][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1663.146660][T30930] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.8906'. [ 1663.205508][T30550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1663.214648][T30931] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1663.310083][T30931] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1663.366214][T30931] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1663.435824][T30940] FAULT_INJECTION: forcing a failure. [ 1663.435824][T30940] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.488639][T30940] CPU: 0 PID: 30940 Comm: syz.2.8909 Not tainted syzkaller #0 [ 1663.496224][T30940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1663.506322][T30940] Call Trace: [ 1663.509656][T30940] [ 1663.512643][T30940] dump_stack_lvl+0x188/0x24e [ 1663.517376][T30940] ? show_regs_print_info+0x12/0x12 [ 1663.522629][T30940] ? load_image+0x400/0x400 [ 1663.527185][T30940] ? verify_lock_unused+0x140/0x140 [ 1663.532439][T30940] should_fail_ex+0x399/0x4d0 [ 1663.537173][T30940] should_failslab+0x5/0x20 [ 1663.541730][T30940] slab_pre_alloc_hook+0x59/0x310 [ 1663.546801][T30940] kmem_cache_alloc+0x56/0x2f0 [ 1663.551602][T30940] ? skb_clone+0x1e7/0x370 [ 1663.556074][T30940] skb_clone+0x1e7/0x370 [ 1663.560374][T30940] __netlink_deliver_tap+0x3ed/0x800 [ 1663.565746][T30940] ? netlink_deliver_tap+0x2e/0x1b0 [ 1663.571005][T30940] netlink_deliver_tap+0x19c/0x1b0 [ 1663.576164][T30940] netlink_unicast+0x728/0x8d0 [ 1663.580996][T30940] netlink_sendmsg+0x8ad/0xbd0 [ 1663.585833][T30940] ? netlink_getsockopt+0x550/0x550 [ 1663.591083][T30940] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1663.597139][T30940] ? aa_sock_msg_perm+0x94/0x150 [ 1663.602121][T30940] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1663.607459][T30940] ? security_socket_sendmsg+0x7c/0xa0 [ 1663.612975][T30940] ? netlink_getsockopt+0x550/0x550 [ 1663.618223][T30940] ____sys_sendmsg+0x5be/0x970 [ 1663.623063][T30940] ? __sys_sendmsg_sock+0x30/0x30 [ 1663.628135][T30940] ? __import_iovec+0x315/0x500 [ 1663.633040][T30940] ? import_iovec+0x6f/0xa0 [ 1663.637592][T30940] ___sys_sendmsg+0x2a2/0x360 [ 1663.642326][T30940] ? __sys_sendmsg+0x290/0x290 [ 1663.647186][T30940] __se_sys_sendmsg+0x1bb/0x2a0 [ 1663.652095][T30940] ? __x64_sys_sendmsg+0x80/0x80 [ 1663.657101][T30940] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1663.663047][T30940] do_syscall_64+0x4c/0xa0 [ 1663.667522][T30940] ? clear_bhb_loop+0x60/0xb0 [ 1663.672241][T30940] ? clear_bhb_loop+0x60/0xb0 [ 1663.676971][T30940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1663.682935][T30940] RIP: 0033:0x7f1849b9ce59 [ 1663.687393][T30940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.707048][T30940] RSP: 002b:00007f184aa74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1663.715514][T30940] RAX: ffffffffffffffda RBX: 00007f1849e15fa0 RCX: 00007f1849b9ce59 [ 1663.723545][T30940] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 1663.731571][T30940] RBP: 00007f184aa74090 R08: 0000000000000000 R09: 0000000000000000 [ 1663.739575][T30940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1663.747580][T30940] R13: 00007f1849e16038 R14: 00007f1849e15fa0 R15: 00007ffcb3e7a848 [ 1663.755622][T30940] [ 1663.866558][T30940] netlink: 'syz.2.8909': attribute type 21 has an invalid length. [ 1664.212859][T30953] device syzkaller0 entered promiscuous mode [ 1664.268685][T30963] netlink: 'syz.1.8913': attribute type 21 has an invalid length. [ 1664.318164][T30963] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8913'. [ 1664.523388][T30971] netlink: 'syz.3.8914': attribute type 21 has an invalid length. [ 1666.863447][T30972] netlink: 'syz.3.8914': attribute type 10 has an invalid length. [ 1666.884049][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1666.904498][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1666.979931][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1666.996513][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1667.008366][T30550] device veth0_vlan entered promiscuous mode [ 1667.035912][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1667.055744][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1667.099233][T30550] device veth1_vlan entered promiscuous mode [ 1667.226295][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1667.236249][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1667.265875][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1667.285912][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1667.326931][T30550] device veth0_macvtap entered promiscuous mode [ 1667.357401][T30550] device veth1_macvtap entered promiscuous mode [ 1667.442046][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1667.486077][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.545162][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1667.576029][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.594997][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1667.615013][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.642524][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1667.659718][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.671871][T30550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1667.686513][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1667.715782][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1667.738948][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1667.756701][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1667.844002][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1667.855600][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.868378][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1667.879159][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.906580][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1667.927679][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.940326][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1667.951246][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.970390][T30550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1667.990658][T31025] netlink: 'syz.2.8928': attribute type 21 has an invalid length. [ 1668.005749][T31027] netlink: 'syz.2.8928': attribute type 10 has an invalid length. [ 1668.108625][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1668.144030][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1668.188993][T31033] netlink: 'syz.3.8930': attribute type 10 has an invalid length. [ 1668.208973][T30550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.219084][T30550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.236198][T30550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.267976][T30550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.380088][T31043] netlink: 'syz.1.8931': attribute type 39 has an invalid length. [ 1668.517297][T31029] can: request_module (can-proto-0) failed. [ 1668.718409][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.724954][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.040880][ T5378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.083100][ T5378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.213893][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1669.315824][ T5391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.390277][ T5391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.414088][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1669.843758][T31066] netlink: 'syz.0.8938': attribute type 10 has an invalid length. [ 1670.222834][T31066] team0: Port device geneve1 added [ 1670.289673][T31077] tipc: Started in network mode [ 1670.294752][T31077] tipc: Node identity 9215a268, cluster identity 4711 [ 1670.355188][T31077] tipc: Node number set to 2450891368 [ 1670.450607][T31085] netlink: 'syz.2.8942': attribute type 21 has an invalid length. [ 1670.480656][T31085] netlink: 'syz.2.8942': attribute type 10 has an invalid length. [ 1670.845223][T12955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1670.863789][T12955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1670.871771][T12955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1670.879717][T12955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1670.905848][T12955] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1670.924347][T12955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1671.293901][ T5391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.613313][ T5391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.340391][ T5391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.459673][T31124] netlink: 'syz.4.8950': attribute type 11 has an invalid length. [ 1672.504305][ T5391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.505399][T31124] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8950'. [ 1672.536848][T31126] netlink: 'syz.0.8952': attribute type 10 has an invalid length. [ 1672.570136][T31126] team0: Port device dummy0 added [ 1672.645849][T31123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1672.820665][T31139] netlink: 'syz.4.8955': attribute type 10 has an invalid length. [ 1673.016036][T12955] Bluetooth: hci4: command 0x0409 tx timeout [ 1673.087716][T31139] team0: Port device geneve1 added [ 1673.177956][T31147] netlink: 'syz.0.8956': attribute type 21 has an invalid length. [ 1673.356090][T31150] netlink: 'syz.0.8956': attribute type 10 has an invalid length. [ 1673.379229][T31097] chnl_net:caif_netlink_parms(): no params data found [ 1673.467752][ T5391] tipc: Left network mode [ 1674.048269][T31172] netlink: 'syz.2.8961': attribute type 1 has an invalid length. [ 1674.095495][T31172] netlink: 'syz.2.8961': attribute type 1 has an invalid length. [ 1674.166438][T31172] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.8961'. [ 1674.423382][T31097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.436982][T31097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.511948][T31097] device bridge_slave_0 entered promiscuous mode [ 1674.705456][T31167] device veth1_macvtap left promiscuous mode [ 1674.752844][T31097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.783370][T31097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.808966][T31097] device bridge_slave_1 entered promiscuous mode [ 1674.963861][T31189] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.8965'. [ 1674.981801][T31164] device veth1_macvtap entered promiscuous mode [ 1675.006941][T31164] device macsec0 entered promiscuous mode [ 1675.074512][T31167] netlink: 'syz.1.8960': attribute type 21 has an invalid length. [ 1675.098664][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 1675.125953][T31167] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8960'. [ 1675.401696][T31097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.578985][T31097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.608476][T31206] netlink: 'syz.1.8968': attribute type 21 has an invalid length. [ 1675.634094][T31210] netlink: 'syz.1.8968': attribute type 10 has an invalid length. [ 1675.832685][T31212] netlink: 'syz.0.8969': attribute type 27 has an invalid length. [ 1675.871261][T31209] delete_channel: no stack [ 1675.951431][T31097] team0: Port device team_slave_0 added [ 1675.993993][T31097] team0: Port device team_slave_1 added [ 1676.014591][T31220] netlink: 'syz.4.8973': attribute type 3 has an invalid length. [ 1676.042807][T31220] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8973'. [ 1676.122708][T31097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1676.141001][T31097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.224413][T31097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1676.277376][T31097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1676.293725][T31097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.403716][T31097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.624759][T31097] device hsr_slave_0 entered promiscuous mode [ 1676.645666][T31097] device hsr_slave_1 entered promiscuous mode [ 1676.666723][T31097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1676.683915][T31097] Cannot create hsr debugfs directory [ 1676.704723][T31234] netlink: 'syz.1.8978': attribute type 13 has an invalid length. [ 1676.746053][T31234] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8978'. [ 1676.859525][T31234] erspan0: refused to change device tx_queue_len [ 1677.094672][T31252] netlink: 'syz.0.8984': attribute type 16 has an invalid length. [ 1677.106205][ T5391] team0: Port device wlan1 removed [ 1677.149933][T31252] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8984'. [ 1677.174934][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 1677.197420][T31251] delete_channel: no stack [ 1677.544669][T31263] netlink: 'syz.4.8986': attribute type 21 has an invalid length. [ 1677.595704][T31261] netlink: 'syz.2.8985': attribute type 10 has an invalid length. [ 1677.603615][T31261] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8985'. [ 1677.635167][T31261] device macvlan1 entered promiscuous mode [ 1677.642641][T31261] batman_adv: batadv0: Adding interface: macvlan1 [ 1677.685153][T31261] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.761966][T31261] batman_adv: batadv0: Interface activated: macvlan1 [ 1677.796035][T31265] netlink: 'syz.4.8986': attribute type 10 has an invalid length. [ 1677.868799][T31265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1677.920365][T31265] bond0: (slave team0): Enslaving as an active interface with an up link [ 1678.053032][ T5391] device hsr_slave_0 left promiscuous mode [ 1678.086980][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1678.100462][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1678.131743][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1678.151134][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1678.181140][ T5391] batman_adv: batadv0: Interface deactivated: macvlan1 [ 1678.195267][ T5391] batman_adv: batadv0: Removing interface: macvlan1 [ 1678.263378][ T5391] device bridge_slave_1 left promiscuous mode [ 1678.277269][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.298379][ T5391] device bridge_slave_0 left promiscuous mode [ 1678.306231][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.373706][ T5391] device veth1_macvtap left promiscuous mode [ 1678.388257][ T5391] device veth0_macvtap left promiscuous mode [ 1678.400799][ T5391] device veth0_vlan left promiscuous mode [ 1678.900282][ T5391] team0 (unregistering): Port device macvlan0 removed [ 1679.138884][ T5391] team0 (unregistering): Port device team_slave_1 removed [ 1679.193995][ T5391] team0 (unregistering): Port device team_slave_0 removed [ 1679.201806][T31284] delete_channel: no stack [ 1679.258540][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 1679.681442][T31287] team0: Port device team_slave_0 removed [ 1679.808808][T31292] device syzkaller0 entered promiscuous mode [ 1680.166838][T31308] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8996'. [ 1680.190507][T31308] validate_nla: 1 callbacks suppressed [ 1680.190563][T31308] netlink: 'syz.1.8996': attribute type 27 has an invalid length. [ 1680.211706][T31308] netlink: 'syz.1.8996': attribute type 3 has an invalid length. [ 1680.221169][T31308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8996'. [ 1680.386981][T31310] FAULT_INJECTION: forcing a failure. [ 1680.386981][T31310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1680.406433][T31310] CPU: 0 PID: 31310 Comm: syz.1.8997 Not tainted syzkaller #0 [ 1680.413965][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1680.424042][T31310] Call Trace: [ 1680.427339][T31310] [ 1680.430288][T31310] dump_stack_lvl+0x188/0x24e [ 1680.434984][T31310] ? show_regs_print_info+0x12/0x12 [ 1680.440207][T31310] ? load_image+0x400/0x400 [ 1680.444719][T31310] ? __lock_acquire+0x7d10/0x7d10 [ 1680.449787][T31310] should_fail_ex+0x399/0x4d0 [ 1680.454494][T31310] _copy_from_user+0x2c/0x170 [ 1680.459185][T31310] ___sys_sendmsg+0x1c3/0x360 [ 1680.463884][T31310] ? __sys_sendmsg+0x290/0x290 [ 1680.468673][T31310] ? __lock_acquire+0x7d10/0x7d10 [ 1680.473725][T31310] __se_sys_sendmsg+0x1bb/0x2a0 [ 1680.478598][T31310] ? __x64_sys_sendmsg+0x80/0x80 [ 1680.483559][T31310] ? lockdep_hardirqs_on+0x94/0x140 [ 1680.488779][T31310] do_syscall_64+0x4c/0xa0 [ 1680.493208][T31310] ? clear_bhb_loop+0x60/0xb0 [ 1680.497894][T31310] ? clear_bhb_loop+0x60/0xb0 [ 1680.502583][T31310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1680.508499][T31310] RIP: 0033:0x7fd33079ce59 [ 1680.512937][T31310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1680.532550][T31310] RSP: 002b:00007fd3316b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1680.540973][T31310] RAX: ffffffffffffffda RBX: 00007fd330a15fa0 RCX: 00007fd33079ce59 [ 1680.548948][T31310] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000007 [ 1680.557020][T31310] RBP: 00007fd3316b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.565026][T31310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1680.573004][T31310] R13: 00007fd330a16038 R14: 00007fd330a15fa0 R15: 00007ffca2019898 [ 1680.580995][T31310] [ 1682.881347][T31334] netlink: 'syz.0.9006': attribute type 21 has an invalid length. [ 1682.896370][T31334] netlink: 'syz.0.9006': attribute type 5 has an invalid length. [ 1683.239954][T31341] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.9007'. [ 1683.302798][T31097] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1683.368438][T31097] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1683.418487][T31097] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1684.072418][T31384] netlink: 'syz.0.9009': attribute type 13 has an invalid length. [ 1684.216481][T12955] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 1684.273077][T31384] netlink: 172 bytes leftover after parsing attributes in process `syz.0.9009'. [ 1684.442670][T31384] erspan0: refused to change device tx_queue_len [ 1684.578960][T31097] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1684.984531][T31097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1684.994177][T31392] tipc: Subscription rejected, illegal request [ 1685.078855][T31412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1685.098334][T31412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1685.127550][T31097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1685.212238][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1685.221859][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1685.289456][T31377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.296680][T31377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1685.390507][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1685.428859][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1685.489371][T31377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.496613][T31377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1685.637619][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1685.664754][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1685.681450][T31436] can: request_module (can-proto-0) failed. [ 1685.689418][T31440] netlink: 'syz.0.9020': attribute type 10 has an invalid length. [ 1685.747174][T31445] netlink: 'syz.0.9020': attribute type 10 has an invalid length. [ 1685.774748][T31445] team0: Port device dummy0 removed [ 1685.799957][T31446] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9021'. [ 1685.857244][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1685.906048][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1685.956181][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1686.015031][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1686.057344][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1686.102921][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1686.135381][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1686.198173][T31457] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9023'. [ 1686.230770][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1686.256331][T31456] netlink: 'syz.0.9023': attribute type 27 has an invalid length. [ 1686.266040][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1686.284967][T31456] netlink: 'syz.0.9023': attribute type 3 has an invalid length. [ 1686.293065][T31456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9023'. [ 1686.316078][T31377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1686.346050][T31097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1686.553312][T31462] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.9024'. [ 1686.828982][T31474] netlink: 'syz.0.9027': attribute type 10 has an invalid length. [ 1686.898495][T31474] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1687.018468][T31484] netlink: 'syz.4.9026': attribute type 13 has an invalid length. [ 1687.115772][T31484] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9026'. [ 1687.239343][T31484] erspan0: refused to change device tx_queue_len [ 1687.351650][T31097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1687.365717][T31491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9031'. [ 1687.409370][T31381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1687.419783][T31381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1687.596243][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1687.621962][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1687.758635][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1687.805879][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1687.838461][T31097] device veth0_vlan entered promiscuous mode [ 1687.888862][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1687.916676][T31392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1687.951613][T31097] device veth1_vlan entered promiscuous mode [ 1688.114767][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1688.130700][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1688.168689][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1688.195876][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1688.248444][T31097] device veth0_macvtap entered promiscuous mode [ 1688.272043][T31513] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.9036'. [ 1688.310136][T31097] device veth1_macvtap entered promiscuous mode [ 1688.367353][T31513] netlink: 'syz.4.9036': attribute type 27 has an invalid length. [ 1688.406809][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.419484][T31513] netlink: 'syz.4.9036': attribute type 3 has an invalid length. [ 1688.430162][T31513] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9036'. [ 1688.447155][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.463234][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.476782][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.495045][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.519401][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.554336][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.589641][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.624709][T31097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.649536][T31402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1688.672731][T31402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1688.699383][T31402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1688.730086][T31402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1688.764604][T31516] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.9037'. [ 1688.793554][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1688.836270][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.895844][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1688.948503][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.994992][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.045574][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.067177][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.092952][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.131108][T31097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1689.152999][T31402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1689.176700][T31402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1689.196122][T31097] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.229063][T31097] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.245186][T31097] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.254395][T31097] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.449190][T31532] device syzkaller0 entered promiscuous mode [ 1689.603026][T31541] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.9043'. [ 1689.715222][T31548] netlink: 'syz.2.9046': attribute type 21 has an invalid length. [ 1692.215429][T31402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1692.236890][T31402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1692.281623][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1692.355949][T31395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1692.371860][T31395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1692.455137][T31395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1692.750939][T31596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8939'. [ 1692.808961][T31601] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9054'. [ 1692.843765][T31596] device caif0 entered promiscuous mode [ 1692.883495][T31596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1692.886007][T31601] netlink: 'syz.2.9054': attribute type 27 has an invalid length. [ 1692.955242][T31601] netlink: 'syz.2.9054': attribute type 3 has an invalid length. [ 1692.988003][T31601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9054'. [ 1694.617966][T31635] netlink: 'syz.3.9061': attribute type 21 has an invalid length. [ 1694.676811][T31635] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9061'. [ 1694.727389][T31635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9061'. [ 1695.526092][T31658] netlink: 'syz.3.9068': attribute type 21 has an invalid length. [ 1695.557853][T31658] netlink: 'syz.3.9068': attribute type 6 has an invalid length. [ 1695.615362][T31658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9068'. [ 1695.665850][T31665] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9070'. [ 1695.953715][T31672] netlink: 'syz.0.9069': attribute type 39 has an invalid length. [ 1697.295022][T31698] netlink: 'syz.1.9077': attribute type 21 has an invalid length. [ 1697.303443][T31698] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9077'. [ 1697.343409][T31698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9077'. [ 1697.707695][T31712] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9083'. [ 1698.414986][T31722] netlink: 'syz.2.9085': attribute type 10 has an invalid length. [ 1700.142377][T31761] netlink: 'syz.4.9095': attribute type 10 has an invalid length. [ 1700.209840][T31761] team0: Device vxcan1 is of different type [ 1700.297304][T31768] netlink: 'syz.1.9097': attribute type 1 has an invalid length. [ 1700.331946][T31768] netlink: 'syz.1.9097': attribute type 1 has an invalid length. [ 1700.427252][T31768] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.9097'. [ 1700.912940][T31784] netlink: 'syz.1.9102': attribute type 3 has an invalid length. [ 1700.935157][T31784] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9102'. [ 1700.974377][T31785] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9103'. [ 1701.762802][T31806] netlink: 'syz.0.9111': attribute type 4 has an invalid length. [ 1701.838679][T31806] netlink: 'syz.0.9111': attribute type 8 has an invalid length. [ 1701.879609][T31806] netlink: 193092 bytes leftover after parsing attributes in process `syz.0.9111'. [ 1701.965421][T31814] netlink: 'syz.4.9113': attribute type 3 has an invalid length. [ 1701.995480][T31814] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9113'. [ 1702.395646][T31820] netlink: 'syz.0.9116': attribute type 16 has an invalid length. [ 1702.417711][T31820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9116'. [ 1702.496414][T31819] delete_channel: no stack [ 1702.818345][T31828] device syzkaller0 entered promiscuous mode [ 1703.234551][T31845] FAULT_INJECTION: forcing a failure. [ 1703.234551][T31845] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.257796][T31845] CPU: 1 PID: 31845 Comm: syz.0.9127 Not tainted syzkaller #0 [ 1703.265421][T31845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1703.275614][T31845] Call Trace: [ 1703.278964][T31845] [ 1703.281950][T31845] dump_stack_lvl+0x188/0x24e [ 1703.286716][T31845] ? show_regs_print_info+0x12/0x12 [ 1703.291995][T31845] ? load_image+0x400/0x400 [ 1703.296589][T31845] ? __might_sleep+0xd0/0xd0 [ 1703.301243][T31845] ? __lock_acquire+0x7d10/0x7d10 [ 1703.306346][T31845] should_fail_ex+0x399/0x4d0 [ 1703.311085][T31845] should_failslab+0x5/0x20 [ 1703.315622][T31845] slab_pre_alloc_hook+0x59/0x310 [ 1703.320704][T31845] kmem_cache_alloc_node+0x5a/0x320 [ 1703.325994][T31845] ? __alloc_skb+0xfc/0x7e0 [ 1703.330560][T31845] __alloc_skb+0xfc/0x7e0 [ 1703.334960][T31845] alloc_skb_with_frags+0xa7/0x710 [ 1703.340148][T31845] ? verify_lock_unused+0x140/0x140 [ 1703.345429][T31845] sock_alloc_send_pskb+0x87f/0x9a0 [ 1703.350716][T31845] ? sock_kzfree_s+0x50/0x50 [ 1703.355351][T31845] ? do_raw_spin_lock+0x128/0x2f0 [ 1703.360420][T31845] ? __rwlock_init+0x140/0x140 [ 1703.365227][T31845] ? do_raw_spin_unlock+0x11d/0x230 [ 1703.370475][T31845] unix_dgram_sendmsg+0x539/0x16e0 [ 1703.375651][T31845] ? is_dynamic_key+0x260/0x260 [ 1703.380560][T31845] ? aa_sk_perm+0x81f/0x950 [ 1703.385127][T31845] ? unix_dgram_poll+0x680/0x680 [ 1703.390128][T31845] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1703.396609][T31845] ? aa_sock_msg_perm+0x94/0x150 [ 1703.401589][T31845] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 1703.407194][T31845] ? unix_dgram_peer_wake_me+0x430/0x430 [ 1703.412880][T31845] ____sys_sendmsg+0x5be/0x970 [ 1703.417727][T31845] ? __sys_sendmsg_sock+0x30/0x30 [ 1703.422792][T31845] ? __import_iovec+0x315/0x500 [ 1703.427702][T31845] ? import_iovec+0x6f/0xa0 [ 1703.432251][T31845] ___sys_sendmsg+0x2a2/0x360 [ 1703.436983][T31845] ? __sys_sendmsg+0x290/0x290 [ 1703.441865][T31845] ? __lock_acquire+0x7d10/0x7d10 [ 1703.447007][T31845] __se_sys_sendmsg+0x1bb/0x2a0 [ 1703.451916][T31845] ? __x64_sys_sendmsg+0x80/0x80 [ 1703.456952][T31845] ? lockdep_hardirqs_on+0x94/0x140 [ 1703.462193][T31845] do_syscall_64+0x4c/0xa0 [ 1703.466658][T31845] ? clear_bhb_loop+0x60/0xb0 [ 1703.471375][T31845] ? clear_bhb_loop+0x60/0xb0 [ 1703.476094][T31845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1703.482052][T31845] RIP: 0033:0x7fda54b9ce59 [ 1703.486508][T31845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.506159][T31845] RSP: 002b:00007fda55a38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1703.514652][T31845] RAX: ffffffffffffffda RBX: 00007fda54e15fa0 RCX: 00007fda54b9ce59 [ 1703.522662][T31845] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000007 [ 1703.530667][T31845] RBP: 00007fda55a38090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.538679][T31845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.546688][T31845] R13: 00007fda54e16038 R14: 00007fda54e15fa0 R15: 00007ffd00078d58 [ 1703.554745][T31845] [ 1704.402858][T31846] delete_channel: no stack [ 1706.389405][T31847] netlink: 'syz.1.9126': attribute type 27 has an invalid length. [ 1706.405001][T31859] netlink: 'syz.0.9129': attribute type 10 has an invalid length. [ 1706.456275][T31859] team0: Device vxcan1 is of different type [ 1706.615022][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 1706.650717][T31863] device syzkaller0 entered promiscuous mode [ 1706.686013][T31869] netlink: 'syz.1.9133': attribute type 10 has an invalid length. [ 1706.693988][T31869] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9133'. [ 1707.026830][T31884] FAULT_INJECTION: forcing a failure. [ 1707.026830][T31884] name failslab, interval 1, probability 0, space 0, times 0 [ 1707.050507][T31884] CPU: 1 PID: 31884 Comm: syz.0.9138 Not tainted syzkaller #0 [ 1707.058083][T31884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1707.068191][T31884] Call Trace: [ 1707.071543][T31884] [ 1707.074517][T31884] dump_stack_lvl+0x188/0x24e [ 1707.079268][T31884] ? show_regs_print_info+0x12/0x12 [ 1707.084540][T31884] ? load_image+0x400/0x400 [ 1707.089137][T31884] ? __might_sleep+0xd0/0xd0 [ 1707.093779][T31884] ? __lock_acquire+0x7d10/0x7d10 [ 1707.098873][T31884] should_fail_ex+0x399/0x4d0 [ 1707.103623][T31884] should_failslab+0x5/0x20 [ 1707.108246][T31884] slab_pre_alloc_hook+0x59/0x310 [ 1707.113342][T31884] ? apparmor_sk_alloc_security+0x74/0x100 [ 1707.119215][T31884] __kmem_cache_alloc_node+0x4f/0x260 [ 1707.124632][T31884] ? apparmor_sk_alloc_security+0x74/0x100 [ 1707.130488][T31884] kmalloc_trace+0x26/0xe0 [ 1707.134974][T31884] apparmor_sk_alloc_security+0x74/0x100 [ 1707.140653][T31884] security_sk_alloc+0x6a/0xa0 [ 1707.145470][T31884] sk_prot_alloc+0x101/0x210 [ 1707.150103][T31884] ? sk_alloc+0x20/0x340 [ 1707.154384][T31884] sk_alloc+0x36/0x340 [ 1707.158505][T31884] ? bpf_ctx_init+0x163/0x1a0 [ 1707.163231][T31884] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1707.168819][T31884] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1707.174235][T31884] ? __fget_files+0x28/0x4b0 [ 1707.178902][T31884] ? __fget_files+0x43d/0x4b0 [ 1707.183674][T31884] ? cpu_online+0xa0/0xa0 [ 1707.188060][T31884] bpf_prog_test_run+0x31e/0x390 [ 1707.193044][T31884] __sys_bpf+0x62b/0x780 [ 1707.197351][T31884] ? bpf_link_show_fdinfo+0x380/0x380 [ 1707.202800][T31884] ? lock_chain_count+0x20/0x20 [ 1707.207721][T31884] __x64_sys_bpf+0x78/0x90 [ 1707.212182][T31884] do_syscall_64+0x4c/0xa0 [ 1707.216655][T31884] ? clear_bhb_loop+0x60/0xb0 [ 1707.221364][T31884] ? clear_bhb_loop+0x60/0xb0 [ 1707.226079][T31884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1707.232017][T31884] RIP: 0033:0x7fda54b9ce59 [ 1707.236481][T31884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1707.256127][T31884] RSP: 002b:00007fda55a38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1707.264630][T31884] RAX: ffffffffffffffda RBX: 00007fda54e15fa0 RCX: 00007fda54b9ce59 [ 1707.272629][T31884] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1707.280631][T31884] RBP: 00007fda55a38090 R08: 0000000000000000 R09: 0000000000000000 [ 1707.288630][T31884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1707.296637][T31884] R13: 00007fda54e16038 R14: 00007fda54e15fa0 R15: 00007ffd00078d58 [ 1707.304666][T31884] [ 1707.795023][T31887] netlink: 'syz.2.9139': attribute type 10 has an invalid length. [ 1707.807361][T31887] team0: Port device dummy0 added [ 1707.815733][T31888] netlink: 'syz.2.9139': attribute type 10 has an invalid length. [ 1707.855489][T31888] team0: Port device dummy0 removed [ 1709.974979][T31894] netlink: 'syz.2.9142': attribute type 10 has an invalid length. [ 1709.992645][T31894] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1710.193880][T31897] device syzkaller0 entered promiscuous mode [ 1710.665049][T31919] FAULT_INJECTION: forcing a failure. [ 1710.665049][T31919] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.689475][T31919] CPU: 1 PID: 31919 Comm: syz.1.9151 Not tainted syzkaller #0 [ 1710.697017][T31919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1710.707123][T31919] Call Trace: [ 1710.710421][T31919] [ 1710.713366][T31919] dump_stack_lvl+0x188/0x24e [ 1710.718087][T31919] ? show_regs_print_info+0x12/0x12 [ 1710.723316][T31919] ? load_image+0x400/0x400 [ 1710.727840][T31919] ? __might_sleep+0xd0/0xd0 [ 1710.732499][T31919] ? __lock_acquire+0x7d10/0x7d10 [ 1710.737581][T31919] should_fail_ex+0x399/0x4d0 [ 1710.742302][T31919] should_failslab+0x5/0x20 [ 1710.746826][T31919] slab_pre_alloc_hook+0x59/0x310 [ 1710.751889][T31919] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1710.757459][T31919] __kmem_cache_alloc_node+0x4f/0x260 [ 1710.762862][T31919] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1710.768450][T31919] __kmalloc+0xa0/0x240 [ 1710.772658][T31919] bpf_prog_test_run_skb+0x234/0x12a0 [ 1710.778072][T31919] ? __fget_files+0x28/0x4b0 [ 1710.782712][T31919] ? __fget_files+0x28/0x4b0 [ 1710.787343][T31919] ? __fget_files+0x43d/0x4b0 [ 1710.792068][T31919] ? cpu_online+0xa0/0xa0 [ 1710.796465][T31919] bpf_prog_test_run+0x31e/0x390 [ 1710.801458][T31919] __sys_bpf+0x62b/0x780 [ 1710.805759][T31919] ? bpf_link_show_fdinfo+0x380/0x380 [ 1710.811181][T31919] ? lock_chain_count+0x20/0x20 [ 1710.816062][T31919] __x64_sys_bpf+0x78/0x90 [ 1710.820501][T31919] do_syscall_64+0x4c/0xa0 [ 1710.824942][T31919] ? clear_bhb_loop+0x60/0xb0 [ 1710.829636][T31919] ? clear_bhb_loop+0x60/0xb0 [ 1710.834442][T31919] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1710.840355][T31919] RIP: 0033:0x7fd33079ce59 [ 1710.844789][T31919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.864413][T31919] RSP: 002b:00007fd3316b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1710.872847][T31919] RAX: ffffffffffffffda RBX: 00007fd330a15fa0 RCX: 00007fd33079ce59 [ 1710.880831][T31919] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1710.888823][T31919] RBP: 00007fd3316b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.896811][T31919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.904795][T31919] R13: 00007fd330a16038 R14: 00007fd330a15fa0 R15: 00007ffca2019898 [ 1710.912834][T31919] [ 1714.379359][T31962] FAULT_INJECTION: forcing a failure. [ 1714.379359][T31962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1714.465203][T31962] CPU: 1 PID: 31962 Comm: syz.3.9164 Not tainted syzkaller #0 [ 1714.472759][T31962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1714.482844][T31962] Call Trace: [ 1714.486144][T31962] [ 1714.489092][T31962] dump_stack_lvl+0x188/0x24e [ 1714.493801][T31962] ? show_regs_print_info+0x12/0x12 [ 1714.499028][T31962] ? load_image+0x400/0x400 [ 1714.503558][T31962] ? __lock_acquire+0x7d10/0x7d10 [ 1714.508626][T31962] ? __virt_addr_valid+0x188/0x540 [ 1714.513772][T31962] should_fail_ex+0x399/0x4d0 [ 1714.518467][T31962] _copy_from_user+0x2c/0x170 [ 1714.523176][T31962] bpf_test_init+0xde/0x140 [ 1714.527701][T31962] bpf_prog_test_run_xdp+0x484/0xf10 [ 1714.533032][T31962] ? dev_put+0x80/0x80 [ 1714.537131][T31962] ? dev_put+0x80/0x80 [ 1714.541224][T31962] bpf_prog_test_run+0x31e/0x390 [ 1714.546188][T31962] __sys_bpf+0x62b/0x780 [ 1714.550471][T31962] ? bpf_link_show_fdinfo+0x380/0x380 [ 1714.555879][T31962] ? lock_chain_count+0x20/0x20 [ 1714.560771][T31962] __x64_sys_bpf+0x78/0x90 [ 1714.565217][T31962] do_syscall_64+0x4c/0xa0 [ 1714.569663][T31962] ? clear_bhb_loop+0x60/0xb0 [ 1714.574390][T31962] ? clear_bhb_loop+0x60/0xb0 [ 1714.579094][T31962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1714.585011][T31962] RIP: 0033:0x7fa97ef9ce59 [ 1714.589462][T31962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.609087][T31962] RSP: 002b:00007fa97fdc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1714.617526][T31962] RAX: ffffffffffffffda RBX: 00007fa97f215fa0 RCX: 00007fa97ef9ce59 [ 1714.625563][T31962] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1714.633554][T31962] RBP: 00007fa97fdc5090 R08: 0000000000000000 R09: 0000000000000000 [ 1714.641549][T31962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1714.649624][T31962] R13: 00007fa97f216038 R14: 00007fa97f215fa0 R15: 00007ffdb1bfc628 [ 1714.657626][T31962] [ 1715.153574][T31978] device syzkaller0 entered promiscuous mode [ 1715.175927][T31973] netlink: 'syz.4.9169': attribute type 39 has an invalid length. [ 1718.757923][T32026] netlink: 'syz.1.9188': attribute type 10 has an invalid length. [ 1719.626347][T32026] team0: Port device dummy0 added [ 1720.694141][T32056] netlink: 'syz.4.9198': attribute type 1 has an invalid length. [ 1720.709545][T32056] netlink: 'syz.4.9198': attribute type 1 has an invalid length. [ 1720.719343][T32056] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.9198'. [ 1722.006329][T32093] netlink: 184 bytes leftover after parsing attributes in process `syz.4.9211'. [ 1722.029137][T32094] netlink: 'syz.2.9212': attribute type 16 has an invalid length. [ 1722.038869][T32088] delete_channel: no stack [ 1722.062210][T32094] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9212'. [ 1722.088480][T32092] delete_channel: no stack [ 1722.313762][T32102] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9215'. [ 1722.580225][T32111] netlink: 'syz.0.9218': attribute type 28 has an invalid length. [ 1722.625168][T32114] netlink: 'syz.2.9217': attribute type 39 has an invalid length. [ 1724.881416][T32151] netlink: 'syz.2.9232': attribute type 39 has an invalid length. [ 1725.104129][T32155] netlink: 'syz.3.9234': attribute type 3 has an invalid length. [ 1725.149934][T32155] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9234'. [ 1725.493578][T32173] delete_channel: no stack [ 1726.009143][T32195] netlink: 'syz.2.9248': attribute type 39 has an invalid length. [ 1726.992907][T32214] FAULT_INJECTION: forcing a failure. [ 1726.992907][T32214] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.012526][T32214] CPU: 0 PID: 32214 Comm: syz.1.9254 Not tainted syzkaller #0 [ 1727.020064][T32214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1727.030169][T32214] Call Trace: [ 1727.033491][T32214] [ 1727.036468][T32214] dump_stack_lvl+0x188/0x24e [ 1727.041221][T32214] ? show_regs_print_info+0x12/0x12 [ 1727.046480][T32214] ? load_image+0x400/0x400 [ 1727.051036][T32214] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1727.057134][T32214] should_fail_ex+0x399/0x4d0 [ 1727.061890][T32214] should_failslab+0x5/0x20 [ 1727.066442][T32214] slab_pre_alloc_hook+0x59/0x310 [ 1727.071527][T32214] kmem_cache_alloc+0x56/0x2f0 [ 1727.076396][T32214] ? __build_skb+0x2a/0x3c0 [ 1727.080970][T32214] __build_skb+0x2a/0x3c0 [ 1727.085372][T32214] build_skb+0x1e/0x230 [ 1727.089591][T32214] bpf_prog_test_run_skb+0x37e/0x12a0 [ 1727.095026][T32214] ? __fget_files+0x28/0x4b0 [ 1727.099669][T32214] ? __fget_files+0x43d/0x4b0 [ 1727.104420][T32214] ? cpu_online+0xa0/0xa0 [ 1727.108806][T32214] bpf_prog_test_run+0x31e/0x390 [ 1727.113819][T32214] __sys_bpf+0x62b/0x780 [ 1727.118143][T32214] ? bpf_link_show_fdinfo+0x380/0x380 [ 1727.123609][T32214] ? lock_chain_count+0x20/0x20 [ 1727.128549][T32214] __x64_sys_bpf+0x78/0x90 [ 1727.133023][T32214] do_syscall_64+0x4c/0xa0 [ 1727.137493][T32214] ? clear_bhb_loop+0x60/0xb0 [ 1727.142221][T32214] ? clear_bhb_loop+0x60/0xb0 [ 1727.147002][T32214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1727.152948][T32214] RIP: 0033:0x7fd33079ce59 [ 1727.157413][T32214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1727.177100][T32214] RSP: 002b:00007fd3316b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1727.185582][T32214] RAX: ffffffffffffffda RBX: 00007fd330a15fa0 RCX: 00007fd33079ce59 [ 1727.193626][T32214] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1727.201681][T32214] RBP: 00007fd3316b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1727.209728][T32214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1727.217751][T32214] R13: 00007fd330a16038 R14: 00007fd330a15fa0 R15: 00007ffca2019898 [ 1727.225795][T32214] [ 1727.671854][T32230] netlink: 'syz.4.9261': attribute type 29 has an invalid length. [ 1727.752576][T32230] netlink: 'syz.4.9261': attribute type 29 has an invalid length. [ 1728.772316][T32253] device syzkaller0 entered promiscuous mode [ 1728.791760][T32247] netlink: 'syz.0.9265': attribute type 39 has an invalid length. [ 1729.418455][T32261] netlink: 'syz.1.9269': attribute type 21 has an invalid length. [ 1729.445079][T32263] netlink: 'syz.1.9269': attribute type 10 has an invalid length. [ 1729.609989][T32271] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9272'. [ 1729.653124][T32271] netlink: 'syz.4.9272': attribute type 1 has an invalid length. [ 1730.152500][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.159097][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.214695][T32268] netlink: 'syz.0.9271': attribute type 10 has an invalid length. [ 1732.222893][T32276] netlink: 'syz.1.9273': attribute type 21 has an invalid length. [ 1732.245077][T32292] netlink: 'syz.4.9278': attribute type 21 has an invalid length. [ 1732.265114][T32294] netlink: 'syz.4.9278': attribute type 10 has an invalid length. [ 1732.445003][T32298] netlink: 'syz.2.9281': attribute type 39 has an invalid length. [ 1732.810034][T32312] FAULT_INJECTION: forcing a failure. [ 1732.810034][T32312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1732.827873][T32312] CPU: 0 PID: 32312 Comm: syz.1.9284 Not tainted syzkaller #0 [ 1732.835516][T32312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1732.845609][T32312] Call Trace: [ 1732.848924][T32312] [ 1732.851888][T32312] dump_stack_lvl+0x188/0x24e [ 1732.856623][T32312] ? show_regs_print_info+0x12/0x12 [ 1732.861876][T32312] ? load_image+0x400/0x400 [ 1732.866477][T32312] ? __lock_acquire+0x7d10/0x7d10 [ 1732.871555][T32312] should_fail_ex+0x399/0x4d0 [ 1732.876274][T32312] _copy_from_user+0x2c/0x170 [ 1732.881015][T32312] bpf_prog_test_run_skb+0x262/0x12a0 [ 1732.886440][T32312] ? __fget_files+0x28/0x4b0 [ 1732.891076][T32312] ? __fget_files+0x28/0x4b0 [ 1732.895742][T32312] ? __fget_files+0x43d/0x4b0 [ 1732.900505][T32312] ? cpu_online+0xa0/0xa0 [ 1732.904873][T32312] bpf_prog_test_run+0x31e/0x390 [ 1732.909858][T32312] __sys_bpf+0x62b/0x780 [ 1732.914157][T32312] ? bpf_link_show_fdinfo+0x380/0x380 [ 1732.919593][T32312] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1732.925816][T32312] __x64_sys_bpf+0x78/0x90 [ 1732.930291][T32312] do_syscall_64+0x4c/0xa0 [ 1732.934770][T32312] ? clear_bhb_loop+0x60/0xb0 [ 1732.939486][T32312] ? clear_bhb_loop+0x60/0xb0 [ 1732.944213][T32312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1732.950160][T32312] RIP: 0033:0x7fd33079ce59 [ 1732.954619][T32312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1732.974330][T32312] RSP: 002b:00007fd3316b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1732.982796][T32312] RAX: ffffffffffffffda RBX: 00007fd330a15fa0 RCX: 00007fd33079ce59 [ 1732.990798][T32312] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1732.998789][T32312] RBP: 00007fd3316b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1733.006784][T32312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1733.014796][T32312] R13: 00007fd330a16038 R14: 00007fd330a15fa0 R15: 00007ffca2019898 [ 1733.022823][T32312] [ 1733.572584][T32324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9288'. [ 1733.616905][T32324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9288'. [ 1733.734166][T32330] netlink: 'syz.2.9291': attribute type 29 has an invalid length. [ 1733.773240][T32330] netlink: 'syz.2.9291': attribute type 29 has an invalid length. [ 1733.812948][T32332] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9289'. [ 1733.849656][T32333] netlink: 'syz.2.9291': attribute type 29 has an invalid length. [ 1733.871140][T32333] netlink: 'syz.2.9291': attribute type 29 has an invalid length. [ 1733.896297][T32333] netlink: 'syz.2.9291': attribute type 29 has an invalid length. [ 1734.467109][T32339] device hsr_slave_1 left promiscuous mode [ 1734.592062][T32344] FAULT_INJECTION: forcing a failure. [ 1734.592062][T32344] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.630551][T32344] CPU: 1 PID: 32344 Comm: syz.4.9296 Not tainted syzkaller #0 [ 1734.638112][T32344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1734.648216][T32344] Call Trace: [ 1734.651553][T32344] [ 1734.654528][T32344] dump_stack_lvl+0x188/0x24e [ 1734.659275][T32344] ? show_regs_print_info+0x12/0x12 [ 1734.664526][T32344] ? load_image+0x400/0x400 [ 1734.669077][T32344] ? __might_sleep+0xd0/0xd0 [ 1734.673723][T32344] ? __lock_acquire+0x7d10/0x7d10 [ 1734.678800][T32344] should_fail_ex+0x399/0x4d0 [ 1734.683530][T32344] should_failslab+0x5/0x20 [ 1734.688069][T32344] slab_pre_alloc_hook+0x59/0x310 [ 1734.693139][T32344] ? __lock_acquire+0x7d10/0x7d10 [ 1734.698214][T32344] ? kvmalloc_node+0x6c/0x180 [ 1734.702935][T32344] __kmem_cache_alloc_node+0x4f/0x260 [ 1734.708372][T32344] ? schedule_delayed_monitor_work+0x160/0x160 [ 1734.714596][T32344] ? kvmalloc_node+0x6c/0x180 [ 1734.719333][T32344] __kmalloc_node+0xa0/0x240 [ 1734.724043][T32344] kvmalloc_node+0x6c/0x180 [ 1734.728600][T32344] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 1734.734025][T32344] ? 0xffffffffa00041c0 [ 1734.738215][T32344] ? text_poke_copy+0x79/0x90 [ 1734.742951][T32344] ? 0xffffffffa00041c0 [ 1734.747335][T32344] ? 0xffffffffa00041c0 [ 1734.751535][T32344] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1734.757494][T32344] ? 0xffffffffa00041c0 [ 1734.761701][T32344] ? xdp_convert_md_to_buff+0x330/0x330 [ 1734.767338][T32344] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1734.773645][T32344] ? bpf_test_init+0x119/0x140 [ 1734.778485][T32344] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1734.783996][T32344] bpf_prog_test_run_xdp+0x736/0xf10 [ 1734.789352][T32344] ? dev_put+0x80/0x80 [ 1734.793488][T32344] ? dev_put+0x80/0x80 [ 1734.797621][T32344] bpf_prog_test_run+0x31e/0x390 [ 1734.802614][T32344] __sys_bpf+0x62b/0x780 [ 1734.806913][T32344] ? bpf_link_show_fdinfo+0x380/0x380 [ 1734.812348][T32344] ? lock_chain_count+0x20/0x20 [ 1734.817264][T32344] __x64_sys_bpf+0x78/0x90 [ 1734.821729][T32344] do_syscall_64+0x4c/0xa0 [ 1734.826200][T32344] ? clear_bhb_loop+0x60/0xb0 [ 1734.830919][T32344] ? clear_bhb_loop+0x60/0xb0 [ 1734.835650][T32344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1734.841613][T32344] RIP: 0033:0x7f232ff9ce59 [ 1734.846069][T32344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1734.865721][T32344] RSP: 002b:00007f2330e44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1734.874188][T32344] RAX: ffffffffffffffda RBX: 00007f2330215fa0 RCX: 00007f232ff9ce59 [ 1734.882219][T32344] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1734.890240][T32344] RBP: 00007f2330e44090 R08: 0000000000000000 R09: 0000000000000000 [ 1734.898266][T32344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.906276][T32344] R13: 00007f2330216038 R14: 00007f2330215fa0 R15: 00007ffc4d1c7ba8 [ 1734.914315][T32344] [ 1736.140226][T32389] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9313'. [ 1737.330496][T32445] bond0: (slave dummy0): Releasing backup interface [ 1737.337660][T12955] Bluetooth: hci3: command 0x0406 tx timeout [ 1737.380118][T32445] team0: Port device dummy0 added [ 1741.553245][T32491] validate_nla: 6 callbacks suppressed [ 1741.553263][T32491] netlink: 'syz.2.9344': attribute type 1 has an invalid length. [ 1741.567536][T32491] netlink: 'syz.2.9344': attribute type 1 has an invalid length. [ 1741.575372][T32491] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.9344'. [ 1747.496643][T32583] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9374'. [ 1747.802452][T32604] netlink: 'syz.3.9380': attribute type 27 has an invalid length. [ 1747.905606][T32599] delete_channel: no stack [ 1748.482968][T32625] FAULT_INJECTION: forcing a failure. [ 1748.482968][T32625] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.564928][T32625] CPU: 1 PID: 32625 Comm: syz.3.9390 Not tainted syzkaller #0 [ 1748.572569][T32625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1748.582677][T32625] Call Trace: [ 1748.586001][T32625] [ 1748.588989][T32625] dump_stack_lvl+0x188/0x24e [ 1748.593732][T32625] ? show_regs_print_info+0x12/0x12 [ 1748.598991][T32625] ? load_image+0x400/0x400 [ 1748.603577][T32625] should_fail_ex+0x399/0x4d0 [ 1748.608326][T32625] should_failslab+0x5/0x20 [ 1748.612875][T32625] slab_pre_alloc_hook+0x59/0x310 [ 1748.617976][T32625] kmem_cache_alloc+0x56/0x2f0 [ 1748.622790][T32625] ? skb_clone+0x1e7/0x370 [ 1748.627288][T32625] skb_clone+0x1e7/0x370 [ 1748.631601][T32625] bpf_clone_redirect+0x163/0x4a0 [ 1748.636713][T32625] bpf_prog_e97454e6a39c6b06+0x59/0x5e [ 1748.642227][T32625] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1748.648263][T32625] ? lock_chain_count+0x20/0x20 [ 1748.653170][T32625] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1748.659480][T32625] ? lockdep_hardirqs_on+0x94/0x140 [ 1748.664714][T32625] ? ktime_get+0x7b/0x270 [ 1748.669069][T32625] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1748.675336][T32625] ? ktime_get_real_ts64+0x440/0x440 [ 1748.680653][T32625] ? read_lock_is_recursive+0x10/0x10 [ 1748.686074][T32625] ? __cant_sleep+0x220/0x220 [ 1748.690793][T32625] ? ktime_get+0x247/0x270 [ 1748.695261][T32625] bpf_test_run+0x2b6/0x830 [ 1748.699842][T32625] ? convert___skb_to_skb+0x580/0x580 [ 1748.705253][T32625] ? eth_get_headlen+0x200/0x200 [ 1748.710211][T32625] ? __build_skb+0x257/0x3c0 [ 1748.714858][T32625] ? convert___skb_to_skb+0x3d/0x580 [ 1748.720182][T32625] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 1748.725610][T32625] ? cpu_online+0xa0/0xa0 [ 1748.729974][T32625] bpf_prog_test_run+0x31e/0x390 [ 1748.734963][T32625] __sys_bpf+0x62b/0x780 [ 1748.739245][T32625] ? bpf_link_show_fdinfo+0x380/0x380 [ 1748.744673][T32625] ? lock_chain_count+0x20/0x20 [ 1748.749577][T32625] __x64_sys_bpf+0x78/0x90 [ 1748.754031][T32625] do_syscall_64+0x4c/0xa0 [ 1748.758508][T32625] ? clear_bhb_loop+0x60/0xb0 [ 1748.763216][T32625] ? clear_bhb_loop+0x60/0xb0 [ 1748.767940][T32625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1748.773863][T32625] RIP: 0033:0x7fa97ef9ce59 [ 1748.778313][T32625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.797946][T32625] RSP: 002b:00007fa97fdc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1748.806387][T32625] RAX: ffffffffffffffda RBX: 00007fa97f215fa0 RCX: 00007fa97ef9ce59 [ 1748.814391][T32625] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1748.822392][T32625] RBP: 00007fa97fdc5090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.830409][T32625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.838413][T32625] R13: 00007fa97f216038 R14: 00007fa97f215fa0 R15: 00007ffdb1bfc628 [ 1748.846448][T32625] [ 1751.497823][T32667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9405'. [ 1751.943313][T32683] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.9411'. [ 1752.859074][T32683] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1752.885100][T32683] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1752.905703][T32683] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1753.072476][T32690] device syzkaller0 entered promiscuous mode [ 1753.270039][T32701] netlink: 'syz.3.9416': attribute type 21 has an invalid length. [ 1753.824227][T32723] FAULT_INJECTION: forcing a failure. [ 1753.824227][T32723] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.838047][T32723] CPU: 0 PID: 32723 Comm: syz.3.9420 Not tainted syzkaller #0 [ 1753.845564][T32723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1753.855640][T32723] Call Trace: [ 1753.858933][T32723] [ 1753.861881][T32723] dump_stack_lvl+0x188/0x24e [ 1753.866593][T32723] ? show_regs_print_info+0x12/0x12 [ 1753.871830][T32723] ? load_image+0x400/0x400 [ 1753.876369][T32723] ? __might_sleep+0xd0/0xd0 [ 1753.880978][T32723] ? __lock_acquire+0x7d10/0x7d10 [ 1753.886054][T32723] should_fail_ex+0x399/0x4d0 [ 1753.890754][T32723] should_failslab+0x5/0x20 [ 1753.895277][T32723] slab_pre_alloc_hook+0x59/0x310 [ 1753.900323][T32723] ? sk_prot_alloc+0xe7/0x210 [ 1753.905032][T32723] __kmem_cache_alloc_node+0x4f/0x260 [ 1753.910466][T32723] ? sk_prot_alloc+0xe7/0x210 [ 1753.915185][T32723] __kmalloc+0xa0/0x240 [ 1753.919386][T32723] sk_prot_alloc+0xe7/0x210 [ 1753.923916][T32723] ? sk_alloc+0x20/0x340 [ 1753.928182][T32723] sk_alloc+0x36/0x340 [ 1753.932284][T32723] ? bpf_ctx_init+0x163/0x1a0 [ 1753.936987][T32723] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1753.942558][T32723] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1753.947949][T32723] ? __fget_files+0x28/0x4b0 [ 1753.952585][T32723] ? __fget_files+0x43d/0x4b0 [ 1753.957300][T32723] ? cpu_online+0xa0/0xa0 [ 1753.961650][T32723] bpf_prog_test_run+0x31e/0x390 [ 1753.966624][T32723] __sys_bpf+0x62b/0x780 [ 1753.970900][T32723] ? bpf_link_show_fdinfo+0x380/0x380 [ 1753.976346][T32723] __x64_sys_bpf+0x78/0x90 [ 1753.980806][T32723] do_syscall_64+0x4c/0xa0 [ 1753.985259][T32723] ? clear_bhb_loop+0x60/0xb0 [ 1753.989971][T32723] ? clear_bhb_loop+0x60/0xb0 [ 1753.994680][T32723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1754.000598][T32723] RIP: 0033:0x7fa97ef9ce59 [ 1754.005032][T32723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1754.024673][T32723] RSP: 002b:00007fa97fdc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1754.033123][T32723] RAX: ffffffffffffffda RBX: 00007fa97f215fa0 RCX: 00007fa97ef9ce59 [ 1754.041156][T32723] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1754.049155][T32723] RBP: 00007fa97fdc5090 R08: 0000000000000000 R09: 0000000000000000 [ 1754.057146][T32723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1754.065134][T32723] R13: 00007fa97f216038 R14: 00007fa97f215fa0 R15: 00007ffdb1bfc628 [ 1754.073137][T32723] [ 1756.434500][T32752] FAULT_INJECTION: forcing a failure. [ 1756.434500][T32752] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.455111][T32752] CPU: 0 PID: 32752 Comm: syz.3.9431 Not tainted syzkaller #0 [ 1756.462651][T32752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1756.472751][T32752] Call Trace: [ 1756.476077][T32752] [ 1756.479054][T32752] dump_stack_lvl+0x188/0x24e [ 1756.483804][T32752] ? show_regs_print_info+0x12/0x12 [ 1756.489049][T32752] ? load_image+0x400/0x400 [ 1756.493583][T32752] ? __might_sleep+0xd0/0xd0 [ 1756.498210][T32752] ? __lock_acquire+0x7d10/0x7d10 [ 1756.503294][T32752] should_fail_ex+0x399/0x4d0 [ 1756.508017][T32752] should_failslab+0x5/0x20 [ 1756.512561][T32752] slab_pre_alloc_hook+0x59/0x310 [ 1756.517632][T32752] ? kvmalloc_node+0x6c/0x180 [ 1756.522371][T32752] __kmem_cache_alloc_node+0x4f/0x260 [ 1756.527788][T32752] ? kvmalloc_node+0x6c/0x180 [ 1756.532517][T32752] __kmalloc_node+0xa0/0x240 [ 1756.537168][T32752] kvmalloc_node+0x6c/0x180 [ 1756.541763][T32752] bpf_test_run_xdp_live+0x209/0x1a90 [ 1756.547194][T32752] ? 0xffffffffa00041c0 [ 1756.551398][T32752] ? text_poke_copy+0x79/0x90 [ 1756.556126][T32752] ? 0xffffffffa00041c0 [ 1756.560322][T32752] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1756.566338][T32752] ? 0xffffffffa00041c0 [ 1756.570553][T32752] ? xdp_convert_md_to_buff+0x330/0x330 [ 1756.576194][T32752] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1756.582492][T32752] ? bpf_test_init+0x119/0x140 [ 1756.587311][T32752] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1756.592815][T32752] bpf_prog_test_run_xdp+0x736/0xf10 [ 1756.598175][T32752] ? dev_put+0x80/0x80 [ 1756.602307][T32752] ? dev_put+0x80/0x80 [ 1756.606420][T32752] bpf_prog_test_run+0x31e/0x390 [ 1756.611412][T32752] __sys_bpf+0x62b/0x780 [ 1756.615710][T32752] ? bpf_link_show_fdinfo+0x380/0x380 [ 1756.621147][T32752] ? lock_chain_count+0x20/0x20 [ 1756.626053][T32752] __x64_sys_bpf+0x78/0x90 [ 1756.630521][T32752] do_syscall_64+0x4c/0xa0 [ 1756.634989][T32752] ? clear_bhb_loop+0x60/0xb0 [ 1756.639746][T32752] ? clear_bhb_loop+0x60/0xb0 [ 1756.644470][T32752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1756.650421][T32752] RIP: 0033:0x7fa97ef9ce59 [ 1756.654857][T32752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1756.674496][T32752] RSP: 002b:00007fa97fdc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1756.682938][T32752] RAX: ffffffffffffffda RBX: 00007fa97f215fa0 RCX: 00007fa97ef9ce59 [ 1756.690926][T32752] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1756.698914][T32752] RBP: 00007fa97fdc5090 R08: 0000000000000000 R09: 0000000000000000 [ 1756.706909][T32752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1756.714904][T32752] R13: 00007fa97f216038 R14: 00007fa97f215fa0 R15: 00007ffdb1bfc628 [ 1756.722933][T32752] [ 1756.857138][T32761] netlink: 'syz.2.9434': attribute type 10 has an invalid length. [ 1757.246929][ T310] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9442'. [ 1758.008863][ T328] netlink: 'syz.3.9449': attribute type 10 has an invalid length. [ 1758.499285][ T342] can: request_module (can-proto-0) failed. [ 1758.883211][ T334] netlink: 'syz.2.9452': attribute type 10 has an invalid length. [ 1759.035522][ T334] bond0: (slave dummy0): Releasing backup interface [ 1759.228559][ T334] team0: Port device dummy0 added [ 1759.243937][ T340] netlink: 'syz.4.9455': attribute type 39 has an invalid length. [ 1759.525108][ T340] device hsr_slave_1 left promiscuous mode [ 1760.321321][ T379] can: request_module (can-proto-0) failed. [ 1762.514038][ T415] can: request_module (can-proto-0) failed. [ 1762.945079][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 1765.521943][ T448] netlink: 'syz.1.9495': attribute type 27 has an invalid length. [ 1765.601506][ T447] delete_channel: no stack [ 1765.864156][ T471] netlink: 'syz.1.9501': attribute type 16 has an invalid length. [ 1765.892594][ T471] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9501'. [ 1765.958333][ T470] delete_channel: no stack [ 1766.206106][ T477] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.9503'. [ 1766.257699][ T477] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.9503'. [ 1766.642055][ T490] FAULT_INJECTION: forcing a failure. [ 1766.642055][ T490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1766.665140][ T490] CPU: 1 PID: 490 Comm: syz.1.9508 Not tainted syzkaller #0 [ 1766.672507][ T490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1766.682689][ T490] Call Trace: [ 1766.685992][ T490] [ 1766.688952][ T490] dump_stack_lvl+0x188/0x24e [ 1766.693673][ T490] ? show_regs_print_info+0x12/0x12 [ 1766.698941][ T490] ? load_image+0x400/0x400 [ 1766.703489][ T490] ? __lock_acquire+0x7d10/0x7d10 [ 1766.708555][ T490] should_fail_ex+0x399/0x4d0 [ 1766.713268][ T490] _copy_from_user+0x2c/0x170 [ 1766.717989][ T490] kstrtouint_from_user+0xda/0x170 [ 1766.723134][ T490] ? kstrtol_from_user+0x190/0x190 [ 1766.728293][ T490] proc_fail_nth_write+0x8b/0x200 [ 1766.733377][ T490] ? proc_fail_nth_read+0x220/0x220 [ 1766.738600][ T490] ? common_file_perm+0x171/0x1c0 [ 1766.743657][ T490] ? proc_fail_nth_read+0x220/0x220 [ 1766.748969][ T490] vfs_write+0x2e6/0xa30 [ 1766.753344][ T490] ? file_end_write+0x250/0x250 [ 1766.758224][ T490] ? __fget_files+0x28/0x4b0 [ 1766.762840][ T490] ? __fget_files+0x28/0x4b0 [ 1766.767459][ T490] ? __fget_files+0x43d/0x4b0 [ 1766.772198][ T490] ? __fdget_pos+0x2ae/0x360 [ 1766.776829][ T490] ? ksys_write+0x71/0x250 [ 1766.781306][ T490] ksys_write+0x14c/0x250 [ 1766.785678][ T490] ? __ia32_sys_read+0x80/0x80 [ 1766.790477][ T490] ? lockdep_hardirqs_on+0x94/0x140 [ 1766.795696][ T490] do_syscall_64+0x4c/0xa0 [ 1766.800143][ T490] ? clear_bhb_loop+0x60/0xb0 [ 1766.804843][ T490] ? clear_bhb_loop+0x60/0xb0 [ 1766.809577][ T490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1766.815490][ T490] RIP: 0033:0x7fd33075d68e [ 1766.819940][ T490] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1766.839571][ T490] RSP: 002b:00007fd3316b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1766.848006][ T490] RAX: ffffffffffffffda RBX: 00007fd3316b46c0 RCX: 00007fd33075d68e [ 1766.855998][ T490] RDX: 0000000000000001 RSI: 00007fd3316b40a0 RDI: 0000000000000009 [ 1766.863983][ T490] RBP: 00007fd3316b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1766.871966][ T490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1766.879973][ T490] R13: 00007fd330a16038 R14: 00007fd330a15fa0 R15: 00007ffca2019898 [ 1766.887980][ T490] [ 1767.868418][ T503] device syzkaller0 entered promiscuous mode [ 1768.092791][ T506] netlink: 'syz.0.9515': attribute type 39 has an invalid length. [ 1768.269313][ T523] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.9522'. [ 1768.643602][ T529] netlink: 'syz.4.9523': attribute type 3 has an invalid length. [ 1768.662541][ T529] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9523'. [ 1769.801639][ T530] delete_channel: no stack [ 1770.582039][ T523] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.9522'. [ 1770.594936][ T531] netlink: 'syz.0.9525': attribute type 27 has an invalid length. [ 1771.500256][ T561] netlink: 'syz.4.9537': attribute type 39 has an invalid length. [ 1772.139563][ T567] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.9539'. [ 1772.184215][ T567] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.9539'. [ 1772.761738][ T592] netlink: 'syz.1.9548': attribute type 10 has an invalid length. [ 1772.851636][ T593] netlink: 'syz.1.9548': attribute type 10 has an invalid length. [ 1773.146228][ T593] team0: Port device dummy0 removed [ 1773.382322][ T607] netlink: 'syz.4.9553': attribute type 39 has an invalid length. [ 1774.003894][ T634] netlink: 'syz.4.9564': attribute type 10 has an invalid length. [ 1774.405051][ T645] netlink: 'syz.4.9568': attribute type 10 has an invalid length. [ 1774.412959][ T645] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.9568'. [ 1774.612971][ T656] netlink: 'syz.0.9570': attribute type 21 has an invalid length. [ 1774.670985][ T656] netlink: 'syz.0.9570': attribute type 10 has an invalid length. [ 1774.696394][ T654] netlink: 'syz.3.9571': attribute type 39 has an invalid length. [ 1774.950111][ T654] device hsr_slave_1 left promiscuous mode [ 1775.173693][ T660] device syzkaller0 entered promiscuous mode [ 1775.335104][ T673] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.9576'. [ 1776.152514][ T697] FAULT_INJECTION: forcing a failure. [ 1776.152514][ T697] name failslab, interval 1, probability 0, space 0, times 0 [ 1776.175829][ T697] CPU: 0 PID: 697 Comm: syz.3.9584 Not tainted syzkaller #0 [ 1776.183187][ T697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1776.193280][ T697] Call Trace: [ 1776.196598][ T697] [ 1776.199563][ T697] dump_stack_lvl+0x188/0x24e [ 1776.204293][ T697] ? show_regs_print_info+0x12/0x12 [ 1776.209561][ T697] ? load_image+0x400/0x400 [ 1776.214106][ T697] ? __might_sleep+0xd0/0xd0 [ 1776.218732][ T697] ? __lock_acquire+0x7d10/0x7d10 [ 1776.223815][ T697] should_fail_ex+0x399/0x4d0 [ 1776.228534][ T697] should_failslab+0x5/0x20 [ 1776.233069][ T697] slab_pre_alloc_hook+0x59/0x310 [ 1776.238143][ T697] ? page_pool_create+0x6d/0x5c0 [ 1776.243126][ T697] __kmem_cache_alloc_node+0x4f/0x260 [ 1776.248556][ T697] ? page_pool_create+0x6d/0x5c0 [ 1776.253529][ T697] kmalloc_node_trace+0x22/0xe0 [ 1776.258435][ T697] page_pool_create+0x6d/0x5c0 [ 1776.263240][ T697] bpf_test_run_xdp_live+0x223/0x1a90 [ 1776.268651][ T697] ? 0xffffffffa00041c0 [ 1776.272839][ T697] ? text_poke_copy+0x79/0x90 [ 1776.277562][ T697] ? 0xffffffffa00041c0 [ 1776.281759][ T697] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1776.287706][ T697] ? 0xffffffffa00041c0 [ 1776.291900][ T697] ? xdp_convert_md_to_buff+0x330/0x330 [ 1776.297521][ T697] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1776.303819][ T697] ? bpf_test_init+0x119/0x140 [ 1776.308622][ T697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1776.314141][ T697] bpf_prog_test_run_xdp+0x736/0xf10 [ 1776.319486][ T697] ? dev_put+0x80/0x80 [ 1776.323611][ T697] ? dev_put+0x80/0x80 [ 1776.327723][ T697] bpf_prog_test_run+0x31e/0x390 [ 1776.332716][ T697] __sys_bpf+0x62b/0x780 [ 1776.337005][ T697] ? bpf_link_show_fdinfo+0x380/0x380 [ 1776.342531][ T697] ? lock_chain_count+0x20/0x20 [ 1776.347439][ T697] __x64_sys_bpf+0x78/0x90 [ 1776.351912][ T697] do_syscall_64+0x4c/0xa0 [ 1776.356394][ T697] ? clear_bhb_loop+0x60/0xb0 [ 1776.361125][ T697] ? clear_bhb_loop+0x60/0xb0 [ 1776.365842][ T697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1776.371765][ T697] RIP: 0033:0x7fa97ef9ce59 [ 1776.376198][ T697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1776.395827][ T697] RSP: 002b:00007fa97fdc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1776.404288][ T697] RAX: ffffffffffffffda RBX: 00007fa97f215fa0 RCX: 00007fa97ef9ce59 [ 1776.412314][ T697] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1776.420345][ T697] RBP: 00007fa97fdc5090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.428380][ T697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1776.436394][ T697] R13: 00007fa97f216038 R14: 00007fa97f215fa0 R15: 00007ffdb1bfc628 [ 1776.444438][ T697] [ 1777.440078][ T700] delete_channel: no stack [ 1778.679967][ T678] device syzkaller0 entered promiscuous mode [ 1779.155216][ T715] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.9590'. [ 1780.631100][T12955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1780.640044][T12955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1780.658781][T12955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1780.675635][T12955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1780.694698][T12955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1780.708490][T12955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1781.623135][ T708] validate_nla: 1 callbacks suppressed [ 1781.623154][ T708] netlink: 'syz.3.9587': attribute type 39 has an invalid length. [ 1781.636798][ T713] netlink: 'syz.1.9589': attribute type 10 has an invalid length. [ 1781.737619][T23651] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.775188][T12955] Bluetooth: hci0: command 0x0409 tx timeout [ 1782.909375][T23651] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.110878][T23651] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.257105][ T720] chnl_net:caif_netlink_parms(): no params data found [ 1783.359870][ T720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.367777][ T720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.385567][ T720] device bridge_slave_0 entered promiscuous mode [ 1783.405052][ T720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.414030][ T720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.430893][ T720] device bridge_slave_1 entered promiscuous mode [ 1783.466632][ T720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1783.487360][ T720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1783.507972][ T755] netlink: 'syz.0.9603': attribute type 39 has an invalid length. [ 1783.554103][ T720] team0: Port device team_slave_0 added [ 1783.571167][ T720] team0: Port device team_slave_1 added [ 1783.611764][ T720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1783.626122][ T720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1783.652933][ T720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1783.673143][ T720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1783.680850][ T720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1783.744897][ T720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1783.833244][T23651] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.902317][ T720] device hsr_slave_0 entered promiscuous mode [ 1783.941083][ T720] device hsr_slave_1 entered promiscuous mode [ 1783.958075][ T720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1783.972457][ T720] Cannot create hsr debugfs directory [ 1784.105555][ T764] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.9607'. [ 1784.855302][T12955] Bluetooth: hci0: command 0x041b tx timeout [ 1785.152530][T23651] tipc: Left network mode [ 1786.052482][ T803] netlink: 'syz.4.9616': attribute type 39 has an invalid length. [ 1786.786996][ T819] device syzkaller0 entered promiscuous mode [ 1786.871250][ T827] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.9623'. [ 1786.945339][T12955] Bluetooth: hci0: command 0x040f tx timeout [ 1789.029009][T12955] Bluetooth: hci0: command 0x0419 tx timeout [ 1789.809031][ T863] netlink: 'syz.0.9637': attribute type 1 has an invalid length. [ 1789.818162][ T863] netlink: 'syz.0.9637': attribute type 1 has an invalid length. [ 1789.836333][ T863] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.9637'. [ 1790.798958][ T720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1790.925685][ T720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1790.947304][ T720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1790.981545][ T720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1791.012394][ T871] netlink: 'syz.0.9649': attribute type 39 has an invalid length. [ 1791.147205][ T873] device syzkaller0 entered promiscuous mode [ 1791.367702][T23651] team0: Port device wlan1 removed [ 1791.576690][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.583099][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.415000][ T924] netlink: 'syz.1.9647': attribute type 2 has an invalid length. [ 1792.443318][ T924] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9647'. [ 1793.373920][ T926] delete_channel: no stack [ 1793.662000][T12955] Bluetooth: hci4: command 0x0406 tx timeout [ 1794.700152][ T891] device syzkaller0 entered promiscuous mode [ 1796.772587][ T927] netlink: 'syz.4.9648': attribute type 27 has an invalid length. [ 1796.781168][ T936] netlink: 'syz.1.9653': attribute type 39 has an invalid length. [ 1797.383703][T23651] device hsr_slave_0 left promiscuous mode [ 1797.395465][T23651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1797.412069][T23651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1797.435246][T23651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1797.443018][T23651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1797.463186][T23651] batman_adv: batadv0: Interface deactivated: macvlan1 [ 1797.484481][T23651] batman_adv: batadv0: Removing interface: macvlan1 [ 1797.498324][T23651] device bridge_slave_1 left promiscuous mode [ 1797.504853][T23651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.516356][T23651] device bridge_slave_0 left promiscuous mode [ 1797.522624][T23651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.554284][T23651] device veth1_macvtap left promiscuous mode [ 1797.561468][T23651] device veth0_vlan left promiscuous mode [ 1797.968730][T23651] team0 (unregistering): Port device macvlan0 removed [ 1798.213500][T23651] team0 (unregistering): Port device team_slave_1 removed [ 1798.263439][T23651] team0 (unregistering): Port device team_slave_0 removed [ 1798.318042][T23651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1798.366068][T23651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1798.667732][T23651] team0 (unregistering): Port device dummy0 removed [ 1798.693195][T23651] bond0 (unregistering): (slave team0): Releasing backup interface [ 1798.730769][T23651] bond0 (unregistering): Released all slaves [ 1798.823243][ T966] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9664'. [ 1798.841349][ T966] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9664'. [ 1798.852992][ T966] bond0: (slave bond_slave_0): Releasing backup interface [ 1798.872216][ T966] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1799.076137][ T720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1799.117454][T31379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1799.135975][T31379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1799.153296][ T720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1799.211304][ T975] device syzkaller0 entered promiscuous mode [ 1799.262462][T31379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1799.282025][T31379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1799.295133][T31379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.302316][T31379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1799.333151][T31379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1799.352105][ T982] netlink: 'syz.4.9667': attribute type 39 has an invalid length. [ 1799.402822][T31399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1799.417932][T31399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1799.435578][T31399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.442880][T31399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1799.471239][T31399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1799.488765][T31399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1799.517133][T31399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1799.544084][T31399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1801.924754][T31399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1801.937370][ T1002] netlink: 'syz.3.9675': attribute type 27 has an invalid length. [ 1801.950866][ T1002] netlink: 'syz.3.9675': attribute type 4 has an invalid length. [ 1801.959300][ T1002] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9675'. [ 1802.040601][ T1015] netlink: 'syz.4.9678': attribute type 21 has an invalid length. [ 1802.069919][T31379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1802.102068][T31379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1802.142918][ T720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1802.204886][ T720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1802.236743][T31379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1802.264371][T31379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1802.296188][T31379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1802.315692][T31379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1802.352476][T31379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1802.968712][ T1053] device syzkaller0 entered promiscuous mode [ 1806.043578][T23651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1806.054379][T23651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1806.098908][ T720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1806.187061][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1806.232478][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1806.270872][T23651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1806.286048][T23651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1806.312884][ T720] device veth0_vlan entered promiscuous mode [ 1806.320767][T23651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1806.344113][T23651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1806.372612][ T720] device veth1_vlan entered promiscuous mode [ 1806.398060][ T1091] netlink: 'syz.4.9698': attribute type 21 has an invalid length. [ 1806.439503][ T1091] netlink: 'syz.4.9698': attribute type 10 has an invalid length. [ 1806.475914][ T720] device veth0_macvtap entered promiscuous mode [ 1806.483493][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1806.512540][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1806.532974][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1806.552979][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1806.600009][ T720] device veth1_macvtap entered promiscuous mode [ 1806.636358][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1806.659560][T26932] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1806.692244][ T720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.709784][ T720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.721606][ T720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.732667][ T720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.743006][ T720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.754348][ T720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.764757][ T720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.791762][ T720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.816292][ T720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1806.841193][T23651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1806.882129][T23651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1806.896717][ T720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1806.914406][ T720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.945294][ T720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1806.963896][ T720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.978688][ T720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1807.017442][ T720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.058107][ T720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1807.096030][ T720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.158682][ T720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1807.195033][T23651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1807.204649][T23651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1807.240886][ T720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.270401][ T720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.280392][ T720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.311211][ T720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.536475][ T1111] netlink: 'syz.0.9707': attribute type 2 has an invalid length. [ 1807.637189][ T1111] netlink: 172424 bytes leftover after parsing attributes in process `syz.0.9707'. [ 1808.891787][T31379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.905703][T31379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1808.965923][T31379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.974123][T31379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1809.019340][T23651] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1809.052505][T23651] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1809.692303][ T1144] netlink: 'syz.1.9720': attribute type 10 has an invalid length. [ 1809.718393][ T1139] netlink: 'syz.4.9717': attribute type 11 has an invalid length. [ 1809.764924][ T1139] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9717'. [ 1809.815764][ T1139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1811.167516][ T1177] can: request_module (can-proto-0) failed. [ 1811.965872][ T1196] netlink: 'syz.2.9737': attribute type 10 has an invalid length. [ 1812.185832][ T1196] team0: Port device dummy0 added [ 1812.256105][ T1200] netlink: 'syz.1.9738': attribute type 3 has an invalid length. [ 1812.263918][ T1200] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9738'. [ 1812.312300][ T1198] netlink: 'syz.1.9738': attribute type 3 has an invalid length. [ 1812.345123][ T1198] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9738'. [ 1812.958956][ T1221] netlink: 'syz.3.9748': attribute type 39 has an invalid length. [ 1813.992699][ T1239] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9753'. [ 1814.186915][ T1246] netlink: 'syz.3.9753': attribute type 3 has an invalid length. [ 1814.233623][ T1246] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9753'. [ 1814.707455][ T1267] netlink: 'syz.0.9763': attribute type 39 has an invalid length. [ 1814.912319][ T1272] netlink: 'syz.1.9766': attribute type 39 has an invalid length. [ 1815.097752][ T1285] netlink: 'syz.3.9771': attribute type 1 has an invalid length. [ 1815.126965][ T1285] netlink: 'syz.3.9771': attribute type 1 has an invalid length. [ 1815.143137][ T1285] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.9771'. [ 1815.585535][ T1304] netlink: 'syz.2.9778': attribute type 39 has an invalid length. [ 1816.055606][ T1304] device hsr_slave_1 left promiscuous mode [ 1816.977688][ T1347] netlink: 'syz.1.9796': attribute type 39 has an invalid length. [ 1817.687315][ T1374] netlink: 'syz.2.9810': attribute type 16 has an invalid length. [ 1817.752627][ T1374] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9810'. [ 1817.879575][ T1373] delete_channel: no stack [ 1817.911225][ T1383] netlink: 'syz.4.9813': attribute type 39 has an invalid length. [ 1818.643772][ T1413] netlink: 'syz.2.9825': attribute type 6 has an invalid length. [ 1818.665490][ T1413] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.9825'. [ 1818.862092][ T1429] netlink: 'syz.3.9829': attribute type 39 has an invalid length. [ 1819.177227][ T1436] device syzkaller0 entered promiscuous mode [ 1819.790466][ T1466] netlink: 'syz.4.9844': attribute type 3 has an invalid length. [ 1819.806594][ T1466] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9844'. [ 1821.694948][ T1470] netlink: 'syz.3.9845': attribute type 39 has an invalid length. [ 1822.117954][ T1492] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9853'. [ 1824.518669][ T1489] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9853'. [ 1824.534463][ T1505] netlink: 'syz.3.9859': attribute type 39 has an invalid length. [ 1824.555203][ T1502] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1825.084426][ T1526] device dummy0 entered promiscuous mode [ 1825.654419][ T1540] netlink: 'syz.3.9872': attribute type 39 has an invalid length. [ 1825.683522][ T1545] FAULT_INJECTION: forcing a failure. [ 1825.683522][ T1545] name failslab, interval 1, probability 0, space 0, times 0 [ 1825.696732][ T1545] CPU: 1 PID: 1545 Comm: syz.2.9874 Not tainted syzkaller #0 [ 1825.704138][ T1545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1825.714220][ T1545] Call Trace: [ 1825.717537][ T1545] [ 1825.720506][ T1545] dump_stack_lvl+0x188/0x24e [ 1825.725256][ T1545] ? show_regs_print_info+0x12/0x12 [ 1825.730510][ T1545] ? load_image+0x400/0x400 [ 1825.735056][ T1545] ? trace_event_raw_event_lock+0x250/0x250 [ 1825.741040][ T1545] should_fail_ex+0x399/0x4d0 [ 1825.745750][ T1545] should_failslab+0x5/0x20 [ 1825.750268][ T1545] slab_pre_alloc_hook+0x59/0x310 [ 1825.755318][ T1545] ? batadv_primary_if_get_selected+0x77/0x410 [ 1825.761631][ T1545] kmem_cache_alloc_node+0x5a/0x320 [ 1825.766864][ T1545] ? __lock_acquire+0x7d10/0x7d10 [ 1825.771917][ T1545] ? __alloc_skb+0xfc/0x7e0 [ 1825.776474][ T1545] __alloc_skb+0xfc/0x7e0 [ 1825.780860][ T1545] arp_create+0x12d/0x950 [ 1825.785310][ T1545] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1825.791354][ T1545] batadv_bla_send_claim+0x14d/0xb10 [ 1825.796692][ T1545] ? __local_bh_enable_ip+0x136/0x1c0 [ 1825.802090][ T1545] ? lockdep_hardirqs_on+0x94/0x140 [ 1825.807327][ T1545] ? batadv_bla_del_backbone_claims+0x350/0x350 [ 1825.813619][ T1545] batadv_bla_get_backbone_gw+0xa75/0xe90 [ 1825.819403][ T1545] ? batadv_bla_send_claim+0xb10/0xb10 [ 1825.824910][ T1545] ? batadv_get_vid+0x112/0x270 [ 1825.829864][ T1545] batadv_bla_tx+0xbe5/0x1390 [ 1825.834603][ T1545] ? batadv_claim_put+0x1d0/0x1d0 [ 1825.839667][ T1545] ? skb_network_protocol+0x525/0x780 [ 1825.845087][ T1545] ? batadv_get_vid+0x112/0x270 [ 1825.849964][ T1545] batadv_interface_tx+0x732/0x1620 [ 1825.855208][ T1545] ? batadv_softif_is_valid+0x60/0x60 [ 1825.860642][ T1545] dev_hard_start_xmit+0x262/0x870 [ 1825.865805][ T1545] __dev_queue_xmit+0x1aa3/0x37c0 [ 1825.870882][ T1545] ? __dev_queue_xmit+0x26b/0x37c0 [ 1825.876043][ T1545] ? netdev_core_pick_tx+0x340/0x340 [ 1825.881421][ T1545] ? skb_release_data+0x1d2/0x7c0 [ 1825.886507][ T1545] __bpf_redirect+0xbdf/0x1180 [ 1825.891337][ T1545] bpf_clone_redirect+0x30b/0x4a0 [ 1825.896406][ T1545] bpf_prog_e97454e6a39c6b06+0x59/0x5e [ 1825.901915][ T1545] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1825.907946][ T1545] ? lock_chain_count+0x20/0x20 [ 1825.912870][ T1545] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1825.919171][ T1545] ? lockdep_hardirqs_on+0x94/0x140 [ 1825.924401][ T1545] ? ktime_get+0x7b/0x270 [ 1825.928771][ T1545] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1825.935094][ T1545] ? ktime_get_real_ts64+0x440/0x440 [ 1825.940414][ T1545] ? read_lock_is_recursive+0x10/0x10 [ 1825.945830][ T1545] ? __cant_sleep+0x220/0x220 [ 1825.950539][ T1545] ? ktime_get+0x247/0x270 [ 1825.954999][ T1545] bpf_test_run+0x2b6/0x830 [ 1825.959553][ T1545] ? convert___skb_to_skb+0x580/0x580 [ 1825.964963][ T1545] ? eth_get_headlen+0x200/0x200 [ 1825.969956][ T1545] ? __build_skb+0x257/0x3c0 [ 1825.974591][ T1545] ? convert___skb_to_skb+0x3d/0x580 [ 1825.979920][ T1545] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 1825.985354][ T1545] ? cpu_online+0xa0/0xa0 [ 1825.989719][ T1545] bpf_prog_test_run+0x31e/0x390 [ 1825.994714][ T1545] __sys_bpf+0x62b/0x780 [ 1825.999000][ T1545] ? bpf_link_show_fdinfo+0x380/0x380 [ 1826.004435][ T1545] ? lock_chain_count+0x20/0x20 [ 1826.009347][ T1545] __x64_sys_bpf+0x78/0x90 [ 1826.013806][ T1545] do_syscall_64+0x4c/0xa0 [ 1826.018262][ T1545] ? clear_bhb_loop+0x60/0xb0 [ 1826.022965][ T1545] ? clear_bhb_loop+0x60/0xb0 [ 1826.027684][ T1545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1826.033610][ T1545] RIP: 0033:0x7f1d9d99ce59 [ 1826.038049][ T1545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1826.057699][ T1545] RSP: 002b:00007f1d9e920028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1826.066156][ T1545] RAX: ffffffffffffffda RBX: 00007f1d9dc15fa0 RCX: 00007f1d9d99ce59 [ 1826.074148][ T1545] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1826.082141][ T1545] RBP: 00007f1d9e920090 R08: 0000000000000000 R09: 0000000000000000 [ 1826.090133][ T1545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1826.098137][ T1545] R13: 00007f1d9dc16038 R14: 00007f1d9dc15fa0 R15: 00007ffcbac19a78 [ 1826.106203][ T1545] [ 1826.752774][ T1560] netlink: 'syz.2.9879': attribute type 8 has an invalid length. [ 1826.771548][ T1560] netlink: 399 bytes leftover after parsing attributes in process `syz.2.9879'. [ 1827.821872][ T1584] netlink: 'syz.0.9889': attribute type 10 has an invalid length. [ 1827.875431][ T1580] netlink: 'syz.3.9887': attribute type 39 has an invalid length. [ 1827.909029][ T1586] netlink: 'syz.0.9889': attribute type 10 has an invalid length. [ 1828.003108][ T1586] team0: Port device dummy0 removed [ 1828.202151][ T1602] netlink: 'syz.0.9895': attribute type 10 has an invalid length. [ 1828.335844][ T1611] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9898'. [ 1828.396699][ T1609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9899'. [ 1828.708203][ T1626] netlink: 'syz.4.9904': attribute type 39 has an invalid length. [ 1829.404083][ T1660] FAULT_INJECTION: forcing a failure. [ 1829.404083][ T1660] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.443207][ T1660] CPU: 0 PID: 1660 Comm: syz.0.9916 Not tainted syzkaller #0 [ 1829.450753][ T1660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1829.460866][ T1660] Call Trace: [ 1829.464190][ T1660] [ 1829.467171][ T1660] dump_stack_lvl+0x188/0x24e [ 1829.471906][ T1660] ? show_regs_print_info+0x12/0x12 [ 1829.477167][ T1660] ? load_image+0x400/0x400 [ 1829.481711][ T1660] ? __might_sleep+0xd0/0xd0 [ 1829.486333][ T1660] ? __lock_acquire+0x7d10/0x7d10 [ 1829.491416][ T1660] should_fail_ex+0x399/0x4d0 [ 1829.496137][ T1660] should_failslab+0x5/0x20 [ 1829.500677][ T1660] slab_pre_alloc_hook+0x59/0x310 [ 1829.505755][ T1660] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 1829.511091][ T1660] __kmem_cache_alloc_node+0x4f/0x260 [ 1829.516506][ T1660] ? memset+0x1e/0x40 [ 1829.520521][ T1660] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 1829.525877][ T1660] kmalloc_trace+0x26/0xe0 [ 1829.530344][ T1660] __xdp_reg_mem_model+0x1e0/0x5c0 [ 1829.535504][ T1660] ? kvmalloc_node+0x6c/0x180 [ 1829.540223][ T1660] ? kvmalloc_node+0x6c/0x180 [ 1829.544938][ T1660] ? xdp_reg_mem_model+0x30/0x30 [ 1829.549913][ T1660] xdp_reg_mem_model+0x1e/0x30 [ 1829.554702][ T1660] bpf_test_run_xdp_live+0x299/0x1a90 [ 1829.560104][ T1660] ? 0xffffffffa00041c0 [ 1829.564289][ T1660] ? text_poke_copy+0x79/0x90 [ 1829.568994][ T1660] ? 0xffffffffa00041c0 [ 1829.573162][ T1660] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1829.579086][ T1660] ? 0xffffffffa00041c0 [ 1829.583258][ T1660] ? xdp_convert_md_to_buff+0x330/0x330 [ 1829.588861][ T1660] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1829.595131][ T1660] ? bpf_test_init+0x119/0x140 [ 1829.599911][ T1660] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1829.605405][ T1660] bpf_prog_test_run_xdp+0x736/0xf10 [ 1829.610734][ T1660] ? dev_put+0x80/0x80 [ 1829.614840][ T1660] ? dev_put+0x80/0x80 [ 1829.618936][ T1660] bpf_prog_test_run+0x31e/0x390 [ 1829.623920][ T1660] __sys_bpf+0x62b/0x780 [ 1829.628197][ T1660] ? bpf_link_show_fdinfo+0x380/0x380 [ 1829.633620][ T1660] ? lock_chain_count+0x20/0x20 [ 1829.638509][ T1660] __x64_sys_bpf+0x78/0x90 [ 1829.642946][ T1660] do_syscall_64+0x4c/0xa0 [ 1829.647401][ T1660] ? clear_bhb_loop+0x60/0xb0 [ 1829.652109][ T1660] ? clear_bhb_loop+0x60/0xb0 [ 1829.656810][ T1660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1829.662726][ T1660] RIP: 0033:0x7fda54b9ce59 [ 1829.667161][ T1660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1829.686802][ T1660] RSP: 002b:00007fda55a38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1829.695242][ T1660] RAX: ffffffffffffffda RBX: 00007fda54e15fa0 RCX: 00007fda54b9ce59 [ 1829.703234][ T1660] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1829.711223][ T1660] RBP: 00007fda55a38090 R08: 0000000000000000 R09: 0000000000000000 [ 1829.719213][ T1660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1829.727222][ T1660] R13: 00007fda54e16038 R14: 00007fda54e15fa0 R15: 00007ffd00078d58 [ 1829.735263][ T1660] [ 1829.883593][ T1670] netlink: 'syz.1.9919': attribute type 21 has an invalid length. [ 1829.908281][ T1670] netlink: 'syz.1.9919': attribute type 10 has an invalid length. [ 1830.002946][ T1674] netlink: 'syz.4.9920': attribute type 39 has an invalid length. [ 1830.246108][ T1679] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.9923'. [ 1830.650558][ T1694] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9930'. [ 1830.685201][ T1694] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9930'. [ 1831.072655][ T1705] netlink: 'syz.2.9934': attribute type 39 has an invalid length. [ 1831.950008][ T1738] netlink: 'syz.3.9947': attribute type 21 has an invalid length. [ 1832.057626][ T1739] netlink: 'syz.3.9947': attribute type 21 has an invalid length. [ 1832.190804][ T1742] netlink: 'syz.1.9948': attribute type 39 has an invalid length. [ 1832.860140][ T1760] netlink: 'syz.3.9957': attribute type 10 has an invalid length. [ 1833.192223][ T1768] netlink: 'syz.4.9961': attribute type 39 has an invalid length. [ 1834.131437][ T1796] netlink: 'syz.3.9972': attribute type 13 has an invalid length. [ 1834.216026][ T1796] netlink: 14581 bytes leftover after parsing attributes in process `syz.3.9972'. [ 1835.119634][ T1827] validate_nla: 2 callbacks suppressed [ 1835.119654][ T1827] netlink: 'syz.2.9985': attribute type 29 has an invalid length. [ 1835.152576][ T1827] netlink: 'syz.2.9985': attribute type 29 has an invalid length. [ 1835.174904][ T1828] netlink: 'syz.2.9985': attribute type 29 has an invalid length. [ 1835.184988][ T1831] netlink: 'syz.3.9987': attribute type 10 has an invalid length. [ 1835.192877][ T1831] team0: Device dummy0 is up. Set it down before adding it as a team port [ 1835.235055][ T1835] device syzkaller0 entered promiscuous mode [ 1835.377382][ T1840] netlink: 'syz.0.9989': attribute type 39 has an invalid length. [ 1836.955959][ T1886] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10003'. [ 1837.271612][ T1886] netlink: 'syz.0.10003': attribute type 3 has an invalid length. [ 1837.376363][ T1886] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10003'. [ 1837.731482][ T1901] device syzkaller0 entered promiscuous mode