last executing test programs: 17.027195392s ago: executing program 1 (id=3096): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="85000000ca00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x40000000, &(0x7f0000001400)="7f8d6c56923d668c2e53d857768ad4f5352014cc4bcc97729e313705e95cc311524f06f8f25c960959c2225f5c358207f162fcc39f0b31", 0x37, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)="647b6b6f6f8e364e2e1f2b42574fd25e90a7eef888a60569c48fec535dc0d998f74e1be755131e3fcc68c90f0ff786675ed67baa0ce78df1872e7a1f49eb8c7058ced5397e3981c22206960253482adc34543ab3e50f616969c93ebf90dadb1a820917cb6f1281b3a548763673fdeee180d52247e1d4f66b8f1c87acf4aa03066fd8fe90477671484e704c9884b4dc6c54eff9") bpf$OBJ_GET_MAP(0x7, &(0x7f00000015c0)=@o_path={&(0x7f0000001580)='./file0\x00', 0x0, 0x4010, r0}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000001600), 0x5090c2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x8d3c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c0000001e006bcd9e3fe3dc6e08000007000000000000007ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000) socket$kcm(0x2, 0x200000000000006, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000400200000000000000009503000000ef028dc064a7e4acac2802000000f0ff0000cb65ff1833bf818532e54688c0df4060410ba5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000e27f00820200000200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000040000000600000009"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13.937776707s ago: executing program 1 (id=3106): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5000000}, 0x94) bpf$MAP_CREATE(0x1800000000000000, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 13.610762361s ago: executing program 1 (id=3118): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 13.412170684s ago: executing program 1 (id=3111): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x11, &(0x7f0000000240), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000001000aac14140ce000000d49e832f0", 0x0, 0x10004, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.220793046s ago: executing program 1 (id=3114): r0 = socket$kcm(0x10, 0x8, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r4}, &(0x7f0000001b80), &(0x7f0000001bc0)=r5}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x5, [@enum64={0x2, 0xa, 0x0, 0x13, 0x1, 0x4, [{0xe, 0x2, 0xb}, {0xe, 0x10000, 0x7}, {0x2, 0x4, 0x4}, {0xb, 0x8, 0xa}, {0xf, 0x841, 0xc}, {0xc, 0x9, 0x1}, {0x8, 0x6, 0x3}, {0x4, 0x7, 0x6}, {0x10, 0x3, 0x8}, {0x10, 0xc, 0x2}]}, @enum64={0x1, 0x6, 0x0, 0x13, 0x0, 0xc, [{0xa, 0x1882349a, 0x10000}, {0x6, 0x100, 0x36}, {0xb, 0x7}, {0xd, 0x49a3, 0xa}, {0x5, 0x1, 0xa}, {0x7, 0x6, 0x1}]}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @fwd={0xb}, @typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0x8}, @var={0x6, 0x0, 0x0, 0xe, 0x1, 0x3}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f0000000240)=""/14, 0x145, 0xe, 0x0, 0xfffffffc, 0x10000}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x5, &(0x7f0000000d00)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x217, 0x66, &(0x7f00000000c0)=""/102, 0x41100, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0x6, 0x10000, 0x3}, 0x10, r10, r8}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r11, &(0x7f00000004c0)}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0xff, 0x8}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r14, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r15, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce81020329"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0xe, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd98, 0x0, 0x0, 0x0, 0x48000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x1f}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xb7}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2c61, 0xa7, &(0x7f0000000340)=""/167, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x15, r6, 0x8, &(0x7f00000005c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, r1, 0x2, &(0x7f0000000640)=[r11, r12, r13, r15], &(0x7f0000000680)=[{0x0, 0x4, 0x5, 0x8}, {0x4, 0x1, 0x10, 0xb}], 0x10, 0x81}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r16, &(0x7f0000000700)={&(0x7f0000000000)=@abs={0x20, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r16]}}], 0x18, 0x14}, 0x4000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 9.21215829s ago: executing program 1 (id=3125): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESHEX=r0, @ANYBLOB="e510f51047e8f53261d2fe8c20184d863fb95d24c5b34eb6f9a9c34cf4eee5a5d679895f20ee7dbe52d97996a2a1c7ef4b5daa5cb67d604f0ea7e430b8093c6466c40da76de2751d7a54282d0d4d73bdb82e710ac1e429089dff3b620ab848dd3077dc994eca2b4d5838c2f135709a4b57815e4d48bb0f2663c15e16cfb7870f9f51b753877fd67b", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142611600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4803f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 6.710704323s ago: executing program 3 (id=3145): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 6.396722809s ago: executing program 3 (id=3149): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) 6.091008368s ago: executing program 3 (id=3151): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x24, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000008000000e27f00000102820041000000", @ANYRES32, @ANYBLOB], 0x48) 4.660727292s ago: executing program 0 (id=3159): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000080000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xa, 0x0, &(0x7f0000000180)="0005d8a4ca71a74d19e8", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.630835245s ago: executing program 2 (id=3160): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000008616ff69df24ca14f6b4dc442a393aa2011bf717771c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000ffec00850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048045}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x10) r9 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000002c000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.599727618s ago: executing program 4 (id=3161): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x400300) 4.278166483s ago: executing program 0 (id=3162): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) 4.215135658s ago: executing program 4 (id=3163): r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="660a0000000000e3601134000000000018000000010010000000000020000000950000000000000040a7d1cec08e1aedabcbde091dfe88a1a142c12c1e0c46af2cd5cf018ef9defd7f0a9ac280bc0f40a4a17a130d159a5ece437f5dccc7c525560c92027e2beea05f08a2d20e4914ae2a23e08ff8c616160b9eabd1240e849ceeadd59e11cbfd3d22253e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 4.134736589s ago: executing program 2 (id=3164): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff7, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a00f5ffffffffffffff000000ac1414aa"], 0xfdef) 4.007648229s ago: executing program 0 (id=3165): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c8401, 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0xac5d}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="5c00000013006bcc9e3be3", 0xb}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8907, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, &(0x7f0000000140), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000057027e000000000000000002000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001800000009000000000000000200000018240000", @ANYRES32, @ANYBLOB="0000000004000000185300000300000000000000000000006333200001000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000a00)='syzkaller\x00', 0x1, 0xf, &(0x7f0000000c40)=""/15, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x4, 0x7, 0x8, 0x9}, 0x10, 0xd83, r4, 0x5, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e80)=[{0x1, 0x2, 0xb, 0x2}, {0x1, 0x5, 0x6, 0x4}, {0x5, 0x1, 0x5, 0x8}, {0x2, 0x3, 0x0, 0x3}, {0x1, 0x1, 0x3, 0x4}], 0x10, 0x2}, 0x94) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0xc3a566b01b4154a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r1, 0x2b, 0x0, 0xff, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640), &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYRES32=r5, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64=r0, @ANYRES64=r9], 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80d1) 3.852331963s ago: executing program 2 (id=3166): r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x80}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 3.183162806s ago: executing program 4 (id=3167): recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x1f}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$kcm(0x28, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xd}, 0x94) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11080000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2802, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x1000000}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x0, 0x61, 0x61, 0x0, 0x61, 0x5f]}}, 0x0, 0x58}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0), 0x4) 2.828649973s ago: executing program 0 (id=3168): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r1], 0xc) 2.709722215s ago: executing program 2 (id=3169): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x1, 0x4, 0x3, 0x0, 0x8, 0x80000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x4800000000000}, 0x1, 0x10, 0xffff, 0x6, 0xfffffffffffffff9, 0x8, 0x7, 0x0, 0x1000}, 0xffffffffffffffff, 0x1, r2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x4}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000c30e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)='!=[\\\\}#\x00') r5 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x8917, 0x0) 2.459736327s ago: executing program 0 (id=3170): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x3e8612cf}, 0x60, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000003, 0x0, @perf_config_ext={0x3ff, 0x41}, 0x0, 0x5, 0x1000, 0x8, 0x4000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000001080)='syz1\x00', 0x1ff) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000040) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x2198, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 1.520379746s ago: executing program 2 (id=3171): sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="a193328f02be208fc996bcb6d966869e09b1b8b6a72e2bd7e74f418e3c2171602732217ff79f41c0a89d5875841d9c3ed97bbf7d8f9d5c", 0x37}], 0x1}, 0x40000) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211057300fe80000000000000875a65059ff57b0000000000008dffffff000000ac1414aa"], 0xcfa4) 1.178563196s ago: executing program 4 (id=3172): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x1, 0x4, 0x3, 0x0, 0x8, 0x80000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x4800000000000}, 0x1, 0x10, 0xffff, 0x6, 0xfffffffffffffff9, 0x8, 0x7, 0x0, 0x1000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 8) 1.123944363s ago: executing program 2 (id=3173): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESHEX=r0, @ANYBLOB="e510f51047e8f53261d2fe8c20184d863fb95d24c5b34eb6f9a9c34cf4eee5a5d679895f20ee7dbe52d97996a2a1c7ef4b5daa5cb67d604f0ea7e430b8093c6466c40da76de2751d7a54282d0d4d73bdb82e710ac1e429089dff3b620ab848dd3077dc994eca2b4d5838c2f135709a4b57815e4d48bb0f2663c15e16cfb7870f9f51b753877fd67b", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142611600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4803f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 996.114533ms ago: executing program 3 (id=3174): socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000017000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x400000000000000, 0x3}, 0x100c0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xfffe, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_pid(r2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)="ff5fb99772024dca4128654351fb32", 0x800, r0}, 0x38) 487.184034ms ago: executing program 4 (id=3175): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380)=r2, 0x4) sendmsg$sock(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="67f1", 0x33fe0}], 0x1}, 0x40840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0x4060019}, 0x20000041) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 384.19418ms ago: executing program 0 (id=3176): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{}, [@call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0xd8, &(0x7f0000000180)=""/216}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 312.721823ms ago: executing program 3 (id=3177): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211057300fe80000000000000875a65059ff57b8dff0000000000000000000000ac1414aa"], 0xcfa4) 19.025584ms ago: executing program 4 (id=3178): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000ac0)="ee", 0x1}, {&(0x7f0000000200)="50260440a560c9ac44504b8b59090b2c1903dd1ce7b8b7ccee6ffa2a84b60ba22ca5db81b0bd1c988a86dc4005e381d9d94c59", 0x33}, {&(0x7f0000000440)="306325eb600bcdc4999e063d4090200e64639e3940d9677e5591a6af9792654a3afa5bfda72e16794d3be1e89a448721d481faf6eb6a90f8edf4f3339ff0f42b0432ad45a6f01c394344ca35e8133c4acab7db15f7db4c53a12c91792c86f0b9ffbc50304431dc676a80ec74f97b2967c846ede2bfc1b568b257187d1b6942d21d68d09867dc7fe6d05c6f33f7473485d10c99cfa49616d87185ee3ecee932f4904d740f0535889e5780cf68830e8c", 0xaf}, {&(0x7f00000028c0)="637d1ab17ac51fedb3e072a3aa7cefe264b5e64dfba5b8765a78dabebec128149ecc0594788fa33a8104191fd861e37caac9c0866e43ce4a2e7d3aafb2eebb4afe0974fc2fc260bbfb3e093c468ad9a53c51b1b5a359a911fe8a174e7cd7d49de6e99d9ad89902627e4bbf5ab228d8a7b89a6fae2c5aa5a9b390e0311e07c8613bf02d5b53038345e65f339493715a33451bb8922c848a896d73c49465dd734aa5daa14a3200893e7f7e9cd28e3f721bd6ff349c209da284f88eb1a9861646766722c977f09bf52d60a207bd2ee8baa3ebec39d28a3a16b96d189a5624dea72ea3c1030c1db2725d3fa796b3661133c1103e2bd0ec9318f7882d9620bbbba957aeaed5a90627705f55ccee259030d45b622322a65295f1cd287501e03698536ec2abdf15b69ab9170a7680c4fb828b5fcd9a66eac3e4e8258b6a3f763904d4c31f5e46985176315d35f6f23c1a8fa5a2dc6b8130a55aa781cd1adb3945bfb2a41d4cbbbe43377a8f4ff5dde13ddf7922ac29fe0581d0cc5288838b65ba7cd41df70326c8b83786beac90acc7e9d6d3b6d1351bb1125fa5afebc2e1e451b009e4b9225bbd76ad5d64d5c7c473439640983606e66e0fcc9f907bbf0fbde1f3a2105517d89c1b752e49348f2017f4c011a1740f50dff13ed6d616fbe68ede026ab499d656caca782e0aed0d088e822910547449b11f4561f63d9227bbd3fe31c90fd7071978238dc0a971b4b387d9bb77fa87f3e0b11071a85dd34f47178d5976c13e22e4d70f04ed0a4b44de44b2540024072a875ffb87f7294b02beb549cd8e252f72317dc23569d7645954716bca5148d32594cf37a9f700c5b8047fa506f90920f71dfbf5c5475b6240bd86b635a2165a049ab764fcaed4072ab39ca365f418efb1bd7794250a4d56a1a364c69df87fe7b78a940b8682b53be6405fb6a520d1c046324a74731aa0eef5ff286f2b5546366bd7ff171fbf5ceeec15404a18342781d4a0be08122e1ddb3a19c1e5ba9a5baac4c605f7c01ee2d914c03e1ebc224c92a16ba4e27484bd36499079ff3935b0d05168824e54019c7db1a16e6cf574b62e1594e420cf9f75bb2ffa4912704c9f0e0ba43a15c511b838235e399e1f32df1c516ad14c059e0900da0c760047fc61ae78f56f1225be5a22e59a03225982a4e50a36a5116ee536d1e1b625c67d8f9f635b421d10db2df104fb790f2c142100f7a9ce9af7a8084dcdb4de95af79625c2c429d6f91e79270d06320f41e09a364c1391950521e13b84b88eeaf1f2fc5c1b3569b815b7d4b96b89518dc689a6117dd2d50dc0b3de4b7ab2e235aef5b47fc3d4176d7a41bf4e8bbca2f44e721d07392f2291a3691af0f52ccce5220c43be05180d9228ed564b7a1669fd33eb9d8925ed08d7e3c7d7ecb7286dbaa15f173f482ad527e0388246f7f172de229091defd22c0edf30acb8d6634224e505ad8eaabc1584a4b0bf5f1a35cbecdc3cb580a2b7e7a7c0b0440f4648583a52faafc1a6ee6d305b0f23dcb504e669eb786bfc95380442bfe74130ab672a741c2c33aef6ee962a7b0608ab785e8cb5b4568f8c66a77dd365abd1859ea6b78253cba40ea9f3d75adf0b9f05db9c14cb6bee253ba07e101aac737ef1deb4afa7d3481f2dab8e499815d849475eba093d387cae54f534e4", 0x4a2}], 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010007010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d700e5ff1010"], 0x10b8}, 0x7f40) 0s ago: executing program 3 (id=3179): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r1], 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 81.530040][ T4255] cgroup: Unknown subsys name 'net' [ 81.660896][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.157916][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 84.585831][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.597496][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.612269][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.620051][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.628370][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.637893][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.645074][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.653154][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.661262][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.668850][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.677647][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.685258][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.692803][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.694311][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.704082][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.708675][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.715707][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.724183][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.728761][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.737497][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.743087][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.749595][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.762905][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.786177][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.794774][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.803013][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.810997][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.819649][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.827770][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.835294][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.242050][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 85.377793][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 85.438200][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 85.490823][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.498904][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.507279][ T4268] device bridge_slave_0 entered promiscuous mode [ 85.544304][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.551474][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.559759][ T4268] device bridge_slave_1 entered promiscuous mode [ 85.570372][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 85.591525][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 85.661819][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.671448][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.682774][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.690828][ T4279] device bridge_slave_0 entered promiscuous mode [ 85.720099][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.738347][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.745640][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.757750][ T4279] device bridge_slave_1 entered promiscuous mode [ 85.811500][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.818804][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.827271][ T4267] device bridge_slave_0 entered promiscuous mode [ 85.840308][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.847646][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.855970][ T4267] device bridge_slave_1 entered promiscuous mode [ 85.868142][ T4268] team0: Port device team_slave_0 added [ 85.879298][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.906213][ T4268] team0: Port device team_slave_1 added [ 85.931706][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.967097][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.009233][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.022238][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.029573][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.041030][ T4276] device bridge_slave_0 entered promiscuous mode [ 86.050982][ T4279] team0: Port device team_slave_0 added [ 86.058125][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.065993][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.092128][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.106005][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.113084][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.139241][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.150563][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.160903][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.169059][ T4269] device bridge_slave_0 entered promiscuous mode [ 86.191919][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.200610][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.210753][ T4276] device bridge_slave_1 entered promiscuous mode [ 86.228603][ T4279] team0: Port device team_slave_1 added [ 86.255909][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.263104][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.271114][ T4269] device bridge_slave_1 entered promiscuous mode [ 86.282082][ T4267] team0: Port device team_slave_0 added [ 86.305012][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.312030][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.338196][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.351347][ T4267] team0: Port device team_slave_1 added [ 86.385113][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.395462][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.402440][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.429323][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.448755][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.467043][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.482125][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.504362][ T4268] device hsr_slave_0 entered promiscuous mode [ 86.511529][ T4268] device hsr_slave_1 entered promiscuous mode [ 86.544913][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.551915][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.578076][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.619665][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.626700][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.653116][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.667749][ T4276] team0: Port device team_slave_0 added [ 86.681919][ T4279] device hsr_slave_0 entered promiscuous mode [ 86.689384][ T4279] device hsr_slave_1 entered promiscuous mode [ 86.701050][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.709133][ T4279] Cannot create hsr debugfs directory [ 86.726828][ T4269] team0: Port device team_slave_0 added [ 86.750370][ T4276] team0: Port device team_slave_1 added [ 86.758116][ T4269] team0: Port device team_slave_1 added [ 86.837032][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.844906][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.871783][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.875246][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 86.885871][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.896336][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.922468][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.933195][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 86.942934][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 86.949328][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 86.955693][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 86.972479][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.979513][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.005745][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.017871][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.026534][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.053899][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.073645][ T4267] device hsr_slave_0 entered promiscuous mode [ 87.080576][ T4267] device hsr_slave_1 entered promiscuous mode [ 87.087394][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.095270][ T4267] Cannot create hsr debugfs directory [ 87.220784][ T4269] device hsr_slave_0 entered promiscuous mode [ 87.228397][ T4269] device hsr_slave_1 entered promiscuous mode [ 87.235422][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.243207][ T4269] Cannot create hsr debugfs directory [ 87.542340][ T4276] device hsr_slave_0 entered promiscuous mode [ 87.550366][ T4276] device hsr_slave_1 entered promiscuous mode [ 87.559348][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.567311][ T4276] Cannot create hsr debugfs directory [ 87.690827][ T4268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.745634][ T4268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.796611][ T4268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.838213][ T4268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.909536][ T4279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.938946][ T4279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.959631][ T4279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.970113][ T4279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.045996][ T4267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.057111][ T4267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.085699][ T4267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.114334][ T4267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.188964][ T4269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.208354][ T4269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.251682][ T4269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.264215][ T4269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.285610][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.321500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.333683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.355057][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.365054][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.391661][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.405439][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.417005][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.424522][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.439804][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.452363][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.467992][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.483002][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.506129][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.515611][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.527763][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.535040][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.546756][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.557982][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.574226][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.582136][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.615216][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.628196][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.639330][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.647949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.662146][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.672270][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.688922][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.698851][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.709409][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.748161][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.758654][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.770320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.779569][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.788701][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.795916][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.804359][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.814088][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.823263][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.830448][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.838505][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.848685][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.858960][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.887852][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.900198][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.918865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.933156][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 88.935862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.956715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.969553][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.976756][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.987424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.996440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.007972][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.015230][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.024248][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 89.026253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.030330][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 89.040547][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 89.046248][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 89.058507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.082014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.091674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.139027][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.158235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.175100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.186852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.196142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.205562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.214631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.225526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.235103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.244271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.253098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.261663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.271175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.284524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.294959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.314470][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.326967][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.343203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.351668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.362298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.373300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.389790][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.445766][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.454581][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.474053][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.493198][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.513290][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.537626][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.554431][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.570196][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.577403][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.628203][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.648471][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.677169][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.707460][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.714686][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.735568][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.759646][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.782739][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.793291][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.808579][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.832252][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.841163][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.851050][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.868084][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.879497][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.900398][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.920359][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.954402][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.962840][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.971458][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.980905][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.988967][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.997475][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.007169][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.027300][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.039929][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.050136][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.076922][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.084152][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.124392][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.154114][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.168698][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.198239][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.205454][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.239187][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.256127][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.298804][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.329389][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.341726][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.365535][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.396188][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.426677][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.435113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.463617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.484067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.496797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.566545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.576205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.595545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.604817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.620851][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.639523][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.656125][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.674122][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.767160][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.783122][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.829444][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.844396][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.869685][ T4279] device veth0_vlan entered promiscuous mode [ 90.884572][ T4267] device veth0_vlan entered promiscuous mode [ 90.914140][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.922182][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.940271][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.949459][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.979070][ T4279] device veth1_vlan entered promiscuous mode [ 90.993833][ T4267] device veth1_vlan entered promiscuous mode [ 91.013864][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 91.021775][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.044202][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.054401][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.075196][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.093345][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 91.099431][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 91.105839][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 91.111892][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 91.118620][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.134444][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.142066][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.208386][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.244788][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.255545][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.264382][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.287973][ T4279] device veth0_macvtap entered promiscuous mode [ 91.301004][ T4267] device veth0_macvtap entered promiscuous mode [ 91.346533][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.361720][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.385189][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.394710][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.403742][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.426630][ T4279] device veth1_macvtap entered promiscuous mode [ 91.437421][ T4267] device veth1_macvtap entered promiscuous mode [ 91.459000][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.468670][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.480091][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.526071][ T4269] device veth0_vlan entered promiscuous mode [ 91.538113][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.547406][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.557272][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.567680][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.578299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.591748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.605625][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.633653][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.641827][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.651958][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.661738][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.669853][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.677747][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.687747][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.699619][ T4269] device veth1_vlan entered promiscuous mode [ 91.710070][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.721875][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.737574][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.748809][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.758819][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768428][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.777806][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.796741][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.804534][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.815336][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.827379][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.838463][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.850073][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.865674][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.894633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.905936][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.915665][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.925948][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.935252][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.944477][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.953458][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.964113][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.975359][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.985109][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.994175][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.030161][ T4268] device veth0_vlan entered promiscuous mode [ 92.049017][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.061179][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.105744][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.115281][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.136042][ T4269] device veth0_macvtap entered promiscuous mode [ 92.174853][ T4269] device veth1_macvtap entered promiscuous mode [ 92.196150][ T4268] device veth1_vlan entered promiscuous mode [ 92.233444][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.247439][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.257177][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.266826][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.275488][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.284437][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.297961][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.306905][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.330566][ T4276] device veth0_vlan entered promiscuous mode [ 92.347157][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.358543][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.369768][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.382916][ T27] cfg80211: failed to load regulatory.db [ 92.389975][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.401588][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.433702][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.441767][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.443664][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.468787][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.478011][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.487759][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.497494][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.505559][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.516238][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.527703][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.538407][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.550894][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.565872][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.580957][ T4276] device veth1_vlan entered promiscuous mode [ 92.591742][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.601348][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.624469][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.634547][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.643410][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.652296][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.676531][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.685896][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.736088][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.751064][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.765811][ T4268] device veth0_macvtap entered promiscuous mode [ 92.781727][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.790379][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.799265][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.808963][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.823779][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.835040][ T4268] device veth1_macvtap entered promiscuous mode [ 92.847628][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.856320][ T4276] device veth0_macvtap entered promiscuous mode [ 92.875652][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.885114][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.900866][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.923904][ T4276] device veth1_macvtap entered promiscuous mode [ 93.005620][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.025807][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.040489][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.051383][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.061649][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.072633][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.084648][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.094189][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 93.122890][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.134257][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.144776][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.155615][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.165845][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.173884][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.184386][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 93.190442][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 93.193486][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 93.197579][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 93.259813][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.268171][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.292884][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.314133][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.330575][ C1] hrtimer: interrupt took 28395 ns [ 93.339229][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.357165][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.362089][ T4355] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.375931][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.377741][ T4355] openvswitch: netlink: Key type 386 is out of range max 32 [ 93.403399][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.414647][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.423578][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.433724][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.463403][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.490813][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.509054][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.520762][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.539621][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.550957][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.564758][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.590604][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.609681][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.621555][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.641842][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.672452][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.699751][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.716997][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.729026][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.751859][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.778074][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.790059][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.800141][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.815023][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.829943][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.839510][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.854051][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.862984][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.929316][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.949172][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.962277][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.978377][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.033059][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.049609][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.110183][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.184638][ T4366] netlink: 'syz.1.6': attribute type 13 has an invalid length. [ 94.206803][ T4366] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6'. [ 94.237186][ T4366] erspan0: refused to change device tx_queue_len [ 94.244826][ T4366] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 94.537977][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.555280][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.616325][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.637084][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.673018][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.697795][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.716710][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.795401][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.812293][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.855857][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.918956][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.950932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.150690][ T4374] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.8'. [ 96.030522][ T4383] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 96.136963][ T4383] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 96.156594][ T4390] netlink: 'syz.4.5': attribute type 21 has an invalid length. [ 96.173245][ T4390] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.392756][ T4374] syz.1.8 (4374) used greatest stack depth: 17304 bytes left [ 96.718386][ T4392] netlink: 'syz.3.11': attribute type 10 has an invalid length. [ 96.743008][ T4392] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11'. [ 97.027025][ T4392] bridge0: port 3(veth0_vlan) entered blocking state [ 97.104440][ T4392] bridge0: port 3(veth0_vlan) entered disabled state [ 97.130350][ T4404] Zero length message leads to an empty skb [ 97.574236][ T4392] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 97.850287][ T4404] netlink: 'syz.2.13': attribute type 12 has an invalid length. [ 97.913253][ T4404] netlink: 172 bytes leftover after parsing attributes in process `syz.2.13'. [ 98.528868][ T4418] device wlan1 entered promiscuous mode [ 98.627187][ T4418] netlink: 'syz.3.18': attribute type 3 has an invalid length. [ 98.654363][ T4418] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.18'. [ 99.059289][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 99.131809][ T4430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.174980][ T4431] netlink: 'syz.2.20': attribute type 10 has an invalid length. [ 99.187078][ T4431] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 99.245491][ T4426] netlink: 'syz.4.19': attribute type 12 has an invalid length. [ 99.260131][ T4426] netlink: 172 bytes leftover after parsing attributes in process `syz.4.19'. [ 99.834972][ T4451] netlink: 72 bytes leftover after parsing attributes in process `syz.4.26'. [ 100.019850][ T4451] netlink: 'syz.4.26': attribute type 3 has an invalid length. [ 100.037064][ T4451] netlink: 'syz.4.26': attribute type 4 has an invalid length. [ 100.050223][ T4451] netlink: 132 bytes leftover after parsing attributes in process `syz.4.26'. [ 100.357994][ T4442] netlink: 'syz.3.24': attribute type 12 has an invalid length. [ 100.390739][ T4442] netlink: 172 bytes leftover after parsing attributes in process `syz.3.24'. [ 100.437118][ T4457] netlink: 'syz.2.37': attribute type 12 has an invalid length. [ 100.465436][ T4457] netlink: 172 bytes leftover after parsing attributes in process `syz.2.37'. [ 102.301917][ T4478] netlink: 'syz.4.30': attribute type 10 has an invalid length. [ 102.344041][ T4478] netlink: 40 bytes leftover after parsing attributes in process `syz.4.30'. [ 102.493619][ T4478] bridge0: port 3(veth0_vlan) entered blocking state [ 102.537815][ T4478] bridge0: port 3(veth0_vlan) entered disabled state [ 102.608699][ T4478] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 102.828209][ T4488] netlink: 'syz.0.33': attribute type 12 has an invalid length. [ 102.865120][ T4488] netlink: 172 bytes leftover after parsing attributes in process `syz.0.33'. [ 102.902335][ T4490] device wlan1 entered promiscuous mode [ 103.116504][ T4495] netlink: 'syz.1.34': attribute type 3 has an invalid length. [ 103.184377][ T4495] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.34'. [ 103.711833][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 103.760024][ T4503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.833824][ T4510] netlink: 'syz.0.38': attribute type 10 has an invalid length. [ 103.842202][ T4510] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 104.161858][ T4518] netlink: 'syz.1.41': attribute type 10 has an invalid length. [ 104.186564][ T4518] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 104.434471][ T4521] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.42'. [ 105.757372][ T4540] netlink: 'syz.3.46': attribute type 21 has an invalid length. [ 106.199281][ T4540] netlink: 132 bytes leftover after parsing attributes in process `syz.3.46'. [ 106.632638][ T4546] netlink: 'syz.2.48': attribute type 10 has an invalid length. [ 106.680879][ T4546] netlink: 40 bytes leftover after parsing attributes in process `syz.2.48'. [ 106.695200][ T4546] bridge0: port 3(veth0_vlan) entered blocking state [ 106.702439][ T4546] bridge0: port 3(veth0_vlan) entered disabled state [ 106.767565][ T4546] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 107.575752][ T4551] device wlan1 entered promiscuous mode [ 107.700260][ T4556] netlink: 'syz.0.49': attribute type 3 has an invalid length. [ 107.718898][ T4556] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.49'. [ 107.891592][ T4563] netlink: 'syz.1.51': attribute type 12 has an invalid length. [ 107.922993][ T4563] netlink: 172 bytes leftover after parsing attributes in process `syz.1.51'. [ 108.360408][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 108.397209][ T4573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.627635][ T4579] netlink: 4075 bytes leftover after parsing attributes in process `syz.4.57'. [ 109.252278][ T4593] device syzkaller0 entered promiscuous mode [ 111.878545][ T4608] netlink: 'syz.3.78': attribute type 10 has an invalid length. [ 111.886474][ T4608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.938280][ T4608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.980774][ T4608] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 112.162739][ T4633] IPv6: Can't replace route, no match found [ 112.307260][ T4642] netlink: 'syz.0.76': attribute type 10 has an invalid length. [ 112.331636][ T4642] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 112.909665][ T4651] netlink: 'syz.4.81': attribute type 12 has an invalid length. [ 112.937369][ T4651] netlink: 172 bytes leftover after parsing attributes in process `syz.4.81'. [ 113.369417][ T4663] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.86'. [ 114.139683][ T4687] netlink: 'syz.4.95': attribute type 13 has an invalid length. [ 114.156274][ T4687] netlink: 160 bytes leftover after parsing attributes in process `syz.4.95'. [ 114.208755][ T4687] erspan0: refused to change device tx_queue_len [ 114.240165][ T4687] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 114.661206][ T4692] device syzkaller0 entered promiscuous mode [ 116.559772][ T4746] sctp: [Deprecated]: syz.1.114 (pid 4746) Use of int in max_burst socket option deprecated. [ 116.559772][ T4746] Use struct sctp_assoc_value instead [ 117.496446][ T4748] delete_channel: no stack [ 117.741061][ T4725] netlink: 'syz.2.107': attribute type 2 has an invalid length. [ 117.750488][ T4725] netlink: 'syz.2.107': attribute type 1 has an invalid length. [ 117.758416][ T4725] netlink: 'syz.2.107': attribute type 8 has an invalid length. [ 117.766237][ T4725] netlink: 44 bytes leftover after parsing attributes in process `syz.2.107'. [ 117.776254][ T4732] netlink: 'syz.4.109': attribute type 12 has an invalid length. [ 117.792895][ T4732] netlink: 172 bytes leftover after parsing attributes in process `syz.4.109'. [ 117.802044][ T4744] netlink: 'syz.1.114': attribute type 10 has an invalid length. [ 117.825542][ T4744] device wlan1 left promiscuous mode [ 118.966869][ T4773] netlink: 'syz.2.123': attribute type 12 has an invalid length. [ 119.013947][ T4773] netlink: 172 bytes leftover after parsing attributes in process `syz.2.123'. [ 120.266032][ T4809] netlink: 'syz.1.135': attribute type 33 has an invalid length. [ 120.343052][ T4809] netlink: 164 bytes leftover after parsing attributes in process `syz.1.135'. [ 121.438289][ T4837] netlink: 160 bytes leftover after parsing attributes in process `syz.3.145'. [ 121.625423][ T4842] netlink: 16083 bytes leftover after parsing attributes in process `syz.1.146'. [ 124.357798][ T4856] netlink: 'syz.1.150': attribute type 10 has an invalid length. [ 124.595598][ T4856] team0: Device vxcan1 is of different type [ 124.708855][ T4853] netlink: 'syz.3.151': attribute type 2 has an invalid length. [ 124.734280][ T4872] FAULT_INJECTION: forcing a failure. [ 124.734280][ T4872] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.752730][ T4853] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 124.777786][ T4853] netlink: 'syz.3.151': attribute type 8 has an invalid length. [ 124.794303][ T4872] CPU: 1 PID: 4872 Comm: syz.4.156 Not tainted syzkaller #0 [ 124.801661][ T4872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.811786][ T4872] Call Trace: [ 124.815111][ T4872] [ 124.818078][ T4872] dump_stack_lvl+0x188/0x24e [ 124.822850][ T4872] ? show_regs_print_info+0x12/0x12 [ 124.828097][ T4872] ? load_image+0x400/0x400 [ 124.832654][ T4872] ? __lock_acquire+0x7d10/0x7d10 [ 124.837721][ T4872] ? __fget_files+0x28/0x4b0 [ 124.842381][ T4872] should_fail_ex+0x399/0x4d0 [ 124.847123][ T4872] _copy_from_user+0x2c/0x170 [ 124.851859][ T4872] generic_map_update_batch+0x4f3/0x810 [ 124.857477][ T4872] ? rcu_read_unlock+0xa0/0xa0 [ 124.862310][ T4872] ? __fdget+0x17c/0x200 [ 124.866627][ T4872] ? rcu_read_unlock+0xa0/0xa0 [ 124.871440][ T4872] bpf_map_do_batch+0x466/0x600 [ 124.876378][ T4872] __sys_bpf+0x6f7/0x780 [ 124.880688][ T4872] ? bpf_link_show_fdinfo+0x380/0x380 [ 124.886129][ T4872] ? lock_chain_count+0x20/0x20 [ 124.891043][ T4872] __x64_sys_bpf+0x78/0x90 [ 124.895514][ T4872] do_syscall_64+0x4c/0xa0 [ 124.899980][ T4872] ? clear_bhb_loop+0x60/0xb0 [ 124.904703][ T4872] ? clear_bhb_loop+0x60/0xb0 [ 124.909432][ T4872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.915464][ T4872] RIP: 0033:0x7efdddd9c799 [ 124.919940][ T4872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.939601][ T4872] RSP: 002b:00007efddec43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.948074][ T4872] RAX: ffffffffffffffda RBX: 00007efdde015fa0 RCX: 00007efdddd9c799 [ 124.956100][ T4872] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 124.964120][ T4872] RBP: 00007efddec43090 R08: 0000000000000000 R09: 0000000000000000 [ 124.972141][ T4872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.980150][ T4872] R13: 00007efdde016038 R14: 00007efdde015fa0 R15: 00007ffcb64541f8 [ 124.988176][ T4872] [ 125.016314][ T4853] netlink: 44 bytes leftover after parsing attributes in process `syz.3.151'. [ 125.415176][ T4887] netlink: 'syz.1.161': attribute type 10 has an invalid length. [ 125.483058][ T4887] netlink: 40 bytes leftover after parsing attributes in process `syz.1.161'. [ 125.574541][ T4887] bridge0: port 3(team0) entered blocking state [ 125.592726][ T4887] bridge0: port 3(team0) entered disabled state [ 125.634000][ T4887] device team0 entered promiscuous mode [ 125.667794][ T4887] device team_slave_0 entered promiscuous mode [ 125.712997][ T4887] device team_slave_1 entered promiscuous mode [ 125.755024][ T4887] bridge0: port 3(team0) entered blocking state [ 125.761807][ T4887] bridge0: port 3(team0) entered forwarding state [ 126.726868][ T4911] device syzkaller0 entered promiscuous mode [ 126.916438][ T4919] netlink: 'syz.3.175': attribute type 39 has an invalid length. [ 130.022146][ T4921] netlink: 'syz.1.173': attribute type 2 has an invalid length. [ 130.030453][ T4921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.173'. [ 130.045309][ T4932] netlink: 'syz.2.176': attribute type 10 has an invalid length. [ 130.297398][ T4942] Illegal XDP return value 4294967274 on prog (id 135) dev N/A, expect packet loss! [ 130.593171][ T4954] netlink: 'syz.3.182': attribute type 21 has an invalid length. [ 130.708318][ T4954] netlink: 'syz.3.182': attribute type 2 has an invalid length. [ 131.115868][ T4965] netlink: 2739 bytes leftover after parsing attributes in process `syz.4.189'. [ 131.359472][ T4975] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.192'. [ 132.543706][ T5002] netlink: 'syz.4.201': attribute type 10 has an invalid length. [ 132.781390][ T5002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.838449][ T5002] team0: Port device bond0 added [ 133.035363][ T5015] IPv6: Can't replace route, no match found [ 133.676624][ T5037] netlink: 'syz.1.213': attribute type 10 has an invalid length. [ 133.829915][ T5037] device vxcan1 entered promiscuous mode [ 133.858863][ T5037] team0: Device vxcan1 is of different type [ 135.047964][ T5077] netlink: 17861 bytes leftover after parsing attributes in process `syz.2.227'. [ 135.653762][ T5090] device bridge_slave_1 left promiscuous mode [ 135.673865][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.777446][ T5090] device bridge_slave_0 left promiscuous mode [ 135.854345][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.010288][ T5092] netlink: 2739 bytes leftover after parsing attributes in process `syz.2.232'. [ 136.969327][ T5112] netlink: 'syz.1.236': attribute type 39 has an invalid length. [ 137.332042][ T5127] netlink: 'syz.3.241': attribute type 2 has an invalid length. [ 137.393722][ T5127] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 137.458078][ T5127] netlink: 132 bytes leftover after parsing attributes in process `syz.3.241'. [ 138.456774][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.463672][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.648435][ T5156] netlink: 2739 bytes leftover after parsing attributes in process `syz.0.251'. [ 138.708690][ T5156] device wlan1 left promiscuous mode [ 138.801718][ T5162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 139.596052][ T5190] netlink: 'syz.2.264': attribute type 10 has an invalid length. [ 139.644227][ T5190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.264'. [ 139.751069][ T5190] device team0 entered promiscuous mode [ 139.772628][ T5190] device team_slave_0 entered promiscuous mode [ 139.834093][ T5190] device team_slave_1 entered promiscuous mode [ 139.877807][ T5190] bridge0: port 3(team0) entered blocking state [ 139.920330][ T5190] bridge0: port 3(team0) entered disabled state [ 139.961646][ T5190] bridge0: port 3(team0) entered blocking state [ 139.968112][ T5190] bridge0: port 3(team0) entered forwarding state [ 140.627773][ T5214] netlink: 'syz.4.275': attribute type 4 has an invalid length. [ 140.676168][ T5214] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.275'. [ 140.841992][ T5219] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.276'. [ 142.801373][ T5259] netlink: 'syz.3.289': attribute type 21 has an invalid length. [ 143.158617][ T5265] netlink: 48 bytes leftover after parsing attributes in process `syz.3.291'. [ 143.954254][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 144.661226][ T5304] netlink: 'syz.1.303': attribute type 10 has an invalid length. [ 144.725217][ T5304] team0: Device vxcan1 is of different type [ 144.828658][ T5311] FAULT_INJECTION: forcing a failure. [ 144.828658][ T5311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.867062][ T5311] CPU: 1 PID: 5311 Comm: syz.3.306 Not tainted syzkaller #0 [ 144.874432][ T5311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.884534][ T5311] Call Trace: [ 144.887921][ T5311] [ 144.890896][ T5311] dump_stack_lvl+0x188/0x24e [ 144.895645][ T5311] ? show_regs_print_info+0x12/0x12 [ 144.900890][ T5311] ? load_image+0x400/0x400 [ 144.905451][ T5311] ? __lock_acquire+0x7d10/0x7d10 [ 144.910532][ T5311] should_fail_ex+0x399/0x4d0 [ 144.915253][ T5311] _copy_from_user+0x2c/0x170 [ 144.919965][ T5311] generic_map_update_batch+0x4a1/0x810 [ 144.925550][ T5311] ? rcu_read_unlock+0xa0/0xa0 [ 144.930349][ T5311] ? __fdget+0x17c/0x200 [ 144.934630][ T5311] ? rcu_read_unlock+0xa0/0xa0 [ 144.939441][ T5311] bpf_map_do_batch+0x466/0x600 [ 144.944333][ T5311] __sys_bpf+0x6f7/0x780 [ 144.948619][ T5311] ? bpf_link_show_fdinfo+0x380/0x380 [ 144.954029][ T5311] ? lock_chain_count+0x20/0x20 [ 144.958928][ T5311] __x64_sys_bpf+0x78/0x90 [ 144.963369][ T5311] do_syscall_64+0x4c/0xa0 [ 144.967907][ T5311] ? clear_bhb_loop+0x60/0xb0 [ 144.972616][ T5311] ? clear_bhb_loop+0x60/0xb0 [ 144.977331][ T5311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.983258][ T5311] RIP: 0033:0x7fab8019c799 [ 144.987696][ T5311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.007324][ T5311] RSP: 002b:00007fab810b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.015771][ T5311] RAX: ffffffffffffffda RBX: 00007fab80415fa0 RCX: 00007fab8019c799 [ 145.023762][ T5311] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 145.031764][ T5311] RBP: 00007fab810b8090 R08: 0000000000000000 R09: 0000000000000000 [ 145.039752][ T5311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.047836][ T5311] R13: 00007fab80416038 R14: 00007fab80415fa0 R15: 00007fff2534e488 [ 145.055855][ T5311] [ 145.800799][ T5320] netlink: 'syz.2.305': attribute type 12 has an invalid length. [ 145.843793][ T5320] netlink: 172 bytes leftover after parsing attributes in process `syz.2.305'. [ 145.997535][ T5334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.312'. [ 146.321930][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 146.465790][ T5348] netlink: 'syz.1.318': attribute type 11 has an invalid length. [ 146.479983][ T5348] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.318'. [ 146.523705][ T5348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.844919][ T5354] netlink: 14 bytes leftover after parsing attributes in process `syz.1.319'. [ 146.903410][ T5354] bridge0: port 3(team0) entered disabled state [ 147.511770][ T5357] device syzkaller0 entered promiscuous mode [ 151.189002][ T5396] netlink: 'syz.1.332': attribute type 12 has an invalid length. [ 151.199665][ T5396] netlink: 172 bytes leftover after parsing attributes in process `syz.1.332'. [ 151.215792][ T5427] netlink: 140 bytes leftover after parsing attributes in process `syz.3.343'. [ 151.668939][ T5439] netlink: 'syz.3.347': attribute type 21 has an invalid length. [ 151.775491][ T5439] netlink: 160 bytes leftover after parsing attributes in process `syz.3.347'. [ 152.710872][ T5481] netlink: 'syz.2.361': attribute type 13 has an invalid length. [ 152.787068][ T5481] netlink: 160 bytes leftover after parsing attributes in process `syz.2.361'. [ 152.925689][ T5481] erspan0: refused to change device tx_queue_len [ 152.982323][ T5481] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 153.141073][ T5478] netlink: 'syz.3.358': attribute type 12 has an invalid length. [ 153.242840][ T5478] netlink: 172 bytes leftover after parsing attributes in process `syz.3.358'. [ 154.141199][ T5508] netlink: 'syz.2.370': attribute type 27 has an invalid length. [ 154.172575][ T5508] netlink: 'syz.2.370': attribute type 3 has an invalid length. [ 154.200054][ T5508] netlink: 132 bytes leftover after parsing attributes in process `syz.2.370'. [ 154.213444][ T5510] netlink: 'syz.0.371': attribute type 10 has an invalid length. [ 154.251027][ T5510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.371'. [ 154.271479][ T5510] bridge0: port 3(team0) entered blocking state [ 154.278385][ T5510] bridge0: port 3(team0) entered disabled state [ 154.294112][ T5510] device team0 entered promiscuous mode [ 154.299928][ T5510] device team_slave_0 entered promiscuous mode [ 154.318970][ T5510] device team_slave_1 entered promiscuous mode [ 154.332304][ T5510] bridge0: port 3(team0) entered blocking state [ 154.338806][ T5510] bridge0: port 3(team0) entered forwarding state [ 156.037932][ T5524] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.375'. [ 156.090599][ T5532] netlink: 'syz.4.377': attribute type 12 has an invalid length. [ 156.104633][ T5532] netlink: 172 bytes leftover after parsing attributes in process `syz.4.377'. [ 156.649192][ T5549] netlink: 'syz.3.382': attribute type 10 has an invalid length. [ 156.721857][ T5549] team0: Device vxcan1 is of different type [ 157.201760][ T5560] netlink: 'syz.1.388': attribute type 4 has an invalid length. [ 157.226094][ T5565] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 157.233161][ T5560] netlink: 152 bytes leftover after parsing attributes in process `syz.1.388'. [ 158.022804][ T5565] device 0 entered promiscuous mode [ 159.880911][ T5571] IPv6: Can't replace route, no match found [ 159.908383][ T5592] netlink: 160 bytes leftover after parsing attributes in process `syz.3.397'. [ 159.940647][ T5594] netlink: 'syz.1.396': attribute type 12 has an invalid length. [ 159.999475][ T5594] netlink: 172 bytes leftover after parsing attributes in process `syz.1.396'. [ 160.823050][ T5611] netlink: 'syz.1.403': attribute type 10 has an invalid length. [ 160.894900][ T5611] team0: Device vxcan1 is of different type [ 161.177364][ T5627] netlink: 180 bytes leftover after parsing attributes in process `syz.4.408'. [ 161.491650][ T5636] IPv6: Can't replace route, no match found [ 161.676458][ T5627] device pim6reg1 entered promiscuous mode [ 163.055441][ T5646] netlink: 'syz.2.413': attribute type 12 has an invalid length. [ 163.070638][ T5646] netlink: 172 bytes leftover after parsing attributes in process `syz.2.413'. [ 163.100049][ T5653] netlink: 'syz.3.417': attribute type 10 has an invalid length. [ 165.133619][ T5706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.438'. [ 165.169165][ T5709] netlink: 'syz.2.440': attribute type 3 has an invalid length. [ 165.190536][ T5709] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.440'. [ 165.200158][ T5706] device caif0 entered promiscuous mode [ 168.794577][ T5756] netlink: 'syz.0.455': attribute type 10 has an invalid length. [ 168.822009][ T5756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.455'. [ 170.157694][ T5805] netlink: 180 bytes leftover after parsing attributes in process `syz.2.471'. [ 170.396312][ T5807] device pim6reg1 entered promiscuous mode [ 170.687847][ T5817] netlink: 'syz.3.477': attribute type 10 has an invalid length. [ 170.761840][ T5817] bond0: (slave bond_slave_0): Releasing backup interface [ 170.856948][ T5821] netlink: 'syz.0.476': attribute type 21 has an invalid length. [ 170.921682][ T5821] netlink: 128 bytes leftover after parsing attributes in process `syz.0.476'. [ 170.952277][ T5821] netlink: 'syz.0.476': attribute type 4 has an invalid length. [ 171.003625][ T5821] netlink: 'syz.0.476': attribute type 5 has an invalid length. [ 171.011358][ T5821] netlink: 3 bytes leftover after parsing attributes in process `syz.0.476'. [ 171.571285][ T5835] netlink: 'syz.3.483': attribute type 11 has an invalid length. [ 171.579897][ T5835] netlink: 148 bytes leftover after parsing attributes in process `syz.3.483'. [ 171.596433][ T5839] netlink: 14 bytes leftover after parsing attributes in process `syz.0.484'. [ 171.608348][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.257571][ T5857] FAULT_INJECTION: forcing a failure. [ 172.257571][ T5857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.302605][ T5857] CPU: 0 PID: 5857 Comm: syz.3.490 Not tainted syzkaller #0 [ 172.309985][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.320094][ T5857] Call Trace: [ 172.323414][ T5857] [ 172.326383][ T5857] dump_stack_lvl+0x188/0x24e [ 172.331122][ T5857] ? show_regs_print_info+0x12/0x12 [ 172.336377][ T5857] ? load_image+0x400/0x400 [ 172.340926][ T5857] ? __lock_acquire+0x7d10/0x7d10 [ 172.346014][ T5857] should_fail_ex+0x399/0x4d0 [ 172.350749][ T5857] _copy_from_user+0x2c/0x170 [ 172.355459][ T5857] ___sys_sendmsg+0x1c3/0x360 [ 172.360181][ T5857] ? __sys_sendmsg+0x290/0x290 [ 172.364999][ T5857] ? __lock_acquire+0x7d10/0x7d10 [ 172.370071][ T5857] __se_sys_sendmsg+0x1bb/0x2a0 [ 172.375047][ T5857] ? __x64_sys_sendmsg+0x80/0x80 [ 172.380039][ T5857] ? lockdep_hardirqs_on+0x94/0x140 [ 172.385279][ T5857] do_syscall_64+0x4c/0xa0 [ 172.389731][ T5857] ? clear_bhb_loop+0x60/0xb0 [ 172.394437][ T5857] ? clear_bhb_loop+0x60/0xb0 [ 172.399147][ T5857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.405065][ T5857] RIP: 0033:0x7fab8019c799 [ 172.409500][ T5857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.429314][ T5857] RSP: 002b:00007fab810b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.437761][ T5857] RAX: ffffffffffffffda RBX: 00007fab80415fa0 RCX: 00007fab8019c799 [ 172.445753][ T5857] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 172.453742][ T5857] RBP: 00007fab810b8090 R08: 0000000000000000 R09: 0000000000000000 [ 172.461736][ T5857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.469729][ T5857] R13: 00007fab80416038 R14: 00007fab80415fa0 R15: 00007fff2534e488 [ 172.477743][ T5857] [ 172.738778][ T5864] netlink: 'syz.1.496': attribute type 3 has an invalid length. [ 172.767036][ T5864] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.496'. [ 173.060410][ T5877] netlink: 'syz.0.495': attribute type 3 has an invalid length. [ 173.096327][ T5877] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 173.155046][ T5877] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.495'. [ 173.671421][ T5879] netlink: 'syz.3.498': attribute type 4 has an invalid length. [ 173.710955][ T5879] netlink: 152 bytes leftover after parsing attributes in process `syz.3.498'. [ 175.928726][ T5891] FAULT_INJECTION: forcing a failure. [ 175.928726][ T5891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.946830][ T5891] CPU: 1 PID: 5891 Comm: syz.2.501 Not tainted syzkaller #0 [ 175.954182][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.964273][ T5891] Call Trace: [ 175.967588][ T5891] [ 175.970556][ T5891] dump_stack_lvl+0x188/0x24e [ 175.975286][ T5891] ? show_regs_print_info+0x12/0x12 [ 175.980537][ T5891] ? load_image+0x400/0x400 [ 175.985088][ T5891] ? __lock_acquire+0x7d10/0x7d10 [ 175.990157][ T5891] ? __fget_files+0x28/0x4b0 [ 175.994812][ T5891] should_fail_ex+0x399/0x4d0 [ 175.999558][ T5891] _copy_from_user+0x2c/0x170 [ 176.004285][ T5891] generic_map_update_batch+0x4a1/0x810 [ 176.009889][ T5891] ? rcu_read_unlock+0xa0/0xa0 [ 176.014706][ T5891] ? __fdget+0x17c/0x200 [ 176.019003][ T5891] ? rcu_read_unlock+0xa0/0xa0 [ 176.023852][ T5891] bpf_map_do_batch+0x466/0x600 [ 176.028773][ T5891] __sys_bpf+0x6f7/0x780 [ 176.033100][ T5891] ? bpf_link_show_fdinfo+0x380/0x380 [ 176.038591][ T5891] ? lock_chain_count+0x20/0x20 [ 176.043506][ T5891] __x64_sys_bpf+0x78/0x90 [ 176.047977][ T5891] do_syscall_64+0x4c/0xa0 [ 176.052455][ T5891] ? clear_bhb_loop+0x60/0xb0 [ 176.057181][ T5891] ? clear_bhb_loop+0x60/0xb0 [ 176.061901][ T5891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.067863][ T5891] RIP: 0033:0x7f64fdf9c799 [ 176.072323][ T5891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.091976][ T5891] RSP: 002b:00007f64feeee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.100446][ T5891] RAX: ffffffffffffffda RBX: 00007f64fe215fa0 RCX: 00007f64fdf9c799 [ 176.108462][ T5891] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 176.116482][ T5891] RBP: 00007f64feeee090 R08: 0000000000000000 R09: 0000000000000000 [ 176.124499][ T5891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.132503][ T5891] R13: 00007f64fe216038 R14: 00007f64fe215fa0 R15: 00007ffd74ee0f18 [ 176.140529][ T5891] [ 178.470290][ T5932] netlink: 'syz.0.515': attribute type 3 has an invalid length. [ 178.522675][ T5932] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.515'. [ 178.839026][ T5949] netlink: 'syz.1.516': attribute type 3 has an invalid length. [ 178.912712][ T5949] netlink: 'syz.1.516': attribute type 1 has an invalid length. [ 178.952694][ T5949] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.516'. [ 179.305768][ T5966] tap0: tun_chr_ioctl cmd 1074025675 [ 179.351133][ T5966] tap0: persist disabled [ 181.476157][ T6011] netlink: 'syz.4.536': attribute type 3 has an invalid length. [ 181.484793][ T6011] netlink: 'syz.4.536': attribute type 1 has an invalid length. [ 181.503433][ T6011] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.536'. [ 183.192015][ T6020] netlink: 'syz.3.538': attribute type 10 has an invalid length. [ 185.612107][ T6061] device wg2 entered promiscuous mode [ 185.806687][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'. [ 185.876878][ T6083] can: request_module (can-proto-0) failed. [ 188.557130][ T6125] netlink: 'syz.1.572': attribute type 10 has an invalid length. [ 188.567202][ T6125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.572'. [ 188.579460][ T6125] bridge0: port 3(team0) entered blocking state [ 188.585963][ T6125] bridge0: port 3(team0) entered forwarding state [ 188.593461][ T6125] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.685556][ T6129] netlink: 'syz.3.573': attribute type 2 has an invalid length. [ 188.706896][ T6129] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.573'. [ 188.729896][ T6129] syz.3.573 uses obsolete (PF_INET,SOCK_PACKET) [ 189.374265][ T6150] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 189.391376][ T6150] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 189.401861][ T6150] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 192.066084][ T6194] netlink: 'syz.0.596': attribute type 2 has an invalid length. [ 193.689026][ T6240] FAULT_INJECTION: forcing a failure. [ 193.689026][ T6240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.703507][ T6240] CPU: 0 PID: 6240 Comm: syz.2.614 Not tainted syzkaller #0 [ 193.710871][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.720982][ T6240] Call Trace: [ 193.724309][ T6240] [ 193.727283][ T6240] dump_stack_lvl+0x188/0x24e [ 193.732018][ T6240] ? show_regs_print_info+0x12/0x12 [ 193.737273][ T6240] ? load_image+0x400/0x400 [ 193.741821][ T6240] ? __lock_acquire+0x7d10/0x7d10 [ 193.746897][ T6240] should_fail_ex+0x399/0x4d0 [ 193.751628][ T6240] _copy_from_user+0x2c/0x170 [ 193.756345][ T6240] iovec_from_user+0x143/0x360 [ 193.761150][ T6240] __import_iovec+0x6d/0x500 [ 193.765793][ T6240] import_iovec+0x6f/0xa0 [ 193.770168][ T6240] ___sys_sendmsg+0x252/0x360 [ 193.774903][ T6240] ? __sys_sendmsg+0x290/0x290 [ 193.779730][ T6240] ? __lock_acquire+0x7d10/0x7d10 [ 193.784824][ T6240] __se_sys_sendmsg+0x1bb/0x2a0 [ 193.789724][ T6240] ? __x64_sys_sendmsg+0x80/0x80 [ 193.794730][ T6240] ? lockdep_hardirqs_on+0x94/0x140 [ 193.799971][ T6240] do_syscall_64+0x4c/0xa0 [ 193.804429][ T6240] ? clear_bhb_loop+0x60/0xb0 [ 193.809154][ T6240] ? clear_bhb_loop+0x60/0xb0 [ 193.813878][ T6240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.819809][ T6240] RIP: 0033:0x7f64fdf9c799 [ 193.824272][ T6240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.843915][ T6240] RSP: 002b:00007f64feeee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.852406][ T6240] RAX: ffffffffffffffda RBX: 00007f64fe215fa0 RCX: 00007f64fdf9c799 [ 193.860438][ T6240] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 193.868453][ T6240] RBP: 00007f64feeee090 R08: 0000000000000000 R09: 0000000000000000 [ 193.876471][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.884495][ T6240] R13: 00007f64fe216038 R14: 00007f64fe215fa0 R15: 00007ffd74ee0f18 [ 193.892542][ T6240] [ 194.730939][ T6248] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.617'. [ 194.872179][ T6256] netlink: 'syz.3.620': attribute type 10 has an invalid length. [ 194.915217][ T6256] netlink: 40 bytes leftover after parsing attributes in process `syz.3.620'. [ 194.940361][ T6256] device team0 entered promiscuous mode [ 194.955400][ T6256] device team_slave_0 entered promiscuous mode [ 194.963334][ T6256] device team_slave_1 entered promiscuous mode [ 194.970639][ T6256] bridge0: port 3(team0) entered blocking state [ 194.977903][ T6256] bridge0: port 3(team0) entered disabled state [ 194.987108][ T6256] bridge0: port 3(team0) entered blocking state [ 194.993593][ T6256] bridge0: port 3(team0) entered forwarding state [ 195.003630][ T6258] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.621'. [ 195.590628][ T6270] netlink: 'syz.4.626': attribute type 4 has an invalid length. [ 195.611742][ T6270] netlink: 152 bytes leftover after parsing attributes in process `syz.4.626'. [ 196.515327][ T6284] FAULT_INJECTION: forcing a failure. [ 196.515327][ T6284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.613553][ T6284] CPU: 1 PID: 6284 Comm: syz.4.631 Not tainted syzkaller #0 [ 196.620927][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.631033][ T6284] Call Trace: [ 196.634346][ T6284] [ 196.637318][ T6284] dump_stack_lvl+0x188/0x24e [ 196.642053][ T6284] ? show_regs_print_info+0x12/0x12 [ 196.647289][ T6284] ? load_image+0x400/0x400 [ 196.651828][ T6284] ? __lock_acquire+0x7d10/0x7d10 [ 196.656890][ T6284] ? __fget_files+0x28/0x4b0 [ 196.661556][ T6284] should_fail_ex+0x399/0x4d0 [ 196.666331][ T6284] _copy_from_user+0x2c/0x170 [ 196.671141][ T6284] generic_map_update_batch+0x4f3/0x810 [ 196.676744][ T6284] ? rcu_read_unlock+0xa0/0xa0 [ 196.681572][ T6284] ? __fdget+0x17c/0x200 [ 196.685874][ T6284] ? rcu_read_unlock+0xa0/0xa0 [ 196.690685][ T6284] bpf_map_do_batch+0x466/0x600 [ 196.695595][ T6284] __sys_bpf+0x6f7/0x780 [ 196.699898][ T6284] ? bpf_link_show_fdinfo+0x380/0x380 [ 196.705346][ T6284] ? lock_chain_count+0x20/0x20 [ 196.710262][ T6284] __x64_sys_bpf+0x78/0x90 [ 196.714735][ T6284] do_syscall_64+0x4c/0xa0 [ 196.719204][ T6284] ? clear_bhb_loop+0x60/0xb0 [ 196.723925][ T6284] ? clear_bhb_loop+0x60/0xb0 [ 196.728648][ T6284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.734593][ T6284] RIP: 0033:0x7efdddd9c799 [ 196.739069][ T6284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.758727][ T6284] RSP: 002b:00007efddec43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.767200][ T6284] RAX: ffffffffffffffda RBX: 00007efdde015fa0 RCX: 00007efdddd9c799 [ 196.775224][ T6284] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 196.783247][ T6284] RBP: 00007efddec43090 R08: 0000000000000000 R09: 0000000000000000 [ 196.791290][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.799312][ T6284] R13: 00007efdde016038 R14: 00007efdde015fa0 R15: 00007ffcb64541f8 [ 196.807359][ T6284] [ 197.402044][ T6305] pimreg: tun_chr_ioctl cmd 1074025684 [ 197.429998][ T6305] pimreg: tun_chr_ioctl cmd 2147767520 [ 197.530215][ T6307] netlink: 160 bytes leftover after parsing attributes in process `syz.3.641'. [ 199.192985][ T6348] FAULT_INJECTION: forcing a failure. [ 199.192985][ T6348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.217155][ T6348] CPU: 0 PID: 6348 Comm: syz.0.654 Not tainted syzkaller #0 [ 199.224615][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.234711][ T6348] Call Trace: [ 199.238045][ T6348] [ 199.241012][ T6348] dump_stack_lvl+0x188/0x24e [ 199.245736][ T6348] ? show_regs_print_info+0x12/0x12 [ 199.250962][ T6348] ? load_image+0x400/0x400 [ 199.255506][ T6348] ? __lock_acquire+0x7d10/0x7d10 [ 199.260569][ T6348] should_fail_ex+0x399/0x4d0 [ 199.265282][ T6348] _copy_from_user+0x2c/0x170 [ 199.269992][ T6348] iovec_from_user+0x143/0x360 [ 199.274785][ T6348] __import_iovec+0x6d/0x500 [ 199.279408][ T6348] import_iovec+0x6f/0xa0 [ 199.283766][ T6348] ___sys_sendmsg+0x252/0x360 [ 199.288480][ T6348] ? __sys_sendmsg+0x290/0x290 [ 199.293291][ T6348] ? __lock_acquire+0x7d10/0x7d10 [ 199.298368][ T6348] __se_sys_sendmsg+0x1bb/0x2a0 [ 199.303247][ T6348] ? ct_nmi_exit+0x145/0x1c0 [ 199.307878][ T6348] ? __x64_sys_sendmsg+0x80/0x80 [ 199.312861][ T6348] ? lockdep_hardirqs_on+0x94/0x140 [ 199.318108][ T6348] do_syscall_64+0x4c/0xa0 [ 199.322559][ T6348] ? clear_bhb_loop+0x60/0xb0 [ 199.327285][ T6348] ? clear_bhb_loop+0x60/0xb0 [ 199.331985][ T6348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.337910][ T6348] RIP: 0033:0x7f9bf719c799 [ 199.342353][ T6348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.361984][ T6348] RSP: 002b:00007f9bf7fc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.370430][ T6348] RAX: ffffffffffffffda RBX: 00007f9bf7415fa0 RCX: 00007f9bf719c799 [ 199.378423][ T6348] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 199.386413][ T6348] RBP: 00007f9bf7fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 199.394411][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.402399][ T6348] R13: 00007f9bf7416038 R14: 00007f9bf7415fa0 R15: 00007ffedc04f938 [ 199.410409][ T6348] [ 199.886995][ T6361] netlink: 'syz.4.657': attribute type 15 has an invalid length. [ 199.911901][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.918640][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.925697][ T6381] delete_channel: no stack [ 201.677870][ T6403] netlink: 'syz.1.674': attribute type 10 has an invalid length. [ 201.760201][ T6403] team0: Device vxcan1 is of different type [ 202.470843][ T6427] netlink: 76 bytes leftover after parsing attributes in process `syz.3.684'. [ 202.661927][ T6434] netlink: 'syz.0.686': attribute type 10 has an invalid length. [ 202.710410][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.131444][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.308392][ T6434] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 206.827444][ T6505] netlink: 'syz.3.707': attribute type 13 has an invalid length. [ 206.849483][ T6505] netlink: 160 bytes leftover after parsing attributes in process `syz.3.707'. [ 206.933377][ T6505] erspan0: refused to change device tx_queue_len [ 206.982626][ T6505] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 207.092713][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 207.092733][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 207.099020][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 207.099054][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 207.099083][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 207.813974][ T6518] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.710'. [ 208.069690][ T6522] device syzkaller0 entered promiscuous mode [ 212.748665][ T6599] netlink: 132 bytes leftover after parsing attributes in process `syz.4.739'. [ 212.813697][ T6601] FAULT_INJECTION: forcing a failure. [ 212.813697][ T6601] name failslab, interval 1, probability 0, space 0, times 1 [ 212.940256][ T6601] CPU: 0 PID: 6601 Comm: syz.2.740 Not tainted syzkaller #0 [ 212.947630][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.957733][ T6601] Call Trace: [ 212.961065][ T6601] [ 212.964035][ T6601] dump_stack_lvl+0x188/0x24e [ 212.968768][ T6601] ? show_regs_print_info+0x12/0x12 [ 212.974018][ T6601] ? load_image+0x400/0x400 [ 212.978575][ T6601] ? __might_sleep+0xd0/0xd0 [ 212.983226][ T6601] ? __lock_acquire+0x7d10/0x7d10 [ 212.988310][ T6601] should_fail_ex+0x399/0x4d0 [ 212.993055][ T6601] should_failslab+0x5/0x20 [ 212.997624][ T6601] slab_pre_alloc_hook+0x59/0x310 [ 213.002698][ T6601] kmem_cache_alloc_node+0x5a/0x320 [ 213.007941][ T6601] ? __alloc_skb+0xfc/0x7e0 [ 213.012525][ T6601] __alloc_skb+0xfc/0x7e0 [ 213.016909][ T6601] ? netlink_autobind+0xda/0x300 [ 213.021915][ T6601] netlink_sendmsg+0x654/0xbd0 [ 213.026742][ T6601] ? netlink_getsockopt+0x550/0x550 [ 213.032004][ T6601] ? aa_sock_msg_perm+0x94/0x150 [ 213.036990][ T6601] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 213.042323][ T6601] ? security_socket_sendmsg+0x7c/0xa0 [ 213.047853][ T6601] ? netlink_getsockopt+0x550/0x550 [ 213.053109][ T6601] ____sys_sendmsg+0x5be/0x970 [ 213.057938][ T6601] ? __sys_sendmsg_sock+0x30/0x30 [ 213.063028][ T6601] ? __import_iovec+0x315/0x500 [ 213.067926][ T6601] ? import_iovec+0x6f/0xa0 [ 213.072481][ T6601] ___sys_sendmsg+0x2a2/0x360 [ 213.077223][ T6601] ? __sys_sendmsg+0x290/0x290 [ 213.082062][ T6601] ? __lock_acquire+0x7d10/0x7d10 [ 213.087167][ T6601] __se_sys_sendmsg+0x1bb/0x2a0 [ 213.092071][ T6601] ? __x64_sys_sendmsg+0x80/0x80 [ 213.097077][ T6601] ? lockdep_hardirqs_on+0x94/0x140 [ 213.102327][ T6601] do_syscall_64+0x4c/0xa0 [ 213.106792][ T6601] ? clear_bhb_loop+0x60/0xb0 [ 213.111530][ T6601] ? clear_bhb_loop+0x60/0xb0 [ 213.116278][ T6601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.122224][ T6601] RIP: 0033:0x7f64fdf9c799 [ 213.126691][ T6601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.146344][ T6601] RSP: 002b:00007f64feeee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.154816][ T6601] RAX: ffffffffffffffda RBX: 00007f64fe215fa0 RCX: 00007f64fdf9c799 [ 213.162843][ T6601] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 213.170882][ T6601] RBP: 00007f64feeee090 R08: 0000000000000000 R09: 0000000000000000 [ 213.178914][ T6601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.186932][ T6601] R13: 00007f64fe216038 R14: 00007f64fe215fa0 R15: 00007ffd74ee0f18 [ 213.194968][ T6601] [ 213.907981][ T6621] device syzkaller0 entered promiscuous mode [ 214.143781][ T6634] netlink: 'syz.4.750': attribute type 11 has an invalid length. [ 214.183974][ T6634] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.750'. [ 214.224542][ T6634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.173035][ T6637] netlink: 'syz.1.749': attribute type 4 has an invalid length. [ 216.182789][ T6637] netlink: 152 bytes leftover after parsing attributes in process `syz.1.749'. [ 216.201501][ T6640] netlink: 'syz.0.751': attribute type 12 has an invalid length. [ 216.231982][ T6640] netlink: 172 bytes leftover after parsing attributes in process `syz.0.751'. [ 216.272673][ T6647] netlink: 132 bytes leftover after parsing attributes in process `syz.3.756'. [ 217.305894][ T6660] bridge0: port 3(team0) entered disabled state [ 217.347912][ T6662] netlink: 'syz.3.760': attribute type 10 has an invalid length. [ 217.384666][ T6662] device vxcan1 entered promiscuous mode [ 217.390487][ T6662] team0: Device vxcan1 is of different type [ 218.651429][ T6691] netlink: 132 bytes leftover after parsing attributes in process `syz.0.772'. [ 219.596498][ T6699] netlink: 'syz.3.773': attribute type 12 has an invalid length. [ 219.627817][ T6699] netlink: 172 bytes leftover after parsing attributes in process `syz.3.773'. [ 219.816361][ T6716] netlink: 'syz.2.779': attribute type 10 has an invalid length. [ 220.659243][ T6716] team0: Device hsr_slave_0 failed to register rx_handler [ 220.691442][ T6721] IPv6: Can't replace route, no match found [ 221.328479][ T6746] netlink: 'syz.0.789': attribute type 10 has an invalid length. [ 221.362771][ T6746] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 221.862287][ T6753] netlink: 'syz.1.792': attribute type 12 has an invalid length. [ 221.876994][ T6753] netlink: 172 bytes leftover after parsing attributes in process `syz.1.792'. [ 222.622218][ T6779] netlink: 'syz.0.801': attribute type 10 has an invalid length. [ 222.639231][ T6779] netlink: 40 bytes leftover after parsing attributes in process `syz.0.801'. [ 223.246286][ T6786] netlink: 'syz.3.803': attribute type 13 has an invalid length. [ 223.257483][ T6786] netlink: 160 bytes leftover after parsing attributes in process `syz.3.803'. [ 223.284245][ T6786] erspan0: refused to change device tx_queue_len [ 223.299626][ T6786] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 223.385880][ T6793] netlink: 'syz.0.815': attribute type 10 has an invalid length. [ 223.554738][ T6793] team0: Device hsr_slave_0 failed to register rx_handler [ 223.723907][ T6794] device syzkaller0 entered promiscuous mode [ 227.492509][ T6834] netlink: 'syz.2.820': attribute type 21 has an invalid length. [ 227.504499][ T6849] netlink: 'syz.4.825': attribute type 10 has an invalid length. [ 227.561628][ T6849] team0: Device hsr_slave_0 failed to register rx_handler [ 228.298171][ T6877] netlink: 'syz.3.832': attribute type 12 has an invalid length. [ 228.313926][ T6877] netlink: 172 bytes leftover after parsing attributes in process `syz.3.832'. [ 229.241525][ T6881] netlink: 'syz.1.833': attribute type 12 has an invalid length. [ 229.253597][ T6881] netlink: 172 bytes leftover after parsing attributes in process `syz.1.833'. [ 230.161253][ T6906] netlink: 'syz.0.842': attribute type 10 has an invalid length. [ 230.174913][ T6906] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 230.404699][ T6913] netlink: 'syz.3.846': attribute type 11 has an invalid length. [ 230.427884][ T6913] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.846'. [ 230.445608][ T6913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.306098][ T6931] FAULT_INJECTION: forcing a failure. [ 231.306098][ T6931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.310443][ T6924] netlink: 'syz.0.849': attribute type 12 has an invalid length. [ 231.332452][ T6924] netlink: 172 bytes leftover after parsing attributes in process `syz.0.849'. [ 231.360028][ T6931] CPU: 0 PID: 6931 Comm: syz.3.853 Not tainted syzkaller #0 [ 231.367389][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 231.377490][ T6931] Call Trace: [ 231.380821][ T6931] [ 231.383788][ T6931] dump_stack_lvl+0x188/0x24e [ 231.388528][ T6931] ? show_regs_print_info+0x12/0x12 [ 231.393782][ T6931] ? load_image+0x400/0x400 [ 231.398333][ T6931] ? __lock_acquire+0x7d10/0x7d10 [ 231.403430][ T6931] ? __fget_files+0x28/0x4b0 [ 231.408068][ T6931] should_fail_ex+0x399/0x4d0 [ 231.412789][ T6931] _copy_from_user+0x2c/0x170 [ 231.417492][ T6931] generic_map_update_batch+0x4f3/0x810 [ 231.423100][ T6931] ? rcu_read_unlock+0xa0/0xa0 [ 231.427895][ T6931] ? __fdget+0x17c/0x200 [ 231.432164][ T6931] ? rcu_read_unlock+0xa0/0xa0 [ 231.436954][ T6931] bpf_map_do_batch+0x466/0x600 [ 231.441843][ T6931] __sys_bpf+0x6f7/0x780 [ 231.446118][ T6931] ? bpf_link_show_fdinfo+0x380/0x380 [ 231.451545][ T6931] ? lock_chain_count+0x20/0x20 [ 231.456448][ T6931] __x64_sys_bpf+0x78/0x90 [ 231.460903][ T6931] do_syscall_64+0x4c/0xa0 [ 231.465382][ T6931] ? clear_bhb_loop+0x60/0xb0 [ 231.470099][ T6931] ? clear_bhb_loop+0x60/0xb0 [ 231.474813][ T6931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.480739][ T6931] RIP: 0033:0x7fab8019c799 [ 231.485230][ T6931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.504869][ T6931] RSP: 002b:00007fab810b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.513310][ T6931] RAX: ffffffffffffffda RBX: 00007fab80415fa0 RCX: 00007fab8019c799 [ 231.521301][ T6931] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 231.529297][ T6931] RBP: 00007fab810b8090 R08: 0000000000000000 R09: 0000000000000000 [ 231.537294][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.545289][ T6931] R13: 00007fab80416038 R14: 00007fab80415fa0 R15: 00007fff2534e488 [ 231.553296][ T6931] [ 232.759362][ T6959] bridge0: port 3(team0) entered disabled state [ 232.766100][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.773729][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.818518][ T6965] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 232.830665][ T6965] netlink: 132 bytes leftover after parsing attributes in process `syz.3.860'. [ 232.948438][ T6968] netlink: 'syz.4.861': attribute type 4 has an invalid length. [ 232.976141][ T6965] Dead loop on virtual device ip6_vti0, fix it urgently! [ 232.984517][ T6968] netlink: 152 bytes leftover after parsing attributes in process `syz.4.861'. [ 233.011152][ T6959] bridge0: port 3(team0) entered disabled state [ 233.045075][ T6959] device bridge_slave_1 left promiscuous mode [ 233.051946][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.108262][ T6959] device bridge_slave_0 left promiscuous mode [ 233.127151][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.447803][ T7045] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 237.723797][ T7063] netlink: 'syz.3.898': attribute type 12 has an invalid length. [ 237.734567][ T7063] netlink: 172 bytes leftover after parsing attributes in process `syz.3.898'. [ 238.525036][ T7076] netlink: 'syz.1.902': attribute type 10 has an invalid length. [ 238.564384][ T7076] team0: Device vxcan1 is of different type [ 239.269620][ T7094] netlink: 'syz.4.907': attribute type 10 has an invalid length. [ 239.420304][ T7094] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 241.471565][ T7126] netlink: 'syz.4.917': attribute type 12 has an invalid length. [ 241.494576][ T7126] netlink: 172 bytes leftover after parsing attributes in process `syz.4.917'. [ 241.901274][ T7140] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.908982][ T7140] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.993311][ T7142] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 242.089850][ T7142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.921'. [ 242.161194][ T7140] device team0 left promiscuous mode [ 242.170709][ T7140] device team_slave_0 left promiscuous mode [ 242.186342][ T7140] device team_slave_1 left promiscuous mode [ 242.200008][ T7140] bridge0: port 3(team0) entered disabled state [ 242.248005][ T7142] Dead loop on virtual device ip6_vti0, fix it urgently! [ 242.813437][ T7162] netlink: 60 bytes leftover after parsing attributes in process `syz.3.930'. [ 242.854303][ T7140] device bridge_slave_1 left promiscuous mode [ 242.860650][ T7140] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.560340][ T7140] device bridge_slave_0 left promiscuous mode [ 243.567009][ T7140] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.739079][ T7166] netlink: 'syz.2.931': attribute type 12 has an invalid length. [ 243.778421][ T7166] netlink: 172 bytes leftover after parsing attributes in process `syz.2.931'. [ 245.123591][ T7199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.938'. [ 246.799890][ T7236] netlink: 'syz.4.951': attribute type 12 has an invalid length. [ 246.823131][ T7236] netlink: 172 bytes leftover after parsing attributes in process `syz.4.951'. [ 248.070582][ T7265] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.960'. [ 248.935968][ T7277] netlink: 'syz.0.962': attribute type 12 has an invalid length. [ 248.993813][ T7277] netlink: 172 bytes leftover after parsing attributes in process `syz.0.962'. [ 250.114787][ T7300] netlink: 60 bytes leftover after parsing attributes in process `syz.1.970'. [ 250.669378][ T7312] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 250.706243][ T7312] team0: Device vxcan1 is of different type [ 250.981114][ T7322] netlink: 'syz.4.977': attribute type 10 has an invalid length. [ 251.022614][ T7322] netlink: 40 bytes leftover after parsing attributes in process `syz.4.977'. [ 251.031995][ T7322] device team0 entered promiscuous mode [ 251.062634][ T7322] device team_slave_0 entered promiscuous mode [ 251.069022][ T7322] device team_slave_1 entered promiscuous mode [ 251.091712][ T7322] device bond0 entered promiscuous mode [ 251.097798][ T7322] device bond_slave_0 entered promiscuous mode [ 251.112762][ T7322] device bond_slave_1 entered promiscuous mode [ 251.128986][ T7322] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 251.157438][ T7326] netlink: 'syz.2.979': attribute type 2 has an invalid length. [ 251.324908][ T7331] FAULT_INJECTION: forcing a failure. [ 251.324908][ T7331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.376441][ T7331] CPU: 0 PID: 7331 Comm: syz.0.980 Not tainted syzkaller #0 [ 251.383897][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.393998][ T7331] Call Trace: [ 251.397311][ T7331] [ 251.400361][ T7331] dump_stack_lvl+0x188/0x24e [ 251.405095][ T7331] ? show_regs_print_info+0x12/0x12 [ 251.410354][ T7331] ? load_image+0x400/0x400 [ 251.414965][ T7331] ? __lock_acquire+0x7d10/0x7d10 [ 251.420044][ T7331] ? __fget_files+0x28/0x4b0 [ 251.424683][ T7331] should_fail_ex+0x399/0x4d0 [ 251.429403][ T7331] _copy_from_user+0x2c/0x170 [ 251.434119][ T7331] generic_map_update_batch+0x4a1/0x810 [ 251.439706][ T7331] ? rcu_read_unlock+0xa0/0xa0 [ 251.444512][ T7331] ? __fdget+0x17c/0x200 [ 251.448791][ T7331] ? rcu_read_unlock+0xa0/0xa0 [ 251.453671][ T7331] bpf_map_do_batch+0x466/0x600 [ 251.458561][ T7331] __sys_bpf+0x6f7/0x780 [ 251.462850][ T7331] ? bpf_link_show_fdinfo+0x380/0x380 [ 251.468262][ T7331] ? lock_chain_count+0x20/0x20 [ 251.473150][ T7331] __x64_sys_bpf+0x78/0x90 [ 251.477624][ T7331] do_syscall_64+0x4c/0xa0 [ 251.482075][ T7331] ? clear_bhb_loop+0x60/0xb0 [ 251.486790][ T7331] ? clear_bhb_loop+0x60/0xb0 [ 251.491508][ T7331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.497441][ T7331] RIP: 0033:0x7f9bf719c799 [ 251.501889][ T7331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.521526][ T7331] RSP: 002b:00007f9bf7fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.529979][ T7331] RAX: ffffffffffffffda RBX: 00007f9bf7415fa0 RCX: 00007f9bf719c799 [ 251.537983][ T7331] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 251.545987][ T7331] RBP: 00007f9bf7fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 251.553983][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.561974][ T7331] R13: 00007f9bf7416038 R14: 00007f9bf7415fa0 R15: 00007ffedc04f938 [ 251.569977][ T7331] [ 252.176788][ T7341] netlink: 'syz.3.982': attribute type 12 has an invalid length. [ 252.187708][ T7341] netlink: 172 bytes leftover after parsing attributes in process `syz.3.982'. [ 253.509224][ T7375] netlink: 'syz.0.992': attribute type 11 has an invalid length. [ 253.531203][ T7374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.994'. [ 253.557044][ T7375] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.992'. [ 253.624518][ T7375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.699536][ T7381] netlink: 160 bytes leftover after parsing attributes in process `syz.1.995'. [ 253.744495][ T7381] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 255.208587][ T7402] netlink: 'syz.0.1004': attribute type 12 has an invalid length. [ 255.227575][ T7402] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1004'. [ 255.765548][ T7414] device syzkaller0 entered promiscuous mode [ 257.139715][ T7446] delete_channel: no stack [ 257.161765][ T7446] delete_channel: no stack [ 261.339430][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.346315][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.595000][ T7465] netlink: 'syz.0.1023': attribute type 12 has an invalid length. [ 261.602937][ T7465] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1023'. [ 261.728282][ T7495] device syzkaller0 entered promiscuous mode [ 264.516568][ T7513] netlink: 'syz.4.1039': attribute type 21 has an invalid length. [ 264.524877][ T7516] netlink: 'syz.4.1039': attribute type 10 has an invalid length. [ 264.553629][ T7516] device netdevsim0 entered promiscuous mode [ 264.564925][ T7516] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 264.574447][ T7531] netlink: 'syz.2.1046': attribute type 13 has an invalid length. [ 264.587679][ T7531] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1046'. [ 264.604641][ T7531] erspan0: refused to change device tx_queue_len [ 264.611039][ T7531] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 264.992767][ T7549] netlink: 'syz.1.1062': attribute type 13 has an invalid length. [ 265.010907][ T7549] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1062'. [ 265.044420][ T7549] erspan0: refused to change device tx_queue_len [ 265.092771][ T7549] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 265.460448][ T7562] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1056'. [ 265.510017][ T7567] netlink: 'syz.2.1058': attribute type 10 has an invalid length. [ 265.533684][ T7567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1058'. [ 266.242195][ T7569] device syzkaller0 entered promiscuous mode [ 266.273764][ T7573] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1060'. [ 266.400862][ T7577] netlink: 'syz.0.1064': attribute type 11 has an invalid length. [ 266.431438][ T7577] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1064'. [ 266.488748][ T7577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.619729][ T4284] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 266.828470][ T7591] FAULT_INJECTION: forcing a failure. [ 266.828470][ T7591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.861900][ T7591] CPU: 1 PID: 7591 Comm: syz.2.1069 Not tainted syzkaller #0 [ 266.869351][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.879445][ T7591] Call Trace: [ 266.882756][ T7591] [ 266.885780][ T7591] dump_stack_lvl+0x188/0x24e [ 266.890517][ T7591] ? show_regs_print_info+0x12/0x12 [ 266.895801][ T7591] ? load_image+0x400/0x400 [ 266.900350][ T7591] ? __lock_acquire+0x7d10/0x7d10 [ 266.905443][ T7591] should_fail_ex+0x399/0x4d0 [ 266.910186][ T7591] _copy_from_user+0x2c/0x170 [ 266.914922][ T7591] generic_map_update_batch+0x4f3/0x810 [ 266.920532][ T7591] ? rcu_read_unlock+0xa0/0xa0 [ 266.925366][ T7591] ? __fdget+0x17c/0x200 [ 266.929684][ T7591] ? rcu_read_unlock+0xa0/0xa0 [ 266.934500][ T7591] bpf_map_do_batch+0x466/0x600 [ 266.939436][ T7591] __sys_bpf+0x6f7/0x780 [ 266.943764][ T7591] ? bpf_link_show_fdinfo+0x380/0x380 [ 266.949208][ T7591] ? lock_chain_count+0x20/0x20 [ 266.954119][ T7591] __x64_sys_bpf+0x78/0x90 [ 266.958595][ T7591] do_syscall_64+0x4c/0xa0 [ 266.963072][ T7591] ? clear_bhb_loop+0x60/0xb0 [ 266.967804][ T7591] ? clear_bhb_loop+0x60/0xb0 [ 266.972561][ T7591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.978557][ T7591] RIP: 0033:0x7f64fdf9c799 [ 266.983022][ T7591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.002675][ T7591] RSP: 002b:00007f64feeee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.011157][ T7591] RAX: ffffffffffffffda RBX: 00007f64fe215fa0 RCX: 00007f64fdf9c799 [ 267.019172][ T7591] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 267.027187][ T7591] RBP: 00007f64feeee090 R08: 0000000000000000 R09: 0000000000000000 [ 267.035210][ T7591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.043224][ T7591] R13: 00007f64fe216038 R14: 00007f64fe215fa0 R15: 00007ffd74ee0f18 [ 267.051266][ T7591] [ 268.933190][ T7629] FAULT_INJECTION: forcing a failure. [ 268.933190][ T7629] name failslab, interval 1, probability 0, space 0, times 0 [ 268.947447][ T7629] CPU: 0 PID: 7629 Comm: syz.0.1084 Not tainted syzkaller #0 [ 268.954877][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.964974][ T7629] Call Trace: [ 268.968291][ T7629] [ 268.971262][ T7629] dump_stack_lvl+0x188/0x24e [ 268.975999][ T7629] ? show_regs_print_info+0x12/0x12 [ 268.981242][ T7629] ? load_image+0x400/0x400 [ 268.985768][ T7629] ? verify_lock_unused+0x140/0x140 [ 268.991028][ T7629] should_fail_ex+0x399/0x4d0 [ 268.995765][ T7629] should_failslab+0x5/0x20 [ 269.000310][ T7629] slab_pre_alloc_hook+0x59/0x310 [ 269.005365][ T7629] kmem_cache_alloc+0x56/0x2f0 [ 269.010161][ T7629] ? skb_clone+0x1e7/0x370 [ 269.014614][ T7629] skb_clone+0x1e7/0x370 [ 269.018896][ T7629] __netlink_deliver_tap+0x3ed/0x800 [ 269.024221][ T7629] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.029457][ T7629] netlink_deliver_tap+0x19c/0x1b0 [ 269.034603][ T7629] netlink_unicast+0x728/0x8d0 [ 269.039445][ T7629] netlink_sendmsg+0x8ad/0xbd0 [ 269.044246][ T7629] ? netlink_getsockopt+0x550/0x550 [ 269.049484][ T7629] ? aa_sock_msg_perm+0x94/0x150 [ 269.054461][ T7629] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 269.059773][ T7629] ? security_socket_sendmsg+0x7c/0xa0 [ 269.065269][ T7629] ? netlink_getsockopt+0x550/0x550 [ 269.070502][ T7629] ____sys_sendmsg+0x5be/0x970 [ 269.075318][ T7629] ? __sys_sendmsg_sock+0x30/0x30 [ 269.080377][ T7629] ? __import_iovec+0x315/0x500 [ 269.085257][ T7629] ? import_iovec+0x6f/0xa0 [ 269.089788][ T7629] ___sys_sendmsg+0x2a2/0x360 [ 269.094505][ T7629] ? __sys_sendmsg+0x290/0x290 [ 269.099314][ T7629] ? __lock_acquire+0x7d10/0x7d10 [ 269.104390][ T7629] __se_sys_sendmsg+0x1bb/0x2a0 [ 269.109281][ T7629] ? __x64_sys_sendmsg+0x80/0x80 [ 269.114268][ T7629] ? lockdep_hardirqs_on+0x94/0x140 [ 269.119491][ T7629] do_syscall_64+0x4c/0xa0 [ 269.123932][ T7629] ? clear_bhb_loop+0x60/0xb0 [ 269.128639][ T7629] ? clear_bhb_loop+0x60/0xb0 [ 269.133349][ T7629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.139271][ T7629] RIP: 0033:0x7f9bf719c799 [ 269.143717][ T7629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.163352][ T7629] RSP: 002b:00007f9bf7fc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.171798][ T7629] RAX: ffffffffffffffda RBX: 00007f9bf7415fa0 RCX: 00007f9bf719c799 [ 269.179793][ T7629] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 269.187794][ T7629] RBP: 00007f9bf7fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 269.195791][ T7629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.203817][ T7629] R13: 00007f9bf7416038 R14: 00007f9bf7415fa0 R15: 00007ffedc04f938 [ 269.211828][ T7629] [ 270.024973][ T7588] netlink: 'syz.3.1068': attribute type 10 has an invalid length. [ 270.034281][ T7588] team0: Device vxcan1 is of different type [ 270.281939][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.328644][ T7631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.354861][ T7644] netlink: 'syz.4.1087': attribute type 4 has an invalid length. [ 271.371455][ T7644] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1087'. [ 271.860288][ T7662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1092'. [ 272.239219][ T7667] device team0 left promiscuous mode [ 272.277359][ T7667] device team_slave_0 left promiscuous mode [ 272.316964][ T7667] device team_slave_1 left promiscuous mode [ 272.362694][ T7667] device bond0 left promiscuous mode [ 272.374719][ T7667] device bond_slave_0 left promiscuous mode [ 272.383490][ T7667] device bond_slave_1 left promiscuous mode [ 272.410695][ T7667] device netdevsim0 left promiscuous mode [ 272.647269][ T7676] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1099'. [ 274.488037][ T7702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1111'. [ 274.972839][ T7716] netlink: 'syz.2.1116': attribute type 10 has an invalid length. [ 275.084318][ T7716] device vxcan1 entered promiscuous mode [ 275.121004][ T7716] team0: Device vxcan1 is of different type [ 275.312966][ T7725] netlink: 60583 bytes leftover after parsing attributes in process `syz.4.1121'. [ 275.372106][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1121'. [ 275.667492][ T7734] netlink: 'syz.1.1124': attribute type 2 has an invalid length. [ 275.726651][ T7734] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1124'. [ 275.794587][ T7736] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1124'. [ 276.033498][ T7746] netlink: 'syz.3.1129': attribute type 27 has an invalid length. [ 276.041378][ T7746] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1129'. [ 276.269583][ T7759] netlink: 'syz.2.1134': attribute type 10 has an invalid length. [ 276.349457][ T7759] team0: Device vxcan1 is of different type [ 276.951669][ T7783] netlink: 'syz.4.1142': attribute type 3 has an invalid length. [ 276.965444][ T7783] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 276.978325][ T7783] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1142'. [ 278.855271][ T7838] netlink: 'syz.1.1166': attribute type 13 has an invalid length. [ 278.873131][ T7838] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1166'. [ 278.893031][ T7838] erspan0: refused to change device tx_queue_len [ 278.899661][ T7838] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 278.988665][ T7835] device syzkaller0 entered promiscuous mode [ 279.004152][ T7840] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1165'. [ 279.019648][ T7841] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1167'. [ 279.051153][ T7841] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 282.586875][ T7889] netlink: 'syz.3.1185': attribute type 39 has an invalid length. [ 282.817212][ T7896] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1186'. [ 282.895329][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 284.148551][ T7923] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1200'. [ 284.149326][ T7924] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1198'. [ 284.186300][ T7923] device team0 entered promiscuous mode [ 284.210202][ T7923] device team_slave_0 entered promiscuous mode [ 284.239666][ T7923] device team_slave_1 entered promiscuous mode [ 284.274538][ T7923] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.615282][ T7940] FAULT_INJECTION: forcing a failure. [ 284.615282][ T7940] name failslab, interval 1, probability 0, space 0, times 0 [ 284.693720][ T7940] CPU: 1 PID: 7940 Comm: syz.1.1203 Not tainted syzkaller #0 [ 284.701186][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.711943][ T7940] Call Trace: [ 284.715282][ T7940] [ 284.718275][ T7940] dump_stack_lvl+0x188/0x24e [ 284.723039][ T7940] ? show_regs_print_info+0x12/0x12 [ 284.728316][ T7940] ? load_image+0x400/0x400 [ 284.732890][ T7940] ? __might_sleep+0xd0/0xd0 [ 284.737545][ T7940] ? __lock_acquire+0x7d10/0x7d10 [ 284.742651][ T7940] should_fail_ex+0x399/0x4d0 [ 284.747479][ T7940] should_failslab+0x5/0x20 [ 284.752057][ T7940] slab_pre_alloc_hook+0x59/0x310 [ 284.757152][ T7940] ? __get_vm_area_node+0x122/0x330 [ 284.762448][ T7940] __kmem_cache_alloc_node+0x4f/0x260 [ 284.767898][ T7940] ? __get_vm_area_node+0x122/0x330 [ 284.773171][ T7940] kmalloc_node_trace+0x22/0xe0 [ 284.778105][ T7940] __get_vm_area_node+0x122/0x330 [ 284.783194][ T7940] ? __local_bh_enable_ip+0x136/0x1c0 [ 284.788627][ T7940] __vmalloc_node_range+0x357/0x13b0 [ 284.793987][ T7940] ? netlink_sendmsg+0x5ec/0xbd0 [ 284.799097][ T7940] ? netlink_insert+0x1034/0x13c0 [ 284.804282][ T7940] ? free_vm_area+0x50/0x50 [ 284.808864][ T7940] ? netlink_sendmsg+0x5ec/0xbd0 [ 284.813863][ T7940] vmalloc+0x75/0x80 [ 284.817821][ T7940] ? netlink_sendmsg+0x5ec/0xbd0 [ 284.822824][ T7940] netlink_sendmsg+0x5ec/0xbd0 [ 284.827673][ T7940] ? netlink_getsockopt+0x550/0x550 [ 284.832942][ T7940] ? aa_file_perm+0x3ea/0xf00 [ 284.837687][ T7940] ? aa_file_perm+0x112/0xf00 [ 284.842415][ T7940] ? aa_sock_msg_perm+0x94/0x150 [ 284.847424][ T7940] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 284.852770][ T7940] ? security_socket_sendmsg+0x7c/0xa0 [ 284.858307][ T7940] sock_write_iter+0x2d9/0x3e0 [ 284.863150][ T7940] ? sock_read_iter+0x3a0/0x3a0 [ 284.868089][ T7940] ? common_file_perm+0x171/0x1c0 [ 284.873209][ T7941] netlink: 'syz.3.1204': attribute type 12 has an invalid length. [ 284.873205][ T7940] vfs_write+0x4b1/0xa30 [ 284.873258][ T7940] ? file_end_write+0x250/0x250 [ 284.881363][ T7941] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1204'. [ 284.885339][ T7940] ? __fget_files+0x43d/0x4b0 [ 284.885388][ T7940] ? __fdget_pos+0x1d4/0x360 [ 284.885415][ T7940] ? ksys_write+0x71/0x250 [ 284.885452][ T7940] ksys_write+0x14c/0x250 [ 284.885497][ T7940] ? __ia32_sys_read+0x80/0x80 [ 284.885537][ T7940] ? lockdep_hardirqs_on+0x94/0x140 [ 284.885567][ T7940] do_syscall_64+0x4c/0xa0 [ 284.885595][ T7940] ? clear_bhb_loop+0x60/0xb0 [ 284.885638][ T7940] ? clear_bhb_loop+0x60/0xb0 [ 284.885670][ T7940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.885696][ T7940] RIP: 0033:0x7ffa6939c799 [ 284.885720][ T7940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.885739][ T7940] RSP: 002b:00007ffa6a238028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 284.885766][ T7940] RAX: ffffffffffffffda RBX: 00007ffa69616090 RCX: 00007ffa6939c799 [ 284.885783][ T7940] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 000000000000000b [ 284.885799][ T7940] RBP: 00007ffa6a238090 R08: 0000000000000000 R09: 0000000000000000 [ 284.885814][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.885828][ T7940] R13: 00007ffa69616128 R14: 00007ffa69616090 R15: 00007ffcaff79c28 [ 284.885878][ T7940] [ 285.059564][ T7940] syz.1.1203: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 285.118831][ T7940] CPU: 0 PID: 7940 Comm: syz.1.1203 Not tainted syzkaller #0 [ 285.126308][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.136407][ T7940] Call Trace: [ 285.139723][ T7940] [ 285.142696][ T7940] dump_stack_lvl+0x188/0x24e [ 285.147459][ T7940] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 285.153930][ T7940] ? show_regs_print_info+0x12/0x12 [ 285.159192][ T7940] ? load_image+0x400/0x400 [ 285.163735][ T7940] ? __rcu_read_unlock+0x78/0xd0 [ 285.168701][ T7940] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 285.175164][ T7940] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 285.181710][ T7940] warn_alloc+0x242/0x330 [ 285.186085][ T7940] ? __get_vm_area_node+0x122/0x330 [ 285.191337][ T7940] ? zone_watermark_ok_safe+0x270/0x270 [ 285.196923][ T7940] ? rcu_is_watching+0x11/0xa0 [ 285.201737][ T7940] ? __get_vm_area_node+0x318/0x330 [ 285.206976][ T7940] ? __local_bh_enable_ip+0x136/0x1c0 [ 285.212398][ T7940] __vmalloc_node_range+0x37c/0x13b0 [ 285.217733][ T7940] ? netlink_insert+0x1034/0x13c0 [ 285.222839][ T7940] ? free_vm_area+0x50/0x50 [ 285.227396][ T7940] ? netlink_sendmsg+0x5ec/0xbd0 [ 285.232375][ T7940] vmalloc+0x75/0x80 [ 285.236315][ T7940] ? netlink_sendmsg+0x5ec/0xbd0 [ 285.241297][ T7940] netlink_sendmsg+0x5ec/0xbd0 [ 285.246120][ T7940] ? netlink_getsockopt+0x550/0x550 [ 285.251407][ T7940] ? aa_file_perm+0x3ea/0xf00 [ 285.256124][ T7940] ? aa_file_perm+0x112/0xf00 [ 285.260830][ T7940] ? aa_sock_msg_perm+0x94/0x150 [ 285.265811][ T7940] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 285.271137][ T7940] ? security_socket_sendmsg+0x7c/0xa0 [ 285.276663][ T7940] sock_write_iter+0x2d9/0x3e0 [ 285.281472][ T7940] ? sock_read_iter+0x3a0/0x3a0 [ 285.286398][ T7940] ? common_file_perm+0x171/0x1c0 [ 285.291469][ T7940] vfs_write+0x4b1/0xa30 [ 285.295784][ T7940] ? file_end_write+0x250/0x250 [ 285.300683][ T7940] ? __fget_files+0x43d/0x4b0 [ 285.305418][ T7940] ? __fdget_pos+0x1d4/0x360 [ 285.310047][ T7940] ? ksys_write+0x71/0x250 [ 285.314507][ T7940] ksys_write+0x14c/0x250 [ 285.318885][ T7940] ? __ia32_sys_read+0x80/0x80 [ 285.323708][ T7940] ? lockdep_hardirqs_on+0x94/0x140 [ 285.328957][ T7940] do_syscall_64+0x4c/0xa0 [ 285.333410][ T7940] ? clear_bhb_loop+0x60/0xb0 [ 285.338118][ T7940] ? clear_bhb_loop+0x60/0xb0 [ 285.342842][ T7940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.348767][ T7940] RIP: 0033:0x7ffa6939c799 [ 285.353265][ T7940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.372903][ T7940] RSP: 002b:00007ffa6a238028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.381346][ T7940] RAX: ffffffffffffffda RBX: 00007ffa69616090 RCX: 00007ffa6939c799 [ 285.389353][ T7940] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 000000000000000b [ 285.397393][ T7940] RBP: 00007ffa6a238090 R08: 0000000000000000 R09: 0000000000000000 [ 285.405394][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.413402][ T7940] R13: 00007ffa69616128 R14: 00007ffa69616090 R15: 00007ffcaff79c28 [ 285.421429][ T7940] [ 285.483275][ T7940] Mem-Info: [ 285.486513][ T7940] active_anon:5812 inactive_anon:0 isolated_anon:0 [ 285.486513][ T7940] active_file:18093 inactive_file:40014 isolated_file:0 [ 285.486513][ T7940] unevictable:768 dirty:143 writeback:0 [ 285.486513][ T7940] slab_reclaimable:21277 slab_unreclaimable:96832 [ 285.486513][ T7940] mapped:31717 shmem:1361 pagetables:620 [ 285.486513][ T7940] sec_pagetables:0 bounce:0 [ 285.486513][ T7940] kernel_misc_reclaimable:0 [ 285.486513][ T7940] free:1322427 free_pcp:10256 free_cma:0 [ 285.650427][ T7940] Node 0 active_anon:23348kB inactive_anon:0kB active_file:72372kB inactive_file:159856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122768kB dirty:472kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10384kB pagetables:2580kB sec_pagetables:0kB all_unreclaimable? no [ 285.740624][ T7940] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 285.876928][ T7940] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.949168][ T7940] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 285.961814][ T7940] Node 0 DMA32 free:1385140kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23248kB inactive_anon:0kB active_file:72372kB inactive_file:159856kB unevictable:1536kB writepending:472kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:18896kB local_pcp:1684kB free_cma:0kB [ 286.016694][ T7940] lowmem_reserve[]: 0 0 1 1 1 [ 286.034552][ T7940] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.062982][ T7940] lowmem_reserve[]: 0 0 0 0 0 [ 286.067920][ T7940] Node 1 Normal free:3888896kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21380kB local_pcp:9952kB free_cma:0kB [ 286.098172][ T7940] lowmem_reserve[]: 0 0 0 0 0 [ 286.103415][ T7940] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 286.116694][ T7940] Node 0 DMA32: 1983*4kB (UME) 1635*8kB (UME) 1242*16kB (UME) 722*32kB (UME) 453*64kB (UME) 115*128kB (UME) 60*256kB (UME) 27*512kB (UM) 13*1024kB (UM) 5*2048kB (UM) 299*4096kB (UM) = 1385140kB [ 286.151068][ T7940] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 286.170202][ T7940] Node 1 Normal: 270*4kB (UE) 49*8kB (UE) 36*16kB (UME) 28*32kB (UME) 30*64kB (UME) 10*128kB (UME) 3*256kB (UME) 2*512kB (ME) 0*1024kB 1*2048kB (E) 947*4096kB (M) = 3888896kB [ 286.195326][ T7940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.207978][ T7940] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.220492][ T7940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.235236][ T7940] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.246496][ T7940] 59468 total pagecache pages [ 286.251609][ T7940] 0 pages in swap cache [ 286.262367][ T7940] Free swap = 124996kB [ 286.268312][ T7940] Total swap = 124996kB [ 286.276118][ T7940] 2097051 pages RAM [ 286.280209][ T7940] 0 pages HighMem/MovableOnly [ 286.286679][ T7940] 415205 pages reserved [ 286.291134][ T7940] 0 pages cma reserved [ 286.777313][ T4284] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 286.876886][ T7962] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1210'. [ 288.214664][ T7979] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1217'. [ 288.852676][ T4284] Bluetooth: hci1: command 0x2016 tx timeout [ 290.086561][ T8030] device syzkaller0 entered promiscuous mode [ 293.631240][ T8074] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1247'. [ 293.956903][ T8092] netlink: 'syz.0.1253': attribute type 10 has an invalid length. [ 294.987553][ T8110] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1261'. [ 295.008905][ T8110] device team0 entered promiscuous mode [ 295.014928][ T8110] device team_slave_0 entered promiscuous mode [ 295.037273][ T8110] device team_slave_1 entered promiscuous mode [ 295.092750][ T8110] device bond0 entered promiscuous mode [ 295.099270][ T8110] device bond_slave_0 entered promiscuous mode [ 295.134481][ T8110] device bond_slave_1 entered promiscuous mode [ 295.150287][ T8110] device netdevsim0 entered promiscuous mode [ 295.159267][ T8110] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.667238][ T8136] netlink: 'syz.2.1272': attribute type 13 has an invalid length. [ 295.694031][ T8136] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1272'. [ 295.756272][ T8136] erspan0: refused to change device tx_queue_len [ 295.772480][ T8136] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 296.131278][ T8146] netlink: 'syz.0.1273': attribute type 3 has an invalid length. [ 296.146029][ T8146] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1273'. [ 297.482243][ T8171] FAULT_INJECTION: forcing a failure. [ 297.482243][ T8171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.524203][ T8171] CPU: 0 PID: 8171 Comm: syz.4.1282 Not tainted syzkaller #0 [ 297.531706][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.541809][ T8171] Call Trace: [ 297.545132][ T8171] [ 297.548096][ T8171] dump_stack_lvl+0x188/0x24e [ 297.552838][ T8171] ? show_regs_print_info+0x12/0x12 [ 297.558102][ T8171] ? load_image+0x400/0x400 [ 297.562658][ T8171] ? __lock_acquire+0x7d10/0x7d10 [ 297.567732][ T8171] ? lockdep_hardirqs_on+0x94/0x140 [ 297.572985][ T8171] should_fail_ex+0x399/0x4d0 [ 297.577727][ T8171] _copy_to_user+0x2c/0x130 [ 297.582288][ T8171] simple_read_from_buffer+0xe3/0x150 [ 297.587724][ T8171] proc_fail_nth_read+0x1a6/0x220 [ 297.592815][ T8171] ? proc_fault_inject_write+0x310/0x310 [ 297.598509][ T8171] ? fsnotify_perm+0x248/0x550 [ 297.603325][ T8171] ? proc_fault_inject_write+0x310/0x310 [ 297.608997][ T8171] vfs_read+0x2de/0xa00 [ 297.613212][ T8171] ? kernel_read+0x1e0/0x1e0 [ 297.617860][ T8171] ? __fget_files+0x28/0x4b0 [ 297.622501][ T8171] ? __fget_files+0x28/0x4b0 [ 297.627145][ T8171] ? __fget_files+0x43d/0x4b0 [ 297.631888][ T8171] ? __fdget_pos+0x2ae/0x360 [ 297.636560][ T8171] ? ksys_read+0x71/0x250 [ 297.640936][ T8171] ksys_read+0x14c/0x250 [ 297.645231][ T8171] ? vfs_write+0xa30/0xa30 [ 297.649750][ T8171] ? syscall_enter_from_user_mode+0x2a/0x80 [ 297.655872][ T8171] do_syscall_64+0x4c/0xa0 [ 297.660357][ T8171] ? clear_bhb_loop+0x60/0xb0 [ 297.665081][ T8171] ? clear_bhb_loop+0x60/0xb0 [ 297.669808][ T8171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.675746][ T8171] RIP: 0033:0x7efdddd5cfce [ 297.680201][ T8171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 297.699855][ T8171] RSP: 002b:00007efddec42fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 297.708324][ T8171] RAX: ffffffffffffffda RBX: 00007efddec436c0 RCX: 00007efdddd5cfce [ 297.716345][ T8171] RDX: 000000000000000f RSI: 00007efddec430a0 RDI: 0000000000000008 [ 297.724363][ T8171] RBP: 00007efddec43090 R08: 0000000000000000 R09: 0000000000000000 [ 297.732382][ T8171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.740399][ T8171] R13: 00007efdde016038 R14: 00007efdde015fa0 R15: 00007ffcb64541f8 [ 297.748434][ T8171] [ 298.355309][ T8184] FAULT_INJECTION: forcing a failure. [ 298.355309][ T8184] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 298.396661][ T8184] CPU: 1 PID: 8184 Comm: syz.2.1288 Not tainted syzkaller #0 [ 298.404114][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.414209][ T8184] Call Trace: [ 298.417561][ T8184] [ 298.420525][ T8184] dump_stack_lvl+0x188/0x24e [ 298.425278][ T8184] ? show_regs_print_info+0x12/0x12 [ 298.430530][ T8184] ? load_image+0x400/0x400 [ 298.435079][ T8184] ? __lock_acquire+0x7d10/0x7d10 [ 298.440160][ T8184] should_fail_ex+0x399/0x4d0 [ 298.444907][ T8184] prepare_alloc_pages+0x1e2/0x5f0 [ 298.450077][ T8184] __alloc_pages+0x130/0x4f0 [ 298.454718][ T8184] ? zone_statistics+0x170/0x170 [ 298.459727][ T8184] ? mark_lock+0x94/0x320 [ 298.464112][ T8184] __kmalloc_large_node+0x8c/0x1e0 [ 298.469322][ T8184] ? wiphy_new_nm+0x61d/0x1a40 [ 298.474140][ T8184] __kmalloc+0x110/0x240 [ 298.478439][ T8184] ? __local_bh_enable_ip+0x136/0x1c0 [ 298.483855][ T8184] wiphy_new_nm+0x61d/0x1a40 [ 298.488491][ T8184] ? ieee80211_alloc_hw_nm+0x36b/0x1eb0 [ 298.494090][ T8184] ieee80211_alloc_hw_nm+0x38d/0x1eb0 [ 298.499520][ T8184] mac80211_hwsim_new_radio+0x143/0x4c40 [ 298.505229][ T8184] hwsim_new_radio_nl+0xafa/0xce0 [ 298.510319][ T8184] genl_family_rcv_msg_doit+0x22a/0x330 [ 298.515911][ T8184] ? end_current_label_crit_section+0x170/0x170 [ 298.522201][ T8184] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 298.528180][ T8184] ? bpf_lsm_capable+0x5/0x10 [ 298.532909][ T8184] ? security_capable+0x85/0xb0 [ 298.537849][ T8184] genl_rcv_msg+0x604/0x790 [ 298.542424][ T8184] ? genl_bind+0x360/0x360 [ 298.546878][ T8184] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 298.553273][ T8184] netlink_rcv_skb+0x1fb/0x450 [ 298.558085][ T8184] ? genl_bind+0x360/0x360 [ 298.562542][ T8184] ? netlink_ack+0x1170/0x1170 [ 298.567366][ T8184] ? down_read+0x1a8/0x2d0 [ 298.571841][ T8184] genl_rcv+0x24/0x40 [ 298.575880][ T8184] netlink_unicast+0x74d/0x8d0 [ 298.580708][ T8184] netlink_sendmsg+0x8ad/0xbd0 [ 298.585535][ T8184] ? netlink_getsockopt+0x550/0x550 [ 298.590793][ T8184] ? aa_sock_msg_perm+0x94/0x150 [ 298.595862][ T8184] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 298.601185][ T8184] ? security_socket_sendmsg+0x7c/0xa0 [ 298.606721][ T8184] ? netlink_getsockopt+0x550/0x550 [ 298.611969][ T8184] ____sys_sendmsg+0x5be/0x970 [ 298.616799][ T8184] ? __sys_sendmsg_sock+0x30/0x30 [ 298.621872][ T8184] ? __import_iovec+0x315/0x500 [ 298.626770][ T8184] ? import_iovec+0x6f/0xa0 [ 298.631340][ T8184] ___sys_sendmsg+0x2a2/0x360 [ 298.636108][ T8184] ? __sys_sendmsg+0x290/0x290 [ 298.640949][ T8184] ? __lock_acquire+0x7d10/0x7d10 [ 298.646072][ T8184] __se_sys_sendmsg+0x1bb/0x2a0 [ 298.650977][ T8184] ? ct_nmi_exit+0x145/0x1c0 [ 298.655616][ T8184] ? __x64_sys_sendmsg+0x80/0x80 [ 298.660627][ T8184] ? lockdep_hardirqs_on+0x94/0x140 [ 298.665881][ T8184] do_syscall_64+0x4c/0xa0 [ 298.670344][ T8184] ? clear_bhb_loop+0x60/0xb0 [ 298.675064][ T8184] ? clear_bhb_loop+0x60/0xb0 [ 298.679786][ T8184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.685722][ T8184] RIP: 0033:0x7f64fdf9c799 [ 298.690191][ T8184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.709854][ T8184] RSP: 002b:00007f64feeee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.718322][ T8184] RAX: ffffffffffffffda RBX: 00007f64fe215fa0 RCX: 00007f64fdf9c799 [ 298.726346][ T8184] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 298.734360][ T8184] RBP: 00007f64feeee090 R08: 0000000000000000 R09: 0000000000000000 [ 298.742413][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.750448][ T8184] R13: 00007f64fe216038 R14: 00007f64fe215fa0 R15: 00007ffd74ee0f18 [ 298.758491][ T8184] [ 299.263895][ T8192] tipc: Started in network mode [ 299.283093][ T8192] tipc: Node identity 9215a268, cluster identity 4711 [ 299.337388][ T8192] tipc: Node number set to 2450891368 [ 299.352308][ T8197] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1293'. [ 299.956828][ T8217] netlink: 'syz.4.1301': attribute type 29 has an invalid length. [ 299.979345][ T8217] netlink: 'syz.4.1301': attribute type 29 has an invalid length. [ 299.999151][ T8217] netlink: 'syz.4.1301': attribute type 29 has an invalid length. [ 301.000885][ T8224] netlink: 'syz.4.1303': attribute type 11 has an invalid length. [ 301.041567][ T8224] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1303'. [ 301.085029][ T8224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.496771][ T8235] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1306'. [ 302.454098][ T8254] netlink: 'syz.2.1311': attribute type 10 has an invalid length. [ 302.478916][ T8254] team0: Device vxcan1 is of different type [ 302.861487][ T8259] netlink: 'syz.4.1313': attribute type 29 has an invalid length. [ 302.929741][ T8259] netlink: 'syz.4.1313': attribute type 29 has an invalid length. [ 303.695108][ T8275] netlink: 'syz.1.1318': attribute type 1 has an invalid length. [ 303.748693][ T8275] netlink: 'syz.1.1318': attribute type 4 has an invalid length. [ 303.766983][ T8275] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1318'. [ 304.046654][ T8282] device syzkaller0 entered promiscuous mode [ 308.111825][ T8337] netlink: 'syz.2.1336': attribute type 29 has an invalid length. [ 308.158932][ T8346] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1337'. [ 308.231571][ T8337] netlink: 'syz.2.1336': attribute type 29 has an invalid length. [ 308.281489][ T8350] netlink: 'syz.2.1336': attribute type 29 has an invalid length. [ 308.927033][ T8361] netlink: 'syz.4.1344': attribute type 8 has an invalid length. [ 309.358545][ T8366] netlink: 'syz.0.1345': attribute type 10 has an invalid length. [ 311.228504][ T8402] netlink: 'syz.0.1358': attribute type 13 has an invalid length. [ 311.272818][ T8402] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1358'. [ 311.328273][ T8402] erspan0: refused to change device tx_queue_len [ 311.364133][ T8402] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 313.800869][ T8499] netlink: 'syz.2.1391': attribute type 10 has an invalid length. [ 313.861912][ T8493] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 315.310312][ T8509] netlink: 'syz.4.1397': attribute type 12 has an invalid length. [ 315.320295][ T8509] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1397'. [ 317.534899][ T8562] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1411'. [ 318.055898][ T8563] netlink: 'syz.1.1410': attribute type 10 has an invalid length. [ 318.176788][ T8573] netlink: 'syz.2.1414': attribute type 10 has an invalid length. [ 318.209400][ T8573] bridge0: port 3(team0) entered disabled state [ 318.277811][ T8573] device team0 left promiscuous mode [ 318.283608][ T8573] device team_slave_0 left promiscuous mode [ 318.289957][ T8573] device team_slave_1 left promiscuous mode [ 318.297045][ T8573] bridge0: port 3(team0) entered disabled state [ 318.429570][ T8579] netlink: 'syz.4.1417': attribute type 4 has an invalid length. [ 318.474861][ T8579] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1417'. [ 318.609406][ T8580] device wlan1 left promiscuous mode [ 319.477637][ T8611] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1430'. [ 319.848438][ T8620] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1433'. [ 320.790024][ T8640] netlink: 'syz.0.1439': attribute type 10 has an invalid length. [ 322.290476][ T8678] device syzkaller0 entered promiscuous mode [ 322.788829][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.795239][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.011957][ T8680] netlink: 'syz.4.1455': attribute type 10 has an invalid length. [ 323.037990][ T8680] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1455'. [ 323.056579][ T8680] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 323.699750][ T8708] tipc: Withdrawal distribution failure [ 324.101737][ T8717] netlink: 'syz.3.1467': attribute type 41 has an invalid length. [ 326.318023][ T8692] device wlan1 entered promiscuous mode [ 326.324812][ T8717] netlink: 'syz.3.1467': attribute type 41 has an invalid length. [ 326.538986][ T8745] sctp: [Deprecated]: syz.2.1478 (pid 8745) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.538986][ T8745] Use struct sctp_sack_info instead [ 326.738265][ T8751] raw_sendmsg: syz.1.1479 forgot to set AF_INET. Fix it! [ 326.792284][ T8751] netlink: 68732 bytes leftover after parsing attributes in process `syz.1.1479'. [ 328.085401][ T8790] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1490'. [ 328.682797][ T8818] netlink: 'syz.4.1501': attribute type 10 has an invalid length. [ 328.710303][ T8818] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 329.971858][ T8849] netlink: 'syz.4.1512': attribute type 41 has an invalid length. [ 330.012719][ T8849] netlink: 'syz.4.1512': attribute type 41 has an invalid length. [ 330.920475][ T8854] netlink: 'syz.0.1515': attribute type 11 has an invalid length. [ 331.888910][ T8878] netlink: 'syz.1.1523': attribute type 4 has an invalid length. [ 331.897768][ T8878] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1523'. [ 331.968119][ T8878] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 332.138874][ T8883] FAULT_INJECTION: forcing a failure. [ 332.138874][ T8883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.193862][ T8883] CPU: 1 PID: 8883 Comm: syz.3.1525 Not tainted syzkaller #0 [ 332.201314][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.211405][ T8883] Call Trace: [ 332.214712][ T8883] [ 332.217681][ T8883] dump_stack_lvl+0x188/0x24e [ 332.222391][ T8883] ? show_regs_print_info+0x12/0x12 [ 332.227627][ T8883] ? load_image+0x400/0x400 [ 332.232180][ T8883] ? __lock_acquire+0x7d10/0x7d10 [ 332.237254][ T8883] should_fail_ex+0x399/0x4d0 [ 332.241980][ T8883] strncpy_from_user+0x32/0x350 [ 332.246863][ T8883] bpf_prog_load+0x1f3/0x1560 [ 332.251580][ T8883] ? map_freeze+0x390/0x390 [ 332.256116][ T8883] ? __might_fault+0xa6/0x120 [ 332.260830][ T8883] ? __might_fault+0xa6/0x120 [ 332.265537][ T8883] ? __might_fault+0xc2/0x120 [ 332.270234][ T8883] ? __might_fault+0xa6/0x120 [ 332.274933][ T8883] ? bpf_lsm_bpf+0x5/0x10 [ 332.279287][ T8883] ? security_bpf+0x7a/0xa0 [ 332.283861][ T8883] __sys_bpf+0x5b8/0x780 [ 332.288151][ T8883] ? bpf_link_show_fdinfo+0x380/0x380 [ 332.293569][ T8883] ? lock_chain_count+0x20/0x20 [ 332.298457][ T8883] __x64_sys_bpf+0x78/0x90 [ 332.302906][ T8883] do_syscall_64+0x4c/0xa0 [ 332.307353][ T8883] ? clear_bhb_loop+0x60/0xb0 [ 332.312058][ T8883] ? clear_bhb_loop+0x60/0xb0 [ 332.316757][ T8883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.322669][ T8883] RIP: 0033:0x7fab8019c799 [ 332.327107][ T8883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.346740][ T8883] RSP: 002b:00007fab810b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.355179][ T8883] RAX: ffffffffffffffda RBX: 00007fab80415fa0 RCX: 00007fab8019c799 [ 332.363224][ T8883] RDX: 0000000000000090 RSI: 0000200000000200 RDI: 0000000000000005 [ 332.371217][ T8883] RBP: 00007fab810b8090 R08: 0000000000000000 R09: 0000000000000000 [ 332.379211][ T8883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.387201][ T8883] R13: 00007fab80416038 R14: 00007fab80415fa0 R15: 00007fff2534e488 [ 332.395249][ T8883] [ 332.441984][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1526'. [ 332.456895][ T8885] tc_dump_action: action bad kind [ 333.209281][ T8903] netlink: 'syz.3.1533': attribute type 11 has an invalid length. [ 333.761143][ T8917] device syzkaller0 entered promiscuous mode [ 333.816373][ T8922] netlink: 'syz.0.1540': attribute type 21 has an invalid length. [ 333.838259][ T8922] netlink: 'syz.0.1540': attribute type 2 has an invalid length. [ 333.856786][ T8922] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1540'. [ 334.036847][ T8922] delete_channel: no stack [ 334.057221][ T8922] delete_channel: no stack [ 335.695806][ T8957] FAULT_INJECTION: forcing a failure. [ 335.695806][ T8957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.749907][ T8957] CPU: 1 PID: 8957 Comm: syz.0.1553 Not tainted syzkaller #0 [ 335.757370][ T8957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 335.767488][ T8957] Call Trace: [ 335.770828][ T8957] [ 335.773805][ T8957] dump_stack_lvl+0x188/0x24e [ 335.778538][ T8957] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 335.784744][ T8957] ? show_regs_print_info+0x12/0x12 [ 335.790005][ T8957] ? load_image+0x400/0x400 [ 335.794566][ T8957] should_fail_ex+0x399/0x4d0 [ 335.799314][ T8957] _copy_to_user+0x2c/0x130 [ 335.803882][ T8957] simple_read_from_buffer+0xe3/0x150 [ 335.809305][ T8957] proc_fail_nth_read+0x1a6/0x220 [ 335.814360][ T8957] ? proc_fault_inject_write+0x310/0x310 [ 335.820027][ T8957] ? fsnotify_perm+0x1aa/0x550 [ 335.824828][ T8957] ? fsnotify_perm+0x248/0x550 [ 335.829632][ T8957] ? proc_fault_inject_write+0x310/0x310 [ 335.835297][ T8957] vfs_read+0x2de/0xa00 [ 335.839488][ T8957] ? kernel_read+0x1e0/0x1e0 [ 335.844108][ T8957] ? __fget_files+0x28/0x4b0 [ 335.848729][ T8957] ? __fget_files+0x28/0x4b0 [ 335.853369][ T8957] ? __fget_files+0x43d/0x4b0 [ 335.858082][ T8957] ? __fdget_pos+0x2ae/0x360 [ 335.862710][ T8957] ? ksys_read+0x71/0x250 [ 335.867075][ T8957] ksys_read+0x14c/0x250 [ 335.871365][ T8957] ? vfs_write+0xa30/0xa30 [ 335.875824][ T8957] ? syscall_enter_from_user_mode+0x2a/0x80 [ 335.881838][ T8957] do_syscall_64+0x4c/0xa0 [ 335.886294][ T8957] ? clear_bhb_loop+0x60/0xb0 [ 335.891033][ T8957] ? clear_bhb_loop+0x60/0xb0 [ 335.895758][ T8957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.901703][ T8957] RIP: 0033:0x7f9bf715cfce [ 335.906184][ T8957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 335.925841][ T8957] RSP: 002b:00007f9bf7fc8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.934302][ T8957] RAX: ffffffffffffffda RBX: 00007f9bf7fc96c0 RCX: 00007f9bf715cfce [ 335.942315][ T8957] RDX: 000000000000000f RSI: 00007f9bf7fc90a0 RDI: 0000000000000009 [ 335.950311][ T8957] RBP: 00007f9bf7fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 335.958305][ T8957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.966314][ T8957] R13: 00007f9bf7416038 R14: 00007f9bf7415fa0 R15: 00007ffedc04f938 [ 335.974337][ T8957] [ 336.422028][ T8970] netlink: 'syz.3.1557': attribute type 3 has an invalid length. [ 336.438431][ T8970] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1557'. [ 338.351634][ T8962] netlink: 'syz.2.1556': attribute type 21 has an invalid length. [ 338.359818][ T8961] netlink: 'syz.2.1556': attribute type 3 has an invalid length. [ 338.368932][ T8961] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.1556'. [ 338.378890][ T8965] netlink: 'syz.1.1558': attribute type 10 has an invalid length. [ 338.395404][ T8965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1558'. [ 338.423019][ T8965] device ipvlan1 entered promiscuous mode [ 338.443857][ T8965] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 338.483620][ T8976] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1558'. [ 341.420184][ T9061] netlink: 'syz.1.1584': attribute type 11 has an invalid length. [ 341.451557][ T9061] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1584'. [ 341.484797][ T9063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.765080][ T9071] netlink: 'syz.2.1587': attribute type 10 has an invalid length. [ 341.809963][ T9071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1587'. [ 341.821551][ T9071] bridge0: port 3(veth0_vlan) entered blocking state [ 341.878296][ T9071] bridge0: port 3(veth0_vlan) entered disabled state [ 342.016566][ T9071] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 343.005823][ T9108] netlink: 'syz.3.1595': attribute type 12 has an invalid length. [ 343.022523][ T9108] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1595'. [ 343.463730][ T9126] netlink: 'syz.1.1604': attribute type 10 has an invalid length. [ 343.498972][ T9126] team0: Device vxcan1 is of different type [ 343.821592][ T9142] netlink: 'syz.3.1610': attribute type 10 has an invalid length. [ 343.844075][ T9142] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1610'. [ 343.885248][ T9142] device ipvlan1 entered promiscuous mode [ 343.892080][ T9142] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 344.451517][ T9165] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1616'. [ 344.702508][ T9143] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1610'. [ 344.711851][ T9165] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1616'. [ 344.732874][ T9166] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1616'. [ 344.763849][ T9167] netlink: 'syz.1.1616': attribute type 10 has an invalid length. [ 344.790870][ T9167] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1616'. [ 344.810935][ T9167] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 344.821771][ T9167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.085304][ T9175] FAULT_INJECTION: forcing a failure. [ 345.085304][ T9175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.157619][ T9175] CPU: 1 PID: 9175 Comm: syz.3.1620 Not tainted syzkaller #0 [ 345.165160][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 345.175250][ T9175] Call Trace: [ 345.178560][ T9175] [ 345.181517][ T9175] dump_stack_lvl+0x188/0x24e [ 345.186242][ T9175] ? show_regs_print_info+0x12/0x12 [ 345.191477][ T9175] ? load_image+0x400/0x400 [ 345.196026][ T9175] ? __lock_acquire+0x7d10/0x7d10 [ 345.201114][ T9175] should_fail_ex+0x399/0x4d0 [ 345.205858][ T9175] _copy_from_user+0x2c/0x170 [ 345.210588][ T9175] __sys_bpf+0x2ea/0x780 [ 345.214897][ T9175] ? bpf_link_show_fdinfo+0x380/0x380 [ 345.220339][ T9175] ? lock_chain_count+0x20/0x20 [ 345.225246][ T9175] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 345.231294][ T9175] __x64_sys_bpf+0x78/0x90 [ 345.235763][ T9175] do_syscall_64+0x4c/0xa0 [ 345.240228][ T9175] ? clear_bhb_loop+0x60/0xb0 [ 345.244955][ T9175] ? clear_bhb_loop+0x60/0xb0 [ 345.249686][ T9175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.255617][ T9175] RIP: 0033:0x7fab8019c799 [ 345.260062][ T9175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.279714][ T9175] RSP: 002b:00007fab810b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 345.288155][ T9175] RAX: ffffffffffffffda RBX: 00007fab80415fa0 RCX: 00007fab8019c799 [ 345.296156][ T9175] RDX: 000000000000000c RSI: 00002000000007c0 RDI: 000000000000000a [ 345.304154][ T9175] RBP: 00007fab810b8090 R08: 0000000000000000 R09: 0000000000000000 [ 345.312168][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.320165][ T9175] R13: 00007fab80416038 R14: 00007fab80415fa0 R15: 00007fff2534e488 [ 345.328174][ T9175] [ 346.100263][ T4284] Bluetooth: hci2: Dropping invalid advertising data [ 346.107640][ T4284] Bluetooth: hci2: unknown advertising packet type: 0xff [ 346.107671][ T4284] Bluetooth: hci2: Malformed LE Event: 0x02 [ 346.226960][ T9208] netlink: 'syz.4.1630': attribute type 10 has an invalid length. [ 346.285733][ T9208] device vxcan1 entered promiscuous mode [ 346.291545][ T9208] team0: Device vxcan1 is of different type [ 346.536669][ T9217] netlink: 'syz.2.1634': attribute type 4 has an invalid length. [ 346.557534][ T9217] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1634'. [ 346.646675][ T9217] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 346.703079][ T9216] netlink: 'syz.3.1635': attribute type 10 has an invalid length. [ 346.846840][ T9220] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 346.868606][ T9220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.217372][ T9231] netlink: 'syz.4.1640': attribute type 2 has an invalid length. [ 347.233035][ T9231] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.1640'. [ 347.272680][ T9234] netlink: 'syz.4.1640': attribute type 3 has an invalid length. [ 347.297598][ T9234] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1640'. [ 347.442141][ T9238] delete_channel: no stack [ 347.456907][ T9238] delete_channel: no stack [ 348.676652][ T9266] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1654'. [ 349.385570][ T9288] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1660'. [ 351.915333][ T9340] netlink: 'syz.1.1682': attribute type 21 has an invalid length. [ 351.928591][ T9340] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1682'. [ 353.261353][ T9382] netlink: 'syz.2.1698': attribute type 11 has an invalid length. [ 353.269870][ T9382] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1698'. [ 353.285803][ T9382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.404920][ T9385] netlink: 'syz.1.1699': attribute type 10 has an invalid length. [ 354.024457][ T9385] device veth1_macvtap left promiscuous mode [ 354.299040][ T9394] netlink: 'syz.0.1702': attribute type 10 has an invalid length. [ 354.319607][ T9394] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1702'. [ 354.945531][ T9425] netlink: 'syz.3.1712': attribute type 13 has an invalid length. [ 355.022136][ T9425] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1712'. [ 355.075752][ T9427] netlink: 'syz.3.1712': attribute type 13 has an invalid length. [ 355.105037][ T9427] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1712'. [ 355.120990][ T9433] netlink: 'syz.2.1713': attribute type 3 has an invalid length. [ 355.173397][ T9433] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1713'. [ 355.185918][ T9429] netlink: 'syz.2.1713': attribute type 2 has an invalid length. [ 355.204690][ T9429] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.1713'. [ 355.996831][ T9454] netlink: 'syz.1.1720': attribute type 10 has an invalid length. [ 356.058857][ T9454] team0: Device vxcan1 is of different type [ 356.184760][ T9460] netlink: 'syz.2.1723': attribute type 39 has an invalid length. [ 356.381236][ T9464] bridge0: port 3(team0) entered disabled state [ 356.389056][ T9464] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.397112][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.060811][ T9480] netlink: 'syz.1.1732': attribute type 2 has an invalid length. [ 357.075896][ T9480] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.1732'. [ 357.106918][ T9480] netlink: 'syz.1.1732': attribute type 3 has an invalid length. [ 357.156823][ T9480] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1732'. [ 357.414865][ T9497] netlink: 'syz.0.1737': attribute type 39 has an invalid length. [ 358.711404][ T9520] netlink: 'syz.0.1746': attribute type 10 has an invalid length. [ 358.872782][ T9524] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1747'. [ 359.036505][ T9526] netlink: 'syz.2.1748': attribute type 10 has an invalid length. [ 359.044732][ T9526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.059579][ T9526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.167223][ T9605] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1776'. [ 363.274040][ T9607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1777'. [ 363.288703][ T9611] netlink: 'syz.1.1778': attribute type 12 has an invalid length. [ 363.314147][ T9611] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1778'. [ 363.354254][ T9614] sctp: [Deprecated]: syz.1.1778 (pid 9614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.354254][ T9614] Use struct sctp_sack_info instead [ 363.785291][ T9627] netlink: 'syz.4.1781': attribute type 3 has an invalid length. [ 363.806690][ T9627] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1781'. [ 366.360674][ T9621] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 366.366831][ T9621] syzkaller0: linktype set to 769 [ 366.373079][ T9622] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 366.877911][ T9654] netlink: 'syz.3.1793': attribute type 11 has an invalid length. [ 366.932211][ T9654] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1793'. [ 367.007496][ T9654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.318472][ T9680] netlink: 'syz.2.1801': attribute type 3 has an invalid length. [ 368.340709][ T9680] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1801'. [ 368.535040][ T9691] netlink: 'syz.4.1807': attribute type 10 has an invalid length. [ 368.557086][ T9691] device team0 left promiscuous mode [ 368.568523][ T9691] device team_slave_0 left promiscuous mode [ 368.576262][ T9691] device team_slave_1 left promiscuous mode [ 368.583123][ T9691] device bond0 left promiscuous mode [ 368.588707][ T9691] device bond_slave_0 left promiscuous mode [ 368.600300][ T9691] device bond_slave_1 left promiscuous mode [ 368.606865][ T9691] device netdevsim0 left promiscuous mode [ 368.647636][ T9694] netlink: 'syz.2.1808': attribute type 6 has an invalid length. [ 368.679886][ T9694] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.1808'. [ 370.281639][ T9731] netlink: 'syz.1.1818': attribute type 10 has an invalid length. [ 370.371010][ T9731] team0: Device vxcan1 is of different type [ 370.395279][ T9733] netlink: 'syz.0.1819': attribute type 3 has an invalid length. [ 370.404502][ T9733] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1819'. [ 370.512189][ T9738] IPv6: Can't replace route, no match found [ 371.172027][ T9758] netlink: 'syz.3.1830': attribute type 13 has an invalid length. [ 371.214794][ T9758] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1830'. [ 371.290507][ T9764] FAULT_INJECTION: forcing a failure. [ 371.290507][ T9764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.326960][ T9764] CPU: 1 PID: 9764 Comm: syz.1.1832 Not tainted syzkaller #0 [ 371.334423][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.344539][ T9764] Call Trace: [ 371.347859][ T9764] [ 371.350827][ T9764] dump_stack_lvl+0x188/0x24e [ 371.355570][ T9764] ? show_regs_print_info+0x12/0x12 [ 371.360822][ T9764] ? load_image+0x400/0x400 [ 371.365380][ T9764] ? __lock_acquire+0x7d10/0x7d10 [ 371.370454][ T9764] ? __bpf_prog_test_run_raw_tp+0x2a6/0x430 [ 371.376396][ T9764] ? lockdep_hardirqs_on+0x94/0x140 [ 371.381640][ T9764] should_fail_ex+0x399/0x4d0 [ 371.386382][ T9764] _copy_to_user+0x2c/0x130 [ 371.390936][ T9764] bpf_prog_test_run_raw_tp+0x4c6/0x660 [ 371.396539][ T9764] ? trace_bpf_test_finish+0x220/0x220 [ 371.402054][ T9764] ? trace_bpf_test_finish+0x220/0x220 [ 371.407557][ T9764] bpf_prog_test_run+0x31e/0x390 [ 371.412546][ T9764] __sys_bpf+0x62b/0x780 [ 371.416830][ T9764] ? bpf_link_show_fdinfo+0x380/0x380 [ 371.422259][ T9764] ? lock_chain_count+0x20/0x20 [ 371.427164][ T9764] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 371.433200][ T9764] __x64_sys_bpf+0x78/0x90 [ 371.437668][ T9764] do_syscall_64+0x4c/0xa0 [ 371.442127][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 371.446861][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 371.451586][ T9764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.457524][ T9764] RIP: 0033:0x7ffa6939c799 [ 371.461983][ T9764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.481657][ T9764] RSP: 002b:00007ffa6a259028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 371.490129][ T9764] RAX: ffffffffffffffda RBX: 00007ffa69615fa0 RCX: 00007ffa6939c799 [ 371.498241][ T9764] RDX: 000000000000000c RSI: 00002000000007c0 RDI: 000000000000000a [ 371.506258][ T9764] RBP: 00007ffa6a259090 R08: 0000000000000000 R09: 0000000000000000 [ 371.514281][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.522290][ T9764] R13: 00007ffa69616038 R14: 00007ffa69615fa0 R15: 00007ffcaff79c28 [ 371.530327][ T9764] [ 372.418588][ T9799] netlink: 'syz.4.1842': attribute type 10 has an invalid length. [ 372.544422][ T9799] team0: Device vxcan1 is of different type [ 372.729412][ T9807] device veth1_macvtap left promiscuous mode [ 373.051212][ T9815] netlink: 'syz.0.1846': attribute type 11 has an invalid length. [ 373.081218][ T9815] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1846'. [ 373.167042][ T9815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.643090][ T9839] netlink: 'syz.4.1851': attribute type 4 has an invalid length. [ 373.651178][ T9839] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1851'. [ 373.831159][ T9845] -1: renamed from syzkaller0 [ 375.629398][ T9861] netlink: 'syz.2.1860': attribute type 11 has an invalid length. [ 375.706633][ T9861] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1860'. [ 375.758405][ T9861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.990424][ T9872] netlink: 'syz.3.1866': attribute type 13 has an invalid length. [ 376.017350][ T9872] netlink: 14581 bytes leftover after parsing attributes in process `syz.3.1866'. [ 379.702748][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 379.730468][ T9914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.797671][ T9916] netlink: 'syz.2.1882': attribute type 17 has an invalid length. [ 379.832255][ T9916] netlink: 'syz.2.1882': attribute type 41 has an invalid length. [ 379.862085][ T9916] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1882'. [ 380.195683][ T9935] netlink: 'syz.3.1887': attribute type 11 has an invalid length. [ 380.215554][ T9935] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1887'. [ 380.232652][ T9935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.980426][ T9957] netlink: 'syz.4.1894': attribute type 27 has an invalid length. [ 381.000533][ T9957] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1894'. [ 382.308428][ T9957] netlink: 'syz.4.1894': attribute type 21 has an invalid length. [ 382.318547][ T9957] netlink: 'syz.4.1894': attribute type 1 has an invalid length. [ 382.329249][ T9961] netlink: 'syz.0.1896': attribute type 10 has an invalid length. [ 382.375650][ T9961] device team0 left promiscuous mode [ 382.381225][ T9961] device team_slave_0 left promiscuous mode [ 382.391173][ T9961] device team_slave_1 left promiscuous mode [ 382.398822][ T9961] bridge0: port 3(team0) entered disabled state [ 382.705674][ T9973] netlink: 'syz.1.1901': attribute type 10 has an invalid length. [ 382.747630][ T9973] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1901'. [ 382.760318][ T9973] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 383.072063][ T9977] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1903'. [ 383.603002][ T9989] netlink: 'syz.3.1909': attribute type 10 has an invalid length. [ 383.705941][ T9989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.742667][ T9989] device bond0 entered promiscuous mode [ 383.758514][ T9989] device bond_slave_1 entered promiscuous mode [ 383.782654][ T9989] device batadv_slave_0 entered promiscuous mode [ 383.790328][ T9989] team0: Port device bond0 added [ 383.797866][ T9994] IPv6: Can't replace route, no match found [ 384.151919][T10010] netlink: 'syz.0.1916': attribute type 13 has an invalid length. [ 384.189322][T10013] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.1917'. [ 384.200995][T10010] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1916'. [ 384.216960][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.223883][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.277243][T10013] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.1917'. [ 384.880897][T10018] delete_channel: no stack [ 386.247974][T10073] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1923'. [ 387.198012][T10116] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1929'. [ 387.258071][T10112] netlink: 'syz.4.1928': attribute type 10 has an invalid length. [ 387.286136][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.322700][T10112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.007605][T10130] delete_channel: no stack [ 390.787279][T10151] FAULT_INJECTION: forcing a failure. [ 390.787279][T10151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.862788][T10151] CPU: 1 PID: 10151 Comm: syz.3.1943 Not tainted syzkaller #0 [ 390.870355][T10151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.880463][T10151] Call Trace: [ 390.883783][T10151] [ 390.886758][T10151] dump_stack_lvl+0x188/0x24e [ 390.891516][T10151] ? show_regs_print_info+0x12/0x12 [ 390.896774][T10151] ? load_image+0x400/0x400 [ 390.901358][T10151] ? __lock_acquire+0x7d10/0x7d10 [ 390.906451][T10151] ? trace_call_bpf+0xbf/0x6b0 [ 390.911287][T10151] should_fail_ex+0x399/0x4d0 [ 390.916117][T10151] _copy_from_user+0x2c/0x170 [ 390.920843][T10151] perf_copy_attr+0x174/0x850 [ 390.925584][T10151] __se_sys_perf_event_open+0xf5/0x1ec0 [ 390.931190][T10151] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 390.936904][T10151] ? syscall_enter_from_user_mode+0x2a/0x80 [ 390.942839][T10151] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 390.948519][T10151] do_syscall_64+0x4c/0xa0 [ 390.952967][T10151] ? clear_bhb_loop+0x60/0xb0 [ 390.957691][T10151] ? clear_bhb_loop+0x60/0xb0 [ 390.962420][T10151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.968354][T10151] RIP: 0033:0x7fab8019c799 [ 390.972801][T10151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.992442][T10151] RSP: 002b:00007fab810b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 391.000912][T10151] RAX: ffffffffffffffda RBX: 00007fab80415fa0 RCX: 00007fab8019c799 [ 391.008946][T10151] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100 [ 391.016959][T10151] RBP: 00007fab810b8090 R08: 000000000000000a R09: 0000000000000000 [ 391.024966][T10151] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 391.032966][T10151] R13: 00007fab80416038 R14: 00007fab80415fa0 R15: 00007fff2534e488 [ 391.040975][T10151] [ 391.352519][ T4284] Bluetooth: hci2: ISO packet for unknown connection handle 3847 [ 391.632945][T10167] netlink: 'syz.1.1947': attribute type 10 has an invalid length. [ 391.642232][T10167] team0: Device vxcan1 is of different type [ 392.864183][T10180] delete_channel: no stack [ 393.312967][T10218] netlink: 'syz.4.1953': attribute type 10 has an invalid length. [ 393.333085][T10218] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1953'. [ 393.481128][T10218] device team0 entered promiscuous mode [ 393.532520][T10218] device team_slave_0 entered promiscuous mode [ 393.596514][T10218] device team_slave_1 entered promiscuous mode [ 393.604515][T10218] device bond0 entered promiscuous mode [ 393.610137][T10218] device bond_slave_0 entered promiscuous mode [ 393.618925][T10218] device bond_slave_1 entered promiscuous mode [ 393.645984][T10218] device netdevsim0 entered promiscuous mode [ 393.690321][T10218] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.715183][T10218] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 394.301963][T10245] netlink: 'syz.0.1963': attribute type 10 has an invalid length. [ 395.025882][T10265] netlink: 'syz.0.1968': attribute type 10 has an invalid length. [ 395.601927][T10281] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1974'. [ 396.337208][T10300] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1979'. [ 396.433163][T10300] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 397.290195][T10317] netlink: 'syz.3.1989': attribute type 10 has an invalid length. [ 397.726419][T10339] netlink: 'syz.1.1995': attribute type 11 has an invalid length. [ 397.812600][T10339] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1995'. [ 397.860989][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.495449][T10362] netlink: 'syz.4.2002': attribute type 29 has an invalid length. [ 398.515757][T10362] netlink: 'syz.4.2002': attribute type 29 has an invalid length. [ 398.973677][T10364] netlink: 'syz.4.2002': attribute type 1 has an invalid length. [ 399.199139][T10372] netlink: 'syz.0.2006': attribute type 10 has an invalid length. [ 399.464545][T10378] netlink: 'syz.1.2009': attribute type 12 has an invalid length. [ 399.481095][T10378] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2009'. [ 399.524431][T10382] netlink: 'syz.4.2011': attribute type 10 has an invalid length. [ 399.566454][T10382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2011'. [ 399.607946][T10382] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 400.867551][T10411] IPv6: Can't replace route, no match found [ 401.673684][T10444] netlink: 'syz.1.2036': attribute type 13 has an invalid length. [ 401.700633][T10444] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2036'. [ 402.405242][T10453] netlink: 'syz.4.2040': attribute type 10 has an invalid length. [ 402.446493][T10453] team0: Device vxcan1 is of different type [ 402.638906][T10460] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2041'. [ 403.016432][T10471] netlink: 'syz.2.2047': attribute type 25 has an invalid length. [ 403.072545][T10471] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.2047'. [ 403.108061][T10473] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2049'. [ 403.119173][T10471] netlink: 60583 bytes leftover after parsing attributes in process `syz.2.2047'. [ 403.162687][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2047'. [ 403.730005][T10482] netlink: 'syz.4.2052': attribute type 21 has an invalid length. [ 403.756021][T10484] netlink: 'syz.4.2052': attribute type 21 has an invalid length. [ 404.283635][T10495] netlink: 'syz.4.2057': attribute type 10 has an invalid length. [ 404.330811][T10495] team0: Device vxcan1 is of different type [ 405.976096][T10550] netlink: 'syz.4.2077': attribute type 10 has an invalid length. [ 406.010983][T10550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2077'. [ 406.021520][T10550] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 406.076328][T10551] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2078'. [ 406.147144][T10551] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2078'. [ 406.218963][T10551] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2078'. [ 406.400078][T10548] netlink: 'syz.0.2076': attribute type 3 has an invalid length. [ 406.425138][T10548] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2076'. [ 406.944500][T10579] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2088'. [ 407.511848][T10591] netlink: 'syz.3.2091': attribute type 4 has an invalid length. [ 407.550612][T10591] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2091'. [ 407.815879][T10598] netlink: 'syz.1.2093': attribute type 21 has an invalid length. [ 408.059623][T10599] netlink: 'syz.1.2093': attribute type 12 has an invalid length. [ 408.109822][T10599] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2093'. [ 408.860714][T10614] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2099'. [ 409.701082][T10640] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2106'. [ 410.309045][T10659] netlink: 'syz.1.2116': attribute type 11 has an invalid length. [ 410.384555][T10659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.427527][T10662] netlink: 'syz.3.2117': attribute type 21 has an invalid length. [ 410.442661][T10662] netlink: 'syz.3.2117': attribute type 11 has an invalid length. [ 411.139707][T10684] netlink: 'syz.3.2124': attribute type 10 has an invalid length. [ 411.241829][T10688] netlink: 'syz.0.2127': attribute type 10 has an invalid length. [ 411.262574][T10688] __nla_validate_parse: 1 callbacks suppressed [ 411.262593][T10688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2127'. [ 411.282770][T10688] bridge0: port 3(team0) entered blocking state [ 411.302628][T10688] bridge0: port 3(team0) entered disabled state [ 411.310393][T10688] device team0 entered promiscuous mode [ 411.322613][T10688] device team_slave_0 entered promiscuous mode [ 411.341554][T10688] device team_slave_1 entered promiscuous mode [ 411.671357][T10703] netlink: 'syz.4.2133': attribute type 21 has an invalid length. [ 411.719800][T10703] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2133'. [ 411.840688][T10703] device bond0 left promiscuous mode [ 411.849451][T10703] device bond_slave_0 left promiscuous mode [ 411.874677][T10703] device bond_slave_1 left promiscuous mode [ 411.895855][T10703] device netdevsim0 left promiscuous mode [ 411.954632][T10703] team0: Port device bond0 removed [ 411.990715][T10703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.045482][T10703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.109148][T10703] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 412.167224][T10703] bond0 (unregistering): Released all slaves [ 412.235055][T10708] netlink: 'syz.2.2134': attribute type 10 has an invalid length. [ 412.357691][T10713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2136'. [ 412.419728][T10713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.651081][T10720] netlink: 'syz.0.2148': attribute type 10 has an invalid length. [ 412.682686][T10720] device team0 left promiscuous mode [ 412.692746][T10720] device team_slave_0 left promiscuous mode [ 412.722981][T10720] device team_slave_1 left promiscuous mode [ 412.739621][T10720] bridge0: port 3(team0) entered disabled state [ 413.153254][T10733] netlink: 'syz.4.2145': attribute type 19 has an invalid length. [ 413.171447][T10733] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2145'. [ 414.477994][T10768] netlink: 'syz.4.2155': attribute type 10 has an invalid length. [ 414.500194][T10768] device team0 left promiscuous mode [ 414.509846][T10768] device team_slave_0 left promiscuous mode [ 414.526235][T10768] device team_slave_1 left promiscuous mode [ 414.845745][T10774] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2158'. [ 415.720959][T10783] device syzkaller0 entered promiscuous mode [ 416.102995][T10799] netlink: 'syz.4.2163': attribute type 10 has an invalid length. [ 416.132110][T10799] team0: Device vxcan1 is of different type [ 418.258650][T10803] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2165'. [ 418.281293][T10820] netlink: 'syz.4.2173': attribute type 10 has an invalid length. [ 418.519321][T10833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.026828][T10848] FAULT_INJECTION: forcing a failure. [ 419.026828][T10848] name failslab, interval 1, probability 0, space 0, times 0 [ 419.041581][T10848] CPU: 0 PID: 10848 Comm: syz.2.2182 Not tainted syzkaller #0 [ 419.049115][T10848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.059218][T10848] Call Trace: [ 419.062542][T10848] [ 419.065516][T10848] dump_stack_lvl+0x188/0x24e [ 419.070268][T10848] ? show_regs_print_info+0x12/0x12 [ 419.075520][T10848] ? load_image+0x400/0x400 [ 419.080058][T10848] ? __might_sleep+0xd0/0xd0 [ 419.084681][T10848] ? __lock_acquire+0x7d10/0x7d10 [ 419.089771][T10848] should_fail_ex+0x399/0x4d0 [ 419.094518][T10848] should_failslab+0x5/0x20 [ 419.099155][T10848] slab_pre_alloc_hook+0x59/0x310 [ 419.104222][T10848] ? tracepoint_add_func+0x2f9/0x990 [ 419.109561][T10848] __kmem_cache_alloc_node+0x4f/0x260 [ 419.114963][T10848] ? tracepoint_add_func+0x2f9/0x990 [ 419.120287][T10848] __kmalloc+0xa0/0x240 [ 419.124483][T10848] ? trace_event_raw_event_sys_enter+0x120/0x120 [ 419.130851][T10848] tracepoint_add_func+0x2f9/0x990 [ 419.136033][T10848] ? trace_event_raw_event_sys_enter+0x120/0x120 [ 419.142404][T10848] tracepoint_probe_register+0x5a/0x90 [ 419.147915][T10848] ? trace_event_raw_event_sys_enter+0x120/0x120 [ 419.154310][T10848] perf_trace_event_init+0x420/0x940 [ 419.159654][T10848] perf_trace_init+0x234/0x2d0 [ 419.164467][T10848] perf_tp_event_init+0x89/0x110 [ 419.169446][T10848] perf_try_init_event+0x12b/0x3d0 [ 419.174594][T10848] perf_event_alloc+0xf5c/0x21b0 [ 419.179565][T10848] ? perf_event_alloc+0xbe2/0x21b0 [ 419.184723][T10848] ? find_lively_task_by_vpid+0x19/0x290 [ 419.190392][T10848] __se_sys_perf_event_open+0x6fd/0x1ec0 [ 419.196444][T10848] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 419.202185][T10848] ? syscall_enter_from_user_mode+0x2a/0x80 [ 419.208144][T10848] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 419.213865][T10848] do_syscall_64+0x4c/0xa0 [ 419.218427][T10848] ? clear_bhb_loop+0x60/0xb0 [ 419.223147][T10848] ? clear_bhb_loop+0x60/0xb0 [ 419.227905][T10848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.233892][T10848] RIP: 0033:0x7f64fdf9c799 [ 419.238338][T10848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.257966][T10848] RSP: 002b:00007f64feeee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 419.266405][T10848] RAX: ffffffffffffffda RBX: 00007f64fe215fa0 RCX: 00007f64fdf9c799 [ 419.274407][T10848] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100 [ 419.282406][T10848] RBP: 00007f64feeee090 R08: 000000000000000a R09: 0000000000000000 [ 419.290403][T10848] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 419.298393][T10848] R13: 00007f64fe216038 R14: 00007f64fe215fa0 R15: 00007ffd74ee0f18 [ 419.306400][T10848] [ 420.529482][T10883] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2194'. [ 420.581677][T10883] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2194'. [ 420.611655][T10879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2194'. [ 420.730219][T10883] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2194'. [ 421.837168][T10929] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2213'. [ 421.963579][T10934] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2214'. [ 422.533802][T10938] device syzkaller0 entered promiscuous mode [ 422.691083][T10945] netlink: 'syz.2.2217': attribute type 11 has an invalid length. [ 422.715484][T10945] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2217'. [ 422.762950][T10945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.863715][T10951] netlink: 'syz.3.2221': attribute type 10 has an invalid length. [ 422.873305][T10951] device team0 left promiscuous mode [ 422.879348][T10951] device team_slave_0 left promiscuous mode [ 422.922688][T10951] device team_slave_1 left promiscuous mode [ 422.942731][T10951] device bond0 left promiscuous mode [ 422.965872][T10951] device bond_slave_1 left promiscuous mode [ 422.972849][T10951] device batadv_slave_0 left promiscuous mode [ 423.749780][T10978] netlink: 'syz.1.2231': attribute type 1 has an invalid length. [ 423.761104][T10978] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2231'. [ 426.051867][T10974] netlink: 'syz.2.2230': attribute type 10 has an invalid length. [ 426.068231][T10974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2230'. [ 426.077691][T10974] bridge0: port 3(team0) entered blocking state [ 426.084246][T10974] bridge0: port 3(team0) entered disabled state [ 426.091460][T10974] device team0 entered promiscuous mode [ 426.097186][T10974] device team_slave_0 entered promiscuous mode [ 426.112608][T10974] device team_slave_1 entered promiscuous mode [ 426.329137][T11001] netlink: 'syz.2.2241': attribute type 13 has an invalid length. [ 426.351963][T11001] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2241'. [ 426.390392][T10999] -1: renamed from syzkaller0 [ 426.814434][T11011] FAULT_INJECTION: forcing a failure. [ 426.814434][T11011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.837723][T11013] netlink: 'syz.1.2245': attribute type 23 has an invalid length. [ 426.885882][T11011] CPU: 1 PID: 11011 Comm: syz.3.2244 Not tainted syzkaller #0 [ 426.893420][T11011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.903525][T11011] Call Trace: [ 426.906845][T11011] [ 426.909817][T11011] dump_stack_lvl+0x188/0x24e [ 426.914554][T11011] ? show_regs_print_info+0x12/0x12 [ 426.919841][T11011] ? load_image+0x400/0x400 [ 426.924400][T11011] ? __lock_acquire+0x7d10/0x7d10 [ 426.929497][T11011] should_fail_ex+0x399/0x4d0 [ 426.934244][T11011] _copy_from_user+0x2c/0x170 [ 426.938978][T11011] __sys_bpf+0x2ea/0x780 [ 426.943283][T11011] ? bpf_link_show_fdinfo+0x380/0x380 [ 426.948723][T11011] ? lock_chain_count+0x20/0x20 [ 426.953636][T11011] __x64_sys_bpf+0x78/0x90 [ 426.958113][T11011] do_syscall_64+0x4c/0xa0 [ 426.962586][T11011] ? clear_bhb_loop+0x60/0xb0 [ 426.967321][T11011] ? clear_bhb_loop+0x60/0xb0 [ 426.972048][T11011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.977989][T11011] RIP: 0033:0x7fab8019c799 [ 426.982449][T11011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.002105][T11011] RSP: 002b:00007fab810b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 427.010579][T11011] RAX: ffffffffffffffda RBX: 00007fab80415fa0 RCX: 00007fab8019c799 [ 427.018607][T11011] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 427.026649][T11011] RBP: 00007fab810b8090 R08: 0000000000000000 R09: 0000000000000000 [ 427.034670][T11011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.042696][T11011] R13: 00007fab80416038 R14: 00007fab80415fa0 R15: 00007fff2534e488 [ 427.050735][T11011] [ 429.458306][T11089] netlink: 'syz.0.2271': attribute type 10 has an invalid length. [ 429.498453][T11089] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2271'. [ 429.509705][T11089] bridge0: port 3(team0) entered blocking state [ 429.516811][T11089] bridge0: port 3(team0) entered disabled state [ 429.524989][T11089] device team0 entered promiscuous mode [ 429.530667][T11089] device team_slave_0 entered promiscuous mode [ 429.548196][T11089] device team_slave_1 entered promiscuous mode [ 430.210729][T11099] netlink: 'syz.0.2275': attribute type 10 has an invalid length. [ 430.228674][T11104] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2276'. [ 430.642893][T11120] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2282'. [ 430.963874][T11135] netlink: 'syz.2.2287': attribute type 10 has an invalid length. [ 430.971767][T11135] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2287'. [ 431.030005][T11135] bridge0: port 3(team0) entered blocking state [ 431.036637][T11135] bridge0: port 3(team0) entered forwarding state [ 431.082524][T11135] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.091406][T11136] netlink: 'syz.2.2287': attribute type 10 has an invalid length. [ 431.131719][T11136] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2287'. [ 431.159421][T11143] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2291'. [ 431.291093][T11143] device team_slave_0 left promiscuous mode [ 431.711825][T11143] team0: Port device team_slave_0 removed [ 431.741593][T11143] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 432.372913][T11163] device syzkaller0 entered promiscuous mode [ 432.828432][T11177] netlink: 'syz.4.2304': attribute type 11 has an invalid length. [ 432.870395][T11177] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2304'. [ 432.926898][T11177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.217007][T11188] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2308'. [ 435.206622][T11180] netlink: 'syz.3.2305': attribute type 10 has an invalid length. [ 436.066253][T11234] netlink: 'syz.3.2325': attribute type 10 has an invalid length. [ 436.115429][T11234] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2325'. [ 436.146920][T11234] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 436.169359][T11238] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2326'. [ 436.476943][T11250] netlink: 'syz.3.2331': attribute type 13 has an invalid length. [ 436.502110][T11250] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2331'. [ 437.264456][T11278] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2339'. [ 437.342139][T11278] device team_slave_0 left promiscuous mode [ 437.998261][T11278] team0: Port device team_slave_0 removed [ 438.145264][T11278] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 439.292665][T11332] netlink: 'syz.1.2355': attribute type 10 has an invalid length. [ 439.319474][T11332] team0: Device vxcan1 is of different type [ 439.729659][T11343] netlink: 'syz.0.2360': attribute type 4 has an invalid length. [ 439.739678][T11343] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2360'. [ 439.921509][T11343] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 440.402839][T11362] netlink: 'syz.1.2365': attribute type 10 has an invalid length. [ 440.466293][T11362] team0: Device vxcan1 is of different type [ 441.060976][T11383] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2372'. [ 441.107678][T11383] tc_dump_action: action bad kind [ 441.220936][T11388] netlink: 'syz.1.2377': attribute type 10 has an invalid length. [ 441.227934][T11383] netlink: 'syz.2.2372': attribute type 2 has an invalid length. [ 441.236887][T11388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.259481][T11388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.261651][T11383] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2372'. [ 441.284351][T11385] device sit0 entered promiscuous mode [ 442.675485][T11433] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2390'. [ 443.680824][T11473] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2403'. [ 443.897777][T11479] netlink: 'syz.3.2408': attribute type 39 has an invalid length. [ 444.008100][T11480] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2407'. [ 445.033879][T11491] device syzkaller0 entered promiscuous mode [ 445.425237][T11514] FAULT_INJECTION: forcing a failure. [ 445.425237][T11514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.507371][T11514] CPU: 0 PID: 11514 Comm: syz.4.2421 Not tainted syzkaller #0 [ 445.514921][T11514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.525033][T11514] Call Trace: [ 445.528351][T11514] [ 445.531346][T11514] dump_stack_lvl+0x188/0x24e [ 445.536099][T11514] ? show_regs_print_info+0x12/0x12 [ 445.541362][T11514] ? load_image+0x400/0x400 [ 445.546007][T11514] ? __lock_acquire+0x7d10/0x7d10 [ 445.551093][T11514] should_fail_ex+0x399/0x4d0 [ 445.555831][T11514] _copy_from_user+0x2c/0x170 [ 445.560563][T11514] __copy_msghdr+0x3b7/0x580 [ 445.565215][T11514] ___sys_sendmsg+0x210/0x360 [ 445.569957][T11514] ? __sys_sendmsg+0x290/0x290 [ 445.574802][T11514] ? trace_call_bpf+0xbf/0x6b0 [ 445.579651][T11514] __se_sys_sendmsg+0x1bb/0x2a0 [ 445.584571][T11514] ? __x64_sys_sendmsg+0x80/0x80 [ 445.589583][T11514] ? trace_sys_enter+0x22/0x80 [ 445.594412][T11514] do_syscall_64+0x4c/0xa0 [ 445.598879][T11514] ? clear_bhb_loop+0x60/0xb0 [ 445.603609][T11514] ? clear_bhb_loop+0x60/0xb0 [ 445.608344][T11514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.614284][T11514] RIP: 0033:0x7efdddd9c799 [ 445.618750][T11514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.638410][T11514] RSP: 002b:00007efddec43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.646979][T11514] RAX: ffffffffffffffda RBX: 00007efdde015fa0 RCX: 00007efdddd9c799 [ 445.655012][T11514] RDX: 0000000000040812 RSI: 0000200000000840 RDI: 0000000000000003 [ 445.663036][T11514] RBP: 00007efddec43090 R08: 0000000000000000 R09: 0000000000000000 [ 445.671056][T11514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.679083][T11514] R13: 00007efdde016038 R14: 00007efdde015fa0 R15: 00007ffcb64541f8 [ 445.687148][T11514] [ 445.691657][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.698114][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.813519][T11541] device sit0 entered promiscuous mode [ 449.210440][T11564] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2433'. [ 451.181533][T11613] device sit0 entered promiscuous mode [ 451.374760][T11624] netlink: 'syz.4.2448': attribute type 10 has an invalid length. [ 451.447522][T11624] team0: Device vxcan1 is of different type [ 451.853612][T11636] netlink: 'syz.0.2453': attribute type 10 has an invalid length. [ 451.863220][T11632] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2451'. [ 451.875507][T11636] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2453'. [ 453.482149][T11659] netlink: 'syz.2.2460': attribute type 7 has an invalid length. [ 453.512838][T11660] netlink: 'syz.0.2461': attribute type 10 has an invalid length. [ 453.561952][T11665] netlink: 'syz.3.2462': attribute type 10 has an invalid length. [ 453.596950][T11665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2462'. [ 453.633138][T11665] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 453.835526][T11669] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2464'. [ 454.282815][T11683] netlink: 'syz.3.2468': attribute type 21 has an invalid length. [ 454.300251][T11683] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2468'. [ 454.350723][T11683] netlink: 'syz.3.2468': attribute type 4 has an invalid length. [ 454.386585][T11683] netlink: 'syz.3.2468': attribute type 5 has an invalid length. [ 454.398848][T11683] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2468'. [ 455.290328][T11695] FAULT_INJECTION: forcing a failure. [ 455.290328][T11695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.334081][T11695] CPU: 0 PID: 11695 Comm: syz.4.2472 Not tainted syzkaller #0 [ 455.341624][T11695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 455.351727][T11695] Call Trace: [ 455.355074][T11695] [ 455.358046][T11695] dump_stack_lvl+0x188/0x24e [ 455.362787][T11695] ? show_regs_print_info+0x12/0x12 [ 455.368061][T11695] ? load_image+0x400/0x400 [ 455.372632][T11695] ? __lock_acquire+0x7d10/0x7d10 [ 455.377747][T11695] should_fail_ex+0x399/0x4d0 [ 455.382488][T11695] _copy_from_user+0x2c/0x170 [ 455.387250][T11695] __sys_bpf+0x2ea/0x780 [ 455.391550][T11695] ? bpf_link_show_fdinfo+0x380/0x380 [ 455.396994][T11695] ? lock_chain_count+0x20/0x20 [ 455.401885][T11695] __x64_sys_bpf+0x78/0x90 [ 455.406341][T11695] do_syscall_64+0x4c/0xa0 [ 455.410799][T11695] ? clear_bhb_loop+0x60/0xb0 [ 455.415511][T11695] ? clear_bhb_loop+0x60/0xb0 [ 455.420221][T11695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.426138][T11695] RIP: 0033:0x7efdddd9c799 [ 455.430583][T11695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.450222][T11695] RSP: 002b:00007efddec43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.458849][T11695] RAX: ffffffffffffffda RBX: 00007efdde015fa0 RCX: 00007efdddd9c799 [ 455.466848][T11695] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 455.474927][T11695] RBP: 00007efddec43090 R08: 0000000000000000 R09: 0000000000000000 [ 455.482921][T11695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.490918][T11695] R13: 00007efdde016038 R14: 00007efdde015fa0 R15: 00007ffcb64541f8 [ 455.498929][T11695] [ 455.668542][ T4284] Bluetooth: hci2: ISO packet for unknown connection handle 34 [ 455.752596][T11708] sctp: [Deprecated]: syz.0.2475 (pid 11708) Use of int in max_burst socket option deprecated. [ 455.752596][T11708] Use struct sctp_assoc_value instead [ 457.418341][T11746] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2491'. [ 458.276977][T11767] netlink: 'syz.4.2499': attribute type 3 has an invalid length. [ 458.336959][T11767] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2499'. [ 458.657756][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2502'. [ 458.685933][T11768] netlink: 'syz.0.2498': attribute type 12 has an invalid length. [ 458.708123][T11768] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2498'. [ 459.372328][T11794] netlink: 'syz.2.2509': attribute type 11 has an invalid length. [ 459.389481][T11794] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2509'. [ 459.453630][T11796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.044819][T11815] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2515'. [ 463.060445][T11825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.071950][T11825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.002205][T11856] FAULT_INJECTION: forcing a failure. [ 464.002205][T11856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.021464][T11856] CPU: 1 PID: 11856 Comm: syz.1.2531 Not tainted syzkaller #0 [ 464.028998][T11856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 464.039099][T11856] Call Trace: [ 464.042415][T11856] [ 464.045393][T11856] dump_stack_lvl+0x188/0x24e [ 464.050130][T11856] ? show_regs_print_info+0x12/0x12 [ 464.055386][T11856] ? load_image+0x400/0x400 [ 464.059934][T11856] ? __lock_acquire+0x7d10/0x7d10 [ 464.065014][T11856] should_fail_ex+0x399/0x4d0 [ 464.069751][T11856] _copy_from_user+0x2c/0x170 [ 464.074480][T11856] ____sys_sendmsg+0x30a/0x970 [ 464.079306][T11856] ? __sys_sendmsg_sock+0x30/0x30 [ 464.084383][T11856] ? __import_iovec+0x315/0x500 [ 464.089305][T11856] ? import_iovec+0x6f/0xa0 [ 464.093874][T11856] ___sys_sendmsg+0x2a2/0x360 [ 464.098716][T11856] ? __sys_sendmsg+0x290/0x290 [ 464.103574][T11856] ? trace_call_bpf+0xbf/0x6b0 [ 464.108461][T11856] __se_sys_sendmsg+0x1bb/0x2a0 [ 464.113370][T11856] ? __x64_sys_sendmsg+0x80/0x80 [ 464.118376][T11856] ? trace_sys_enter+0x22/0x80 [ 464.123197][T11856] do_syscall_64+0x4c/0xa0 [ 464.127664][T11856] ? clear_bhb_loop+0x60/0xb0 [ 464.132391][T11856] ? clear_bhb_loop+0x60/0xb0 [ 464.137114][T11856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.143048][T11856] RIP: 0033:0x7ffa6939c799 [ 464.147505][T11856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.167169][T11856] RSP: 002b:00007ffa6a259028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.175636][T11856] RAX: ffffffffffffffda RBX: 00007ffa69615fa0 RCX: 00007ffa6939c799 [ 464.183651][T11856] RDX: 0000000000040812 RSI: 0000200000000840 RDI: 0000000000000003 [ 464.191660][T11856] RBP: 00007ffa6a259090 R08: 0000000000000000 R09: 0000000000000000 [ 464.199673][T11856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.207684][T11856] R13: 00007ffa69616038 R14: 00007ffa69615fa0 R15: 00007ffcaff79c28 [ 464.215712][T11856] [ 464.361486][T11854] netlink: 'syz.3.2530': attribute type 10 has an invalid length. [ 464.402468][T11854] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2530'. [ 464.432148][T11854] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 465.028590][T11875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.062951][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.955171][T11884] netlink: 'syz.1.2543': attribute type 10 has an invalid length. [ 465.964994][T11884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2543'. [ 465.991741][T11884] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 466.279179][T11885] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2543'. [ 466.777261][T11892] device syzkaller0 entered promiscuous mode [ 467.648757][T11920] netlink: 'syz.0.2554': attribute type 29 has an invalid length. [ 471.460865][T11963] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2569'. [ 472.696704][T11920] netlink: 'syz.0.2554': attribute type 29 has an invalid length. [ 472.705077][T11924] netlink: 'syz.0.2554': attribute type 10 has an invalid length. [ 472.714302][T11924] device hsr0 entered promiscuous mode [ 472.729537][T11924] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 472.743046][T11924] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 472.757423][T11924] bond0: (slave hsr0): Error -95 calling set_mac_address [ 472.772686][T11954] netlink: 'syz.3.2566': attribute type 10 has an invalid length. [ 472.794555][T11963] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 472.822488][T11963] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 472.832119][T11963] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 473.118727][T11974] netlink: 'syz.4.2574': attribute type 10 has an invalid length. [ 473.445858][T11980] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2577'. [ 474.596537][T12015] sock: sock_set_timeout: `syz.1.2571' (pid 12015) tries to set negative timeout [ 476.597605][T12080] sctp: [Deprecated]: syz.0.2609 (pid 12080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.597605][T12080] Use struct sctp_sack_info instead [ 477.016147][T12082] device syzkaller0 entered promiscuous mode [ 482.055749][T12115] netlink: 'syz.1.2620': attribute type 12 has an invalid length. [ 482.063829][T12115] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2620'. [ 482.084669][T12140] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2628'. [ 482.095842][T12140] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 482.105741][T12148] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2631'. [ 482.370522][T12162] netlink: 'syz.0.2634': attribute type 13 has an invalid length. [ 482.414104][T12162] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2634'. [ 482.740262][T12182] netlink: 'syz.3.2639': attribute type 10 has an invalid length. [ 482.811407][T12182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2639'. [ 482.825954][T12183] FAULT_INJECTION: forcing a failure. [ 482.825954][T12183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.831400][T12182] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 482.856223][T12183] CPU: 0 PID: 12183 Comm: syz.0.2642 Not tainted syzkaller #0 [ 482.863767][T12183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 482.873872][T12183] Call Trace: [ 482.877198][T12183] [ 482.880168][T12183] dump_stack_lvl+0x188/0x24e [ 482.884911][T12183] ? show_regs_print_info+0x12/0x12 [ 482.890179][T12183] ? load_image+0x400/0x400 [ 482.894731][T12183] ? __lock_acquire+0x7d10/0x7d10 [ 482.899824][T12183] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 482.905874][T12183] should_fail_ex+0x399/0x4d0 [ 482.910620][T12183] _copy_to_user+0x2c/0x130 [ 482.915272][T12183] bpf_test_finish+0x266/0x600 [ 482.920091][T12183] ? convert_skb_to___skb+0x420/0x420 [ 482.925528][T12183] bpf_prog_test_run_flow_dissector+0x4c5/0x640 [ 482.931833][T12183] ? xdp_convert_buff_to_md+0x200/0x200 [ 482.937432][T12183] ? __fget_files+0x28/0x4b0 [ 482.942084][T12183] ? __fget_files+0x28/0x4b0 [ 482.946767][T12183] ? xdp_convert_buff_to_md+0x200/0x200 [ 482.952373][T12183] bpf_prog_test_run+0x31e/0x390 [ 482.957402][T12183] __sys_bpf+0x62b/0x780 [ 482.961726][T12183] ? bpf_link_show_fdinfo+0x380/0x380 [ 482.967176][T12183] ? lock_chain_count+0x20/0x20 [ 482.972089][T12183] __x64_sys_bpf+0x78/0x90 [ 482.976567][T12183] do_syscall_64+0x4c/0xa0 [ 482.981033][T12183] ? clear_bhb_loop+0x60/0xb0 [ 482.985775][T12183] ? clear_bhb_loop+0x60/0xb0 [ 482.990505][T12183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.996471][T12183] RIP: 0033:0x7f9bf719c799 [ 483.000929][T12183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.020770][T12183] RSP: 002b:00007f9bf7fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 483.029247][T12183] RAX: ffffffffffffffda RBX: 00007f9bf7415fa0 RCX: 00007f9bf719c799 [ 483.037276][T12183] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 483.045387][T12183] RBP: 00007f9bf7fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 483.053415][T12183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.061434][T12183] R13: 00007f9bf7416038 R14: 00007f9bf7415fa0 R15: 00007ffedc04f938 [ 483.069467][T12183] [ 484.400375][T12221] netlink: 'syz.0.2655': attribute type 10 has an invalid length. [ 484.431880][T12221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2655'. [ 484.957326][T12234] netlink: 'syz.0.2659': attribute type 10 has an invalid length. [ 484.989233][T12232] tap0: tun_chr_ioctl cmd 1074025675 [ 485.012917][T12232] tap0: persist enabled [ 485.049243][T12231] tap0: tun_chr_ioctl cmd 1074025675 [ 485.057690][T12231] tap0: persist disabled [ 485.499122][T12256] netlink: 'syz.3.2666': attribute type 1 has an invalid length. [ 485.507216][T12256] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.2666'. [ 485.607222][T12258] netlink: 'syz.3.2666': attribute type 3 has an invalid length. [ 485.665886][T12258] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2666'. [ 486.638229][T12268] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.2673'. [ 487.798211][T12287] delete_channel: no stack [ 488.440779][T12317] netlink: 'syz.1.2689': attribute type 29 has an invalid length. [ 488.451434][T12317] netlink: 'syz.1.2689': attribute type 29 has an invalid length. [ 488.956670][T12338] netlink: 'syz.1.2696': attribute type 10 has an invalid length. [ 489.569344][T12338] bond0: (slave bond_slave_0): Releasing backup interface [ 489.850648][T12352] netlink: 'syz.4.2701': attribute type 11 has an invalid length. [ 489.888435][T12352] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2701'. [ 489.940553][T12351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2700'. [ 489.997016][T12352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.156819][T12366] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2707'. [ 490.393701][T12376] netlink: 'syz.2.2711': attribute type 10 has an invalid length. [ 490.418301][T12376] bridge0: port 3(team0) entered disabled state [ 490.463962][T12376] device team0 left promiscuous mode [ 490.475724][T12376] device team_slave_1 left promiscuous mode [ 490.486074][T12376] bridge0: port 3(team0) entered disabled state [ 490.504193][T12374] netlink: 'syz.0.2709': attribute type 10 has an invalid length. [ 490.541837][T12374] bond0: (slave bond_slave_0): Releasing backup interface [ 491.156710][T12387] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2715'. [ 491.418596][T12398] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2719'. [ 491.787936][T12406] device team0 left promiscuous mode [ 491.794873][T12406] device team_slave_1 left promiscuous mode [ 491.808569][T12406] bridge0: port 3(team0) entered disabled state [ 491.865763][T12406] device bridge_slave_1 left promiscuous mode [ 491.892658][T12406] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.960412][T12406] device bridge_slave_0 left promiscuous mode [ 491.974934][T12406] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.769885][T12435] netlink: 'syz.2.2730': attribute type 29 has an invalid length. [ 493.055103][T12435] netlink: 'syz.2.2730': attribute type 29 has an invalid length. [ 493.371591][T12447] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2735'. [ 494.049261][T12464] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 494.202590][T12462] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.2740'. [ 494.349168][T12464] netlink: 'syz.3.2742': attribute type 3 has an invalid length. [ 494.360804][T12464] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2742'. [ 494.389629][T12468] netlink: 'syz.3.2742': attribute type 3 has an invalid length. [ 494.435281][T12468] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2742'. [ 494.589125][T12480] netlink: 'syz.1.2748': attribute type 13 has an invalid length. [ 494.601189][T12482] netlink: 'syz.0.2755': attribute type 1 has an invalid length. [ 494.630012][T12480] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2748'. [ 494.699469][T12481] device bridge_slave_1 left promiscuous mode [ 494.766122][T12481] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.084902][T12481] device bridge_slave_0 left promiscuous mode [ 495.095682][T12481] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.827569][T12509] netlink: 'syz.4.2761': attribute type 1 has an invalid length. [ 495.982793][T12509] netlink: 'syz.4.2761': attribute type 3 has an invalid length. [ 496.006256][T12519] netlink: 'syz.0.2760': attribute type 10 has an invalid length. [ 496.021317][T12518] netlink: 'syz.4.2761': attribute type 3 has an invalid length. [ 496.035871][T12519] __nla_validate_parse: 1 callbacks suppressed [ 496.035888][T12519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2760'. [ 496.062580][T12509] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2761'. [ 496.072863][T12518] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2761'. [ 496.083206][T12519] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 496.390004][T12531] device syzkaller0 entered promiscuous mode [ 497.386199][T12554] netlink: 'syz.1.2779': attribute type 1 has an invalid length. [ 497.443174][T12554] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2779'. [ 497.476158][T12554] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2779'. [ 498.273905][T12589] device wlan1 entered promiscuous mode [ 499.178832][T12624] validate_nla: 6 callbacks suppressed [ 499.178951][T12624] netlink: 'syz.2.2798': attribute type 10 has an invalid length. [ 499.322116][T12626] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2800'. [ 500.177846][T12639] FAULT_INJECTION: forcing a failure. [ 500.177846][T12639] name failslab, interval 1, probability 0, space 0, times 0 [ 500.211910][T12639] CPU: 1 PID: 12639 Comm: syz.2.2804 Not tainted syzkaller #0 [ 500.219462][T12639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 500.229633][T12639] Call Trace: [ 500.232971][T12639] [ 500.235939][T12639] dump_stack_lvl+0x188/0x24e [ 500.240658][T12639] ? show_regs_print_info+0x12/0x12 [ 500.245890][T12639] ? load_image+0x400/0x400 [ 500.250422][T12639] ? __might_sleep+0xd0/0xd0 [ 500.255045][T12639] ? __lock_acquire+0x7d10/0x7d10 [ 500.260138][T12639] should_fail_ex+0x399/0x4d0 [ 500.264868][T12639] should_failslab+0x5/0x20 [ 500.269433][T12639] slab_pre_alloc_hook+0x59/0x310 [ 500.274503][T12639] ? kvmalloc_node+0x6c/0x180 [ 500.279225][T12639] __kmem_cache_alloc_node+0x4f/0x260 [ 500.284650][T12639] ? kvmalloc_node+0x6c/0x180 [ 500.289370][T12639] __kmalloc_node+0xa0/0x240 [ 500.294003][T12639] kvmalloc_node+0x6c/0x180 [ 500.298546][T12639] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 500.303951][T12639] ? 0xffffffffa00041c0 [ 500.308132][T12639] ? bpf_dispatcher_change_prog+0xcd2/0xf10 [ 500.314063][T12639] ? 0xffffffffa00041c0 [ 500.318258][T12639] ? xdp_convert_md_to_buff+0x330/0x330 [ 500.323854][T12639] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 500.330134][T12639] ? bpf_test_init+0x119/0x140 [ 500.334943][T12639] ? xdp_convert_md_to_buff+0x5b/0x330 [ 500.340461][T12639] bpf_prog_test_run_xdp+0x736/0xf10 [ 500.345792][T12639] ? dev_put+0x80/0x80 [ 500.349897][T12639] ? dev_put+0x80/0x80 [ 500.353991][T12639] bpf_prog_test_run+0x31e/0x390 [ 500.358969][T12639] __sys_bpf+0x62b/0x780 [ 500.363241][T12639] ? bpf_link_show_fdinfo+0x380/0x380 [ 500.368708][T12639] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 500.374902][T12639] __x64_sys_bpf+0x78/0x90 [ 500.379353][T12639] do_syscall_64+0x4c/0xa0 [ 500.383808][T12639] ? clear_bhb_loop+0x60/0xb0 [ 500.388537][T12639] ? clear_bhb_loop+0x60/0xb0 [ 500.393244][T12639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.399166][T12639] RIP: 0033:0x7f64fdf9c799 [ 500.403608][T12639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.423262][T12639] RSP: 002b:00007f64feeee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 500.431706][T12639] RAX: ffffffffffffffda RBX: 00007f64fe215fa0 RCX: 00007f64fdf9c799 [ 500.439712][T12639] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 500.447709][T12639] RBP: 00007f64feeee090 R08: 0000000000000000 R09: 0000000000000000 [ 500.455707][T12639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.463701][T12639] R13: 00007f64fe216038 R14: 00007f64fe215fa0 R15: 00007ffd74ee0f18 [ 500.471748][T12639] [ 500.853899][T12653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.893803][T12653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.991079][T12680] device syzkaller0 entered promiscuous mode [ 502.106809][T12682] netlink: 'syz.0.2816': attribute type 1 has an invalid length. [ 505.158859][T12753] netlink: 'syz.2.2838': attribute type 11 has an invalid length. [ 505.167683][T12753] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2838'. [ 505.217067][T12753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.338975][T12755] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2839'. [ 506.263039][T12771] netlink: 'syz.1.2845': attribute type 1 has an invalid length. [ 506.311332][T12776] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2844'. [ 507.004830][T12788] netlink: 'syz.4.2850': attribute type 1 has an invalid length. [ 507.052800][T12788] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2850'. [ 507.095075][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.101592][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.580859][T12816] netlink: 'syz.2.2862': attribute type 46 has an invalid length. [ 508.743856][T12817] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2861'. [ 508.784488][T12817] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 509.674500][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 509.696833][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 509.707048][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 509.724348][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 509.732118][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 509.740648][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 509.804033][T12834] netlink: 'syz.0.2864': attribute type 10 has an invalid length. [ 510.735128][T10081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.827151][T12847] device veth1_macvtap entered promiscuous mode [ 510.852493][T12847] device macsec0 entered promiscuous mode [ 510.922192][T10081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.976268][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 511.777180][T10081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.813034][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 512.985160][T10081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.206523][T12874] netlink: 'syz.2.2882': attribute type 10 has an invalid length. [ 513.339873][T12874] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 513.468201][T12831] chnl_net:caif_netlink_parms(): no params data found [ 513.525773][T10081] tipc: Left network mode [ 513.597191][T12887] netlink: 'syz.1.2886': attribute type 10 has an invalid length. [ 513.616278][T12887] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2886'. [ 513.633380][T12887] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 513.892544][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 514.143385][T12831] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.192509][T12831] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.211256][T12831] device bridge_slave_0 entered promiscuous mode [ 514.354940][T12831] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.374522][T12831] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.403765][T12831] device bridge_slave_1 entered promiscuous mode [ 514.885316][T12831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.993964][T12831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.249728][T12831] team0: Port device team_slave_0 added [ 515.985998][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 516.387727][T12831] team0: Port device team_slave_1 added [ 516.544446][T12831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.551654][T12831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.679565][T12831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.725719][T12831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.742468][T12831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.842533][T12831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.030533][T12831] device hsr_slave_0 entered promiscuous mode [ 517.055062][T12831] device hsr_slave_1 entered promiscuous mode [ 517.071681][T12831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.079849][T12831] Cannot create hsr debugfs directory [ 518.052412][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 519.368143][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2922'. [ 519.491287][T13030] netlink: 'syz.0.2921': attribute type 10 has an invalid length. [ 520.052008][T13051] FAULT_INJECTION: forcing a failure. [ 520.052008][T13051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.069616][T13051] CPU: 0 PID: 13051 Comm: syz.1.2933 Not tainted syzkaller #0 [ 520.077242][T13051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.087351][T13051] Call Trace: [ 520.090672][T13051] [ 520.093654][T13051] dump_stack_lvl+0x188/0x24e [ 520.098422][T13051] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 520.104633][T13051] ? show_regs_print_info+0x12/0x12 [ 520.109921][T13051] ? load_image+0x400/0x400 [ 520.114504][T13051] should_fail_ex+0x399/0x4d0 [ 520.119341][T13051] _copy_from_user+0x2c/0x170 [ 520.124082][T13051] __sys_bpf+0x2ea/0x780 [ 520.128395][T13051] ? bpf_link_show_fdinfo+0x380/0x380 [ 520.133855][T13051] ? lock_chain_count+0x20/0x20 [ 520.138768][T13051] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 520.144814][T13051] __x64_sys_bpf+0x78/0x90 [ 520.149296][T13051] do_syscall_64+0x4c/0xa0 [ 520.153772][T13051] ? clear_bhb_loop+0x60/0xb0 [ 520.158497][T13051] ? clear_bhb_loop+0x60/0xb0 [ 520.163222][T13051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 520.169177][T13051] RIP: 0033:0x7ffa6939c799 [ 520.173651][T13051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.193315][T13051] RSP: 002b:00007ffa6a259028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 520.201781][T13051] RAX: ffffffffffffffda RBX: 00007ffa69615fa0 RCX: 00007ffa6939c799 [ 520.209807][T13051] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 000000000000000f [ 520.217825][T13051] RBP: 00007ffa6a259090 R08: 0000000000000000 R09: 0000000000000000 [ 520.225847][T13051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.233880][T13051] R13: 00007ffa69616038 R14: 00007ffa69615fa0 R15: 00007ffcaff79c28 [ 520.241929][T13051] [ 520.365829][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2935'. [ 521.349209][T12831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 521.421101][T13062] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2936'. [ 521.436639][T13062] bridge_slave_1: default FDB implementation only supports local addresses [ 521.446661][T13063] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2936'. [ 521.456392][T13063] bridge_slave_1: default FDB implementation only supports local addresses [ 521.570538][T12831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 521.728280][T12831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 521.775566][T12831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 521.828198][T10081] device hsr_slave_0 left promiscuous mode [ 521.938518][T10081] device hsr_slave_1 left promiscuous mode [ 522.184416][T10081] device veth1_macvtap left promiscuous mode [ 522.196585][T10081] device veth0_macvtap left promiscuous mode [ 522.205246][T10081] device veth1_vlan left promiscuous mode [ 523.822964][T10081] team0 (unregistering): Port device team_slave_1 removed [ 523.924451][T10081] team0 (unregistering): Port device team_slave_0 removed [ 524.478218][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2946'. [ 524.709909][T13153] netlink: 'syz.1.2960': attribute type 21 has an invalid length. [ 524.760579][T13152] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2960'. [ 524.770361][T13152] netlink: zone id is out of range [ 524.780512][T13152] netlink: zone id is out of range [ 524.790598][T13152] netlink: zone id is out of range [ 524.797983][T13152] netlink: zone id is out of range [ 524.810074][T13152] netlink: zone id is out of range [ 524.824126][T13152] netlink: zone id is out of range [ 524.854544][T13152] netlink: zone id is out of range [ 524.859749][T13152] netlink: zone id is out of range [ 524.874141][T13152] netlink: zone id is out of range [ 524.879583][T13152] netlink: zone id is out of range [ 525.172565][T13157] netlink: 'syz.1.2960': attribute type 10 has an invalid length. [ 525.306751][T13157] device team_slave_0 left promiscuous mode [ 525.332114][T13157] team0 (unregistering): Port device team_slave_0 removed [ 525.360840][T13157] device team_slave_1 left promiscuous mode [ 525.383310][T13157] team0 (unregistering): Port device team_slave_1 removed [ 525.603218][T12831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.708793][T10105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 525.733617][T10105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.803382][T12831] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.866711][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 525.893333][T13178] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2967'. [ 525.916940][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.985745][T10104] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.993066][T10104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.054333][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 526.111754][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 526.141032][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 526.336224][T10104] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.343499][T10104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.461092][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 526.488706][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 526.582962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 526.631664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 526.684091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 526.778060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 526.863350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 526.900903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 526.958689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 527.016833][T13197] FAULT_INJECTION: forcing a failure. [ 527.016833][T13197] name failslab, interval 1, probability 0, space 0, times 0 [ 527.056060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 527.066918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 527.080739][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 527.112427][T13197] CPU: 1 PID: 13197 Comm: syz.0.2971 Not tainted syzkaller #0 [ 527.119984][T13197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.130093][T13197] Call Trace: [ 527.131242][T13198] netlink: 'syz.2.2972': attribute type 9 has an invalid length. [ 527.133397][T13197] [ 527.133419][T13197] dump_stack_lvl+0x188/0x24e [ 527.133458][T13197] ? show_regs_print_info+0x12/0x12 [ 527.133489][T13197] ? load_image+0x400/0x400 [ 527.133514][T13197] ? __might_sleep+0xd0/0xd0 [ 527.133537][T13197] ? __lock_acquire+0x7d10/0x7d10 [ 527.133565][T13197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 527.133601][T13197] should_fail_ex+0x399/0x4d0 [ 527.133641][T13197] should_failslab+0x5/0x20 [ 527.183568][T13197] slab_pre_alloc_hook+0x59/0x310 [ 527.188638][T13197] ? lockdep_hardirqs_on+0x94/0x140 [ 527.193866][T13197] ? tomoyo_encode+0x27e/0x540 [ 527.198748][T13197] __kmem_cache_alloc_node+0x4f/0x260 [ 527.204167][T13197] ? tomoyo_encode+0x27e/0x540 [ 527.208977][T13197] __kmalloc+0xa0/0x240 [ 527.213176][T13197] tomoyo_encode+0x27e/0x540 [ 527.217808][T13197] tomoyo_realpath_from_path+0x58e/0x5d0 [ 527.223479][T13197] ? tomoyo_path_number_perm+0x205/0x650 [ 527.229141][T13197] tomoyo_path_number_perm+0x22f/0x650 [ 527.234638][T13197] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 527.240129][T13197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 527.246175][T13197] ? __fget_files+0x28/0x4b0 [ 527.250804][T13197] ? __fget_files+0x28/0x4b0 [ 527.255444][T13197] security_file_ioctl+0x6c/0xa0 [ 527.260423][T13197] __se_sys_ioctl+0x48/0x170 [ 527.265054][T13197] do_syscall_64+0x4c/0xa0 [ 527.269503][T13197] ? clear_bhb_loop+0x60/0xb0 [ 527.274212][T13197] ? clear_bhb_loop+0x60/0xb0 [ 527.278919][T13197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.284840][T13197] RIP: 0033:0x7f9bf719c799 [ 527.289370][T13197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.309029][T13197] RSP: 002b:00007f9bf7fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.317480][T13197] RAX: ffffffffffffffda RBX: 00007f9bf7415fa0 RCX: 00007f9bf719c799 [ 527.325484][T13197] RDX: 0000000000000000 RSI: 0000000000005411 RDI: 0000000000000005 [ 527.333478][T13197] RBP: 00007f9bf7fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 527.341476][T13197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.349477][T13197] R13: 00007f9bf7416038 R14: 00007f9bf7415fa0 R15: 00007ffedc04f938 [ 527.357512][T13197] [ 527.370385][T13198] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2972'. [ 527.390807][T13197] ERROR: Out of memory at tomoyo_realpath_from_path. [ 528.268388][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 528.288219][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.462042][T12831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.785915][T13236] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2980'. [ 528.797409][T13232] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2980'. [ 528.923158][T13239] netlink: 'syz.0.2981': attribute type 10 has an invalid length. [ 529.137457][T13246] netlink: 'syz.3.2982': attribute type 10 has an invalid length. [ 529.188238][T13246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2982'. [ 530.254193][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 530.264053][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 530.314212][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 530.325443][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 530.351264][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 530.365814][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 530.406604][T12831] device veth0_vlan entered promiscuous mode [ 530.421611][T12831] device veth1_vlan entered promiscuous mode [ 530.474264][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 530.484343][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 530.494966][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 530.505749][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 530.521158][T12831] device veth0_macvtap entered promiscuous mode [ 530.554915][T12831] device veth1_macvtap entered promiscuous mode [ 530.727925][T12831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.745967][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 530.755066][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 530.763461][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 530.773892][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 530.806760][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.842462][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.902910][T12831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.924595][T10081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 530.937652][T10081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 530.952164][T12831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.962231][T12831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.973660][T12831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.985794][T12831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.104953][T13294] FAULT_INJECTION: forcing a failure. [ 531.104953][T13294] name failslab, interval 1, probability 0, space 0, times 0 [ 531.118723][T13294] CPU: 0 PID: 13294 Comm: syz.1.2996 Not tainted syzkaller #0 [ 531.126417][T13294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.136509][T13294] Call Trace: [ 531.139811][T13294] [ 531.142769][T13294] dump_stack_lvl+0x188/0x24e [ 531.147488][T13294] ? show_regs_print_info+0x12/0x12 [ 531.152711][T13294] ? load_image+0x400/0x400 [ 531.157243][T13294] ? __might_sleep+0xd0/0xd0 [ 531.161854][T13294] ? __lock_acquire+0x7d10/0x7d10 [ 531.166908][T13294] should_fail_ex+0x399/0x4d0 [ 531.171634][T13294] should_failslab+0x5/0x20 [ 531.176178][T13294] slab_pre_alloc_hook+0x59/0x310 [ 531.181233][T13294] ? page_pool_create+0x6d/0x5c0 [ 531.186266][T13294] __kmem_cache_alloc_node+0x4f/0x260 [ 531.191672][T13294] ? page_pool_create+0x6d/0x5c0 [ 531.196631][T13294] kmalloc_node_trace+0x22/0xe0 [ 531.201515][T13294] page_pool_create+0x6d/0x5c0 [ 531.206329][T13294] bpf_test_run_xdp_live+0x223/0x1a90 [ 531.211732][T13294] ? 0xffffffffa00041c0 [ 531.215927][T13294] ? text_poke_copy+0x79/0x90 [ 531.220712][T13294] ? 0xffffffffa00041c0 [ 531.224909][T13294] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 531.230858][T13294] ? 0xffffffffa00041c0 [ 531.235196][T13294] ? xdp_convert_md_to_buff+0x330/0x330 [ 531.240796][T13294] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 531.247077][T13294] ? bpf_test_init+0x119/0x140 [ 531.251868][T13294] ? xdp_convert_md_to_buff+0x5b/0x330 [ 531.257368][T13294] bpf_prog_test_run_xdp+0x736/0xf10 [ 531.262695][T13294] ? dev_put+0x80/0x80 [ 531.266798][T13294] ? dev_put+0x80/0x80 [ 531.270896][T13294] bpf_prog_test_run+0x31e/0x390 [ 531.275868][T13294] __sys_bpf+0x62b/0x780 [ 531.280145][T13294] ? bpf_link_show_fdinfo+0x380/0x380 [ 531.285573][T13294] ? lock_chain_count+0x20/0x20 [ 531.290452][T13294] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 531.296495][T13294] __x64_sys_bpf+0x78/0x90 [ 531.300968][T13294] do_syscall_64+0x4c/0xa0 [ 531.305421][T13294] ? clear_bhb_loop+0x60/0xb0 [ 531.310139][T13294] ? clear_bhb_loop+0x60/0xb0 [ 531.314851][T13294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.320865][T13294] RIP: 0033:0x7ffa6939c799 [ 531.325312][T13294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.344950][T13294] RSP: 002b:00007ffa6a259028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 531.353400][T13294] RAX: ffffffffffffffda RBX: 00007ffa69615fa0 RCX: 00007ffa6939c799 [ 531.361394][T13294] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 531.369388][T13294] RBP: 00007ffa6a259090 R08: 0000000000000000 R09: 0000000000000000 [ 531.377384][T13294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.385379][T13294] R13: 00007ffa69616038 R14: 00007ffa69615fa0 R15: 00007ffcaff79c28 [ 531.393388][T13294] [ 531.635385][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.653828][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.662006][T10105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 531.876224][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.895686][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.925665][T10077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 532.584283][T13324] -1: renamed from syzkaller0 [ 533.351467][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3015'. [ 533.439201][T13343] netlink: 'syz.4.3012': attribute type 10 has an invalid length. [ 533.546081][T13343] team0: Device vxcan1 is of different type [ 533.726271][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 533.736758][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.744991][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.764102][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 533.777195][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 533.784695][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 533.823942][T13358] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3018'. [ 533.833249][T13358] net_ratelimit: 8 callbacks suppressed [ 533.833326][T13358] openvswitch: netlink: Message has 6 unknown bytes. [ 533.875003][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.067211][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.269734][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.435594][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.648933][T13374] sctp: [Deprecated]: syz.1.3026 (pid 13374) Use of int in maxseg socket option. [ 534.648933][T13374] Use struct sctp_assoc_value instead [ 535.108715][T13356] chnl_net:caif_netlink_parms(): no params data found [ 535.450389][T13391] netlink: 'syz.4.3032': attribute type 11 has an invalid length. [ 535.462658][T13391] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3032'. [ 535.505716][T13391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.813277][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 536.202902][T13409] netlink: 'syz.1.3035': attribute type 3 has an invalid length. [ 536.242270][T13402] netlink: 'syz.1.3035': attribute type 3 has an invalid length. [ 536.289074][T13409] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3035'. [ 536.324484][T13402] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3035'. [ 536.342083][T13411] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3037'. [ 536.728724][T13356] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.821915][T13356] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.840097][T13356] device bridge_slave_0 entered promiscuous mode [ 537.007570][T13356] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.020024][T13356] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.073289][T13356] device bridge_slave_1 entered promiscuous mode [ 537.355895][T13356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.510811][T13433] device syzkaller0 entered promiscuous mode [ 537.621579][T13356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.660762][T13442] netlink: 'syz.3.3047': attribute type 10 has an invalid length. [ 537.686673][T13442] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3047'. [ 537.704429][T13449] netlink: 'syz.4.3046': attribute type 3 has an invalid length. [ 537.737796][T13449] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3046'. [ 537.893570][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 538.807193][T13459] sctp: [Deprecated]: syz.4.3049 (pid 13459) Use of int in maxseg socket option. [ 538.807193][T13459] Use struct sctp_assoc_value instead [ 539.976833][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 540.585123][T13356] team0: Port device team_slave_0 added [ 540.703388][T13356] team0: Port device team_slave_1 added [ 540.821764][T13467] netlink: 'syz.2.3052': attribute type 13 has an invalid length. [ 540.881655][T13467] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3052'. [ 540.960970][T13356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.982504][T13356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.152623][T13356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.374693][T13356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.383136][T13356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.519138][T13356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.758431][T13356] device hsr_slave_0 entered promiscuous mode [ 541.827137][T13356] device hsr_slave_1 entered promiscuous mode [ 542.053435][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 542.508888][T13509] sctp: [Deprecated]: syz.3.3063 (pid 13509) Use of int in maxseg socket option. [ 542.508888][T13509] Use struct sctp_assoc_value instead [ 543.208694][T13516] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3065'. [ 544.245682][T13356] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 544.447607][T13356] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 544.497340][T13356] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 544.540209][T13356] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 544.779651][T13555] netlink: 'syz.1.3077': attribute type 27 has an invalid length. [ 544.812533][T13555] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3077'. [ 545.182561][ T11] device hsr_slave_0 left promiscuous mode [ 545.210451][ T11] device hsr_slave_1 left promiscuous mode [ 545.318213][ T11] device veth1_vlan left promiscuous mode [ 545.347929][ T11] device veth0_vlan left promiscuous mode [ 549.064914][ T11] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 549.128226][ T11] team0 (unregistering): Port device team_slave_1 removed [ 549.209022][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.505758][ T11] bond0 (unregistering): Released all slaves [ 549.540930][T13589] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3086'. [ 549.551374][T13598] netlink: 'syz.2.3087': attribute type 10 has an invalid length. [ 549.566134][T13604] netlink: 'syz.3.3089': attribute type 10 has an invalid length. [ 549.579392][T13604] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3089'. [ 549.603168][T13604] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.610784][T13604] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 549.698992][T13607] device syzkaller0 entered promiscuous mode [ 549.707431][T13613] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3090'. [ 549.785485][T13616] netlink: 'syz.2.3091': attribute type 27 has an invalid length. [ 549.842224][T13616] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3091'. [ 550.574319][T13645] netlink: 'syz.2.3099': attribute type 2 has an invalid length. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.