last executing test programs: 19.114955795s ago: executing program 3 (id=3122): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="0000000002000000000000000000", 0x0, 0x3000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 17.811104617s ago: executing program 3 (id=3133): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 17.527149174s ago: executing program 3 (id=3137): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 17.27165283s ago: executing program 3 (id=3139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc}, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x6, 0x10008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 16.87828301s ago: executing program 3 (id=3140): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0xa, 0x2, 0x11, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0x8, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0xd832, 0x200000000000c8, 0x806, 0x9, 0xfffffffffffffffb, 0x80000000, 0x3, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) 16.43926725s ago: executing program 3 (id=3144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1002, 0x3}, 0x1a2d, 0x0, 0x3ff, 0x6, 0x9, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x5450, r1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f0000000140)="ea839d6303000030cb00000000000000", 0x3, r0}, 0x38) 4.843268053s ago: executing program 1 (id=3206): perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x9d, 0x1, 0x8, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x3, 0x0, 0x5, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) 4.820451613s ago: executing program 1 (id=3208): perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa53d, 0xc}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.651210157s ago: executing program 1 (id=3210): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xfffffffc}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20501, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x94, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_config_ext={0x0, 0x772}, 0x108500, 0xe9a, 0x7baf376b, 0x3, 0x5, 0x0, 0x5}, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x1, 0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 4.54354517s ago: executing program 2 (id=3211): bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x17a845ef}, 0x0, 0x7, 0x0, 0x1, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x4a, 0x5f, 0xfe, 0x4, 0x4, 0x0, 0x3, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x110200, 0xd, 0x9, 0x7, 0x7, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 4.394178393s ago: executing program 2 (id=3212): syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.14210955s ago: executing program 2 (id=3213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) 4.058895632s ago: executing program 2 (id=3214): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000540)="b9ff03076804268c989e14f088a847", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xf, 0x0, &(0x7f0000000080)="63eced8e46dc3f0a3209fa0489b2ae", 0x0, 0x10001, 0xd0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x2, &(0x7f0000000100)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 3.117453774s ago: executing program 2 (id=3215): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002880)=@generic={0x0, r1}, 0x18) 2.007306111s ago: executing program 4 (id=3216): r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, 0x0) 2.007133931s ago: executing program 1 (id=3217): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x3) 1.832757266s ago: executing program 1 (id=3219): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x100403, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000000500), 0x80, r2, 0x0, 0x7}, 0x38) 1.822357166s ago: executing program 4 (id=3220): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)=""/138, 0x4a, 0x8a, 0x100001}, 0x28) 1.747316598s ago: executing program 0 (id=3221): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000140), 0x0}, 0x20) 1.552491753s ago: executing program 1 (id=3222): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x7, 0xf6}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000140)=0x666, 0x12) write$cgroup_pid(r0, &(0x7f0000000440), 0x12) 1.540473173s ago: executing program 0 (id=3223): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 1.491354834s ago: executing program 4 (id=3224): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 1.318977088s ago: executing program 0 (id=3225): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.218399s ago: executing program 4 (id=3226): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_clone(0x4200, &(0x7f0000002f00), 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004040)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}], 0x20}, 0x20000000) 1.155293452s ago: executing program 0 (id=3227): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 1.034114575s ago: executing program 0 (id=3228): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) 927.233057ms ago: executing program 4 (id=3229): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='GPL\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b33, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x1, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x42}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48844) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)) 815.459651ms ago: executing program 0 (id=3230): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x101900, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004430000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="02"], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 733.283842ms ago: executing program 4 (id=3231): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) 0s ago: executing program 2 (id=3232): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffbf0000000000040000851000000200000004000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): ributes in process `syz.2.2078'. [ 450.390519][T10534] netlink: 'syz.3.2085': attribute type 11 has an invalid length. [ 450.468172][T10534] netlink: 'syz.3.2085': attribute type 10 has an invalid length. [ 450.496954][T10538] netlink: 'syz.1.2087': attribute type 21 has an invalid length. [ 450.517931][T10532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.531529][T10539] netlink: 'syz.4.2086': attribute type 10 has an invalid length. [ 450.725541][T10543] netlink: 'syz.0.2088': attribute type 21 has an invalid length. [ 452.017637][T10577] netlink: 'syz.3.2101': attribute type 11 has an invalid length. [ 452.048715][T10577] netlink: 'syz.3.2101': attribute type 10 has an invalid length. [ 452.097501][T10576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.509936][T10589] __nla_validate_parse: 8 callbacks suppressed [ 452.509956][T10589] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2107'. [ 455.901874][T10615] netlink: 'syz.0.2115': attribute type 11 has an invalid length. [ 455.963819][T10615] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2115'. [ 456.065851][T10617] netlink: 'syz.0.2115': attribute type 10 has an invalid length. [ 456.139189][T10613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.624138][T10632] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2119'. [ 456.722939][T10630] netlink: 'syz.1.2120': attribute type 21 has an invalid length. [ 456.738173][T10630] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2120'. [ 457.066275][T10643] netlink: 'syz.4.2122': attribute type 13 has an invalid length. [ 457.074207][T10643] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2122'. [ 457.247335][T10643] syz_tun: refused to change device tx_queue_len [ 457.253779][T10643] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 457.639384][T10639] netlink: 'syz.0.2123': attribute type 6 has an invalid length. [ 457.676702][T10639] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2123'. [ 457.772411][T10659] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2129'. [ 457.797295][T10657] netlink: 'syz.4.2127': attribute type 11 has an invalid length. [ 457.832883][T10657] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2127'. [ 457.869189][T10657] netlink: 'syz.4.2127': attribute type 10 has an invalid length. [ 457.984330][T10655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.247803][T10672] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 458.304205][T10672] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2130'. [ 458.367201][T10675] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2134'. [ 458.593603][T10679] netlink: 'syz.0.2136': attribute type 21 has an invalid length. [ 458.603020][T10679] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2136'. [ 459.300000][T10692] netlink: 'syz.2.2139': attribute type 8 has an invalid length. [ 459.309303][T10692] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2139'. [ 459.365095][T10698] netlink: 'syz.2.2139': attribute type 13 has an invalid length. [ 459.433886][T10698] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2139'. [ 459.453274][T10698] syz_tun: refused to change device tx_queue_len [ 459.460504][T10698] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 459.477926][T10696] netlink: 'syz.1.2142': attribute type 21 has an invalid length. [ 459.510488][T10696] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2142'. [ 459.640309][T10703] netlink: 'syz.3.2144': attribute type 11 has an invalid length. [ 459.648895][T10703] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2144'. [ 459.664409][T10702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.159958][T10736] FAULT_INJECTION: forcing a failure. [ 461.159958][T10736] name failslab, interval 1, probability 0, space 0, times 0 [ 461.182764][T10736] CPU: 0 PID: 10736 Comm: syz.1.2155 Not tainted syzkaller #0 [ 461.190300][T10736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 461.200388][T10736] Call Trace: [ 461.203692][T10736] [ 461.206650][T10736] dump_stack_lvl+0x188/0x24e [ 461.211361][T10736] ? show_regs_print_info+0x12/0x12 [ 461.216716][T10736] ? load_image+0x410/0x410 [ 461.221259][T10736] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 461.227276][T10736] ? __lock_acquire+0x7c40/0x7c40 [ 461.232342][T10736] should_fail_ex+0x390/0x4c0 [ 461.237059][T10736] should_failslab+0x5/0x20 [ 461.241587][T10736] slab_pre_alloc_hook+0x59/0x300 [ 461.246652][T10736] kmem_cache_alloc+0x56/0x2f0 [ 461.251441][T10736] ? __build_skb+0x27/0x3b0 [ 461.255985][T10736] __build_skb+0x27/0x3b0 [ 461.260342][T10736] ? build_skb+0x14/0x230 [ 461.264697][T10736] build_skb+0x1e/0x230 [ 461.268883][T10736] bpf_prog_test_run_skb+0x38d/0x18e0 [ 461.274284][T10736] ? __fget_files+0x28/0x460 [ 461.278905][T10736] ? __fget_files+0x3fc/0x460 [ 461.283623][T10736] ? cpu_online+0xa0/0xa0 [ 461.287979][T10736] bpf_prog_test_run+0x31c/0x390 [ 461.292953][T10736] __sys_bpf+0x62b/0x780 [ 461.297230][T10736] ? bpf_link_show_fdinfo+0x380/0x380 [ 461.302641][T10736] ? lock_chain_count+0x20/0x20 [ 461.307528][T10736] __x64_sys_bpf+0x78/0x90 [ 461.311975][T10736] do_syscall_64+0x4c/0xa0 [ 461.316418][T10736] ? clear_bhb_loop+0x60/0xb0 [ 461.321120][T10736] ? clear_bhb_loop+0x60/0xb0 [ 461.325831][T10736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.331748][T10736] RIP: 0033:0x7f30a979de99 [ 461.336197][T10736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.355826][T10736] RSP: 002b:00007f30aa640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 461.364262][T10736] RAX: ffffffffffffffda RBX: 00007f30a9a25fa0 RCX: 00007f30a979de99 [ 461.372347][T10736] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 461.380339][T10736] RBP: 00007f30aa640090 R08: 0000000000000000 R09: 0000000000000000 [ 461.388337][T10736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.396325][T10736] R13: 00007f30a9a26038 R14: 00007f30a9a25fa0 R15: 00007fff237d7b58 [ 461.404334][T10736] [ 461.414105][T10741] validate_nla: 3 callbacks suppressed [ 461.414119][T10741] netlink: 'syz.4.2156': attribute type 21 has an invalid length. [ 461.499223][T10744] netlink: 'syz.3.2158': attribute type 11 has an invalid length. [ 461.559515][T10744] netlink: 'syz.3.2158': attribute type 10 has an invalid length. [ 461.603561][T10743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.786751][T10748] netlink: 'syz.1.2159': attribute type 13 has an invalid length. [ 461.914962][T10748] syz_tun: refused to change device tx_queue_len [ 461.931986][T10748] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 462.145238][T10759] netlink: 'syz.3.2163': attribute type 10 has an invalid length. [ 462.954699][T10783] FAULT_INJECTION: forcing a failure. [ 462.954699][T10783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.969228][T10783] CPU: 0 PID: 10783 Comm: syz.3.2171 Not tainted syzkaller #0 [ 462.976733][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 462.986823][T10783] Call Trace: [ 462.990134][T10783] [ 462.993098][T10783] dump_stack_lvl+0x188/0x24e [ 462.997859][T10783] ? show_regs_print_info+0x12/0x12 [ 463.003108][T10783] ? load_image+0x410/0x410 [ 463.007658][T10783] ? __lock_acquire+0x7c40/0x7c40 [ 463.012728][T10783] ? __might_sleep+0xd0/0xd0 [ 463.017352][T10783] should_fail_ex+0x390/0x4c0 [ 463.022077][T10783] _copy_from_user+0x2c/0x170 [ 463.026791][T10783] generic_map_update_batch+0x48d/0x7f0 [ 463.032398][T10783] ? rcu_read_unlock+0xa0/0xa0 [ 463.037238][T10783] ? rcu_read_unlock+0xa0/0xa0 [ 463.042058][T10783] bpf_map_do_batch+0x475/0x5f0 [ 463.046961][T10783] ? bpf_lsm_key_alloc+0x10/0x10 [ 463.051949][T10783] __sys_bpf+0x6f7/0x780 [ 463.056241][T10783] ? bpf_link_show_fdinfo+0x380/0x380 [ 463.061671][T10783] ? lock_chain_count+0x20/0x20 [ 463.066564][T10783] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 463.072596][T10783] __x64_sys_bpf+0x78/0x90 [ 463.077056][T10783] do_syscall_64+0x4c/0xa0 [ 463.081523][T10783] ? clear_bhb_loop+0x60/0xb0 [ 463.086247][T10783] ? clear_bhb_loop+0x60/0xb0 [ 463.090972][T10783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.096925][T10783] RIP: 0033:0x7efd27b9de99 [ 463.101376][T10783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.121034][T10783] RSP: 002b:00007efd28afc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.129496][T10783] RAX: ffffffffffffffda RBX: 00007efd27e25fa0 RCX: 00007efd27b9de99 [ 463.137512][T10783] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 463.145610][T10783] RBP: 00007efd28afc090 R08: 0000000000000000 R09: 0000000000000000 [ 463.153619][T10783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.161626][T10783] R13: 00007efd27e26038 R14: 00007efd27e25fa0 R15: 00007ffe2ad46fe8 [ 463.169665][T10783] [ 463.315169][T10786] __nla_validate_parse: 8 callbacks suppressed [ 463.315210][T10786] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2172'. [ 463.435525][T10788] netlink: 'syz.3.2173': attribute type 11 has an invalid length. [ 463.443905][T10788] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2173'. [ 463.459270][T10788] netlink: 'syz.3.2173': attribute type 10 has an invalid length. [ 463.714815][T10787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.233060][T10808] netlink: 'syz.0.2181': attribute type 10 has an invalid length. [ 464.267314][T10808] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2181'. [ 464.369207][T10813] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2183'. [ 465.092261][T10820] netlink: 'syz.1.2182': attribute type 6 has an invalid length. [ 465.138848][T10820] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2182'. [ 465.338901][T10829] netlink: 'syz.4.2186': attribute type 2 has an invalid length. [ 465.354327][T10829] netlink: 'syz.4.2186': attribute type 1 has an invalid length. [ 465.364080][T10829] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2186'. [ 465.419519][T10836] netlink: 'syz.1.2190': attribute type 11 has an invalid length. [ 465.441013][T10836] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2190'. [ 465.491689][T10836] netlink: 'syz.1.2190': attribute type 10 has an invalid length. [ 465.591188][T10835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.924615][T10847] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2195'. [ 466.023548][T10856] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2197'. [ 466.975098][T10881] validate_nla: 1 callbacks suppressed [ 466.975115][T10881] netlink: 'syz.3.2205': attribute type 10 has an invalid length. [ 467.049341][T10880] netlink: 'syz.3.2205': attribute type 11 has an invalid length. [ 467.071649][T10880] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2205'. [ 467.106809][T10878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.505462][T10883] netlink: 'syz.0.2207': attribute type 2 has an invalid length. [ 468.367738][T10914] netlink: 'syz.1.2215': attribute type 10 has an invalid length. [ 468.385655][T10914] __nla_validate_parse: 1 callbacks suppressed [ 468.386138][T10914] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2215'. [ 468.450350][T10914] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 468.546911][T10921] netlink: 'syz.3.2220': attribute type 11 has an invalid length. [ 468.555031][T10921] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2220'. [ 468.583625][T10921] netlink: 'syz.3.2220': attribute type 10 has an invalid length. [ 468.647477][T10920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.204680][T10956] netlink: 'syz.3.2233': attribute type 11 has an invalid length. [ 470.219551][T10956] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2233'. [ 470.262266][T10956] netlink: 'syz.3.2233': attribute type 10 has an invalid length. [ 470.642407][T10955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.751648][T10964] netlink: 'syz.2.2236': attribute type 9 has an invalid length. [ 470.781931][T10964] netlink: 'syz.2.2236': attribute type 8 has an invalid length. [ 470.795876][T10964] netlink: 355 bytes leftover after parsing attributes in process `syz.2.2236'. [ 471.151591][T10977] netlink: 'syz.1.2239': attribute type 10 has an invalid length. [ 471.191306][T10977] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2239'. [ 471.260979][T10977] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 471.521817][T10987] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.2245'. [ 471.531537][T10987] netlink: zone id is out of range [ 471.536931][T10987] netlink: zone id is out of range [ 471.542318][T10987] netlink: zone id is out of range [ 471.547751][T10987] netlink: zone id is out of range [ 471.553210][T10987] netlink: zone id is out of range [ 471.559144][T10987] netlink: zone id is out of range [ 471.564634][T10987] netlink: zone id is out of range [ 471.572363][T10987] netlink: zone id is out of range [ 472.128910][T11001] netlink: 'syz.2.2249': attribute type 11 has an invalid length. [ 472.165728][T11001] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2249'. [ 472.236100][T11001] netlink: 'syz.2.2249': attribute type 10 has an invalid length. [ 472.258105][T11000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.601465][T11033] netlink: 'syz.1.2257': attribute type 21 has an invalid length. [ 475.616293][T11033] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2257'. [ 475.663002][T11037] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2259'. [ 475.704806][T11041] netlink: 'syz.4.2258': attribute type 10 has an invalid length. [ 475.719802][T11041] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2258'. [ 475.925002][T11049] netlink: 'syz.1.2263': attribute type 11 has an invalid length. [ 475.950371][T11049] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2263'. [ 476.000775][T11051] netlink: 'syz.1.2263': attribute type 10 has an invalid length. [ 476.097196][T11047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.368009][T11079] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2272'. [ 477.779921][T11088] netlink: 'syz.3.2275': attribute type 11 has an invalid length. [ 477.796036][T11088] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2275'. [ 477.907295][T11088] netlink: 'syz.3.2275': attribute type 10 has an invalid length. [ 477.979278][T11087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.590160][T11105] netlink: 'syz.0.2277': attribute type 10 has an invalid length. [ 478.680415][T11105] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2277'. [ 479.584437][T11126] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2286'. [ 482.504490][T11142] netlink: 'syz.3.2289': attribute type 11 has an invalid length. [ 482.565726][T11142] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2289'. [ 482.615532][T11142] netlink: 'syz.3.2289': attribute type 10 has an invalid length. [ 482.661890][T11140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.992073][T11156] netlink: 2639 bytes leftover after parsing attributes in process `syz.2.2294'. [ 483.301145][T11172] netlink: 'syz.0.2296': attribute type 10 has an invalid length. [ 483.334648][T11172] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2296'. [ 483.587031][T11175] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2300'. [ 484.188619][T11179] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2302'. [ 484.374925][T11185] netlink: 'syz.3.2305': attribute type 11 has an invalid length. [ 484.383131][T11185] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2305'. [ 484.520317][T11189] netlink: 'syz.3.2305': attribute type 10 has an invalid length. [ 485.199201][T11182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.705313][T11202] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2309'. [ 486.891687][T11196] netlink: 'syz.3.2306': attribute type 10 has an invalid length. [ 486.987431][T11196] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 487.543440][T11220] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2314'. [ 487.589116][T11224] netlink: 'syz.0.2316': attribute type 11 has an invalid length. [ 487.656845][T11224] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2316'. [ 487.728287][T11224] netlink: 'syz.0.2316': attribute type 10 has an invalid length. [ 487.768623][T11223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.832021][T11229] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2318'. [ 491.956559][T11264] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2330'. [ 492.052985][T11266] netlink: 'syz.2.2332': attribute type 11 has an invalid length. [ 492.072181][T11266] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2332'. [ 492.165121][T11266] netlink: 'syz.2.2332': attribute type 10 has an invalid length. [ 492.186461][T11265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.855475][T11281] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2336'. [ 493.559781][T11308] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2344'. [ 493.595777][T11309] netlink: 'syz.2.2345': attribute type 10 has an invalid length. [ 493.640991][T11306] netlink: 'syz.2.2345': attribute type 11 has an invalid length. [ 493.658322][T11306] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2345'. [ 493.680072][T11305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.297947][T11326] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2351'. [ 494.320587][T11328] netlink: 'syz.3.2352': attribute type 21 has an invalid length. [ 494.352981][T11328] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2352'. [ 494.614855][T11338] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2356'. [ 494.780969][T11342] netlink: 'syz.3.2358': attribute type 11 has an invalid length. [ 494.833725][T11343] netlink: 'syz.3.2358': attribute type 10 has an invalid length. [ 494.900262][T11342] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2358'. [ 495.066143][T11348] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2359'. [ 495.124447][T11348] net_ratelimit: 5 callbacks suppressed [ 495.124469][T11348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.366529][T11341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.743925][T11368] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2366'. [ 497.901143][T11373] netlink: 'syz.4.2368': attribute type 21 has an invalid length. [ 497.919174][T11373] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2368'. [ 498.006274][T11378] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2370'. [ 498.199582][T11382] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2373'. [ 498.514075][T11391] netlink: 'syz.4.2376': attribute type 11 has an invalid length. [ 498.612572][T11391] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2376'. [ 498.698051][T11391] netlink: 'syz.4.2376': attribute type 10 has an invalid length. [ 498.760833][T11390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.231709][T11409] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2380'. [ 499.251590][T11410] netlink: 'syz.4.2378': attribute type 10 has an invalid length. [ 499.265747][T11410] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2378'. [ 499.365438][T11413] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2382'. [ 499.463800][T11417] netlink: 'syz.2.2383': attribute type 21 has an invalid length. [ 499.503440][T11417] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2383'. [ 499.677373][T11427] netlink: 'syz.1.2385': attribute type 10 has an invalid length. [ 499.685364][T11427] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2385'. [ 499.711747][T11427] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 499.757574][T11432] netlink: 'syz.2.2388': attribute type 11 has an invalid length. [ 499.766622][T11432] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2388'. [ 499.780758][T11432] netlink: 'syz.2.2388': attribute type 10 has an invalid length. [ 499.789772][T11431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.389052][T11464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.391480][T11469] netlink: 'syz.0.2400': attribute type 11 has an invalid length. [ 501.417782][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.424330][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.441386][T11469] netlink: 'syz.0.2400': attribute type 10 has an invalid length. [ 501.497185][T11468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.845856][T11478] netlink: 'syz.3.2402': attribute type 1 has an invalid length. [ 505.253988][T11510] netlink: 'syz.3.2412': attribute type 10 has an invalid length. [ 505.276534][T11510] __nla_validate_parse: 7 callbacks suppressed [ 505.276553][T11510] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2412'. [ 505.529255][T11514] netlink: 'syz.4.2414': attribute type 11 has an invalid length. [ 505.578589][T11514] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2414'. [ 505.668610][T11514] netlink: 'syz.4.2414': attribute type 10 has an invalid length. [ 505.719289][T11513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.200906][T11527] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2418'. [ 506.750361][T11549] netlink: 'syz.2.2426': attribute type 10 has an invalid length. [ 506.758673][T11549] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2426'. [ 507.241691][T11554] netlink: 'syz.1.2428': attribute type 11 has an invalid length. [ 507.249868][T11554] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2428'. [ 507.369618][T11556] netlink: 'syz.1.2428': attribute type 10 has an invalid length. [ 507.520392][T11553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.689465][T11560] netlink: 'syz.3.2430': attribute type 21 has an invalid length. [ 507.727272][T11560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2430'. [ 508.310863][T11584] netlink: 'syz.4.2437': attribute type 10 has an invalid length. [ 508.366352][T11584] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2437'. [ 508.849351][T11596] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2442'. [ 509.509511][T11605] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2444'. [ 512.153462][T11609] netlink: 'syz.4.2446': attribute type 21 has an invalid length. [ 512.198001][T11609] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2446'. [ 512.282651][T11613] netlink: 'syz.2.2448': attribute type 21 has an invalid length. [ 512.301419][T11613] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2448'. [ 512.319625][T11620] netlink: 'syz.1.2450': attribute type 10 has an invalid length. [ 512.335893][T11620] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2450'. [ 512.735045][T11631] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2455'. [ 513.041017][T11644] netlink: 'syz.4.2456': attribute type 10 has an invalid length. [ 513.049373][T11644] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2456'. [ 513.073468][T11643] netlink: 'syz.2.2458': attribute type 21 has an invalid length. [ 513.097577][T11643] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2458'. [ 513.820835][T11654] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2460'. [ 516.511038][T11667] netlink: 'syz.4.2464': attribute type 10 has an invalid length. [ 516.526869][T11667] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2464'. [ 516.536593][T11665] netlink: 'syz.1.2465': attribute type 21 has an invalid length. [ 516.544941][T11665] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2465'. [ 516.718139][T11672] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2468'. [ 517.052876][T11679] netlink: 'syz.1.2471': attribute type 21 has an invalid length. [ 517.464624][T11694] netlink: 'syz.2.2475': attribute type 10 has an invalid length. [ 517.550335][T11694] __nla_validate_parse: 2 callbacks suppressed [ 517.550355][T11694] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2475'. [ 517.599085][T11694] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 518.031763][T11703] netlink: 'syz.1.2479': attribute type 10 has an invalid length. [ 518.055710][T11703] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2479'. [ 518.454450][T11709] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2481'. [ 521.100766][T11714] netlink: 'syz.2.2484': attribute type 21 has an invalid length. [ 521.111709][T11714] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2484'. [ 521.127296][T11711] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2483'. [ 521.265662][T11717] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2485'. [ 521.507890][T11726] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 521.701761][T11732] netlink: 'syz.1.2490': attribute type 10 has an invalid length. [ 521.729588][T11732] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2490'. [ 521.769793][T11737] netlink: 'syz.4.2491': attribute type 10 has an invalid length. [ 521.891713][T11734] netlink: 'syz.4.2491': attribute type 11 has an invalid length. [ 521.926340][T11734] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2491'. [ 521.956280][T11733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.148484][ T4290] Bluetooth: hci4: ISO packet for unknown connection handle 3848 [ 522.432129][T11750] netlink: 'syz.2.2498': attribute type 21 has an invalid length. [ 522.459484][T11750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2498'. [ 522.777417][T11757] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2500'. [ 522.830232][T11762] netlink: 'syz.3.2501': attribute type 11 has an invalid length. [ 522.839154][T11762] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2501'. [ 523.551821][T11758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.860324][T11780] netlink: 'syz.1.2506': attribute type 11 has an invalid length. [ 523.915792][T11780] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2506'. [ 524.024286][T11783] netlink: 'syz.1.2506': attribute type 10 has an invalid length. [ 524.651842][T11778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.444812][T11789] FAULT_INJECTION: forcing a failure. [ 525.444812][T11789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.560914][T11789] CPU: 1 PID: 11789 Comm: syz.3.2510 Not tainted syzkaller #0 [ 525.568524][T11789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 525.578667][T11789] Call Trace: [ 525.581991][T11789] [ 525.584977][T11789] dump_stack_lvl+0x188/0x24e [ 525.589775][T11789] ? show_regs_print_info+0x12/0x12 [ 525.595047][T11789] ? load_image+0x410/0x410 [ 525.599620][T11789] ? __lock_acquire+0x7c40/0x7c40 [ 525.604745][T11789] ? snprintf+0xe5/0x140 [ 525.609052][T11789] should_fail_ex+0x390/0x4c0 [ 525.613989][T11789] _copy_to_user+0x2c/0x130 [ 525.618605][T11789] simple_read_from_buffer+0xe3/0x150 [ 525.624116][T11789] proc_fail_nth_read+0x1a6/0x220 [ 525.629231][T11789] ? proc_fault_inject_write+0x310/0x310 [ 525.634942][T11789] ? fsnotify_perm+0x248/0x550 [ 525.639838][T11789] ? proc_fault_inject_write+0x310/0x310 [ 525.645533][T11789] vfs_read+0x2db/0x960 [ 525.649839][T11789] ? kernel_read+0x1e0/0x1e0 [ 525.654501][T11789] ? __fget_files+0x28/0x460 [ 525.659175][T11789] ? __fget_files+0x3fc/0x460 [ 525.663940][T11789] ? __fdget_pos+0x2ae/0x360 [ 525.668589][T11789] ? ksys_read+0x70/0x260 [ 525.672994][T11789] ksys_read+0x14d/0x260 [ 525.677324][T11789] ? vfs_write+0x9a0/0x9a0 [ 525.681819][T11789] ? lockdep_hardirqs_on+0x94/0x140 [ 525.687264][T11789] do_syscall_64+0x4c/0xa0 [ 525.691753][T11789] ? clear_bhb_loop+0x60/0xb0 [ 525.696501][T11789] ? clear_bhb_loop+0x60/0xb0 [ 525.701253][T11789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.707217][T11789] RIP: 0033:0x7efd27b5e6ce [ 525.711691][T11789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 525.731359][T11789] RSP: 002b:00007efd28afbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 525.739920][T11789] RAX: ffffffffffffffda RBX: 00007efd28afc6c0 RCX: 00007efd27b5e6ce [ 525.747943][T11789] RDX: 000000000000000f RSI: 00007efd28afc0a0 RDI: 0000000000000006 [ 525.755965][T11789] RBP: 00007efd28afc090 R08: 0000000000000000 R09: 0000000000000000 [ 525.763979][T11789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.772022][T11789] R13: 00007efd27e26038 R14: 00007efd27e25fa0 R15: 00007ffe2ad46fe8 [ 525.780086][T11789] [ 525.829711][T11799] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 526.040850][T11803] netlink: 'syz.2.2512': attribute type 21 has an invalid length. [ 526.049984][T11803] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2512'. [ 526.304289][T11812] FAULT_INJECTION: forcing a failure. [ 526.304289][T11812] name failslab, interval 1, probability 0, space 0, times 0 [ 526.368811][T11812] CPU: 1 PID: 11812 Comm: syz.4.2517 Not tainted syzkaller #0 [ 526.376461][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 526.386558][T11812] Call Trace: [ 526.389904][T11812] [ 526.392894][T11812] dump_stack_lvl+0x188/0x24e [ 526.397625][T11812] ? show_regs_print_info+0x12/0x12 [ 526.402871][T11812] ? load_image+0x410/0x410 [ 526.407421][T11812] ? __lock_acquire+0x7c40/0x7c40 [ 526.412503][T11812] should_fail_ex+0x390/0x4c0 [ 526.417254][T11812] should_failslab+0x5/0x20 [ 526.421878][T11812] slab_pre_alloc_hook+0x59/0x300 [ 526.426992][T11812] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 526.432592][T11812] __kmem_cache_alloc_node+0x4f/0x270 [ 526.438011][T11812] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 526.443600][T11812] __kmalloc+0xa3/0x240 [ 526.447869][T11812] bpf_prog_test_run_skb+0x23e/0x18e0 [ 526.453290][T11812] ? __fget_files+0x28/0x460 [ 526.457936][T11812] ? __fget_files+0x3fc/0x460 [ 526.462675][T11812] ? cpu_online+0xa0/0xa0 [ 526.467051][T11812] bpf_prog_test_run+0x31c/0x390 [ 526.472140][T11812] __sys_bpf+0x62b/0x780 [ 526.476430][T11812] ? bpf_link_show_fdinfo+0x380/0x380 [ 526.481869][T11812] ? lock_chain_count+0x20/0x20 [ 526.486792][T11812] __x64_sys_bpf+0x78/0x90 [ 526.491252][T11812] do_syscall_64+0x4c/0xa0 [ 526.495714][T11812] ? clear_bhb_loop+0x60/0xb0 [ 526.500448][T11812] ? clear_bhb_loop+0x60/0xb0 [ 526.505172][T11812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.511106][T11812] RIP: 0033:0x7ff34139de99 [ 526.515558][T11812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.535299][T11812] RSP: 002b:00007ff342290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 526.543763][T11812] RAX: ffffffffffffffda RBX: 00007ff341625fa0 RCX: 00007ff34139de99 [ 526.551776][T11812] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 526.559783][T11812] RBP: 00007ff342290090 R08: 0000000000000000 R09: 0000000000000000 [ 526.567790][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.575807][T11812] R13: 00007ff341626038 R14: 00007ff341625fa0 R15: 00007fff7f02b8f8 [ 526.583838][T11812] [ 526.750030][T11819] netlink: 'syz.0.2515': attribute type 11 has an invalid length. [ 526.792684][T11819] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2515'. [ 527.288152][T11813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.592827][T11829] netlink: 'syz.0.2521': attribute type 11 has an invalid length. [ 527.665733][T11829] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2521'. [ 527.782687][T11831] netlink: 'syz.0.2521': attribute type 10 has an invalid length. [ 528.364946][T11834] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2522'. [ 528.417033][T11828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.262864][T11848] netlink: 'syz.3.2528': attribute type 21 has an invalid length. [ 530.276224][T11848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2528'. [ 530.495307][T11855] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2529'. [ 530.592312][T11860] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2532'. [ 531.462568][T11871] netlink: 'syz.4.2536': attribute type 11 has an invalid length. [ 531.470993][T11871] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2536'. [ 531.532091][T11871] netlink: 'syz.4.2536': attribute type 10 has an invalid length. [ 531.592674][T11873] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2537'. [ 534.396368][T11867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.005246][T11898] netlink: 'syz.0.2545': attribute type 21 has an invalid length. [ 535.013651][T11898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2545'. [ 535.035089][T11900] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2546'. [ 536.003853][T11913] netlink: 'syz.4.2551': attribute type 11 has an invalid length. [ 536.047140][T11913] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2551'. [ 536.128545][T11913] netlink: 'syz.4.2551': attribute type 10 has an invalid length. [ 536.245357][T11918] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2548'. [ 538.198537][T11912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.543453][T11932] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2554'. [ 538.935064][T11947] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2559'. [ 538.989966][T11946] netlink: 'syz.4.2560': attribute type 21 has an invalid length. [ 539.011055][T11946] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2560'. [ 540.070097][T11969] netlink: 'syz.2.2568': attribute type 11 has an invalid length. [ 540.079027][T11969] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2568'. [ 540.203179][T11972] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2566'. [ 540.274598][T11969] netlink: 'syz.2.2568': attribute type 10 has an invalid length. [ 540.306668][T11967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.618684][T11981] netlink: 'syz.2.2581': attribute type 10 has an invalid length. [ 540.683888][T11980] netlink: 'syz.2.2581': attribute type 11 has an invalid length. [ 540.693229][T11980] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2581'. [ 540.747869][T11978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.903229][T11985] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2573'. [ 541.044645][T11991] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2576'. [ 541.308797][T11994] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2577'. [ 541.360347][T11995] netlink: 'syz.2.2575': attribute type 3 has an invalid length. [ 541.396113][T11998] tun0: tun_chr_ioctl cmd 1074025692 [ 541.436490][T11998] tun0: tun_chr_ioctl cmd 35108 [ 541.473378][T11995] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2575'. [ 541.692512][T12008] netlink: 'syz.0.2582': attribute type 10 has an invalid length. [ 541.700933][T12008] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2582'. [ 541.713916][T12008] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 542.572738][T12013] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2583'. [ 542.605943][T12021] netlink: 'syz.0.2586': attribute type 11 has an invalid length. [ 542.614048][T12021] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2586'. [ 542.679528][T12021] netlink: 'syz.0.2586': attribute type 10 has an invalid length. [ 542.726655][T12020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.976022][T12030] bond0: (slave wlan1): Error: Slave device does not support XDP [ 544.437702][T12053] netlink: 'syz.2.2597': attribute type 10 has an invalid length. [ 544.464856][T12053] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 544.536547][T12055] netlink: 'syz.0.2598': attribute type 11 has an invalid length. [ 544.566926][T12055] netlink: 'syz.0.2598': attribute type 10 has an invalid length. [ 544.597224][T12054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.743678][T12057] netlink: 'syz.1.2599': attribute type 21 has an invalid length. [ 545.221930][T12069] __nla_validate_parse: 6 callbacks suppressed [ 545.222170][T12069] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2604'. [ 545.538403][T12078] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2607'. [ 546.231502][T12095] netlink: 'syz.1.2612': attribute type 11 has an invalid length. [ 546.242294][T12095] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2612'. [ 546.287207][T12095] netlink: 'syz.1.2612': attribute type 10 has an invalid length. [ 546.299755][T12093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.896407][T12102] netlink: 'syz.1.2615': attribute type 10 has an invalid length. [ 546.904568][T12102] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2615'. [ 547.001589][T12102] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 547.129168][T12101] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2616'. [ 547.410312][T12114] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2620'. [ 548.257438][T12134] netlink: 'syz.4.2625': attribute type 10 has an invalid length. [ 548.300941][T12133] netlink: 'syz.4.2625': attribute type 11 has an invalid length. [ 548.310280][T12133] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2625'. [ 548.356474][T12136] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2626'. [ 548.376607][T12132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.423259][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2626'. [ 549.631465][T12161] netlink: 'syz.4.2633': attribute type 10 has an invalid length. [ 549.666847][T12161] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2633'. [ 550.314677][T12173] netlink: 'syz.1.2639': attribute type 21 has an invalid length. [ 550.330566][T12173] __nla_validate_parse: 1 callbacks suppressed [ 550.330607][T12173] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2639'. [ 550.350511][T12176] netlink: 'syz.0.2640': attribute type 11 has an invalid length. [ 550.370153][T12176] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2640'. [ 550.418171][T12176] netlink: 'syz.0.2640': attribute type 10 has an invalid length. [ 550.464335][T12175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.550253][T12178] netlink: 'syz.2.2641': attribute type 21 has an invalid length. [ 550.566137][T12178] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2641'. [ 550.771416][T12193] FAULT_INJECTION: forcing a failure. [ 550.771416][T12193] name failslab, interval 1, probability 0, space 0, times 0 [ 550.802062][T12193] CPU: 0 PID: 12193 Comm: syz.4.2646 Not tainted syzkaller #0 [ 550.809630][T12193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 550.819785][T12193] Call Trace: [ 550.823144][T12193] [ 550.826164][T12193] dump_stack_lvl+0x188/0x24e [ 550.829854][T12195] FAULT_INJECTION: forcing a failure. [ 550.829854][T12195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.830904][T12193] ? show_regs_print_info+0x12/0x12 [ 550.849239][T12193] ? load_image+0x410/0x410 [ 550.853825][T12193] ? __might_sleep+0xd0/0xd0 [ 550.858576][T12193] ? __lock_acquire+0x7c40/0x7c40 [ 550.863701][T12193] should_fail_ex+0x390/0x4c0 [ 550.868469][T12193] should_failslab+0x5/0x20 [ 550.873041][T12193] slab_pre_alloc_hook+0x59/0x300 [ 550.878182][T12193] kmem_cache_alloc_node+0x5a/0x310 [ 550.883436][T12193] ? __alloc_skb+0xf9/0x7d0 [ 550.887998][T12193] __alloc_skb+0xf9/0x7d0 [ 550.892386][T12193] netlink_ack+0x373/0x1160 [ 550.896961][T12193] ? perf_trace_lock+0xf8/0x390 [ 550.901913][T12193] ? netlink_dump+0xcd0/0xcd0 [ 550.906656][T12193] ? __copy_skb_header+0x3ba/0x4f0 [ 550.911842][T12193] ? __skb_clone+0x446/0x6c0 [ 550.916504][T12193] netlink_rcv_skb+0x26d/0x440 [ 550.921327][T12193] ? rtnetlink_bind+0x80/0x80 [ 550.926060][T12193] ? netlink_ack+0x1160/0x1160 [ 550.930899][T12193] ? netlink_deliver_tap+0x2e/0x1b0 [ 550.936169][T12193] netlink_unicast+0x7ad/0x920 [ 550.941059][T12193] netlink_sendmsg+0x8ad/0xbd0 [ 550.945961][T12193] ? netlink_getsockopt+0x550/0x550 [ 550.951231][T12193] ? apparmor_socket_sendmsg+0x8a/0x330 [ 550.956938][T12193] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 550.962387][T12193] ? security_socket_sendmsg+0x7c/0xa0 [ 550.967916][T12193] ? netlink_getsockopt+0x550/0x550 [ 550.973203][T12193] ____sys_sendmsg+0x5ed/0x9a0 [ 550.978076][T12193] ? __sys_sendmsg_sock+0x30/0x30 [ 550.983163][T12193] ? __import_iovec+0x306/0x510 [ 550.988116][T12193] ? import_iovec+0x6f/0xa0 [ 550.992691][T12193] ___sys_sendmsg+0x2a2/0x360 [ 550.997430][T12193] ? __sys_sendmsg+0x2a0/0x2a0 [ 551.002303][T12193] ? __lock_acquire+0x7c40/0x7c40 [ 551.007439][T12193] __se_sys_sendmsg+0x1c3/0x2b0 [ 551.012354][T12193] ? __x64_sys_sendmsg+0x80/0x80 [ 551.017381][T12193] ? lockdep_hardirqs_on+0x94/0x140 [ 551.022647][T12193] do_syscall_64+0x4c/0xa0 [ 551.027119][T12193] ? clear_bhb_loop+0x60/0xb0 [ 551.031843][T12193] ? clear_bhb_loop+0x60/0xb0 [ 551.036579][T12193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.042533][T12193] RIP: 0033:0x7ff34139de99 [ 551.046991][T12193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.066639][T12193] RSP: 002b:00007ff342290028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.075101][T12193] RAX: ffffffffffffffda RBX: 00007ff341625fa0 RCX: 00007ff34139de99 [ 551.083125][T12193] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 551.091141][T12193] RBP: 00007ff342290090 R08: 0000000000000000 R09: 0000000000000000 [ 551.099236][T12193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.107263][T12193] R13: 00007ff341626038 R14: 00007ff341625fa0 R15: 00007fff7f02b8f8 [ 551.115334][T12193] [ 551.135870][T12195] CPU: 1 PID: 12195 Comm: syz.2.2656 Not tainted syzkaller #0 [ 551.143435][T12195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 551.153557][T12195] Call Trace: [ 551.156894][T12195] [ 551.159886][T12195] dump_stack_lvl+0x188/0x24e [ 551.164684][T12195] ? show_regs_print_info+0x12/0x12 [ 551.169957][T12195] ? load_image+0x410/0x410 [ 551.174563][T12195] ? __lock_acquire+0x7c40/0x7c40 [ 551.179669][T12195] ? mutex_unlock+0x10/0x10 [ 551.184267][T12195] should_fail_ex+0x390/0x4c0 [ 551.189035][T12195] _copy_from_user+0x2c/0x170 [ 551.193787][T12195] smc_setsockopt+0x3eb/0xb80 [ 551.198565][T12195] ? smc_shutdown+0x9a0/0x9a0 [ 551.203339][T12195] ? aa_sock_opt_perm+0x74/0x100 [ 551.208358][T12195] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 551.213970][T12195] ? security_socket_setsockopt+0x7a/0xa0 [ 551.219856][T12195] ? smc_shutdown+0x9a0/0x9a0 [ 551.224618][T12195] __sys_setsockopt+0x2bf/0x3d0 [ 551.229589][T12195] __x64_sys_setsockopt+0xb1/0xc0 [ 551.234701][T12195] do_syscall_64+0x4c/0xa0 [ 551.239194][T12195] ? clear_bhb_loop+0x60/0xb0 [ 551.243945][T12195] ? clear_bhb_loop+0x60/0xb0 [ 551.248752][T12195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.254722][T12195] RIP: 0033:0x7f923b19de99 [ 551.259216][T12195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.278901][T12195] RSP: 002b:00007f923c016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 551.287366][T12195] RAX: ffffffffffffffda RBX: 00007f923b425fa0 RCX: 00007f923b19de99 [ 551.295408][T12195] RDX: 0000000000000003 RSI: 0000000000000006 RDI: 0000000000000003 [ 551.303461][T12195] RBP: 00007f923c016090 R08: 0000000000000004 R09: 0000000000000000 [ 551.311525][T12195] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 551.319775][T12195] R13: 00007f923b426038 R14: 00007f923b425fa0 R15: 00007ffc5902cd48 [ 551.327890][T12195] [ 551.722229][T12204] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2650'. [ 551.774011][T12201] netlink: 'syz.3.2648': attribute type 10 has an invalid length. [ 551.952736][T12199] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2647'. [ 552.081482][T12214] netlink: 'syz.0.2652': attribute type 10 has an invalid length. [ 552.099778][T12214] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2652'. [ 552.107146][T12215] netlink: 'syz.2.2654': attribute type 11 has an invalid length. [ 552.127954][T12214] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 552.135686][T12215] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2654'. [ 552.160046][T12217] netlink: 'syz.4.2655': attribute type 11 has an invalid length. [ 552.178317][T12217] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2655'. [ 552.255406][T12215] netlink: 'syz.2.2654': attribute type 10 has an invalid length. [ 552.266914][T12217] netlink: 'syz.4.2655': attribute type 10 has an invalid length. [ 552.277788][T12213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.399807][T12222] netlink: 'syz.1.2657': attribute type 21 has an invalid length. [ 552.408079][T12222] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2657'. [ 552.842386][T12216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.431985][T12241] netlink: 'syz.3.2664': attribute type 10 has an invalid length. [ 553.441185][T12241] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2664'. [ 553.528182][T12243] FAULT_INJECTION: forcing a failure. [ 553.528182][T12243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.542039][T12243] CPU: 1 PID: 12243 Comm: syz.2.2665 Not tainted syzkaller #0 [ 553.549556][T12243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 553.559659][T12243] Call Trace: [ 553.562965][T12243] [ 553.565912][T12243] dump_stack_lvl+0x188/0x24e [ 553.570717][T12243] ? show_regs_print_info+0x12/0x12 [ 553.575949][T12243] ? load_image+0x410/0x410 [ 553.580529][T12243] ? __lock_acquire+0x7c40/0x7c40 [ 553.585592][T12243] should_fail_ex+0x390/0x4c0 [ 553.590331][T12243] _copy_to_user+0x2c/0x130 [ 553.594875][T12243] __htab_map_lookup_and_delete_batch+0x1d25/0x2110 [ 553.601631][T12243] ? lookup_nulls_elem_raw+0x160/0x160 [ 553.607131][T12243] ? __fdget+0x17c/0x200 [ 553.611403][T12243] ? htab_map_lookup_and_delete_elem+0x40/0x40 [ 553.617604][T12243] bpf_map_do_batch+0x475/0x5f0 [ 553.622485][T12243] ? bpf_lsm_key_alloc+0x10/0x10 [ 553.627449][T12243] __sys_bpf+0x6f7/0x780 [ 553.631734][T12243] ? bpf_link_show_fdinfo+0x380/0x380 [ 553.637147][T12243] ? lock_chain_count+0x20/0x20 [ 553.642036][T12243] __x64_sys_bpf+0x78/0x90 [ 553.646488][T12243] do_syscall_64+0x4c/0xa0 [ 553.650930][T12243] ? clear_bhb_loop+0x60/0xb0 [ 553.655644][T12243] ? clear_bhb_loop+0x60/0xb0 [ 553.660523][T12243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.666444][T12243] RIP: 0033:0x7f923b19de99 [ 553.670882][T12243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.690507][T12243] RSP: 002b:00007f923c016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 553.698948][T12243] RAX: ffffffffffffffda RBX: 00007f923b425fa0 RCX: 00007f923b19de99 [ 553.706940][T12243] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 553.714932][T12243] RBP: 00007f923c016090 R08: 0000000000000000 R09: 0000000000000000 [ 553.722919][T12243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.730926][T12243] R13: 00007f923b426038 R14: 00007f923b425fa0 R15: 00007ffc5902cd48 [ 553.738932][T12243] [ 554.109867][T12256] netlink: 'syz.1.2669': attribute type 10 has an invalid length. [ 554.133402][T12254] netlink: 'syz.4.2670': attribute type 11 has an invalid length. [ 554.163739][T12256] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 554.191652][T12254] netlink: 'syz.4.2670': attribute type 10 has an invalid length. [ 554.208766][T12258] netlink: 'syz.0.2671': attribute type 21 has an invalid length. [ 554.246237][T12253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.629857][T12295] __nla_validate_parse: 5 callbacks suppressed [ 555.629891][T12295] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2686'. [ 556.269743][T12307] netlink: 'syz.0.2690': attribute type 21 has an invalid length. [ 556.278550][T12307] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2690'. [ 556.891253][T12315] netlink: 'syz.4.2694': attribute type 3 has an invalid length. [ 556.966459][T12315] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2694'. [ 557.025304][T12311] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2693'. [ 557.418195][T12324] netlink: 'syz.4.2696': attribute type 3 has an invalid length. [ 557.441697][T12324] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2696'. [ 557.605019][T12330] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2698'. [ 558.121748][T12346] netlink: 'syz.1.2702': attribute type 29 has an invalid length. [ 558.131067][T12346] netlink: 'syz.1.2702': attribute type 29 has an invalid length. [ 558.145452][T12346] netlink: 'syz.1.2702': attribute type 29 has an invalid length. [ 558.162055][T12346] netlink: 'syz.1.2702': attribute type 29 has an invalid length. [ 558.180848][T12346] netlink: 'syz.1.2702': attribute type 29 has an invalid length. [ 558.517700][T12357] netlink: 'syz.0.2706': attribute type 29 has an invalid length. [ 558.559023][T12357] netlink: 'syz.0.2706': attribute type 29 has an invalid length. [ 558.580070][T12359] netlink: 'syz.0.2706': attribute type 29 has an invalid length. [ 558.597045][T12357] netlink: 'syz.0.2706': attribute type 29 has an invalid length. [ 558.617992][T12357] FAULT_INJECTION: forcing a failure. [ 558.617992][T12357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.644393][T12357] CPU: 1 PID: 12357 Comm: syz.0.2706 Not tainted syzkaller #0 [ 558.651971][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 558.662100][T12357] Call Trace: [ 558.665445][T12357] [ 558.668443][T12357] dump_stack_lvl+0x188/0x24e [ 558.673215][T12357] ? show_regs_print_info+0x12/0x12 [ 558.678528][T12357] ? load_image+0x410/0x410 [ 558.683119][T12357] ? __lock_acquire+0x7c40/0x7c40 [ 558.688281][T12357] should_fail_ex+0x390/0x4c0 [ 558.693054][T12357] _copy_from_user+0x2c/0x170 [ 558.697818][T12357] ___sys_recvmsg+0x170/0x590 [ 558.702592][T12357] ? __sys_recvmsg+0x2a0/0x2a0 [ 558.707424][T12357] ? common_file_perm+0x171/0x1c0 [ 558.712530][T12357] ? __fget_files+0x3fc/0x460 [ 558.717400][T12357] __x64_sys_recvmsg+0x20d/0x2e0 [ 558.722385][T12357] ? ct_nmi_exit+0x145/0x1c0 [ 558.727022][T12357] ? ___sys_recvmsg+0x590/0x590 [ 558.731964][T12357] ? lockdep_hardirqs_on+0x94/0x140 [ 558.737212][T12357] do_syscall_64+0x4c/0xa0 [ 558.741668][T12357] ? clear_bhb_loop+0x60/0xb0 [ 558.746396][T12357] ? clear_bhb_loop+0x60/0xb0 [ 558.751133][T12357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.757067][T12357] RIP: 0033:0x7f67dc59de99 [ 558.761544][T12357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.781376][T12357] RSP: 002b:00007f67dd393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 558.789838][T12357] RAX: ffffffffffffffda RBX: 00007f67dc825fa0 RCX: 00007f67dc59de99 [ 558.797849][T12357] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 558.805864][T12357] RBP: 00007f67dd393090 R08: 0000000000000000 R09: 0000000000000000 [ 558.813878][T12357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.821888][T12357] R13: 00007f67dc826038 R14: 00007f67dc825fa0 R15: 00007ffc243573a8 [ 558.829949][T12357] [ 559.505231][T12370] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2711'. [ 559.516896][T12370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.694325][T12377] FAULT_INJECTION: forcing a failure. [ 559.694325][T12377] name failslab, interval 1, probability 0, space 0, times 0 [ 559.710917][T12377] CPU: 1 PID: 12377 Comm: syz.1.2714 Not tainted syzkaller #0 [ 559.718452][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 559.728560][T12377] Call Trace: [ 559.731871][T12377] [ 559.734831][T12377] dump_stack_lvl+0x188/0x24e [ 559.739561][T12377] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 559.745769][T12377] ? show_regs_print_info+0x12/0x12 [ 559.751012][T12377] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 559.757239][T12377] should_fail_ex+0x390/0x4c0 [ 559.761972][T12377] should_failslab+0x5/0x20 [ 559.766510][T12377] slab_pre_alloc_hook+0x59/0x300 [ 559.771573][T12377] ? stack_trace_save+0xf0/0xf0 [ 559.776575][T12377] ? rtnl_newlink+0x10f/0x1f90 [ 559.781386][T12377] __kmem_cache_alloc_node+0x4f/0x270 [ 559.786793][T12377] ? mark_lock+0x94/0x320 [ 559.791166][T12377] ? rtnl_newlink+0x10f/0x1f90 [ 559.795984][T12377] kmalloc_trace+0x26/0xe0 [ 559.800471][T12377] rtnl_newlink+0x10f/0x1f90 [ 559.805105][T12377] ? __stack_depot_save+0x35/0x480 [ 559.810368][T12377] ? rtnl_setlink+0x510/0x510 [ 559.815092][T12377] ? mark_lock+0x94/0x320 [ 559.819477][T12377] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 559.825502][T12377] ? trace_contention_end+0x5f/0x170 [ 559.830832][T12377] ? lock_chain_count+0x20/0x20 [ 559.835733][T12377] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 559.841933][T12377] ? lockdep_hardirqs_on+0x94/0x140 [ 559.847446][T12377] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 559.853664][T12377] ? rtnl_setlink+0x510/0x510 [ 559.858383][T12377] rtnetlink_rcv_msg+0x863/0xfb0 [ 559.863371][T12377] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 559.868634][T12377] ? rtnetlink_bind+0x80/0x80 [ 559.873354][T12377] ? __local_bh_enable_ip+0x136/0x1c0 [ 559.878844][T12377] ? lockdep_hardirqs_on+0x94/0x140 [ 559.884091][T12377] ? __local_bh_enable_ip+0x136/0x1c0 [ 559.889505][T12377] ? _local_bh_enable+0xa0/0xa0 [ 559.894402][T12377] ? __dev_queue_xmit+0x281/0x3810 [ 559.899553][T12377] ? __dev_queue_xmit+0x281/0x3810 [ 559.904710][T12377] ? __dev_queue_xmit+0x1d84/0x3810 [ 559.909954][T12377] ? lockdep_hardirqs_on+0x94/0x140 [ 559.915198][T12377] ? __dev_queue_xmit+0x281/0x3810 [ 559.920353][T12377] ? __copy_skb_header+0xa3/0x4f0 [ 559.925457][T12377] ? ref_tracker_free+0x682/0x830 [ 559.930531][T12377] ? refcount_inc+0x70/0x70 [ 559.935086][T12377] ? memcpy+0x3c/0x60 [ 559.939190][T12377] ? __copy_skb_header+0x3ba/0x4f0 [ 559.944351][T12377] ? __skb_clone+0x446/0x6c0 [ 559.948992][T12377] netlink_rcv_skb+0x1ef/0x440 [ 559.953810][T12377] ? rtnetlink_bind+0x80/0x80 [ 559.958540][T12377] ? netlink_ack+0x1160/0x1160 [ 559.963356][T12377] ? netlink_deliver_tap+0x2e/0x1b0 [ 559.968605][T12377] netlink_unicast+0x7ad/0x920 [ 559.973423][T12377] netlink_sendmsg+0x8ad/0xbd0 [ 559.978243][T12377] ? netlink_getsockopt+0x550/0x550 [ 559.983495][T12377] ? apparmor_socket_sendmsg+0x16c/0x330 [ 559.989175][T12377] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 559.994499][T12377] ? security_socket_sendmsg+0x7c/0xa0 [ 560.000000][T12377] ? netlink_getsockopt+0x550/0x550 [ 560.005247][T12377] ____sys_sendmsg+0x5ed/0x9a0 [ 560.010074][T12377] ? __sys_sendmsg_sock+0x30/0x30 [ 560.015153][T12377] ? __import_iovec+0x306/0x510 [ 560.020455][T12377] ? import_iovec+0x6f/0xa0 [ 560.025006][T12377] ___sys_sendmsg+0x2a2/0x360 [ 560.029734][T12377] ? __sys_sendmsg+0x2a0/0x2a0 [ 560.034568][T12377] ? ktime_get+0x7b/0x270 [ 560.038972][T12377] __se_sys_sendmsg+0x1c3/0x2b0 [ 560.043871][T12377] ? ct_nmi_exit+0x145/0x1c0 [ 560.048495][T12377] ? __x64_sys_sendmsg+0x80/0x80 [ 560.053493][T12377] ? lockdep_hardirqs_on+0x94/0x140 [ 560.058732][T12377] do_syscall_64+0x4c/0xa0 [ 560.063205][T12377] ? clear_bhb_loop+0x60/0xb0 [ 560.067931][T12377] ? clear_bhb_loop+0x60/0xb0 [ 560.072758][T12377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 560.078709][T12377] RIP: 0033:0x7f30a979de99 [ 560.083174][T12377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.102831][T12377] RSP: 002b:00007f30aa640028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.111295][T12377] RAX: ffffffffffffffda RBX: 00007f30a9a25fa0 RCX: 00007f30a979de99 [ 560.119320][T12377] RDX: 0000000024000044 RSI: 0000200000000500 RDI: 0000000000000005 [ 560.127336][T12377] RBP: 00007f30aa640090 R08: 0000000000000000 R09: 0000000000000000 [ 560.135345][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.143356][T12377] R13: 00007f30a9a26038 R14: 00007f30a9a25fa0 R15: 00007fff237d7b58 [ 560.151393][T12377] [ 561.072304][T12388] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 562.716904][T12422] FAULT_INJECTION: forcing a failure. [ 562.716904][T12422] name failslab, interval 1, probability 0, space 0, times 0 [ 562.766440][T12422] CPU: 1 PID: 12422 Comm: syz.1.2726 Not tainted syzkaller #0 [ 562.774109][T12422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 562.784332][T12422] Call Trace: [ 562.787698][T12422] [ 562.790699][T12422] dump_stack_lvl+0x188/0x24e [ 562.795496][T12422] ? show_regs_print_info+0x12/0x12 [ 562.800797][T12422] ? load_image+0x410/0x410 [ 562.805400][T12422] ? __might_sleep+0xd0/0xd0 [ 562.810074][T12422] ? __lock_acquire+0x7c40/0x7c40 [ 562.815208][T12422] should_fail_ex+0x390/0x4c0 [ 562.819997][T12422] should_failslab+0x5/0x20 [ 562.824591][T12422] slab_pre_alloc_hook+0x59/0x300 [ 562.829704][T12422] ? __lock_acquire+0x7c40/0x7c40 [ 562.834821][T12422] ? find_css_set+0x9ec/0x15c0 [ 562.839747][T12422] __kmem_cache_alloc_node+0x4f/0x270 [ 562.845218][T12422] ? find_css_set+0x9ec/0x15c0 [ 562.850066][T12422] kmalloc_trace+0x26/0xe0 [ 562.854590][T12422] find_css_set+0x9ec/0x15c0 [ 562.859307][T12422] ? trace_event_raw_event_lock+0x230/0x230 [ 562.865280][T12422] ? cgroup_migrate_prepare_dst+0x610/0x610 [ 562.871305][T12422] ? mark_lock+0x94/0x320 [ 562.875780][T12422] cgroup_migrate_prepare_dst+0x114/0x610 [ 562.881622][T12422] cgroup_attach_task+0x546/0x870 [ 562.886738][T12422] ? cgroup_attach_task+0x20f/0x870 [ 562.892021][T12422] ? cgroup_migrate_execute+0xf20/0xf20 [ 562.897696][T12422] ? get_task_cred+0x1f/0x370 [ 562.902542][T12422] ? get_task_cred+0x2f0/0x370 [ 562.907389][T12422] ? get_task_cred+0x1f/0x370 [ 562.912151][T12422] __cgroup1_procs_write+0x2f2/0x3f0 [ 562.917516][T12422] ? cgroup_pidlist_destroy_work_fn+0x1f0/0x1f0 [ 562.923853][T12422] ? cgroup_pidlist_stop+0xf0/0xf0 [ 562.929051][T12422] cgroup_file_write+0x2c9/0x6a0 [ 562.934047][T12422] ? kernfs_fop_write_iter+0x1d8/0x520 [ 562.939670][T12422] ? cgroup_seqfile_stop+0xd0/0xd0 [ 562.944832][T12422] ? __virt_addr_valid+0x188/0x540 [ 562.950075][T12422] ? __virt_addr_valid+0x188/0x540 [ 562.955298][T12422] ? cgroup_seqfile_stop+0xd0/0xd0 [ 562.960469][T12422] kernfs_fop_write_iter+0x3a0/0x520 [ 562.965858][T12422] vfs_write+0x482/0x9a0 [ 562.970236][T12422] ? file_end_write+0x250/0x250 [ 562.975203][T12422] ? __fget_files+0x3fc/0x460 [ 562.979964][T12422] ? __fdget_pos+0x2ae/0x360 [ 562.984628][T12422] ? ksys_write+0x70/0x260 [ 562.989137][T12422] ksys_write+0x14d/0x260 [ 562.993547][T12422] ? __ia32_sys_read+0x80/0x80 [ 562.998406][T12422] ? lockdep_hardirqs_on+0x94/0x140 [ 563.003690][T12422] do_syscall_64+0x4c/0xa0 [ 563.008164][T12422] ? clear_bhb_loop+0x60/0xb0 [ 563.012899][T12422] ? clear_bhb_loop+0x60/0xb0 [ 563.017665][T12422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.023624][T12422] RIP: 0033:0x7f30a979de99 [ 563.028110][T12422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.048040][T12422] RSP: 002b:00007f30aa640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 563.056565][T12422] RAX: ffffffffffffffda RBX: 00007f30a9a25fa0 RCX: 00007f30a979de99 [ 563.064595][T12422] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000007 [ 563.072618][T12422] RBP: 00007f30aa640090 R08: 0000000000000000 R09: 0000000000000000 [ 563.080636][T12422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.088668][T12422] R13: 00007f30a9a26038 R14: 00007f30a9a25fa0 R15: 00007fff237d7b58 [ 563.096752][T12422] [ 563.111655][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.118214][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.582475][T12433] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2729'. [ 563.611071][T12435] validate_nla: 5 callbacks suppressed [ 563.611111][T12435] netlink: 'syz.1.2731': attribute type 153 has an invalid length. [ 563.643610][T12435] netlink: 69544 bytes leftover after parsing attributes in process `syz.1.2731'. [ 566.599207][T12456] netlink: 'syz.0.2734': attribute type 10 has an invalid length. [ 566.629786][T12456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2734'. [ 566.655482][T12456] device dummy0 entered promiscuous mode [ 566.666206][T12456] bridge0: port 5(dummy0) entered blocking state [ 566.673000][T12456] bridge0: port 5(dummy0) entered disabled state [ 566.681666][T12456] bridge0: port 5(dummy0) entered blocking state [ 566.688182][T12456] bridge0: port 5(dummy0) entered forwarding state [ 566.726584][T12465] FAULT_INJECTION: forcing a failure. [ 566.726584][T12465] name failslab, interval 1, probability 0, space 0, times 0 [ 566.835797][T12465] CPU: 1 PID: 12465 Comm: syz.1.2736 Not tainted syzkaller #0 [ 566.843361][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 566.853464][T12465] Call Trace: [ 566.856784][T12465] [ 566.859749][T12465] dump_stack_lvl+0x188/0x24e [ 566.864482][T12465] ? show_regs_print_info+0x12/0x12 [ 566.869734][T12465] ? load_image+0x410/0x410 [ 566.874292][T12465] ? __might_sleep+0xd0/0xd0 [ 566.878921][T12465] ? __lock_acquire+0x7c40/0x7c40 [ 566.884015][T12465] should_fail_ex+0x390/0x4c0 [ 566.888747][T12465] should_failslab+0x5/0x20 [ 566.893294][T12465] slab_pre_alloc_hook+0x59/0x300 [ 566.898375][T12465] kmem_cache_alloc_node+0x5a/0x310 [ 566.903716][T12465] ? __alloc_skb+0xf9/0x7d0 [ 566.908283][T12465] __alloc_skb+0xf9/0x7d0 [ 566.912669][T12465] netlink_sendmsg+0x654/0xbd0 [ 566.917492][T12465] ? netlink_getsockopt+0x550/0x550 [ 566.922766][T12465] ? apparmor_socket_sendmsg+0x8a/0x330 [ 566.928358][T12465] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 566.933708][T12465] ? security_socket_sendmsg+0x7c/0xa0 [ 566.939224][T12465] ? netlink_getsockopt+0x550/0x550 [ 566.944485][T12465] ____sys_sendmsg+0x5ed/0x9a0 [ 566.949319][T12465] ? __sys_sendmsg_sock+0x30/0x30 [ 566.954402][T12465] ? __import_iovec+0x306/0x510 [ 566.959317][T12465] ? import_iovec+0x6f/0xa0 [ 566.963880][T12465] ___sys_sendmsg+0x2a2/0x360 [ 566.968679][T12465] ? __sys_sendmsg+0x2a0/0x2a0 [ 566.973532][T12465] ? __lock_acquire+0x7c40/0x7c40 [ 566.978633][T12465] __se_sys_sendmsg+0x1c3/0x2b0 [ 566.983544][T12465] ? __x64_sys_sendmsg+0x80/0x80 [ 566.988552][T12465] ? lockdep_hardirqs_on+0x94/0x140 [ 566.993803][T12465] do_syscall_64+0x4c/0xa0 [ 566.998275][T12465] ? clear_bhb_loop+0x60/0xb0 [ 567.003010][T12465] ? clear_bhb_loop+0x60/0xb0 [ 567.007750][T12465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.013703][T12465] RIP: 0033:0x7f30a979de99 [ 567.018161][T12465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.037813][T12465] RSP: 002b:00007f30aa640028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.046279][T12465] RAX: ffffffffffffffda RBX: 00007f30a9a25fa0 RCX: 00007f30a979de99 [ 567.054299][T12465] RDX: 0000000004040040 RSI: 0000200000000080 RDI: 0000000000000003 [ 567.062315][T12465] RBP: 00007f30aa640090 R08: 0000000000000000 R09: 0000000000000000 [ 567.070335][T12465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.078378][T12465] R13: 00007f30a9a26038 R14: 00007f30a9a25fa0 R15: 00007fff237d7b58 [ 567.086414][T12465] [ 567.709234][T12489] ¥: port 1(syz_tun) entered blocking state [ 567.748518][T12489] ¥: port 1(syz_tun) entered disabled state [ 567.756790][T12489] device syz_tun entered promiscuous mode [ 568.040994][T12497] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2747'. [ 568.276825][T12503] netlink: 'syz.0.2749': attribute type 3 has an invalid length. [ 568.285479][T12503] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2749'. [ 568.503145][T12507] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2749'. [ 569.132126][T12521] netlink: 'syz.0.2754': attribute type 1 has an invalid length. [ 569.206966][T12521] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2754'. [ 569.329868][T12526] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2754'. [ 569.614561][T12542] netlink: 'syz.1.2760': attribute type 11 has an invalid length. [ 569.626325][T12542] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2760'. [ 569.653609][T12542] netlink: 'syz.1.2760': attribute type 10 has an invalid length. [ 569.714126][T12541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.862727][T12549] netlink: 'syz.0.2762': attribute type 21 has an invalid length. [ 569.896122][T12549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2762'. [ 570.084393][T12553] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2763'. [ 570.240400][T12560] netlink: 'syz.0.2765': attribute type 10 has an invalid length. [ 570.264996][T12560] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2765'. [ 570.315150][T12563] netlink: 'syz.4.2766': attribute type 21 has an invalid length. [ 570.323541][T12563] netlink: 'syz.4.2766': attribute type 1 has an invalid length. [ 570.331897][T12563] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2766'. [ 570.552179][T12570] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2769'. [ 570.741363][T12579] netlink: 'syz.1.2773': attribute type 11 has an invalid length. [ 570.815691][T12579] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2773'. [ 570.881246][T12579] netlink: 'syz.1.2773': attribute type 10 has an invalid length. [ 570.973971][T12578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.209815][T12586] netlink: 'syz.0.2776': attribute type 21 has an invalid length. [ 571.224597][T12586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2776'. [ 572.827802][T12620] netlink: 'syz.4.2788': attribute type 11 has an invalid length. [ 572.873546][T12620] netlink: 'syz.4.2788': attribute type 10 has an invalid length. [ 572.933562][T12617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.964948][T12624] netlink: 'syz.3.2787': attribute type 10 has an invalid length. [ 575.231912][T12661] netlink: 'syz.4.2802': attribute type 11 has an invalid length. [ 575.255849][T12661] __nla_validate_parse: 6 callbacks suppressed [ 575.255869][T12661] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2802'. [ 575.311365][T12661] validate_nla: 1 callbacks suppressed [ 575.311385][T12661] netlink: 'syz.4.2802': attribute type 10 has an invalid length. [ 575.393354][T12660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.443845][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 575.454088][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 575.463814][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 575.496781][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 575.504970][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 575.513685][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 575.549709][ T8640] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.576058][T12671] netlink: 'syz.3.2803': attribute type 21 has an invalid length. [ 575.623228][T12671] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2803'. [ 575.763290][ T8640] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.835226][ T8640] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.994879][ T8640] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.028021][T12679] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2806'. [ 576.693826][T12667] chnl_net:caif_netlink_parms(): no params data found [ 577.103138][T12705] netlink: 'syz.3.2811': attribute type 10 has an invalid length. [ 577.142089][T12705] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2811'. [ 577.186251][T12667] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.196670][T12667] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.213992][T12667] device bridge_slave_0 entered promiscuous mode [ 577.351061][T12667] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.375508][T12713] netlink: 'syz.0.2815': attribute type 11 has an invalid length. [ 577.375834][T12667] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.392157][T12713] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2815'. [ 577.419176][T12667] device bridge_slave_1 entered promiscuous mode [ 577.513615][T12713] netlink: 'syz.0.2815': attribute type 10 has an invalid length. [ 577.556459][T12712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.578427][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 577.627835][T12667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.641382][T12667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.763436][T12667] team0: Port device team_slave_0 added [ 577.947114][T12667] team0: Port device team_slave_1 added [ 578.017423][T12667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.024458][T12667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.136726][T12667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.198184][T12728] netlink: 'syz.3.2819': attribute type 21 has an invalid length. [ 578.248592][T12728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2819'. [ 578.291741][T12667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.316933][T12667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.388032][T12667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.502380][T12731] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2820'. [ 578.872659][ T8640] bond0: (slave wlan1): Releasing backup interface [ 579.074879][T12667] device hsr_slave_0 entered promiscuous mode [ 579.127957][T12667] device hsr_slave_1 entered promiscuous mode [ 579.185938][T12667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.197345][T12667] Cannot create hsr debugfs directory [ 579.642300][T12755] netlink: 'syz.3.2827': attribute type 11 has an invalid length. [ 579.650526][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 579.668094][T12755] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2827'. [ 579.746063][ T8640] device hsr_slave_0 left promiscuous mode [ 579.781302][ T8640] device hsr_slave_1 left promiscuous mode [ 579.860709][ T8640] device veth0_macvtap left promiscuous mode [ 579.873347][ T8640] device veth1_vlan left promiscuous mode [ 579.880206][ T8640] device veth0_vlan left promiscuous mode [ 580.496855][T12754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.083487][ T8640] team0 (unregistering): Port device team_slave_1 removed [ 581.126960][ T8640] team0 (unregistering): Port device team_slave_0 removed [ 581.167286][ T8640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.240968][ T8640] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 581.477308][ T8640] bond0 (unregistering): Released all slaves [ 581.533981][T12755] netlink: 'syz.3.2827': attribute type 10 has an invalid length. [ 581.543475][T12763] netlink: 'syz.1.2828': attribute type 10 has an invalid length. [ 581.551622][T12763] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2828'. [ 581.568026][T12767] netlink: 'syz.4.2831': attribute type 21 has an invalid length. [ 581.581600][T12767] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2831'. [ 581.726450][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 582.030095][T12776] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2833'. [ 582.828087][T12667] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 582.890802][T12667] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 582.920161][T12667] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 582.977349][T12667] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 583.238151][T12805] netlink: 'syz.3.2842': attribute type 11 has an invalid length. [ 583.317243][T12805] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2842'. [ 583.400854][T12810] netlink: 'syz.3.2842': attribute type 10 has an invalid length. [ 583.518194][T12804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.633029][T12667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.698575][T12820] netlink: 'syz.4.2843': attribute type 10 has an invalid length. [ 583.725702][T12820] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2843'. [ 583.749121][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 583.776793][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 583.800345][T12667] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.816766][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 583.907890][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 583.922646][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 583.937199][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.944423][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.979486][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 584.002048][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 584.025850][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 584.054877][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.062136][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.072153][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 584.092781][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 584.104583][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 584.121064][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 584.149310][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 584.160914][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 584.174321][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 584.186891][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 584.196143][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 584.209636][T12667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 584.227605][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 584.238204][T12826] netlink: 'syz.1.2845': attribute type 21 has an invalid length. [ 584.257650][T12826] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2845'. [ 584.287099][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 584.297720][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 584.367887][T12830] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2846'. [ 585.628786][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 585.647432][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 585.687516][T12667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.782648][T12861] netlink: 'syz.1.2853': attribute type 11 has an invalid length. [ 585.802338][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 585.832103][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 585.856078][T12861] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2853'. [ 585.901622][T12861] netlink: 'syz.1.2853': attribute type 10 has an invalid length. [ 585.917904][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 585.937388][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 585.959902][T12860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.977012][T12667] device veth0_vlan entered promiscuous mode [ 585.986986][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 586.005388][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 586.043131][T12667] device veth1_vlan entered promiscuous mode [ 586.132498][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 586.143608][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 586.164246][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 586.191124][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 586.217227][T12667] device veth0_macvtap entered promiscuous mode [ 586.241668][T12667] device veth1_macvtap entered promiscuous mode [ 586.285153][T12667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.298560][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 586.310713][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 586.321045][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 586.332509][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 586.347127][T12667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.356697][T12877] netlink: 'syz.3.2857': attribute type 10 has an invalid length. [ 586.365320][T12877] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2857'. [ 586.375358][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 586.388685][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 586.400675][T12875] netlink: 'syz.1.2858': attribute type 21 has an invalid length. [ 586.415332][T12875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2858'. [ 586.430212][T12667] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.440849][T12667] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.453647][T12667] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.502905][T12667] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.701303][T12882] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2859'. [ 586.714202][ T4475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.763747][ T4475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.814291][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 586.866256][ T8640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.879790][ T8640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.899012][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 588.814541][T12924] netlink: 'syz.2.2869': attribute type 11 has an invalid length. [ 588.887800][T12924] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2869'. [ 588.924989][T12930] netlink: 'syz.4.2871': attribute type 21 has an invalid length. [ 588.977889][T12930] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2871'. [ 589.021523][T12931] netlink: 'syz.2.2869': attribute type 10 has an invalid length. [ 589.230409][T12931] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 589.296156][T12921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.402758][T12939] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2873'. [ 589.453888][T12946] netlink: 'syz.4.2874': attribute type 10 has an invalid length. [ 589.472747][T12946] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2874'. [ 589.631421][T12950] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2876'. [ 590.819064][T12975] netlink: 'syz.1.2884': attribute type 21 has an invalid length. [ 590.837135][T12975] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2884'. [ 591.280120][T12989] netlink: 'syz.1.2887': attribute type 10 has an invalid length. [ 591.595639][T12987] netlink: 'syz.1.2887': attribute type 11 has an invalid length. [ 591.603538][T12987] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2887'. [ 591.713777][T12995] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2889'. [ 591.728781][T12985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.970310][T12999] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2890'. [ 592.108545][T13010] netlink: 'syz.1.2892': attribute type 10 has an invalid length. [ 592.134360][T13010] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2892'. [ 593.116219][T13026] netlink: 'syz.0.2897': attribute type 21 has an invalid length. [ 593.134589][T13026] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2897'. [ 593.608190][T13041] netlink: 'syz.0.2902': attribute type 11 has an invalid length. [ 593.656421][T13041] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2902'. [ 593.692081][T13041] netlink: 'syz.0.2902': attribute type 10 has an invalid length. [ 593.749936][T13040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.792401][T13043] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2903'. [ 594.238726][T13058] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2907'. [ 594.586931][T13074] netlink: 'syz.4.2909': attribute type 10 has an invalid length. [ 594.621070][T13074] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2909'. [ 594.863567][T13079] netlink: 'syz.1.2912': attribute type 21 has an invalid length. [ 594.890398][T13079] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2912'. [ 595.611840][T13091] netlink: 'syz.3.2917': attribute type 11 has an invalid length. [ 595.639278][T13091] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2917'. [ 595.725849][T13091] netlink: 'syz.3.2917': attribute type 10 has an invalid length. [ 595.870931][T13090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.884407][T13114] netlink: 'syz.2.2924': attribute type 21 has an invalid length. [ 598.914324][T13114] __nla_validate_parse: 1 callbacks suppressed [ 598.914363][T13114] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2924'. [ 598.952780][T13110] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2922'. [ 598.985636][T13122] netlink: 'syz.0.2925': attribute type 10 has an invalid length. [ 598.997998][T13122] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2925'. [ 599.914115][T13136] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2931'. [ 599.929689][T13138] netlink: 'syz.1.2932': attribute type 11 has an invalid length. [ 599.940817][T13138] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2932'. [ 599.978525][T13138] netlink: 'syz.1.2932': attribute type 10 has an invalid length. [ 600.017767][T13137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.460924][T13148] netlink: 'syz.1.2937': attribute type 21 has an invalid length. [ 600.500954][T13148] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2937'. [ 600.584434][T13152] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2938'. [ 600.700908][T13152] bond0: (slave bond_slave_0): Releasing backup interface [ 601.035593][T13152] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 601.559189][T13164] netlink: 'syz.1.2941': attribute type 10 has an invalid length. [ 601.569335][T13164] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2941'. [ 601.901090][T13178] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2946'. [ 602.000378][T13180] netlink: 'syz.4.2947': attribute type 11 has an invalid length. [ 602.008635][T13180] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2947'. [ 602.068561][T13180] netlink: 'syz.4.2947': attribute type 10 has an invalid length. [ 602.096587][T13179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.509926][T13189] netlink: 'syz.4.2951': attribute type 21 has an invalid length. [ 603.123101][T13208] netlink: 'syz.0.2959': attribute type 11 has an invalid length. [ 603.211226][T13215] netlink: 'syz.0.2959': attribute type 10 has an invalid length. [ 603.256492][T13207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.276265][T13219] netlink: 'syz.4.2960': attribute type 10 has an invalid length. [ 604.147634][T13240] netlink: 'syz.4.2969': attribute type 21 has an invalid length. [ 604.172068][T13240] __nla_validate_parse: 5 callbacks suppressed [ 604.172092][T13240] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2969'. [ 604.246825][T13243] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2970'. [ 604.478202][T13245] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2971'. [ 604.768983][T13253] netlink: 'syz.1.2975': attribute type 11 has an invalid length. [ 604.777158][T13253] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2975'. [ 604.794902][T13253] netlink: 'syz.1.2975': attribute type 10 has an invalid length. [ 604.855258][T13252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.535083][T13269] netlink: 'syz.1.2979': attribute type 10 has an invalid length. [ 605.616973][T13269] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2979'. [ 606.308269][T13283] netlink: 'syz.1.2982': attribute type 21 has an invalid length. [ 606.319792][T13283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2982'. [ 607.770907][T13285] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2983'. [ 607.962343][T13294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.993368][T13294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.026295][T13294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.035868][T13294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.081453][T13300] netlink: 'syz.1.2989': attribute type 11 has an invalid length. [ 608.089939][T13300] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2989'. [ 608.236047][T13293] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2987'. [ 608.245265][T13300] netlink: 'syz.1.2989': attribute type 10 has an invalid length. [ 608.277563][T13299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.618933][T13307] FAULT_INJECTION: forcing a failure. [ 608.618933][T13307] name failslab, interval 1, probability 0, space 0, times 0 [ 608.674770][T13309] netlink: 'syz.0.2992': attribute type 10 has an invalid length. [ 608.676615][T13307] CPU: 0 PID: 13307 Comm: syz.2.2993 Not tainted syzkaller #0 [ 608.690143][T13307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 608.700242][T13307] Call Trace: [ 608.703560][T13307] [ 608.706530][T13307] dump_stack_lvl+0x188/0x24e [ 608.711273][T13307] ? show_regs_print_info+0x12/0x12 [ 608.716520][T13307] ? load_image+0x410/0x410 [ 608.721078][T13307] ? __lock_acquire+0x7c40/0x7c40 [ 608.726158][T13307] should_fail_ex+0x390/0x4c0 [ 608.730886][T13307] should_failslab+0x5/0x20 [ 608.735424][T13307] slab_pre_alloc_hook+0x59/0x300 [ 608.736840][T13309] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2992'. [ 608.740481][T13307] ? verify_lock_unused+0x140/0x140 [ 608.740519][T13307] ? bpf_test_init+0x9f/0x140 [ 608.759703][T13307] __kmem_cache_alloc_node+0x4f/0x270 [ 608.765134][T13307] ? bpf_test_init+0x9f/0x140 [ 608.769860][T13307] __kmalloc+0xa3/0x240 [ 608.774078][T13307] bpf_test_init+0x9f/0x140 [ 608.778628][T13307] bpf_prog_test_run_xdp+0x488/0xf80 [ 608.783953][T13307] ? __lock_acquire+0x7c40/0x7c40 [ 608.789077][T13307] ? dev_put+0x80/0x80 [ 608.793203][T13307] ? bpf_prog_test_run+0x310/0x390 [ 608.798369][T13307] ? dev_put+0x80/0x80 [ 608.802482][T13307] bpf_prog_test_run+0x31c/0x390 [ 608.807475][T13307] __sys_bpf+0x62b/0x780 [ 608.811767][T13307] ? bpf_link_show_fdinfo+0x380/0x380 [ 608.817199][T13307] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 608.823416][T13307] __x64_sys_bpf+0x78/0x90 [ 608.827886][T13307] do_syscall_64+0x4c/0xa0 [ 608.832347][T13307] ? clear_bhb_loop+0x60/0xb0 [ 608.837070][T13307] ? clear_bhb_loop+0x60/0xb0 [ 608.841829][T13307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 608.847770][T13307] RIP: 0033:0x7f1f72d9de99 [ 608.852219][T13307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.871979][T13307] RSP: 002b:00007f1f73d06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 608.880638][T13307] RAX: ffffffffffffffda RBX: 00007f1f73025fa0 RCX: 00007f1f72d9de99 [ 608.888660][T13307] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 608.896675][T13307] RBP: 00007f1f73d06090 R08: 0000000000000000 R09: 0000000000000000 [ 608.904687][T13307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.912702][T13307] R13: 00007f1f73026038 R14: 00007f1f73025fa0 R15: 00007ffcaa4cd8b8 [ 608.920737][T13307] [ 609.245898][T13313] netlink: 'syz.3.2994': attribute type 21 has an invalid length. [ 609.264901][T13313] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2994'. [ 609.328087][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.338948][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 609.347158][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 609.355063][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 609.367480][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 609.375911][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 609.752110][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.405747][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 612.220675][T13328] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2998'. [ 612.250901][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.350015][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.479697][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.504614][T13334] netlink: 'syz.0.3001': attribute type 11 has an invalid length. [ 612.517472][T13334] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3001'. [ 612.547077][T13334] netlink: 'syz.0.3001': attribute type 10 has an invalid length. [ 612.636738][T13333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.719415][T13336] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3002'. [ 612.762596][T13317] chnl_net:caif_netlink_parms(): no params data found [ 613.145914][T13351] netlink: 'syz.0.3005': attribute type 21 has an invalid length. [ 613.162204][T13351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3005'. [ 613.172424][T13354] netlink: 'syz.1.3006': attribute type 10 has an invalid length. [ 613.182903][T13354] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3006'. [ 613.208066][T13317] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.215417][T13317] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.230872][T13317] device bridge_slave_0 entered promiscuous mode [ 613.244149][T13317] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.259676][T13317] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.279526][T13317] device bridge_slave_1 entered promiscuous mode [ 613.364021][T13317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.479790][T13317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.489108][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 613.701662][T13317] team0: Port device team_slave_0 added [ 613.724443][T13361] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3008'. [ 613.941136][T13317] team0: Port device team_slave_1 added [ 614.782009][T13317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.797072][T13317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.954645][T13317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.565634][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 617.645720][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 617.787081][T13317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.800998][T13317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.855010][T13317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.999275][T13396] netlink: 'syz.0.3014': attribute type 11 has an invalid length. [ 618.007502][T13396] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3014'. [ 618.077407][T13396] netlink: 'syz.0.3014': attribute type 10 has an invalid length. [ 618.139934][T13395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.169392][T13317] device hsr_slave_0 entered promiscuous mode [ 618.199054][T13317] device hsr_slave_1 entered promiscuous mode [ 618.209088][T13317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.219785][T13317] Cannot create hsr debugfs directory [ 618.396457][T13400] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3016'. [ 618.509995][T13409] netlink: 'syz.3.3019': attribute type 21 has an invalid length. [ 618.528448][T13409] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3019'. [ 618.601879][T13413] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3020'. [ 618.786711][ T59] bond0: (slave wlan1): Releasing backup interface [ 618.919533][T13423] netlink: 'syz.2.3022': attribute type 10 has an invalid length. [ 618.934699][T13423] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3022'. [ 619.532559][ T59] device hsr_slave_0 left promiscuous mode [ 619.634647][ T59] device veth1_macvtap left promiscuous mode [ 619.652402][ T59] device veth0_macvtap left promiscuous mode [ 619.660083][ T59] device veth1_vlan left promiscuous mode [ 620.530734][T13448] netlink: 'syz.0.3029': attribute type 11 has an invalid length. [ 620.648883][T13448] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3029'. [ 623.080767][T13446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.451374][ T59] team0 (unregistering): Port device team_slave_1 removed [ 623.509767][ T59] team0 (unregistering): Port device team_slave_0 removed [ 623.551467][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.842577][ T59] bond0 (unregistering): Released all slaves [ 623.882732][T13451] netlink: 'syz.0.3029': attribute type 10 has an invalid length. [ 623.892187][T13457] netlink: 'syz.1.3030': attribute type 21 has an invalid length. [ 623.915750][T13457] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3030'. [ 624.184643][T13464] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3032'. [ 624.302097][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.308573][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.356941][T13470] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3031'. [ 624.491568][T13317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 624.558087][T13317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 624.596767][T13317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 624.631698][T13476] netlink: 'syz.0.3035': attribute type 10 has an invalid length. [ 624.643220][T13476] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3035'. [ 624.662979][T13317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 624.910743][T13317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.940215][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 624.961460][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.979656][T13317] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.999537][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 625.019634][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 625.045196][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.052432][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.094104][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 625.115265][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 625.151560][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 625.187458][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.194680][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.234879][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 625.271258][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 625.349152][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 625.386439][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 625.462852][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 625.488893][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 625.534270][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 625.603670][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 625.661464][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 625.670645][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 625.702966][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.759011][T13317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 625.902826][T13507] netlink: 'syz.3.3043': attribute type 10 has an invalid length. [ 626.260597][T13505] netlink: 'syz.3.3043': attribute type 11 has an invalid length. [ 626.305648][T13505] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3043'. [ 626.637633][T13515] netlink: 'syz.1.3044': attribute type 21 has an invalid length. [ 626.665595][T13515] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3044'. [ 626.903185][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 626.914258][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 626.953709][T13317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.935337][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 627.946882][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 627.993152][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 628.012325][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 628.041035][T13317] device veth0_vlan entered promiscuous mode [ 628.053878][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 628.077268][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 628.120406][T13317] device veth1_vlan entered promiscuous mode [ 628.187096][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 628.206989][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 628.241660][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 628.268937][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 628.289318][T13317] device veth0_macvtap entered promiscuous mode [ 628.320562][T13317] device veth1_macvtap entered promiscuous mode [ 628.392836][T13317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.421582][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 628.441137][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 628.473765][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 628.493295][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 628.518699][T13317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.546036][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 628.564556][T13504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.579309][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 628.612636][T13317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.632874][T13317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.651568][T13317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.664340][T13317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.887050][T13546] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3045'. [ 628.901679][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.919172][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.944177][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 629.055677][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.062974][T13548] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3046'. [ 629.063540][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.134534][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 630.194768][T13569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.225834][T13569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.258207][T13569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.307012][T13569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.721494][T13576] netlink: 'syz.0.3053': attribute type 10 has an invalid length. [ 630.758402][T13576] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3053'. [ 630.822791][T13576] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 630.872320][T13580] netlink: 'syz.2.3055': attribute type 21 has an invalid length. [ 630.896799][T13580] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3055'. [ 630.959449][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 630.969153][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 630.980782][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 630.990056][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 630.998058][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 631.008721][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 631.031449][ T8300] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.192836][T13593] netlink: 'syz.4.3056': attribute type 11 has an invalid length. [ 631.231058][T13593] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3056'. [ 631.253238][ T8300] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.406466][T13593] netlink: 'syz.4.3056': attribute type 10 has an invalid length. [ 631.453079][T13593] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 633.085733][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 634.221099][ T8300] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.234405][T13592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.245997][T13601] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3058'. [ 634.260885][T13602] netlink: 'syz.3.3059': attribute type 10 has an invalid length. [ 634.501387][ T8300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.600242][T13607] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3061'. [ 634.659589][T13607] bond0: (slave bond_slave_0): Releasing backup interface [ 634.982816][T13607] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 635.165763][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 635.411581][ T8300] device 0 left promiscuous mode [ 635.551191][ T8300] device 1 left promiscuous mode [ 635.583732][T13590] chnl_net:caif_netlink_parms(): no params data found [ 635.680454][T13626] netlink: 'syz.4.3067': attribute type 21 has an invalid length. [ 635.713998][T13626] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3067'. [ 635.995887][T13640] netlink: 'syz.0.3068': attribute type 10 has an invalid length. [ 636.003916][T13640] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3068'. [ 636.015985][T13640] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 636.032280][T13639] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3070'. [ 636.156435][T13590] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.167198][T13590] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.195800][T13590] device bridge_slave_0 entered promiscuous mode [ 636.357844][T13590] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.365092][T13590] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.409513][T13590] device bridge_slave_1 entered promiscuous mode [ 636.564776][T13590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.579734][T13590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.701217][T13590] team0: Port device team_slave_0 added [ 636.759718][T13590] team0: Port device team_slave_1 added [ 636.900332][T13661] netlink: 'syz.2.3073': attribute type 11 has an invalid length. [ 636.933169][T13661] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3073'. [ 637.246535][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 639.325735][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 639.438402][T13658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.489915][T13664] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 639.501024][T13664] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 639.512991][T13664] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 639.536232][T13661] netlink: 'syz.2.3073': attribute type 10 has an invalid length. [ 639.765245][T13590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.795578][T13590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.878331][T13590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.933992][T13590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.978177][T13590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.081578][T13590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.640930][T13590] device hsr_slave_0 entered promiscuous mode [ 640.686036][T13590] device hsr_slave_1 entered promiscuous mode [ 640.722851][T13590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 640.739446][T13590] Cannot create hsr debugfs directory [ 640.763848][T13684] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3081'. [ 640.901741][T13688] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3082'. [ 641.327435][ T8300] bond0: (slave wlan1): Releasing backup interface [ 641.487727][T13708] netlink: 'syz.3.3085': attribute type 10 has an invalid length. [ 641.513295][T13708] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3085'. [ 641.570904][T13708] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 641.955884][ T8300] device hsr_slave_0 left promiscuous mode [ 641.964640][ T8300] device hsr_slave_1 left promiscuous mode [ 642.028673][ T8300] device veth1_macvtap left promiscuous mode [ 642.044873][ T8300] device veth0_macvtap left promiscuous mode [ 642.062420][ T8300] device veth1_vlan left promiscuous mode [ 642.077411][ T8300] device veth0_vlan left promiscuous mode [ 645.561816][ T8300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.640992][ T8300] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 645.866674][ T8300] bond0 (unregistering): Released all slaves [ 645.904907][T13717] netlink: 'syz.2.3088': attribute type 10 has an invalid length. [ 645.927571][T13728] netlink: 'syz.3.3091': attribute type 21 has an invalid length. [ 645.941219][T13728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3091'. [ 645.953864][T13733] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3093'. [ 647.182696][T13590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 647.231271][T13590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 647.287281][T13590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 647.334573][T13590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 647.413567][T13767] device syzkaller0 entered promiscuous mode [ 649.460786][T13783] : port 1(team0) entered blocking state [ 649.476793][T13783] : port 1(team0) entered disabled state [ 649.637985][T13590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.698917][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 649.717486][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 649.773097][T13590] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.811223][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 649.837406][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 649.880349][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.887594][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.937193][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 649.992203][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 650.009046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 650.029478][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.036735][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.050868][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 650.100346][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 650.117259][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 650.168556][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 650.230376][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 650.257951][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 650.287145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 650.296807][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 650.325973][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 650.354986][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 650.396292][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 650.421200][T13590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 651.653768][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 651.674513][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 651.722850][T13590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.796924][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 651.826046][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 651.909768][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 651.932963][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 651.979252][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 652.019244][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 652.048768][T13590] device veth0_vlan entered promiscuous mode [ 652.064278][T13590] device veth1_vlan entered promiscuous mode [ 652.167023][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 652.178586][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 652.206769][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 652.227695][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 652.272599][T13590] device veth0_macvtap entered promiscuous mode [ 652.305447][T13590] device veth1_macvtap entered promiscuous mode [ 652.357204][T13590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.373060][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 652.396623][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 652.414863][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 652.455236][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 652.471924][T13590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.483567][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 652.499163][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 652.521659][T13590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.541965][T13590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.600888][T13590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.618551][T13590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.788586][T13885] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 652.806401][ T8300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.823074][ T8300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.866087][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 652.903820][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.913265][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.943148][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 653.073413][T13893] device syzkaller0 entered promiscuous mode [ 654.008396][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 654.019328][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 654.038021][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 654.056585][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 654.072327][T12669] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 654.081140][T12669] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 656.125803][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 656.315178][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.538862][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.764499][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.940678][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.206712][T13916] chnl_net:caif_netlink_parms(): no params data found [ 657.788232][T13997] device syzkaller0 entered promiscuous mode [ 658.207222][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 660.285765][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 661.043600][T13916] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.053070][T13916] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.062319][T13916] device bridge_slave_0 entered promiscuous mode [ 661.152198][T14028] device syzkaller0 entered promiscuous mode [ 661.361850][T13916] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.369681][T13916] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.379795][T13916] device bridge_slave_1 entered promiscuous mode [ 662.371055][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 663.554316][T14076] device syzkaller0 entered promiscuous mode [ 663.693218][T13916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.337813][T13916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.482006][T13916] team0: Port device team_slave_0 added [ 667.561478][T13916] team0: Port device team_slave_1 added [ 667.700723][T13916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.748679][T13916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.899388][T13916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.996000][T13916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.004419][T13916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.075696][T13916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.328588][T14164] device syzkaller0 entered promiscuous mode [ 669.518665][T14197] [ 669.523647][T14197] ============================= [ 669.528701][T14197] WARNING: suspicious RCU usage [ 669.533598][T14197] syzkaller #0 Not tainted [ 669.538102][T14197] ----------------------------- [ 669.543167][T14197] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 669.551804][T14197] [ 669.551804][T14197] other info that might help us debug this: [ 669.551804][T14197] [ 669.562579][T14197] [ 669.562579][T14197] rcu_scheduler_active = 2, debug_locks = 1 [ 669.570981][T14197] 1 lock held by syz.2.3232/14197: [ 669.576213][T14197] #0: ffffffff8cb2dce0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 669.586538][T14197] [ 669.586538][T14197] stack backtrace: [ 669.592504][T14197] CPU: 1 PID: 14197 Comm: syz.2.3232 Not tainted syzkaller #0 [ 669.600035][T14197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 669.610120][T14197] Call Trace: [ 669.613435][T14197] [ 669.616390][T14197] dump_stack_lvl+0x188/0x24e [ 669.621201][T14197] ? show_regs_print_info+0x12/0x12 [ 669.626437][T14197] ? load_image+0x410/0x410 [ 669.631013][T14197] lockdep_rcu_suspicious+0x1dd/0x300 [ 669.636431][T14197] get_callchain_entry+0x2a5/0x3b0 [ 669.641604][T14197] get_perf_callchain+0xc4/0x490 [ 669.646589][T14197] ? put_callchain_entry+0xb0/0xb0 [ 669.651782][T14197] ? preempt_schedule_common+0xa5/0xd0 [ 669.657283][T14197] __bpf_get_stack+0x2de/0x520 [ 669.662167][T14197] ? stack_map_get_build_id_offset+0x9d0/0x9d0 [ 669.668390][T14197] ? bpf_prog_b7720614f1130d08_F+0x29/0x2b [ 669.674228][T14197] bpf_get_stack_raw_tp+0x189/0x1c0 [ 669.679533][T14197] bpf_prog_b7720614f1130d08_F+0x29/0x2b [ 669.685192][T14197] bpf_prog_825df63258e64e33+0x1a/0x1f [ 669.690686][T14197] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 669.696099][T14197] bpf_prog_test_run_syscall+0x31c/0x4b0 [ 669.701766][T14197] ? sock_gen_cookie+0x60/0x60 [ 669.706590][T14197] ? sock_gen_cookie+0x60/0x60 [ 669.711413][T14197] bpf_prog_test_run+0x31c/0x390 [ 669.716390][T14197] __sys_bpf+0x62b/0x780 [ 669.720670][T14197] ? bpf_link_show_fdinfo+0x380/0x380 [ 669.726119][T14197] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 669.732059][T14197] ? lock_chain_count+0x20/0x20 [ 669.736971][T14197] __x64_sys_bpf+0x78/0x90 [ 669.741424][T14197] do_syscall_64+0x4c/0xa0 [ 669.745892][T14197] ? clear_bhb_loop+0x60/0xb0 [ 669.750603][T14197] ? clear_bhb_loop+0x60/0xb0 [ 669.755313][T14197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.761237][T14197] RIP: 0033:0x7f1f72d9de99 [ 669.765685][T14197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.785423][T14197] RSP: 002b:00007f1f73d06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 669.793878][T14197] RAX: ffffffffffffffda RBX: 00007f1f73025fa0 RCX: 00007f1f72d9de99 [ 669.801880][T14197] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 669.809882][T14197] RBP: 00007f1f72e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 669.817876][T14197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.825874][T14197] R13: 00007f1f73026038 R14: 00007f1f73025fa0 R15: 00007ffcaa4cd8b8 [ 669.834001][T14197] [ 670.886381][T13916] device hsr_slave_0 entered promiscuous mode [ 670.902380][T13916] device hsr_slave_1 entered promiscuous mode [ 670.909316][T13916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 670.917053][T13916] Cannot create hsr debugfs directory [ 671.098448][ T56] bond0: (slave wlan1): Releasing backup interface [ 671.301666][ T56] : port 1(team0) entered disabled state [ 671.314459][ T56] device hsr_slave_0 left promiscuous mode [ 671.321282][ T56] device hsr_slave_1 left promiscuous mode [ 671.353787][ T56] device veth1_vlan left promiscuous mode [ 671.909317][ T56] device team_slave_1 left promiscuous mode [ 671.919913][ T56] team0 (unregistering): Port device team_slave_1 removed [ 671.995088][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.270848][ T56] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 672.327180][ T56] bond0 (unregistering): Released all slaves [ 672.774460][T13916] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 672.799328][T13916] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 672.812214][T13916] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 672.824918][T13916] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 672.910725][T13916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.931188][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 672.942054][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 672.957017][T13916] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.970192][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 672.980072][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 672.991329][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.998640][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.018402][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 673.028952][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 673.041578][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 673.053282][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.060507][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.079596][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 673.089337][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 673.106942][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 673.118257][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 673.128447][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 673.139115][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 673.149523][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 673.174575][T13916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 673.189265][T13916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.202683][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 673.217003][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 673.229758][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 673.238620][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 673.254520][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 673.564015][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 673.574166][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 673.592190][T13916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.621849][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 673.634250][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 673.671097][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 673.681890][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 673.693493][T13916] device veth0_vlan entered promiscuous mode [ 673.702326][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 673.713040][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 673.729134][T13916] device veth1_vlan entered promiscuous mode [ 673.759263][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 673.771427][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 673.781415][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 673.791673][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 673.804616][T13916] device veth0_macvtap entered promiscuous mode [ 673.819298][T13916] device veth1_macvtap entered promiscuous mode [ 673.841536][T13916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.852371][T13916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.868667][T13916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.878553][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 673.888328][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 673.900406][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 673.910093][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 673.925011][T13916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.940555][T13916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.954495][T13916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.966099][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 673.976900][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 673.991249][T13916] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.001683][T13916] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.011103][T13916] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.020984][T13916] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.103797][ T4475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.124980][ T4475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.150129][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 674.163157][ T4475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.173414][ T4475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.183817][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready