last executing test programs: 12.287651539s ago: executing program 1 (id=2352): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000480)="91ed9fb3e820f2f0ab14255ef81ac20534a7", 0x12}], 0x2, 0x0, 0x0, 0xc9e}, 0x48084) 12.074290137s ago: executing program 1 (id=2356): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x32, 0x3a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r2, 0x2}, 0x20) 11.837463936s ago: executing program 1 (id=2358): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000001000000000027f8", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff40000000bfa20000b8c27ca20ee634961382aa72a60000000007020000f800000000030000080000002400000095000000000000000000000000a6de0d63837628d5570d32cdf672518f2b6d841bdd59fb6c069a438e66a8d87f34ae21de04485217c2316e4e3137df52ac0a98df112b427c4360c9f35d686b39f7dcc6b80b8438b8a86cbe3d1fa7b8a01a48699c73c8"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 11.357226585s ago: executing program 1 (id=2361): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002a80)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="850000002200000007000000000f00089500000000000000e26c9bd1a6361b80cdd6ff07000000000008bc005aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a9554320000000000000014569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c5a01ba62ed8f2c6a503dd1b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341e70ba0d6fd562489dad595712a4051bb6cf826ab757193fe093b8b3353fbbb278d190000000061805ed430ef06000000000000001e93f640f159320c8b088f4d64977b2eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751df38c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b777d73a63246ce6f0467167626329ab91df7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c270f27e7025d576535198742d403ec43572d7d0baf00e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6ee02412064730700aeff2b69c2f2bf6f691c3560e068743ae8e8771280da61fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c56d9abc40c64a20c14ff0b1bf4d23fe07ae90f503ba9c64bf89b26e7d8d70710b04f9ece69023acadbb4582272e5b3a0429a5675e5a9554de54945d9a270180e0545b0c824ad36f7cc8be12b3874d5a19349b0ede845e9ece24d546d3af1bae069b89f6ecf2aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d80250a7f2eeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d1690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1be3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be4c4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a6df5bdc6f7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dcdb951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02dcefccc0c714c2862ddbe567755f05a1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1dd8f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c21181f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae654bfa81e75b7c7002b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfe63c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed02000000e4b3f0e65783ee5e20d9270802f2a7500738bf356131ca53e9d7ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e4c26497c029bb61462623a58556cd66844d4d23cc738ee5b36c71d2c010b089251d5806000b1a84f4e26cb0331c6e7c052aecd9de81b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd49457536430ffbd3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc3126bf1760243d51a197d3ecfd74bd625e9f496175cfeaaa020817d33d513f3e97854ea76e04e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c326c89bb5d07f35aaf95303b5a620fc84e1c735647895713cbcea57b2277831f8f633f0d29371e645e5544e57010a9b76457f6ad73231a9f31f6bbb1b95248aeda5a9df9dea64cc1fd1f06a980fcf3a792bb0910e45fce298ab0a0298fc33a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b96acf060f74084760d226f50edb115c2e075f3c663a4b4169b900fa0a13cf796e0d7a9dad86953c13ed6241206d682e194c64c491de6a531e9bd45abe705f07000a82ccd41a2c1b9d5dd8bf6c28653eb84f117e476e052a9db790e0a71dac9d8b343efebdc026860000000000000000000000000000aad579302085dfdf75bea24798c680b3de341e3bd57543cd8dfd58bcebdbb883c743ed43ba7f540f2c4e0310c21e7deff9e45b8bd2cf65bb584091b8e80e34b3e59185fe32d1d73dd4f62712a39b13661516723b6b3ef14d9fccb05f9c4e69a3af0fde863af2d9a0f8a94fc571b0ab4ad714f41fa4ee0b8b44e3c41a3125be95e4b23d5f05395852761bfaebe0db979d5f3991d826cc74542b85cfd0dba66bc93cfd79178ab0b79fa3b29ff9c19e0424513c91980187c9d94b8354337a1fc782505db900c47d83bd49276cfe6e242ba8365b1ea4598a21f50f5415a70990b5bb4a1f6bd8acdf2c7da3d648754767089c9b5ceb556fafa3cc5afd2f3e9a62a90262a76ff89a2751b59a744f0d3f36ca503357daa3e29ce6f357dc1e4839277d003e93fdbb955e1a1302a76aea7e73835094fb15464e94e814c77c293121d0433e80d444c4ca17abaf32b521d8686666055da023aef9c8df3e80d2ed640ed10aa19a036dcef172dbd3b3600b69d7b90c6222e167d7c76059f2b5f3b3004e8a20d1f6612efeb629573be97aa949c6016e7e16283e84986aaa4fc8a098708ebe36f377ada63d9b464c39342e0682549862de3ec75e7b031bc49f341a21417fb6375e8701481b59d1722c836961804666801678eb25750b520bf1615a4bbf30aa74d60ec6b657f2dd298b0419da43fc708a60c94a7ff2fd6a2d08005ad73c9e2d6143d2857be8fb3f12bfa6628bccb153e39172d07563d6a1dc75c347c08060304f091230bd74b49ecdd13bf480db3984622a167c8603b8c501280059a7b6123c8f8cd217f64eccc2dffe4f3a1e8c9a96a13d8126f3ea26779fbd0069d729a7764d4ddd7d9d820b0de2530969362b94b974678527f5bac7eb8d6e321b2be0b2f7534634a5ecd1248d7ad7e8e03163e92e9f1d620e28597bd881eea0981e8adfd70b670b0763ce9226f7c3e156b353e22fdea6942b5781bc539aab23cbd46bdd0ea1e67140c759f208c12dc57f3100000000e4965fcb6c0749955eac9476687e63b41c6282bbcb0c3d8b0c9493a3a5f6d879d7257b4b68dc7cac3d9d5f5bbe937c501866ee4042b250e516ec074559e1e551167138766eeecb6941e8305d9cde1800c821536f9d25bd14163890842a08135bdb7a90db630b18f099855a7d9de65c80fa71ff90e873361d0e11a7dfebe56ffb2000b711a0b7914d6351ff60593e48af60e1ffecba7cd6f8ab662eb3c8f3164139e994d6a706afb92722595d649a04f1ff64e5634e7cb9106173a9d5d8cf3e5a959e6bfdc1b6507b851c4ba43312726cfec58dedece1355a087c1b60882713a6161914f09267e2ce8aa886b3c0add5cd92e185d345c9b2933a78a4215133e8e7247fa444aee30bfb6c0fcada974254bc5feda6cee9a0803b2a0b81f440202ed5f278e4cf06565370893e7481efdfbc49b118eb17ba0104000000000000b342fd22ba139b03b7fc83ac49f2dfc9152fc193adac8dc2a6ba72e6bdd423b3555b6e1bd4896b4c946a4500e0a42340700b93bca902e02f744ceb51534f1fb9fa87f850a6c6eed76f7376e2a7e72d3a64a80720ded8f0ce31b1de3561362e975ed32a7167d9e0ad3f2a77f7a10c1614a9ba938a98da2976cb1a0d049446e67073c9a1a38ecc881c693a524c5291f89677de9fe904c752e450eba71d2f32805501d0df5b4a41123233554bdc35b562d9f5a2a026a3b40fc7c9a8546fc8d8310a9876114ffd7dfb909656d54c31bbb655af54bbeeb0174e451ceb7b35e5bd1ac15792ff474abcde8353fe0de700b110a00305ff77c133181688a62a49cff6db4cb4a5a90d40d35e927d216435df804b8bd6033a7ce49f11491f752fefa99e9c54428b725486291490d311b13eb02d14a0ae56733141a8dc6d51e3510000000000000000000000000000002708cac64111287c9f384a63b97d0000000000000000000000000000000068772d994fe9c45e54b97e0b3510cf945907545ebb92ddcd49aa5440b9d0d72d084a213c788b745ecd5bdddfc184483f7ba09966bd8f5c6fae19f3cfe093ef4061d89276628c1464faa485363c732e976fd1c9e2bed0ca75040e8cc73b088c50d6f887b5bc28964421090c133b268d8e848fd384903571d27502f9d17fa0dafc9fe15a97787e809cd7f7cb9345ce157eb073ee18a58239a4e0b8e075eb420e44451ef8b94ad1362ff3469e1ce699645b675866bb270691223ac42fa7be4ad109ddaedc0d5e03132131fec77243adcf90e694c5a9840000"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="3ee901"], 0x9a) 10.240183195s ago: executing program 1 (id=2368): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000), 0x4) close(0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000700142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x5}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, &(0x7f0000000000), &(0x7f00000000c0)='%-010d \x00'}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x4}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x13, 0x24}, 0x20) r4 = openat$cgroup_int(r3, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x9, 0x12) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 9.05106919s ago: executing program 1 (id=2371): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) mkdirat$cgroup(r2, &(0x7f0000000680)='syz0\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x400000002, 0x0) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x100}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r5, @ANYBLOB="0000000700000000850000001200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) 5.544531143s ago: executing program 3 (id=2387): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000002, 0x7fffffffffffffff}, 0x104101, 0x4, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0xc204, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100, 0x8, 0x0, 0xfffffffc, 0xf, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r6}, 0x10) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETVNETLE(r4, 0x40047459, &(0x7f0000000180)) 4.197740742s ago: executing program 2 (id=2388): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114100000000008510000002000000850000007d0000009d00a505000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790048000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000024008106", 0x8}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x8000}, 0x8031, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 4.189213573s ago: executing program 3 (id=2397): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000002, 0x7fffffffffffffff}, 0x104101, 0x4, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0xc204, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100, 0x8, 0x0, 0xfffffffc, 0xf, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x40047459, &(0x7f0000000180)) 4.007851227s ago: executing program 2 (id=2391): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000), 0x4) close(0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000700142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x5}, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, &(0x7f0000000000), &(0x7f00000000c0)='%-010d \x00'}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x4}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x13, 0x24}, 0x20) r3 = openat$cgroup_int(r2, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x9, 0x12) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 3.204163332s ago: executing program 0 (id=2392): perf_event_open(&(0x7f0000000040)={0x1, 0x56, 0x3, 0x3, 0x0, 0x0, 0x0, 0x4, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x8001}, 0x4002, 0x8000000002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0x2000000000000010, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='objagg_destroy\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="3e971d"], 0x9a) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c65}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000000000013f0000000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f661", 0x64}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db7dda907aad81e83049f6", 0x74}], 0x2}, 0x0) 3.141124807s ago: executing program 2 (id=2393): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)=[{}, {&(0x7f0000000480)="91ed9fb3e820f2f0ab14255ef81ac20534a7", 0x12}], 0x2, 0x0, 0x0, 0xc9e}, 0x48084) 2.836289702s ago: executing program 2 (id=2394): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002a80)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="3ee901"], 0x9a) 2.836074652s ago: executing program 3 (id=2395): perf_event_open(&(0x7f0000000040)={0x1, 0x56, 0x3, 0x3, 0x0, 0x0, 0x0, 0x4, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x8001}, 0x4002, 0x8000000002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0x2000000000000010, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='objagg_destroy\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="3e971d"], 0x9a) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c65}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000000000013f0000000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f661", 0x64}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db7dda907aad81e83049f6", 0x74}], 0x2}, 0x0) 2.413270366s ago: executing program 0 (id=2396): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) mkdirat$cgroup(r2, &(0x7f0000000680)='syz0\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x400000002, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x100}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) 1.893591648s ago: executing program 3 (id=2398): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002a80)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="3ee901"], 0x9a) 1.260402249s ago: executing program 0 (id=2399): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114100000000008510000002000000850000007d0000009d00a505000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790048000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000024008106", 0x8}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x8000}, 0x8031, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 1.260034089s ago: executing program 2 (id=2400): perf_event_open(&(0x7f0000000040)={0x1, 0x56, 0x3, 0x3, 0x0, 0x0, 0x0, 0x4, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x8001}, 0x4002, 0x8000000002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0x2000000000000010, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='objagg_destroy\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYBLOB="3e971d"], 0x9a) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000000000013f0000000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f661", 0x64}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db7dda907aad81e83049f6", 0x74}], 0x2}, 0x0) 943.262194ms ago: executing program 0 (id=2401): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000), 0x4) close(0x3) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000700142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x5}, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, &(0x7f0000000000), &(0x7f00000000c0)='%-010d \x00'}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x4}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x13, 0x24}, 0x20) r4 = openat$cgroup_int(r3, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x9, 0x12) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 417.017687ms ago: executing program 3 (id=2402): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)=[{}, {&(0x7f0000000480)="91ed9fb3e820f2f0ab14255ef81ac20534a7", 0x12}], 0x2, 0x0, 0x0, 0xc9e}, 0x48084) 247.882041ms ago: executing program 0 (id=2403): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[], 0xe0}, 0x20004065) 366.46µs ago: executing program 0 (id=2404): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000), 0x4) close(0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000700142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x5}, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, &(0x7f0000000000), &(0x7f00000000c0)='%-010d \x00'}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x4}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x13, 0x24}, 0x20) r3 = openat$cgroup_int(r2, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x9, 0x12) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 145.83µs ago: executing program 2 (id=2405): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000002, 0x7fffffffffffffff}, 0x104101, 0x4, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0xc204, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100, 0x8, 0x0, 0xfffffffc, 0xf, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r6}, 0x10) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETVNETLE(r4, 0x40047459, &(0x7f0000000180)) 0s ago: executing program 3 (id=2406): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) mkdirat$cgroup(r2, &(0x7f0000000680)='syz0\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x400000002, 0x0) close(0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) kernel console output (not intermixed with test programs): tribute type 29 has an invalid length. [ 359.696865][T10354] netlink: 'syz.1.1463': attribute type 29 has an invalid length. [ 359.723610][T10354] netlink: 'syz.1.1463': attribute type 29 has an invalid length. [ 359.863606][T10359] netlink: 'syz.1.1465': attribute type 29 has an invalid length. [ 359.874213][T10359] netlink: 'syz.1.1465': attribute type 29 has an invalid length. [ 359.906659][T10359] netlink: 'syz.1.1465': attribute type 29 has an invalid length. [ 360.065545][T10363] netlink: 'syz.2.1467': attribute type 29 has an invalid length. [ 360.084326][T10363] FAULT_INJECTION: forcing a failure. [ 360.084326][T10363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.107556][T10369] FAULT_INJECTION: forcing a failure. [ 360.107556][T10369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.116824][T10363] CPU: 0 PID: 10363 Comm: syz.2.1467 Not tainted syzkaller #0 [ 360.128265][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.138525][T10363] Call Trace: [ 360.141831][T10363] [ 360.144886][T10363] dump_stack_lvl+0x16c/0x230 [ 360.149606][T10363] ? show_regs_print_info+0x20/0x20 [ 360.154838][T10363] ? load_image+0x3b0/0x3b0 [ 360.159374][T10363] ? __might_fault+0xaa/0x120 [ 360.164085][T10363] ? __lock_acquire+0x7c80/0x7c80 [ 360.169150][T10363] should_fail_ex+0x39d/0x4d0 [ 360.173866][T10363] _copy_from_user+0x2f/0xe0 [ 360.178571][T10363] ___sys_recvmsg+0x12f/0x510 [ 360.183288][T10363] ? __sys_recvmsg+0x270/0x270 [ 360.188091][T10363] ? ksys_write+0x1c1/0x250 [ 360.192666][T10363] ? __fget_files+0x44a/0x4d0 [ 360.197482][T10363] __x64_sys_recvmsg+0x1f2/0x2c0 [ 360.202461][T10363] ? ___sys_recvmsg+0x510/0x510 [ 360.207357][T10363] ? lockdep_hardirqs_on+0x98/0x150 [ 360.212677][T10363] do_syscall_64+0x55/0xb0 [ 360.217127][T10363] ? clear_bhb_loop+0x40/0x90 [ 360.221971][T10363] ? clear_bhb_loop+0x40/0x90 [ 360.226672][T10363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.232608][T10363] RIP: 0033:0x7f9253b8ebe9 [ 360.237070][T10363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.256728][T10363] RSP: 002b:00007f9254961038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 360.265278][T10363] RAX: ffffffffffffffda RBX: 00007f9253dc5fa0 RCX: 00007f9253b8ebe9 [ 360.273285][T10363] RDX: 0000000040012100 RSI: 0000200000000640 RDI: 0000000000000003 [ 360.281301][T10363] RBP: 00007f9254961090 R08: 0000000000000000 R09: 0000000000000000 [ 360.289296][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.297291][T10363] R13: 00007f9253dc6038 R14: 00007f9253dc5fa0 R15: 00007ffd92ebecc8 [ 360.305305][T10363] [ 360.316622][T10369] CPU: 1 PID: 10369 Comm: syz.0.1469 Not tainted syzkaller #0 [ 360.324252][T10369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.334538][T10369] Call Trace: [ 360.337855][T10369] [ 360.340828][T10369] dump_stack_lvl+0x16c/0x230 [ 360.345571][T10369] ? show_regs_print_info+0x20/0x20 [ 360.350839][T10369] ? load_image+0x3b0/0x3b0 [ 360.355400][T10369] ? __might_fault+0xaa/0x120 [ 360.360143][T10369] ? __lock_acquire+0x7c80/0x7c80 [ 360.365260][T10369] should_fail_ex+0x39d/0x4d0 [ 360.370011][T10369] _copy_to_user+0x2f/0xa0 [ 360.374505][T10369] bpf_verifier_vlog+0x50f/0x870 [ 360.379687][T10369] __btf_verifier_log+0xd5/0x120 [ 360.384694][T10369] ? btf_check_sec_info+0x330/0x330 [ 360.389961][T10369] ? __lock_acquire+0x7c80/0x7c80 [ 360.395120][T10369] ? btf_parse_hdr+0x1da/0x6d0 [ 360.400043][T10369] btf_parse_hdr+0x390/0x6d0 [ 360.404717][T10369] btf_new_fd+0x37b/0x980 [ 360.409118][T10369] ? bpf_btf_show_fdinfo+0x80/0x80 [ 360.414303][T10369] ? capable+0x88/0xe0 [ 360.418534][T10369] __sys_bpf+0x60e/0x800 [ 360.422833][T10369] ? bpf_link_show_fdinfo+0x350/0x350 [ 360.428366][T10369] ? lock_chain_count+0x20/0x20 [ 360.433307][T10369] __x64_sys_bpf+0x7c/0x90 [ 360.437772][T10369] do_syscall_64+0x55/0xb0 [ 360.442249][T10369] ? clear_bhb_loop+0x40/0x90 [ 360.446977][T10369] ? clear_bhb_loop+0x40/0x90 [ 360.451707][T10369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.457662][T10369] RIP: 0033:0x7ffa4798ebe9 [ 360.462121][T10369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.481956][T10369] RSP: 002b:00007ffa48746038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.490431][T10369] RAX: ffffffffffffffda RBX: 00007ffa47bc5fa0 RCX: 00007ffa4798ebe9 [ 360.498462][T10369] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 360.506482][T10369] RBP: 00007ffa48746090 R08: 0000000000000000 R09: 0000000000000000 [ 360.514622][T10369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.522649][T10369] R13: 00007ffa47bc6038 R14: 00007ffa47bc5fa0 R15: 00007ffcd9cc8238 [ 360.530958][T10369] [ 360.561176][T10375] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1472'. [ 361.594256][T10389] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1476'. [ 361.767410][T10391] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.774843][T10391] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.833630][T10391] bridge0: left promiscuous mode [ 361.981046][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 362.049522][T10398] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1478'. [ 362.168809][T10398] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 362.390373][T10410] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1484'. [ 362.959918][T10425] FAULT_INJECTION: forcing a failure. [ 362.959918][T10425] name failslab, interval 1, probability 0, space 0, times 0 [ 362.977122][T10425] CPU: 1 PID: 10425 Comm: syz.0.1489 Not tainted syzkaller #0 [ 362.984774][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.994896][T10425] Call Trace: [ 362.998243][T10425] [ 363.001240][T10425] dump_stack_lvl+0x16c/0x230 [ 363.006084][T10425] ? show_regs_print_info+0x20/0x20 [ 363.011329][T10425] ? load_image+0x3b0/0x3b0 [ 363.016050][T10425] ? __might_sleep+0xe0/0xe0 [ 363.020681][T10425] ? __lock_acquire+0x7c80/0x7c80 [ 363.025741][T10425] ? lock_chain_count+0x20/0x20 [ 363.030630][T10425] should_fail_ex+0x39d/0x4d0 [ 363.035362][T10425] should_failslab+0x9/0x20 [ 363.039909][T10425] slab_pre_alloc_hook+0x59/0x310 [ 363.044976][T10425] ? _raw_spin_unlock+0x40/0x40 [ 363.049957][T10425] ? string+0x26d/0x2b0 [ 363.054246][T10425] ? __request_module+0x2a6/0x5b0 [ 363.059354][T10425] __kmem_cache_alloc_node+0x53/0x260 [ 363.064776][T10425] ? __request_module+0x2a6/0x5b0 [ 363.069842][T10425] kmalloc_trace+0x2a/0xe0 [ 363.074305][T10425] __request_module+0x2a6/0x5b0 [ 363.079223][T10425] ? module_enforce_rwx_sections+0x150/0x150 [ 363.085257][T10425] ? dev_load+0x21/0x1f0 [ 363.089565][T10425] ? bpf_lsm_capable+0x9/0x10 [ 363.094293][T10425] ? dev_load+0x21/0x1f0 [ 363.098567][T10425] dev_load+0x18b/0x1f0 [ 363.102759][T10425] dev_ioctl+0x7cd/0x1170 [ 363.107274][T10425] sock_do_ioctl+0x226/0x2f0 [ 363.111912][T10425] ? sock_show_fdinfo+0xb0/0xb0 [ 363.116840][T10425] sock_ioctl+0x623/0x7a0 [ 363.121222][T10425] ? sock_poll+0x3d0/0x3d0 [ 363.125698][T10425] ? bpf_lsm_file_ioctl+0x9/0x10 [ 363.130754][T10425] ? security_file_ioctl+0x80/0xa0 [ 363.135909][T10425] ? sock_poll+0x3d0/0x3d0 [ 363.140372][T10425] __se_sys_ioctl+0xfd/0x170 [ 363.145006][T10425] do_syscall_64+0x55/0xb0 [ 363.149634][T10425] ? clear_bhb_loop+0x40/0x90 [ 363.154541][T10425] ? clear_bhb_loop+0x40/0x90 [ 363.159257][T10425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.165386][T10425] RIP: 0033:0x7ffa4798ebe9 [ 363.169835][T10425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.189494][T10425] RSP: 002b:00007ffa48746038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.198126][T10425] RAX: ffffffffffffffda RBX: 00007ffa47bc5fa0 RCX: 00007ffa4798ebe9 [ 363.206139][T10425] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000008 [ 363.214167][T10425] RBP: 00007ffa48746090 R08: 0000000000000000 R09: 0000000000000000 [ 363.222550][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.230559][T10425] R13: 00007ffa47bc6038 R14: 00007ffa47bc5fa0 R15: 00007ffcd9cc8238 [ 363.238600][T10425] [ 363.689874][ T5789] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 363.744806][T10436] validate_nla: 4 callbacks suppressed [ 363.744843][T10436] netlink: 'syz.0.1492': attribute type 1 has an invalid length. [ 363.765185][T10436] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1492'. [ 363.848766][T10444] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 364.157147][T10453] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1500'. [ 364.169354][T10455] netlink: 'syz.3.1498': attribute type 17 has an invalid length. [ 364.177516][T10455] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1498'. [ 365.075793][ T5789] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 365.136173][T10471] netlink: 'syz.0.1507': attribute type 1 has an invalid length. [ 365.196569][T10471] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1507'. [ 365.256976][T10477] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 365.757964][T10495] netlink: 'syz.1.1517': attribute type 17 has an invalid length. [ 365.793637][T10495] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1517'. [ 366.353054][T10505] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1519'. [ 366.620603][T10512] FAULT_INJECTION: forcing a failure. [ 366.620603][T10512] name failslab, interval 1, probability 0, space 0, times 0 [ 366.673344][T10512] CPU: 0 PID: 10512 Comm: syz.2.1521 Not tainted syzkaller #0 [ 366.680899][T10512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.691007][T10512] Call Trace: [ 366.694514][T10512] [ 366.697493][T10512] dump_stack_lvl+0x16c/0x230 [ 366.702240][T10512] ? show_regs_print_info+0x20/0x20 [ 366.707560][T10512] ? load_image+0x3b0/0x3b0 [ 366.712123][T10512] ? __might_sleep+0xe0/0xe0 [ 366.716771][T10512] ? __lock_acquire+0x7c80/0x7c80 [ 366.721855][T10512] should_fail_ex+0x39d/0x4d0 [ 366.726710][T10512] should_failslab+0x9/0x20 [ 366.731281][T10512] slab_pre_alloc_hook+0x59/0x310 [ 366.736379][T10512] ? kvmalloc_node+0x70/0x180 [ 366.741145][T10512] ? kvmalloc_node+0x70/0x180 [ 366.745902][T10512] __kmem_cache_alloc_node+0x53/0x260 [ 366.751365][T10512] ? kvmalloc_node+0x70/0x180 [ 366.756113][T10512] __kmalloc_node+0xa4/0x230 [ 366.760857][T10512] kvmalloc_node+0x70/0x180 [ 366.765445][T10512] page_pool_create+0x1f7/0x5e0 [ 366.770362][T10512] bpf_test_run_xdp_live+0x1c1/0x1a20 [ 366.775817][T10512] ? 0xffffffffa0004740 [ 366.780028][T10512] ? bpf_dispatcher_change_prog+0xa76/0xcc0 [ 366.786024][T10512] ? __sys_bpf+0x440/0x800 [ 366.790493][T10512] ? __x64_sys_bpf+0x7c/0x90 [ 366.795135][T10512] ? do_syscall_64+0x55/0xb0 [ 366.799810][T10512] ? xdp_convert_md_to_buff+0x330/0x330 [ 366.805466][T10512] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 366.811787][T10512] ? _copy_from_user+0xa5/0xe0 [ 366.816685][T10512] ? bpf_test_init+0x134/0x150 [ 366.821695][T10512] ? xdp_convert_md_to_buff+0x5b/0x330 [ 366.827227][T10512] bpf_prog_test_run_xdp+0x76c/0xfa0 [ 366.832598][T10512] ? dev_put+0x80/0x80 [ 366.836764][T10512] ? dev_put+0x80/0x80 [ 366.840971][T10512] bpf_prog_test_run+0x321/0x390 [ 366.845987][T10512] __sys_bpf+0x440/0x800 [ 366.850415][T10512] ? bpf_link_show_fdinfo+0x350/0x350 [ 366.855838][T10512] ? lock_chain_count+0x20/0x20 [ 366.860749][T10512] __x64_sys_bpf+0x7c/0x90 [ 366.865239][T10512] do_syscall_64+0x55/0xb0 [ 366.869784][T10512] ? clear_bhb_loop+0x40/0x90 [ 366.874486][T10512] ? clear_bhb_loop+0x40/0x90 [ 366.879222][T10512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.885159][T10512] RIP: 0033:0x7f9253b8ebe9 [ 366.889637][T10512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.909319][T10512] RSP: 002b:00007f9254961038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.917859][T10512] RAX: ffffffffffffffda RBX: 00007f9253dc5fa0 RCX: 00007f9253b8ebe9 [ 366.925862][T10512] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 366.933857][T10512] RBP: 00007f9254961090 R08: 0000000000000000 R09: 0000000000000000 [ 366.941886][T10512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.949880][T10512] R13: 00007f9253dc6038 R14: 00007f9253dc5fa0 R15: 00007ffd92ebecc8 [ 366.957923][T10512] [ 367.023463][T10512] page_pool_create() gave up with errno -12 [ 367.053024][T10505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.084157][T10505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.117244][T10505] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 367.159818][T10505] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 367.183438][T10505] bond0 (unregistering): Released all slaves [ 367.239445][T10514] netlink: 'syz.1.1522': attribute type 1 has an invalid length. [ 367.247362][T10514] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1522'. [ 367.260734][T10521] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 367.936135][T10540] netlink: 'syz.2.1530': attribute type 17 has an invalid length. [ 367.950128][T10540] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1530'. [ 368.564174][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 368.585370][T10552] netlink: 'syz.3.1536': attribute type 1 has an invalid length. [ 368.593812][T10552] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1536'. [ 368.659564][T10552] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 368.830526][T10559] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1539'. [ 368.860653][T10558] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1539'. [ 369.123516][T10573] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1545'. [ 369.896483][ T5789] Bluetooth: hci2: ISO packet for unknown connection handle 1854 [ 369.930950][T10581] netlink: 'syz.2.1547': attribute type 1 has an invalid length. [ 369.946415][T10581] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1547'. [ 370.010233][T10581] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 370.093783][T10585] netlink: 'syz.0.1548': attribute type 17 has an invalid length. [ 370.122470][T10587] FAULT_INJECTION: forcing a failure. [ 370.122470][T10587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.197034][T10587] CPU: 0 PID: 10587 Comm: syz.1.1550 Not tainted syzkaller #0 [ 370.204783][T10587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.214970][T10587] Call Trace: [ 370.218284][T10587] [ 370.221265][T10587] dump_stack_lvl+0x16c/0x230 [ 370.226009][T10587] ? show_regs_print_info+0x20/0x20 [ 370.231254][T10587] ? load_image+0x3b0/0x3b0 [ 370.235803][T10587] ? __might_fault+0xaa/0x120 [ 370.240520][T10587] ? __lock_acquire+0x7c80/0x7c80 [ 370.245592][T10587] ? perf_trace_lock_acquire+0x32a/0x3e0 [ 370.251278][T10587] should_fail_ex+0x39d/0x4d0 [ 370.256023][T10587] _copy_from_user+0x2f/0xe0 [ 370.260666][T10587] ___sys_sendmsg+0x159/0x290 [ 370.265440][T10587] ? __sys_sendmsg+0x270/0x270 [ 370.270324][T10587] ? __lock_acquire+0x7c80/0x7c80 [ 370.275457][T10587] __se_sys_sendmsg+0x1a5/0x270 [ 370.280365][T10587] ? __x64_sys_sendmsg+0x80/0x80 [ 370.285411][T10587] ? lockdep_hardirqs_on+0x98/0x150 [ 370.290772][T10587] do_syscall_64+0x55/0xb0 [ 370.295250][T10587] ? clear_bhb_loop+0x40/0x90 [ 370.299965][T10587] ? clear_bhb_loop+0x40/0x90 [ 370.304686][T10587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.310633][T10587] RIP: 0033:0x7f704bb8ebe9 [ 370.315184][T10587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.334856][T10587] RSP: 002b:00007f704ca0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.343506][T10587] RAX: ffffffffffffffda RBX: 00007f704bdc5fa0 RCX: 00007f704bb8ebe9 [ 370.351521][T10587] RDX: 0000000000000000 RSI: 0000200000001940 RDI: 0000000000000005 [ 370.359552][T10587] RBP: 00007f704ca0f090 R08: 0000000000000000 R09: 0000000000000000 [ 370.367564][T10587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.375574][T10587] R13: 00007f704bdc6038 R14: 00007f704bdc5fa0 R15: 00007ffdf5d90b78 [ 370.383637][T10587] [ 372.428446][ T5789] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 372.438806][T10620] netlink: 'syz.0.1559': attribute type 1 has an invalid length. [ 372.477806][T10620] __nla_validate_parse: 1 callbacks suppressed [ 372.477826][T10620] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1559'. [ 372.577484][T10620] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 372.833990][T10624] netlink: 'syz.3.1561': attribute type 3 has an invalid length. [ 372.877721][T10624] netlink: 15542 bytes leftover after parsing attributes in process `syz.3.1561'. [ 373.020862][T10629] netlink: 'syz.2.1562': attribute type 17 has an invalid length. [ 373.082099][T10629] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1562'. [ 373.166678][T10627] netlink: 'syz.0.1563': attribute type 21 has an invalid length. [ 373.182427][T10627] netlink: 'syz.0.1563': attribute type 15 has an invalid length. [ 374.096695][T10646] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1568'. [ 374.105886][T10646] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1568'. [ 374.177467][T10646] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1568'. [ 374.218100][T10646] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1568'. [ 376.063726][T10660] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1572'. [ 376.080578][T10662] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1573'. [ 376.287295][T10662] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1573'. [ 376.377768][ T5789] Bluetooth: hci2: ISO packet for unknown connection handle 1854 [ 376.799731][T10669] netlink: 'syz.3.1576': attribute type 17 has an invalid length. [ 377.059119][T10666] netlink: 'syz.2.1571': attribute type 1 has an invalid length. [ 377.252483][T10659] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 378.189178][T10694] __nla_validate_parse: 7 callbacks suppressed [ 378.189196][T10694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1583'. [ 378.226983][T10694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1583'. [ 378.248609][T10691] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1583'. [ 378.267407][T10697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1583'. [ 379.059068][T10704] netlink: 'syz.0.1586': attribute type 1 has an invalid length. [ 379.107756][T10704] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1586'. [ 379.193552][T10703] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 379.246309][T10706] netlink: 'syz.3.1587': attribute type 2 has an invalid length. [ 379.254294][T10706] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1587'. [ 379.288316][T10706] netlink: 'syz.3.1587': attribute type 2 has an invalid length. [ 379.319511][T10706] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1587'. [ 379.348633][T10706] netlink: 'syz.3.1587': attribute type 2 has an invalid length. [ 379.356991][T10706] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1587'. [ 379.387016][T10709] netlink: 'syz.2.1589': attribute type 17 has an invalid length. [ 379.395002][T10709] netlink: 'syz.2.1589': attribute type 16 has an invalid length. [ 379.426400][T10709] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1589'. [ 379.435663][T10706] netlink: 'syz.3.1587': attribute type 2 has an invalid length. [ 379.486386][T10706] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1587'. [ 379.488290][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.498462][T10706] netlink: 'syz.3.1587': attribute type 2 has an invalid length. [ 379.512752][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.685297][T10730] FAULT_INJECTION: forcing a failure. [ 380.685297][T10730] name failslab, interval 1, probability 0, space 0, times 0 [ 380.718840][T10730] CPU: 1 PID: 10730 Comm: syz.2.1597 Not tainted syzkaller #0 [ 380.726406][T10730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.736511][T10730] Call Trace: [ 380.739923][T10730] [ 380.742895][T10730] dump_stack_lvl+0x16c/0x230 [ 380.747640][T10730] ? show_regs_print_info+0x20/0x20 [ 380.752938][T10730] ? load_image+0x3b0/0x3b0 [ 380.757491][T10730] ? __might_sleep+0xe0/0xe0 [ 380.762227][T10730] ? __lock_acquire+0x7c80/0x7c80 [ 380.767307][T10730] should_fail_ex+0x39d/0x4d0 [ 380.772059][T10730] should_failslab+0x9/0x20 [ 380.776620][T10730] slab_pre_alloc_hook+0x59/0x310 [ 380.781713][T10730] ? call_usermodehelper_setup+0x8e/0x260 [ 380.787496][T10730] __kmem_cache_alloc_node+0x53/0x260 [ 380.793019][T10730] ? call_usermodehelper_setup+0x8e/0x260 [ 380.798804][T10730] kmalloc_trace+0x2a/0xe0 [ 380.803301][T10730] call_usermodehelper_setup+0x8e/0x260 [ 380.808911][T10730] ? __request_module+0x5b0/0x5b0 [ 380.813991][T10730] __request_module+0x390/0x5b0 [ 380.818902][T10730] ? module_enforce_rwx_sections+0x150/0x150 [ 380.824908][T10730] ? dev_load+0x21/0x1f0 [ 380.829192][T10730] ? bpf_lsm_capable+0x9/0x10 [ 380.833917][T10730] ? dev_load+0x21/0x1f0 [ 380.838189][T10730] dev_load+0x18b/0x1f0 [ 380.842390][T10730] dev_ioctl+0x4bc/0x1170 [ 380.846757][T10730] sock_do_ioctl+0x226/0x2f0 [ 380.851387][T10730] ? sock_show_fdinfo+0xb0/0xb0 [ 380.856304][T10730] sock_ioctl+0x623/0x7a0 [ 380.860671][T10730] ? sock_poll+0x3d0/0x3d0 [ 380.865125][T10730] ? bpf_lsm_file_ioctl+0x9/0x10 [ 380.870110][T10730] ? security_file_ioctl+0x80/0xa0 [ 380.875259][T10730] ? sock_poll+0x3d0/0x3d0 [ 380.879713][T10730] __se_sys_ioctl+0xfd/0x170 [ 380.884337][T10730] do_syscall_64+0x55/0xb0 [ 380.888780][T10730] ? clear_bhb_loop+0x40/0x90 [ 380.893479][T10730] ? clear_bhb_loop+0x40/0x90 [ 380.898269][T10730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.904202][T10730] RIP: 0033:0x7f9253b8ebe9 [ 380.908697][T10730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.928323][T10730] RSP: 002b:00007f9254961038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.936844][T10730] RAX: ffffffffffffffda RBX: 00007f9253dc5fa0 RCX: 00007f9253b8ebe9 [ 380.944842][T10730] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 380.952834][T10730] RBP: 00007f9254961090 R08: 0000000000000000 R09: 0000000000000000 [ 380.960937][T10730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.968966][T10730] R13: 00007f9253dc6038 R14: 00007f9253dc5fa0 R15: 00007ffd92ebecc8 [ 380.976973][T10730] [ 381.738391][ T5789] Bluetooth: hci0: ISO packet for unknown connection handle 1854 [ 381.862039][T10746] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 382.015076][T10739] validate_nla: 30 callbacks suppressed [ 382.015110][T10739] netlink: 'syz.1.1598': attribute type 1 has an invalid length. [ 382.108924][T10754] netlink: 'syz.0.1603': attribute type 29 has an invalid length. [ 382.118455][T10754] netlink: 'syz.0.1603': attribute type 29 has an invalid length. [ 383.505901][T10778] __nla_validate_parse: 35 callbacks suppressed [ 383.505923][T10778] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1611'. [ 383.739957][ T5789] Bluetooth: hci2: ISO packet for unknown connection handle 1854 [ 383.776270][T10785] netlink: 'syz.2.1613': attribute type 1 has an invalid length. [ 383.796524][T10785] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1613'. [ 383.912528][T10789] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 384.209416][T10797] netlink: 'syz.2.1618': attribute type 17 has an invalid length. [ 384.226322][T10797] netlink: 'syz.2.1618': attribute type 16 has an invalid length. [ 384.256345][T10797] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1618'. [ 385.910460][T10829] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 385.939355][T10829] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1626'. [ 385.978017][T10830] netlink: 'syz.3.1628': attribute type 21 has an invalid length. [ 386.006533][T10830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1628'. [ 386.032166][T10830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1628'. [ 386.076506][T10823] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 386.275398][T10838] netlink: 'syz.0.1632': attribute type 17 has an invalid length. [ 386.283499][T10838] netlink: 'syz.0.1632': attribute type 16 has an invalid length. [ 386.292198][T10838] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1632'. [ 386.804192][T10856] FAULT_INJECTION: forcing a failure. [ 386.804192][T10856] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 386.824261][T10856] CPU: 0 PID: 10856 Comm: syz.3.1636 Not tainted syzkaller #0 [ 386.831831][T10856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.841939][T10856] Call Trace: [ 386.845261][T10856] [ 386.848239][T10856] dump_stack_lvl+0x16c/0x230 [ 386.852982][T10856] ? show_regs_print_info+0x20/0x20 [ 386.858253][T10856] ? load_image+0x3b0/0x3b0 [ 386.862814][T10856] ? __lock_acquire+0x7c80/0x7c80 [ 386.867902][T10856] should_fail_ex+0x39d/0x4d0 [ 386.872644][T10856] prepare_alloc_pages+0x1e2/0x5f0 [ 386.877835][T10856] __alloc_pages+0x127/0x460 [ 386.882489][T10856] ? zone_statistics+0x170/0x170 [ 386.887506][T10856] ? alloc_pages+0x4dc/0x740 [ 386.892155][T10856] ? do_raw_spin_unlock+0x121/0x230 [ 386.897409][T10856] __get_free_pages+0xc/0x30 [ 386.902098][T10856] kasan_populate_vmalloc_pte+0x35/0x100 [ 386.907793][T10856] __apply_to_page_range+0x84c/0xd50 [ 386.913243][T10856] ? kasan_populate_vmalloc+0x70/0x70 [ 386.918682][T10856] ? apply_to_page_range+0x50/0x50 [ 386.923859][T10856] ? do_raw_spin_unlock+0x121/0x230 [ 386.929121][T10856] alloc_vmap_area+0x1b4a/0x1c70 [ 386.934123][T10856] ? vm_map_ram+0xcb0/0xcb0 [ 386.938658][T10856] ? rcu_is_watching+0x15/0xb0 [ 386.943457][T10856] __get_vm_area_node+0x162/0x370 [ 386.948511][T10856] __vmalloc_node_range+0x36e/0x1320 [ 386.953817][T10856] ? array_map_alloc+0x280/0x6f0 [ 386.958774][T10856] ? verify_lock_unused+0x140/0x140 [ 386.964010][T10856] ? end_current_label_crit_section+0x170/0x170 [ 386.970280][T10856] ? free_vm_area+0x50/0x50 [ 386.974811][T10856] ? apparmor_capable+0x137/0x1a0 [ 386.979861][T10856] ? bpf_lsm_capable+0x9/0x10 [ 386.984585][T10856] bpf_map_area_alloc+0xf1/0x110 [ 386.989555][T10856] ? array_map_alloc+0x280/0x6f0 [ 386.994609][T10856] array_map_alloc+0x280/0x6f0 [ 386.999401][T10856] ? __lock_acquire+0x7c80/0x7c80 [ 387.004456][T10856] map_create+0x877/0x1110 [ 387.008895][T10856] ? security_bpf+0x7e/0xa0 [ 387.013425][T10856] __sys_bpf+0x5f0/0x800 [ 387.017688][T10856] ? bpf_link_show_fdinfo+0x350/0x350 [ 387.023090][T10856] ? lock_chain_count+0x20/0x20 [ 387.027975][T10856] __x64_sys_bpf+0x7c/0x90 [ 387.032518][T10856] do_syscall_64+0x55/0xb0 [ 387.036967][T10856] ? clear_bhb_loop+0x40/0x90 [ 387.041660][T10856] ? clear_bhb_loop+0x40/0x90 [ 387.046367][T10856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.052289][T10856] RIP: 0033:0x7ff646b8ebe9 [ 387.056898][T10856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.076536][T10856] RSP: 002b:00007ff647a4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 387.085010][T10856] RAX: ffffffffffffffda RBX: 00007ff646dc5fa0 RCX: 00007ff646b8ebe9 [ 387.093029][T10856] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0b00000000000000 [ 387.101020][T10856] RBP: 00007ff647a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 387.109040][T10856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.117033][T10856] R13: 00007ff646dc6038 R14: 00007ff646dc5fa0 R15: 00007fff8521fe38 [ 387.125033][T10856] [ 387.768117][ T5789] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 387.852831][T10864] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 387.864354][T10864] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1639'. [ 387.937384][T10864] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 388.091216][T10875] FAULT_INJECTION: forcing a failure. [ 388.091216][T10875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.109382][T10875] CPU: 0 PID: 10875 Comm: syz.1.1642 Not tainted syzkaller #0 [ 388.116926][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.127030][T10875] Call Trace: [ 388.130352][T10875] [ 388.133328][T10875] dump_stack_lvl+0x16c/0x230 [ 388.137245][T10879] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1644'. [ 388.138039][T10875] ? show_regs_print_info+0x20/0x20 [ 388.147577][T10879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.152095][T10875] ? load_image+0x3b0/0x3b0 [ 388.164313][T10879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.167067][T10875] ? __might_fault+0xaa/0x120 [ 388.167101][T10875] ? __lock_acquire+0x7c80/0x7c80 [ 388.167128][T10875] should_fail_ex+0x39d/0x4d0 [ 388.167169][T10875] _copy_from_user+0x2f/0xe0 [ 388.167194][T10875] generic_map_update_batch+0x58e/0x810 [ 388.167239][T10875] ? rcu_read_unlock+0xa0/0xa0 [ 388.167276][T10875] ? __fdget+0x180/0x210 [ 388.167305][T10875] ? rcu_read_unlock+0xa0/0xa0 [ 388.167333][T10875] bpf_map_do_batch+0x3d7/0x610 [ 388.167363][T10875] __sys_bpf+0x31b/0x800 [ 388.167385][T10875] ? bpf_link_show_fdinfo+0x350/0x350 [ 388.167419][T10875] ? lock_chain_count+0x20/0x20 [ 388.182141][T10879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.182255][T10875] __x64_sys_bpf+0x7c/0x90 [ 388.187934][T10879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.191979][T10875] do_syscall_64+0x55/0xb0 [ 388.192031][T10875] ? clear_bhb_loop+0x40/0x90 [ 388.197399][T10879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.202355][T10875] ? clear_bhb_loop+0x40/0x90 [ 388.202385][T10875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.290582][T10875] RIP: 0033:0x7f704bb8ebe9 [ 388.295018][T10875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.314675][T10875] RSP: 002b:00007f704ca0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.323119][T10875] RAX: ffffffffffffffda RBX: 00007f704bdc5fa0 RCX: 00007f704bb8ebe9 [ 388.331117][T10875] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 388.339201][T10875] RBP: 00007f704ca0f090 R08: 0000000000000000 R09: 0000000000000000 [ 388.347196][T10875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.355202][T10875] R13: 00007f704bdc6038 R14: 00007f704bdc5fa0 R15: 00007ffdf5d90b78 [ 388.363223][T10875] [ 388.376373][T10879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.393328][T10879] batadv_slave_1: entered promiscuous mode [ 388.478305][T10883] netlink: 'syz.3.1645': attribute type 17 has an invalid length. [ 388.493274][T10883] netlink: 'syz.3.1645': attribute type 16 has an invalid length. [ 388.539542][T10883] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1645'. [ 389.767818][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 389.916813][T10905] netlink: 'syz.3.1651': attribute type 1 has an invalid length. [ 389.929857][T10905] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1651'. [ 389.982755][T10906] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 390.263667][T10925] netlink: 'syz.0.1659': attribute type 17 has an invalid length. [ 390.308862][T10925] netlink: 'syz.0.1659': attribute type 16 has an invalid length. [ 390.322828][T10925] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1659'. [ 390.410836][T10932] FAULT_INJECTION: forcing a failure. [ 390.410836][T10932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.444859][T10932] CPU: 0 PID: 10932 Comm: syz.2.1661 Not tainted syzkaller #0 [ 390.452588][T10932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 390.462694][T10932] Call Trace: [ 390.466027][T10932] [ 390.468997][T10932] dump_stack_lvl+0x16c/0x230 [ 390.473739][T10932] ? show_regs_print_info+0x20/0x20 [ 390.479002][T10932] ? load_image+0x3b0/0x3b0 [ 390.483597][T10932] ? __might_fault+0xaa/0x120 [ 390.488296][T10932] ? __lock_acquire+0x7c80/0x7c80 [ 390.493550][T10932] should_fail_ex+0x39d/0x4d0 [ 390.498270][T10932] _copy_from_user+0x2f/0xe0 [ 390.502983][T10932] bpf_prog_test_run_xdp+0xca3/0xfa0 [ 390.508350][T10932] ? dev_put+0x80/0x80 [ 390.512461][T10932] ? dev_put+0x80/0x80 [ 390.516562][T10932] bpf_prog_test_run+0x321/0x390 [ 390.521526][T10932] __sys_bpf+0x440/0x800 [ 390.525795][T10932] ? bpf_link_show_fdinfo+0x350/0x350 [ 390.531205][T10932] ? lock_chain_count+0x20/0x20 [ 390.536089][T10932] __x64_sys_bpf+0x7c/0x90 [ 390.540528][T10932] do_syscall_64+0x55/0xb0 [ 390.544984][T10932] ? clear_bhb_loop+0x40/0x90 [ 390.549717][T10932] ? clear_bhb_loop+0x40/0x90 [ 390.554504][T10932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.560427][T10932] RIP: 0033:0x7f9253b8ebe9 [ 390.564864][T10932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.584496][T10932] RSP: 002b:00007f9254961038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.592937][T10932] RAX: ffffffffffffffda RBX: 00007f9253dc5fa0 RCX: 00007f9253b8ebe9 [ 390.600933][T10932] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 390.608949][T10932] RBP: 00007f9254961090 R08: 0000000000000000 R09: 0000000000000000 [ 390.616960][T10932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.624993][T10932] R13: 00007f9253dc6038 R14: 00007f9253dc5fa0 R15: 00007ffd92ebecc8 [ 390.633041][T10932] [ 391.321680][ T5789] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 391.424997][T10951] netlink: 'syz.0.1666': attribute type 1 has an invalid length. [ 391.460393][T10951] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1666'. [ 391.505298][T10954] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 392.008129][T10975] netlink: 'syz.3.1674': attribute type 17 has an invalid length. [ 392.046454][T10975] netlink: 'syz.3.1674': attribute type 16 has an invalid length. [ 392.054375][T10975] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1674'. [ 392.558289][ T5789] Bluetooth: hci2: ISO packet for unknown connection handle 1854 [ 392.582347][T10992] netlink: 'syz.2.1677': attribute type 1 has an invalid length. [ 392.593245][T10992] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1677'. [ 392.612938][T10992] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 392.748211][T10996] FAULT_INJECTION: forcing a failure. [ 392.748211][T10996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.765721][T10996] CPU: 0 PID: 10996 Comm: syz.0.1679 Not tainted syzkaller #0 [ 392.773275][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.783394][T10996] Call Trace: [ 392.786708][T10996] [ 392.789661][T10996] dump_stack_lvl+0x16c/0x230 [ 392.794369][T10996] ? show_regs_print_info+0x20/0x20 [ 392.799598][T10996] ? load_image+0x3b0/0x3b0 [ 392.804190][T10996] ? __might_fault+0xaa/0x120 [ 392.808919][T10996] ? __lock_acquire+0x7c80/0x7c80 [ 392.813988][T10996] should_fail_ex+0x39d/0x4d0 [ 392.818739][T10996] _copy_from_user+0x2f/0xe0 [ 392.823355][T10996] ___sys_sendmsg+0x159/0x290 [ 392.828087][T10996] ? __sys_sendmsg+0x270/0x270 [ 392.832938][T10996] ? __lock_acquire+0x7c80/0x7c80 [ 392.838040][T10996] __se_sys_sendmsg+0x1a5/0x270 [ 392.842931][T10996] ? __x64_sys_sendmsg+0x80/0x80 [ 392.847929][T10996] ? lockdep_hardirqs_on+0x98/0x150 [ 392.853166][T10996] do_syscall_64+0x55/0xb0 [ 392.857611][T10996] ? clear_bhb_loop+0x40/0x90 [ 392.862394][T10996] ? clear_bhb_loop+0x40/0x90 [ 392.867102][T10996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.878152][T10996] RIP: 0033:0x7ffa4798ebe9 [ 392.882586][T10996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.902318][T10996] RSP: 002b:00007ffa48746038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.910770][T10996] RAX: ffffffffffffffda RBX: 00007ffa47bc5fa0 RCX: 00007ffa4798ebe9 [ 392.918796][T10996] RDX: 0000000024040004 RSI: 0000200000000540 RDI: 0000000000000003 [ 392.926902][T10996] RBP: 00007ffa48746090 R08: 0000000000000000 R09: 0000000000000000 [ 392.935002][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.943003][T10996] R13: 00007ffa47bc6038 R14: 00007ffa47bc5fa0 R15: 00007ffcd9cc8238 [ 392.951027][T10996] [ 394.167845][ T5789] Bluetooth: hci2: ISO packet for unknown connection handle 1854 [ 394.201532][T11020] netlink: 'syz.2.1686': attribute type 1 has an invalid length. [ 394.293705][T11020] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1686'. [ 394.377864][T11025] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 394.443723][T11028] netlink: 'syz.1.1689': attribute type 17 has an invalid length. [ 394.465602][T11028] netlink: 'syz.1.1689': attribute type 16 has an invalid length. [ 394.480601][T11028] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1689'. [ 394.840909][T11041] netlink: 'syz.2.1693': attribute type 9 has an invalid length. [ 394.860106][T11041] netlink: 40451 bytes leftover after parsing attributes in process `syz.2.1693'. [ 395.462459][T11055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1698'. [ 395.492616][T11055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1698'. [ 395.580461][T11055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1698'. [ 395.917018][T11059] netlink: 'syz.3.1699': attribute type 1 has an invalid length. [ 395.941251][T11059] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1699'. [ 395.965201][T11060] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 396.772408][T11080] netlink: 'syz.2.1706': attribute type 17 has an invalid length. [ 396.794155][T11080] netlink: 'syz.2.1706': attribute type 16 has an invalid length. [ 396.831859][T11080] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1706'. [ 396.860535][T11083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1707'. [ 396.877949][T11083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1707'. [ 397.696525][T11094] netlink: 'syz.3.1710': attribute type 1 has an invalid length. [ 397.733286][T11094] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 397.906073][T11104] netlink: 'syz.1.1713': attribute type 2 has an invalid length. [ 397.986304][T11104] FAULT_INJECTION: forcing a failure. [ 397.986304][T11104] name failslab, interval 1, probability 0, space 0, times 0 [ 398.063057][T11104] CPU: 0 PID: 11104 Comm: syz.1.1713 Not tainted syzkaller #0 [ 398.070610][T11104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.080699][T11104] Call Trace: [ 398.083998][T11104] [ 398.086947][T11104] dump_stack_lvl+0x16c/0x230 [ 398.091650][T11104] ? show_regs_print_info+0x20/0x20 [ 398.096900][T11104] ? load_image+0x3b0/0x3b0 [ 398.101437][T11104] ? __might_sleep+0xe0/0xe0 [ 398.106064][T11104] ? __lock_acquire+0x7c80/0x7c80 [ 398.111114][T11104] should_fail_ex+0x39d/0x4d0 [ 398.115827][T11104] should_failslab+0x9/0x20 [ 398.120358][T11104] slab_pre_alloc_hook+0x59/0x310 [ 398.125424][T11104] ? lockdep_hardirqs_on+0x98/0x150 [ 398.130653][T11104] kmem_cache_alloc_node+0x60/0x330 [ 398.135893][T11104] ? __alloc_skb+0x108/0x2c0 [ 398.140532][T11104] __alloc_skb+0x108/0x2c0 [ 398.145034][T11104] netlink_ack+0x376/0x1110 [ 398.149692][T11104] ? __dev_queue_xmit+0x245/0x35a0 [ 398.154856][T11104] ? netlink_dump+0xde0/0xde0 [ 398.159574][T11104] ? netlink_deliver_tap+0x2e/0x1b0 [ 398.164803][T11104] ? perf_trace_lock+0xf7/0x380 [ 398.169686][T11104] ? __copy_skb_header+0xa7/0x550 [ 398.174742][T11104] netlink_rcv_skb+0x29a/0x480 [ 398.179531][T11104] ? rtnetlink_bind+0x80/0x80 [ 398.184237][T11104] ? netlink_ack+0x1110/0x1110 [ 398.189136][T11104] ? __lock_acquire+0x7c80/0x7c80 [ 398.194194][T11104] ? netlink_deliver_tap+0x2e/0x1b0 [ 398.199419][T11104] netlink_unicast+0x751/0x8d0 [ 398.204214][T11104] netlink_sendmsg+0x8c1/0xbe0 [ 398.209107][T11104] ? netlink_getsockopt+0x580/0x580 [ 398.214421][T11104] ? aa_sock_msg_perm+0x94/0x150 [ 398.219388][T11104] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 398.224695][T11104] ? security_socket_sendmsg+0x80/0xa0 [ 398.230256][T11104] ? netlink_getsockopt+0x580/0x580 [ 398.235476][T11104] ____sys_sendmsg+0x5bf/0x950 [ 398.240282][T11104] ? __asan_memset+0x22/0x40 [ 398.244901][T11104] ? __sys_sendmsg_sock+0x30/0x30 [ 398.250146][T11104] ? __import_iovec+0x5f2/0x860 [ 398.255030][T11104] ? import_iovec+0x73/0xa0 [ 398.259650][T11104] ___sys_sendmsg+0x220/0x290 [ 398.264377][T11104] ? __sys_sendmsg+0x270/0x270 [ 398.269297][T11104] ? __lock_acquire+0x7c80/0x7c80 [ 398.274367][T11104] __se_sys_sendmsg+0x1a5/0x270 [ 398.279254][T11104] ? __x64_sys_sendmsg+0x80/0x80 [ 398.284229][T11104] ? lockdep_hardirqs_on+0x98/0x150 [ 398.289467][T11104] do_syscall_64+0x55/0xb0 [ 398.293926][T11104] ? clear_bhb_loop+0x40/0x90 [ 398.298628][T11104] ? clear_bhb_loop+0x40/0x90 [ 398.303326][T11104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.309250][T11104] RIP: 0033:0x7f704bb8ebe9 [ 398.313688][T11104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.333323][T11104] RSP: 002b:00007f704ca0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.341772][T11104] RAX: ffffffffffffffda RBX: 00007f704bdc5fa0 RCX: 00007f704bb8ebe9 [ 398.349852][T11104] RDX: 0000000004040800 RSI: 0000200000000080 RDI: 0000000000000003 [ 398.357944][T11104] RBP: 00007f704ca0f090 R08: 0000000000000000 R09: 0000000000000000 [ 398.365935][T11104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.374012][T11104] R13: 00007f704bdc6038 R14: 00007f704bdc5fa0 R15: 00007ffdf5d90b78 [ 398.382031][T11104] [ 399.102322][T11121] netlink: 'syz.2.1719': attribute type 3 has an invalid length. [ 399.304356][T11128] validate_nla: 3 callbacks suppressed [ 399.304410][T11128] netlink: 'syz.2.1722': attribute type 1 has an invalid length. [ 399.331182][T11128] __nla_validate_parse: 4 callbacks suppressed [ 399.331217][T11128] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1722'. [ 399.403237][T11128] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 399.629951][T11138] netlink: 'syz.2.1725': attribute type 29 has an invalid length. [ 399.721664][T11138] netlink: 'syz.2.1725': attribute type 29 has an invalid length. [ 399.756306][T11136] bridge0: port 4(batadv0) entered disabled state [ 399.775219][T11136] bridge0: port 3(team0) entered disabled state [ 399.792010][T11136] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.815295][T11136] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.911192][T11136] bridge0: entered allmulticast mode [ 399.932279][T11142] netlink: 151184 bytes leftover after parsing attributes in process `syz.2.1725'. [ 400.385047][T11139] netlink: 'syz.2.1725': attribute type 29 has an invalid length. [ 400.437662][T11142] netlink: 'syz.2.1725': attribute type 29 has an invalid length. [ 400.446159][T11144] netlink: 'syz.2.1725': attribute type 29 has an invalid length. [ 400.686796][T11141] bridge0: port 4(batadv0) entered disabled state [ 400.803661][T11141] team0: left allmulticast mode [ 400.901278][T11141] team_slave_1: left allmulticast mode [ 400.950606][T11141] dummy0: left allmulticast mode [ 400.970602][T11141] team0: left promiscuous mode [ 400.992087][T11141] team_slave_1: left promiscuous mode [ 401.037232][T11141] dummy0: left promiscuous mode [ 401.049171][T11141] bridge0: port 3(team0) entered disabled state [ 401.101032][T11141] bridge_slave_1: left allmulticast mode [ 401.108804][T11141] bridge_slave_1: left promiscuous mode [ 401.119259][T11141] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.134267][T11141] bridge_slave_0: left allmulticast mode [ 401.142853][T11141] bridge_slave_0: left promiscuous mode [ 401.149238][T11141] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.204164][T11141] bond0: (slave bridge0): Releasing backup interface [ 401.283844][T11148] C: renamed from team_slave_0 [ 401.299365][T11148] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 401.336276][T11148] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1727'. [ 401.372045][T11148] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 401.459215][T11168] netlink: 'syz.0.1728': attribute type 21 has an invalid length. [ 401.506939][T11168] netlink: 'syz.0.1728': attribute type 4 has an invalid length. [ 401.515915][T11168] netlink: 7844 bytes leftover after parsing attributes in process `syz.0.1728'. [ 401.583916][T11174] FAULT_INJECTION: forcing a failure. [ 401.583916][T11174] name failslab, interval 1, probability 0, space 0, times 0 [ 401.618006][T11174] CPU: 0 PID: 11174 Comm: syz.3.1730 Not tainted syzkaller #0 [ 401.625637][T11174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.635742][T11174] Call Trace: [ 401.639084][T11174] [ 401.642061][T11174] dump_stack_lvl+0x16c/0x230 [ 401.646879][T11174] ? show_regs_print_info+0x20/0x20 [ 401.652121][T11174] ? load_image+0x3b0/0x3b0 [ 401.656668][T11174] ? __lock_acquire+0x7c80/0x7c80 [ 401.661788][T11174] should_fail_ex+0x39d/0x4d0 [ 401.666518][T11174] should_failslab+0x9/0x20 [ 401.671069][T11174] slab_pre_alloc_hook+0x59/0x310 [ 401.676152][T11174] ? sk_prot_alloc+0xe7/0x210 [ 401.680860][T11174] ? sk_prot_alloc+0xe7/0x210 [ 401.685660][T11174] __kmem_cache_alloc_node+0x53/0x260 [ 401.691065][T11174] ? sk_prot_alloc+0xe7/0x210 [ 401.695761][T11174] __kmalloc+0xa4/0x240 [ 401.699968][T11174] sk_prot_alloc+0xe7/0x210 [ 401.704503][T11174] ? sk_alloc+0x24/0x360 [ 401.708840][T11174] sk_alloc+0x3a/0x360 [ 401.712936][T11174] ? can_get_proto+0x234/0x280 [ 401.717734][T11174] can_create+0x1cc/0x4d0 [ 401.722093][T11174] __sock_create+0x4a6/0x940 [ 401.726730][T11174] __sys_socketpair+0x1c1/0x550 [ 401.731662][T11174] __x64_sys_socketpair+0x9b/0xb0 [ 401.736736][T11174] do_syscall_64+0x55/0xb0 [ 401.741196][T11174] ? clear_bhb_loop+0x40/0x90 [ 401.746076][T11174] ? clear_bhb_loop+0x40/0x90 [ 401.750787][T11174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.756711][T11174] RIP: 0033:0x7ff646b8ebe9 [ 401.761146][T11174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.780861][T11174] RSP: 002b:00007ff647a4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 401.789295][T11174] RAX: ffffffffffffffda RBX: 00007ff646dc5fa0 RCX: 00007ff646b8ebe9 [ 401.797287][T11174] RDX: 0000000000000007 RSI: 0000000000000002 RDI: 000000000000001d [ 401.805535][T11174] RBP: 00007ff647a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 401.813535][T11174] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 401.821522][T11174] R13: 00007ff646dc6038 R14: 00007ff646dc5fa0 R15: 00007fff8521fe38 [ 401.829572][T11174] [ 401.983821][T11184] netlink: 'syz.1.1732': attribute type 10 has an invalid length. [ 402.185223][T11186] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1733'. [ 402.276156][T11195] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1735'. [ 402.308636][T11186] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 403.046138][T11220] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1739'. [ 403.113948][T11220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.182811][T11220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.233742][T11220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.329554][T11220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.340015][T11220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.350663][T11220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.395496][T11224] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1749'. [ 403.581130][T11229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1741'. [ 403.615128][T11232] FAULT_INJECTION: forcing a failure. [ 403.615128][T11232] name failslab, interval 1, probability 0, space 0, times 0 [ 403.631730][T11232] CPU: 0 PID: 11232 Comm: syz.3.1742 Not tainted syzkaller #0 [ 403.639365][T11232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 403.649462][T11232] Call Trace: [ 403.652773][T11232] [ 403.655779][T11232] dump_stack_lvl+0x16c/0x230 [ 403.660546][T11232] ? show_regs_print_info+0x20/0x20 [ 403.665786][T11232] ? load_image+0x3b0/0x3b0 [ 403.670343][T11232] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 403.675940][T11232] should_fail_ex+0x39d/0x4d0 [ 403.680695][T11232] should_failslab+0x9/0x20 [ 403.685288][T11232] slab_pre_alloc_hook+0x59/0x310 [ 403.690376][T11232] kmem_cache_alloc+0x5a/0x2e0 [ 403.695185][T11232] ? skb_clone+0x1eb/0x370 [ 403.699657][T11232] skb_clone+0x1eb/0x370 [ 403.703950][T11232] __netlink_deliver_tap+0x41c/0x830 [ 403.709279][T11232] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.714526][T11232] netlink_deliver_tap+0x19c/0x1b0 [ 403.719684][T11232] netlink_dump+0x8df/0xde0 [ 403.724245][T11232] ? netlink_lookup+0x200/0x200 [ 403.729146][T11232] ? slab_free_freelist_hook+0x130/0x1b0 [ 403.734837][T11232] ? netlink_recvmsg+0x5cf/0xdf0 [ 403.739818][T11232] ? kmem_cache_free+0xf8/0x280 [ 403.744899][T11232] netlink_recvmsg+0x677/0xdf0 [ 403.749711][T11232] ? netlink_sendmsg+0xbe0/0xbe0 [ 403.754684][T11232] ? aa_sk_perm+0x7fc/0x930 [ 403.759236][T11232] ? aa_af_perm+0x2b0/0x2b0 [ 403.763777][T11232] ? verify_lock_unused+0x140/0x140 [ 403.769005][T11232] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 403.774319][T11232] ? security_socket_recvmsg+0x89/0xb0 [ 403.779808][T11232] ? netlink_sendmsg+0xbe0/0xbe0 [ 403.784791][T11232] ____sys_recvmsg+0x29e/0x5b0 [ 403.789602][T11232] ? __sys_recvmsg_sock+0x50/0x50 [ 403.794695][T11232] ? import_iovec+0x73/0xa0 [ 403.799253][T11232] ___sys_recvmsg+0x1b6/0x510 [ 403.803972][T11232] ? __sys_recvmsg+0x270/0x270 [ 403.808779][T11232] ? ksys_write+0x1c1/0x250 [ 403.813329][T11232] ? __fget_files+0x44a/0x4d0 [ 403.818097][T11232] __x64_sys_recvmsg+0x1f2/0x2c0 [ 403.823080][T11232] ? ___sys_recvmsg+0x510/0x510 [ 403.827983][T11232] ? lockdep_hardirqs_on+0x98/0x150 [ 403.833232][T11232] do_syscall_64+0x55/0xb0 [ 403.837694][T11232] ? clear_bhb_loop+0x40/0x90 [ 403.842405][T11232] ? clear_bhb_loop+0x40/0x90 [ 403.847120][T11232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.853056][T11232] RIP: 0033:0x7ff646b8ebe9 [ 403.857507][T11232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.877153][T11232] RSP: 002b:00007ff647a4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 403.885776][T11232] RAX: ffffffffffffffda RBX: 00007ff646dc5fa0 RCX: 00007ff646b8ebe9 [ 403.893775][T11232] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 403.901871][T11232] RBP: 00007ff647a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 403.909917][T11232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.917910][T11232] R13: 00007ff646dc6038 R14: 00007ff646dc5fa0 R15: 00007fff8521fe38 [ 403.925931][T11232] [ 404.030562][T11237] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1744'. [ 404.652987][T11244] validate_nla: 10 callbacks suppressed [ 404.653007][T11244] netlink: 'syz.3.1745': attribute type 1 has an invalid length. [ 404.675973][T11244] __nla_validate_parse: 1 callbacks suppressed [ 404.675990][T11244] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1745'. [ 404.796823][T11244] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 404.915536][T11254] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 404.969345][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1748'. [ 405.277235][T11248] sit0: entered allmulticast mode [ 405.539342][T11265] sit0: entered promiscuous mode [ 405.771261][T11267] netlink: 'syz.0.1755': attribute type 17 has an invalid length. [ 405.834237][T11267] netlink: 'syz.0.1755': attribute type 16 has an invalid length. [ 405.866093][T11267] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1755'. [ 406.091806][T11283] netlink: 'syz.3.1759': attribute type 9 has an invalid length. [ 406.101766][T11283] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.1759'. [ 406.836347][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 406.917640][T11295] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 407.186628][T11295] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1761'. [ 407.311105][T11287] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 407.844560][T11309] FAULT_INJECTION: forcing a failure. [ 407.844560][T11309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.896549][T11309] CPU: 1 PID: 11309 Comm: syz.0.1768 Not tainted syzkaller #0 [ 407.904112][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.914239][T11309] Call Trace: [ 407.917655][T11309] [ 407.920650][T11309] dump_stack_lvl+0x16c/0x230 [ 407.925509][T11309] ? show_regs_print_info+0x20/0x20 [ 407.930890][T11309] ? load_image+0x3b0/0x3b0 [ 407.935488][T11309] ? __lock_acquire+0x7c80/0x7c80 [ 407.940594][T11309] ? snprintf+0xdb/0x120 [ 407.944932][T11309] should_fail_ex+0x39d/0x4d0 [ 407.949713][T11309] _copy_to_user+0x2f/0xa0 [ 407.954284][T11309] simple_read_from_buffer+0xe7/0x150 [ 407.959757][T11309] proc_fail_nth_read+0x1e3/0x250 [ 407.964867][T11309] ? proc_fault_inject_write+0x340/0x340 [ 407.970597][T11309] ? fsnotify_perm+0x271/0x5e0 [ 407.975470][T11309] ? proc_fault_inject_write+0x340/0x340 [ 407.981178][T11309] vfs_read+0x27e/0x920 [ 407.985440][T11309] ? kernel_read+0x1e0/0x1e0 [ 407.990166][T11309] ? __fget_files+0x28/0x4d0 [ 407.994838][T11309] ? __fget_files+0x44a/0x4d0 [ 407.999614][T11309] ? __fdget_pos+0x2a3/0x330 [ 408.004276][T11309] ? ksys_read+0x75/0x250 [ 408.008692][T11309] ksys_read+0x147/0x250 [ 408.013028][T11309] ? vfs_write+0x940/0x940 [ 408.017555][T11309] ? lockdep_hardirqs_on+0x98/0x150 [ 408.022851][T11309] do_syscall_64+0x55/0xb0 [ 408.027353][T11309] ? clear_bhb_loop+0x40/0x90 [ 408.032276][T11309] ? clear_bhb_loop+0x40/0x90 [ 408.037039][T11309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.043026][T11309] RIP: 0033:0x7ffa4798d5fc [ 408.047511][T11309] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 408.067279][T11309] RSP: 002b:00007ffa48746030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.076144][T11309] RAX: ffffffffffffffda RBX: 00007ffa47bc5fa0 RCX: 00007ffa4798d5fc [ 408.084184][T11309] RDX: 000000000000000f RSI: 00007ffa487460a0 RDI: 0000000000000005 [ 408.092221][T11309] RBP: 00007ffa48746090 R08: 0000000000000000 R09: 0000000000000000 [ 408.100345][T11309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.108381][T11309] R13: 00007ffa47bc6038 R14: 00007ffa47bc5fa0 R15: 00007ffcd9cc8238 [ 408.116449][T11309] [ 408.313707][T11318] netlink: 'syz.3.1771': attribute type 17 has an invalid length. [ 408.321897][T11318] netlink: 'syz.3.1771': attribute type 16 has an invalid length. [ 408.334749][T11318] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1771'. [ 408.430053][T11316] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 408.433453][T11320] netlink: 'syz.2.1772': attribute type 29 has an invalid length. [ 408.440548][T11316] syzkaller1: linktype set to 823 [ 408.454663][T11320] netlink: 'syz.2.1772': attribute type 29 has an invalid length. [ 408.751945][T11327] netlink: 'syz.1.1774': attribute type 1 has an invalid length. [ 408.767536][T11327] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1774'. [ 408.827320][T11327] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 409.045090][T11334] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1777'. [ 409.064151][T11334] ipvlan1: entered promiscuous mode [ 409.074416][T11334] ipvlan1: entered allmulticast mode [ 409.081901][T11334] veth0_vlan: entered allmulticast mode [ 409.215595][T11334] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 410.983432][T11367] validate_nla: 2 callbacks suppressed [ 410.983505][T11367] netlink: 'syz.3.1787': attribute type 1 has an invalid length. [ 411.003827][T11367] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1787'. [ 411.031181][T11369] netlink: 'syz.2.1788': attribute type 17 has an invalid length. [ 411.062181][T11369] netlink: 'syz.2.1788': attribute type 16 has an invalid length. [ 411.080414][T11369] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1788'. [ 411.102157][T11367] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 411.216976][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 411.237320][T11377] netlink: 'syz.3.1791': attribute type 1 has an invalid length. [ 411.246014][T11377] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1791'. [ 411.271377][T11377] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 412.945181][T11398] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 412.961147][T11398] syzkaller1: linktype set to 823 [ 413.174809][T11401] netlink: 'syz.2.1800': attribute type 1 has an invalid length. [ 413.190721][T11401] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1800'. [ 413.325452][T11401] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 414.015124][T11417] netlink: 'syz.2.1805': attribute type 17 has an invalid length. [ 414.026070][T11417] netlink: 'syz.2.1805': attribute type 16 has an invalid length. [ 414.035371][T11417] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1805'. [ 415.653805][T11443] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 415.662758][T11443] syzkaller1: linktype set to 823 [ 415.988922][T11450] netlink: 'syz.1.1812': attribute type 1 has an invalid length. [ 416.016003][T11450] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1812'. [ 416.099574][T11453] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 416.399856][T11455] netlink: 'syz.1.1813': attribute type 29 has an invalid length. [ 416.426113][T11455] netlink: 'syz.1.1813': attribute type 29 has an invalid length. [ 416.907436][T11462] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 416.943108][T11462] syzkaller1: linktype set to 823 [ 417.005846][T11467] netlink: 'syz.0.1818': attribute type 17 has an invalid length. [ 417.021636][T11467] netlink: 'syz.0.1818': attribute type 16 has an invalid length. [ 417.035583][T11467] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1818'. [ 417.210049][T11465] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 417.241500][T11465] syzkaller1: linktype set to 823 [ 417.745488][T11481] netlink: 'syz.3.1823': attribute type 10 has an invalid length. [ 417.759056][T11481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1823'. [ 417.784380][T11481] ipvlan1: entered promiscuous mode [ 417.790230][T11481] ipvlan1: entered allmulticast mode [ 417.795811][T11481] veth0_vlan: entered allmulticast mode [ 417.926349][T11481] bridge0: port 3(ipvlan1) entered blocking state [ 417.938231][T11481] bridge0: port 3(ipvlan1) entered disabled state [ 417.995073][T11481] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 418.077881][T11483] netlink: 'syz.0.1824': attribute type 1 has an invalid length. [ 418.085980][T11483] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1824'. [ 418.111788][T11483] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 418.151568][T11481] syz.3.1823 (11481) used greatest stack depth: 18792 bytes left [ 418.255060][T11487] netlink: 'syz.1.1833': attribute type 17 has an invalid length. [ 418.277058][T11487] netlink: 'syz.1.1833': attribute type 16 has an invalid length. [ 418.284994][T11487] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1833'. [ 418.463072][T11489] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 418.477980][T11489] syzkaller1: linktype set to 823 [ 418.845475][T11501] netlink: 'syz.0.1837': attribute type 1 has an invalid length. [ 418.854427][T11501] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1837'. [ 418.900532][T11501] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 419.569418][T11511] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 419.591406][T11511] syzkaller1: linktype set to 823 [ 419.966270][T11523] batadv0: entered promiscuous mode [ 420.315461][T11533] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 420.386595][T11533] syzkaller1: linktype set to 823 [ 420.532957][T11534] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1840'. [ 420.575336][T11537] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1841'. [ 420.665169][T11536] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 420.699228][T11534] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 420.822438][T11540] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1842'. [ 421.352041][T11556] validate_nla: 4 callbacks suppressed [ 421.352085][T11556] netlink: 'syz.0.1856': attribute type 1 has an invalid length. [ 421.370932][T11556] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1856'. [ 421.445316][T11557] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 421.859507][T11566] netlink: 'syz.0.1859': attribute type 17 has an invalid length. [ 421.868263][T11566] netlink: 'syz.0.1859': attribute type 16 has an invalid length. [ 421.877217][T11566] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1859'. [ 421.974218][T11562] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 421.998426][T11562] syzkaller1: linktype set to 823 [ 422.471776][ T5155] udevd[5155]: worker [5793] terminated by signal 33 (Unknown signal 33) [ 422.499088][ T5155] udevd[5155]: worker [5793] failed while handling '/devices/virtual/block/loop1' [ 423.185004][T11594] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 423.196097][T11594] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1860'. [ 423.336199][T11594] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 423.636640][T11602] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 423.664019][T11602] syzkaller1: linktype set to 823 [ 424.201442][T11618] netlink: 'syz.0.1866': attribute type 17 has an invalid length. [ 424.209686][T11618] netlink: 'syz.0.1866': attribute type 16 has an invalid length. [ 424.218189][T11618] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1866'. [ 424.411049][T11614] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 424.431581][T11614] syzkaller1: linktype set to 823 [ 425.023037][T11637] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 425.715902][T11638] netlink: 'syz.2.1872': attribute type 1 has an invalid length. [ 425.729866][T11638] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1872'. [ 425.829095][T11636] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 425.941054][T11641] netlink: 'syz.0.1881': attribute type 17 has an invalid length. [ 425.962267][T11641] netlink: 'syz.0.1881': attribute type 16 has an invalid length. [ 425.976879][T11641] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1881'. [ 426.111308][T11642] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 426.123354][T11642] syzkaller1: linktype set to 823 [ 426.697451][T11652] netlink: 'syz.2.1884': attribute type 1 has an invalid length. [ 426.706659][T11652] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1884'. [ 426.766966][T11652] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 427.191544][T11661] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 427.213850][T11661] syzkaller1: linktype set to 823 [ 428.421349][T11681] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 428.438003][T11681] syzkaller1: linktype set to 823 [ 428.944992][T11688] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 428.959031][T11688] syzkaller1: linktype set to 823 [ 429.110243][T11692] netlink: 'syz.1.1888': attribute type 17 has an invalid length. [ 429.118499][T11692] netlink: 'syz.1.1888': attribute type 16 has an invalid length. [ 429.137612][T11692] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1888'. [ 429.221358][T11694] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 429.244509][T11694] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1889'. [ 429.293301][T11694] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 431.269750][T11721] netlink: 'syz.0.1899': attribute type 10 has an invalid length. [ 431.327216][T11721] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 431.355530][T11721] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 431.451580][T11727] netlink: 'syz.0.1899': attribute type 3 has an invalid length. [ 431.503570][T11727] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.1899'. [ 431.523413][T11721] bond0: (slave wlan1): Releasing backup interface [ 432.261915][T11721] team0: Port device wlan1 added [ 432.365927][T11731] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 432.376626][T11731] syzkaller1: linktype set to 823 [ 432.679405][T11719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.705021][T11735] netlink: 'syz.1.1903': attribute type 17 has an invalid length. [ 432.726839][T11735] netlink: 'syz.1.1903': attribute type 16 has an invalid length. [ 432.734826][T11735] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1903'. [ 432.768990][T11721] syz.0.1899 (11721) used greatest stack depth: 18728 bytes left [ 433.089210][T11744] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1906'. [ 433.129521][T11744] netlink: 'syz.0.1906': attribute type 10 has an invalid length. [ 433.849439][T11754] netlink: 'syz.0.1909': attribute type 21 has an invalid length. [ 433.857852][T11754] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1909'. [ 433.883388][T11754] IPv6: Can't replace route, no match found [ 433.909978][T11754] netlink: 'syz.0.1909': attribute type 10 has an invalid length. [ 433.949912][T11754] team0: Port device wlan1 removed [ 433.993371][T11754] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 434.809651][T11761] netlink: 'syz.2.1912': attribute type 1 has an invalid length. [ 434.849670][T11761] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1912'. [ 434.949044][T11761] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 435.305548][T11772] netlink: 'syz.2.1915': attribute type 10 has an invalid length. [ 435.389847][T11775] netlink: 'syz.2.1915': attribute type 3 has an invalid length. [ 435.459815][T11775] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1915'. [ 435.892687][T11772] bond0: (slave .3ãc¤±): Releasing backup interface [ 436.499291][T11772] team0: Port device .3ãc¤± added [ 436.531424][T11778] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 436.557313][T11778] syzkaller1: linktype set to 823 [ 436.815013][T11788] netlink: 'syz.3.1916': attribute type 10 has an invalid length. [ 436.840012][T11771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.855108][T11788] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.862812][T11788] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.920634][T11788] bridge0: left promiscuous mode [ 436.927341][T11788] bridge0: left allmulticast mode [ 436.988426][T11785] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1916'. [ 439.000950][T11807] netlink: 'syz.2.1919': attribute type 1 has an invalid length. [ 439.074096][T11807] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1919'. [ 439.149626][T11811] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 439.389558][T11817] netlink: 'syz.3.1925': attribute type 3 has an invalid length. [ 439.401758][T11817] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1925'. [ 439.412243][T11817] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 440.010824][T11824] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1929'. [ 440.039889][T11824] netlink: 'syz.2.1929': attribute type 10 has an invalid length. [ 440.048651][T11824] bridge0: left allmulticast mode [ 440.072675][T11824] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.081270][T11824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.090759][T11824] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.099398][T11824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.189692][T11832] netlink: 'syz.1.1927': attribute type 3 has an invalid length. [ 440.219022][T11832] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1927'. [ 440.291599][T11824] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 440.323373][T11827] netlink: 'syz.1.1927': attribute type 10 has an invalid length. [ 440.669550][T11827] bond0: (slave wlan1): Releasing backup interface [ 440.927521][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.934081][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.127375][T11827] team0: Port device wlan1 added [ 441.178118][T11828] C: renamed from team_slave_0 [ 441.199964][T11828] netlink: 'syz.0.1936': attribute type 3 has an invalid length. [ 441.210738][T11828] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1936'. [ 441.220088][T11828] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 441.279608][T11823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.372060][T11827] syz.1.1927 (11827) used greatest stack depth: 17224 bytes left [ 443.586238][T11878] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 443.603530][T11878] syzkaller1: linktype set to 823 [ 444.069385][T11887] netlink: 'syz.2.1948': attribute type 10 has an invalid length. [ 444.107799][T11886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.049622][T11903] netlink: 'syz.2.1952': attribute type 1 has an invalid length. [ 445.096468][T11903] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1952'. [ 445.133618][T11907] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 445.714173][T11915] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 445.742173][T11915] syzkaller1: linktype set to 823 [ 446.020348][T11927] netlink: 'syz.0.1958': attribute type 29 has an invalid length. [ 446.045399][T11927] netlink: 'syz.0.1958': attribute type 29 has an invalid length. [ 446.089277][T11931] netlink: 'syz.0.1958': attribute type 29 has an invalid length. [ 446.104810][T11927] netlink: 'syz.0.1958': attribute type 29 has an invalid length. [ 446.141634][T11927] netlink: 'syz.0.1958': attribute type 29 has an invalid length. [ 447.326003][T11949] netlink: 'syz.0.1964': attribute type 1 has an invalid length. [ 447.334967][T11949] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1964'. [ 447.380194][T11949] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 447.658869][T11960] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 447.667409][T11960] syzkaller1: linktype set to 823 [ 448.014327][T11977] netlink: 'syz.3.1975': attribute type 10 has an invalid length. [ 448.025414][T11977] team0: Port device wlan1 added [ 448.943224][T11991] netlink: 'syz.1.1981': attribute type 29 has an invalid length. [ 449.347442][T11999] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 449.363016][T11999] syzkaller1: linktype set to 823 [ 452.666863][T12056] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 452.673438][T12056] syzkaller1: linktype set to 823 [ 455.426349][T12090] validate_nla: 4 callbacks suppressed [ 455.426369][T12090] netlink: 'syz.3.2006': attribute type 1 has an invalid length. [ 455.487475][T12090] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2006'. [ 455.571046][T12090] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 458.475780][T12125] netlink: 'syz.1.2016': attribute type 10 has an invalid length. [ 458.534372][T12126] netlink: 'syz.1.2016': attribute type 3 has an invalid length. [ 458.549024][T12126] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.2016'. [ 459.268658][T12124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.589338][T12154] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 460.708921][T12156] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 460.749705][T12156] syzkaller1: linktype set to 823 [ 461.507698][T12169] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 461.598749][T12173] netlink: 'syz.3.2033': attribute type 3 has an invalid length. [ 461.657653][T12173] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.2033'. [ 461.790727][T12172] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 461.854913][T12165] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 462.086851][T12166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.643759][T12182] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 462.668405][T12182] syzkaller1: linktype set to 823 [ 462.775793][T12187] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 462.824255][T12187] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2041'. [ 463.208302][T12184] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 463.552008][T12201] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 463.596509][T12201] syzkaller1: linktype set to 823 [ 463.930787][T12208] netlink: 'syz.2.2050': attribute type 10 has an invalid length. [ 463.942732][T12207] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 463.957395][T12207] syzkaller1: linktype set to 823 [ 463.962925][T12208] netlink: 'syz.2.2050': attribute type 3 has an invalid length. [ 463.993159][T12208] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.2050'. [ 464.610542][T12206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.711246][T12215] netlink: 'syz.3.2053': attribute type 10 has an invalid length. [ 464.752160][T12215] netlink: 'syz.3.2053': attribute type 3 has an invalid length. [ 464.816641][T12215] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.2053'. [ 466.126693][T12214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.147230][T12231] netlink: 'syz.2.2057': attribute type 1 has an invalid length. [ 466.167132][T12231] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2057'. [ 466.194952][T12232] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 466.232889][T12234] netlink: 'syz.0.2058': attribute type 17 has an invalid length. [ 466.242112][T12234] netlink: 'syz.0.2058': attribute type 16 has an invalid length. [ 466.250350][T12234] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2058'. [ 467.567937][T12262] netlink: 'syz.0.2069': attribute type 10 has an invalid length. [ 467.628726][T12263] netlink: 'syz.0.2069': attribute type 3 has an invalid length. [ 467.673213][T12262] bond0: (slave wlan1): Releasing backup interface [ 467.682873][T12263] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2069'. [ 467.750461][T12262] team0: Port device wlan1 added [ 468.648867][T12261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.079474][T12276] netlink: 'syz.3.2075': attribute type 17 has an invalid length. [ 469.087517][T12276] netlink: 'syz.3.2075': attribute type 16 has an invalid length. [ 469.095549][T12276] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2075'. [ 469.161096][T12278] netlink: 'syz.0.2074': attribute type 10 has an invalid length. [ 469.201893][T12280] netlink: 'syz.0.2074': attribute type 3 has an invalid length. [ 469.211843][T12280] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2074'. [ 469.484032][T12277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.348650][T12307] netlink: 'syz.2.2086': attribute type 10 has an invalid length. [ 470.375823][T12307] netlink: 'syz.2.2086': attribute type 3 has an invalid length. [ 470.397715][T12307] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.2086'. [ 470.596701][ T7959] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 471.270617][T12306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.660377][T12322] netlink: 'syz.2.2091': attribute type 17 has an invalid length. [ 471.681667][T12322] netlink: 'syz.2.2091': attribute type 16 has an invalid length. [ 471.691204][T12322] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2091'. [ 472.053539][T12331] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.2092'. [ 473.167721][T12330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.747833][T12351] validate_nla: 2 callbacks suppressed [ 474.748194][T12351] netlink: 'syz.3.2099': attribute type 1 has an invalid length. [ 474.796329][T12351] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2099'. [ 474.826504][T12356] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 474.888252][T12361] netlink: 'syz.1.2102': attribute type 3 has an invalid length. [ 474.896114][T12361] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.2102'. [ 475.080578][T12358] netlink: 'syz.1.2102': attribute type 10 has an invalid length. [ 475.606765][T12357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.686476][T12369] netlink: 'syz.3.2105': attribute type 1 has an invalid length. [ 475.694472][T12369] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2105'. [ 475.762856][T12372] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 476.079185][T12377] netlink: 'syz.2.2108': attribute type 10 has an invalid length. [ 476.129569][T12377] netlink: 'syz.2.2108': attribute type 3 has an invalid length. [ 476.173205][T12377] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.2108'. [ 476.577817][T12374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.579874][T12382] netlink: 'syz.3.2110': attribute type 1 has an invalid length. [ 476.714824][T12382] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2110'. [ 476.756536][T12383] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 476.948116][T12387] netlink: 'syz.1.2112': attribute type 10 has an invalid length. [ 476.984696][T12387] netlink: 'syz.1.2112': attribute type 3 has an invalid length. [ 477.016513][T12387] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.2112'. [ 477.467122][T12386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.875661][T12397] netlink: 'syz.0.2115': attribute type 1 has an invalid length. [ 477.891898][T12397] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2115'. [ 477.989328][T12397] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 478.754547][T12412] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.2122'. [ 479.144590][T12411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.477818][T12419] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.2123'. [ 480.677691][T12417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.575608][T12435] validate_nla: 4 callbacks suppressed [ 481.575630][T12435] netlink: 'syz.0.2127': attribute type 17 has an invalid length. [ 481.635053][T12435] netlink: 'syz.0.2127': attribute type 16 has an invalid length. [ 481.687302][T12435] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2127'. [ 482.632755][T12444] netlink: 'syz.2.2129': attribute type 1 has an invalid length. [ 482.654659][T12444] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2129'. [ 482.696040][T12448] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 483.506441][T12463] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2137'. [ 483.515571][T12463] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2137'. [ 484.222905][T12474] netlink: 'syz.1.2143': attribute type 17 has an invalid length. [ 484.256437][T12474] netlink: 'syz.1.2143': attribute type 16 has an invalid length. [ 484.264368][T12474] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2143'. [ 484.755991][T12479] netlink: 'syz.0.2145': attribute type 1 has an invalid length. [ 484.779675][T12479] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2145'. [ 484.791915][T12482] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 486.347830][T12507] FAULT_INJECTION: forcing a failure. [ 486.347830][T12507] name failslab, interval 1, probability 0, space 0, times 0 [ 486.416352][T12507] CPU: 1 PID: 12507 Comm: syz.1.2157 Not tainted syzkaller #0 [ 486.423905][T12507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 486.434080][T12507] Call Trace: [ 486.437425][T12507] [ 486.440370][T12507] dump_stack_lvl+0x16c/0x230 [ 486.445089][T12507] ? show_regs_print_info+0x20/0x20 [ 486.450307][T12507] ? load_image+0x3b0/0x3b0 [ 486.454833][T12507] ? verify_lock_unused+0x140/0x140 [ 486.460139][T12507] should_fail_ex+0x39d/0x4d0 [ 486.464862][T12507] should_failslab+0x9/0x20 [ 486.469391][T12507] slab_pre_alloc_hook+0x59/0x310 [ 486.474447][T12507] kmem_cache_alloc+0x5a/0x2e0 [ 486.479245][T12507] ? skb_clone+0x1eb/0x370 [ 486.483691][T12507] skb_clone+0x1eb/0x370 [ 486.487974][T12507] __netlink_deliver_tap+0x41c/0x830 [ 486.493309][T12507] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.498554][T12507] netlink_deliver_tap+0x19c/0x1b0 [ 486.503701][T12507] netlink_unicast+0x72c/0x8d0 [ 486.508529][T12507] netlink_sendmsg+0x8c1/0xbe0 [ 486.513338][T12507] ? netlink_getsockopt+0x580/0x580 [ 486.518614][T12507] ? aa_sock_msg_perm+0x94/0x150 [ 486.523575][T12507] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 486.528891][T12507] ? security_socket_sendmsg+0x80/0xa0 [ 486.534365][T12507] ? netlink_getsockopt+0x580/0x580 [ 486.539612][T12507] ____sys_sendmsg+0x5bf/0x950 [ 486.544519][T12507] ? __asan_memset+0x22/0x40 [ 486.549160][T12507] ? __sys_sendmsg_sock+0x30/0x30 [ 486.554268][T12507] ? __import_iovec+0x5f2/0x860 [ 486.559182][T12507] ? import_iovec+0x73/0xa0 [ 486.563726][T12507] ___sys_sendmsg+0x220/0x290 [ 486.568436][T12507] ? __sys_sendmsg+0x270/0x270 [ 486.573244][T12507] ? __lock_acquire+0x7c80/0x7c80 [ 486.578318][T12507] __se_sys_sendmsg+0x1a5/0x270 [ 486.583194][T12507] ? __x64_sys_sendmsg+0x80/0x80 [ 486.588688][T12507] ? lockdep_hardirqs_on+0x98/0x150 [ 486.593913][T12507] do_syscall_64+0x55/0xb0 [ 486.598347][T12507] ? clear_bhb_loop+0x40/0x90 [ 486.603485][T12507] ? clear_bhb_loop+0x40/0x90 [ 486.608189][T12507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.614111][T12507] RIP: 0033:0x7f704bb8ebe9 [ 486.618552][T12507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.638180][T12507] RSP: 002b:00007f704ca0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.646613][T12507] RAX: ffffffffffffffda RBX: 00007f704bdc5fa0 RCX: 00007f704bb8ebe9 [ 486.654599][T12507] RDX: 0000000020008080 RSI: 0000200000000080 RDI: 0000000000000003 [ 486.662591][T12507] RBP: 00007f704ca0f090 R08: 0000000000000000 R09: 0000000000000000 [ 486.670575][T12507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.678567][T12507] R13: 00007f704bdc6038 R14: 00007f704bdc5fa0 R15: 00007ffdf5d90b78 [ 486.686589][T12507] [ 486.946334][T12507] netlink: 'syz.1.2157': attribute type 2 has an invalid length. [ 486.968810][T12507] netlink: 'syz.1.2157': attribute type 9 has an invalid length. [ 487.007183][T12507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2157'. [ 487.486491][T12523] netlink: 'syz.0.2164': attribute type 1 has an invalid length. [ 487.524344][T12523] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2164'. [ 489.865129][T12568] netlink: 'syz.0.2181': attribute type 4 has an invalid length. [ 489.882208][T12568] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2181'. [ 489.944349][T12568] : renamed from bond0 (while UP) [ 490.325685][T12575] netlink: 'syz.0.2184': attribute type 17 has an invalid length. [ 490.346444][T12575] netlink: 'syz.0.2184': attribute type 16 has an invalid length. [ 490.354339][T12575] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2184'. [ 491.493690][T12592] netlink: 'syz.0.2197': attribute type 17 has an invalid length. [ 491.525798][T12592] netlink: 'syz.0.2197': attribute type 16 has an invalid length. [ 491.585329][T12592] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2197'. [ 492.111268][T12603] netlink: 'syz.2.2192': attribute type 1 has an invalid length. [ 492.145970][T12603] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2192'. [ 492.190993][T12604] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 493.281567][T12623] FAULT_INJECTION: forcing a failure. [ 493.281567][T12623] name failslab, interval 1, probability 0, space 0, times 0 [ 493.316475][T12623] CPU: 1 PID: 12623 Comm: syz.2.2200 Not tainted syzkaller #0 [ 493.324004][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 493.334191][T12623] Call Trace: [ 493.337491][T12623] [ 493.340463][T12623] dump_stack_lvl+0x16c/0x230 [ 493.345169][T12623] ? show_regs_print_info+0x20/0x20 [ 493.350388][T12623] ? load_image+0x3b0/0x3b0 [ 493.354940][T12623] ? verify_lock_unused+0x140/0x140 [ 493.360342][T12623] ? perf_trace_lock+0xf7/0x380 [ 493.365218][T12623] ? netlink_lookup+0x30/0x200 [ 493.370013][T12623] should_fail_ex+0x39d/0x4d0 [ 493.374719][T12623] should_failslab+0x9/0x20 [ 493.379247][T12623] slab_pre_alloc_hook+0x59/0x310 [ 493.384305][T12623] kmem_cache_alloc+0x5a/0x2e0 [ 493.389095][T12623] ? skb_clone+0x1eb/0x370 [ 493.393567][T12623] skb_clone+0x1eb/0x370 [ 493.397840][T12623] __netlink_deliver_tap+0x41c/0x830 [ 493.403175][T12623] ? netlink_deliver_tap+0x2e/0x1b0 [ 493.408409][T12623] netlink_deliver_tap+0x19c/0x1b0 [ 493.413553][T12623] netlink_unicast+0x72c/0x8d0 [ 493.418388][T12623] netlink_sendmsg+0x8c1/0xbe0 [ 493.423282][T12623] ? netlink_getsockopt+0x580/0x580 [ 493.428515][T12623] ? aa_sock_msg_perm+0x94/0x150 [ 493.433478][T12623] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 493.438824][T12623] ? security_socket_sendmsg+0x80/0xa0 [ 493.444303][T12623] ? netlink_getsockopt+0x580/0x580 [ 493.449525][T12623] ____sys_sendmsg+0x5bf/0x950 [ 493.454324][T12623] ? __asan_memset+0x22/0x40 [ 493.458940][T12623] ? __sys_sendmsg_sock+0x30/0x30 [ 493.463988][T12623] ? __import_iovec+0x5f2/0x860 [ 493.469076][T12623] ? import_iovec+0x73/0xa0 [ 493.473603][T12623] ___sys_sendmsg+0x220/0x290 [ 493.478303][T12623] ? __sys_sendmsg+0x270/0x270 [ 493.483113][T12623] ? __lock_acquire+0x7c80/0x7c80 [ 493.488181][T12623] __se_sys_sendmsg+0x1a5/0x270 [ 493.493056][T12623] ? perf_trace_preemptirq_template+0x281/0x340 [ 493.499323][T12623] ? __x64_sys_sendmsg+0x80/0x80 [ 493.504303][T12623] ? lockdep_hardirqs_on+0x98/0x150 [ 493.509533][T12623] do_syscall_64+0x55/0xb0 [ 493.513973][T12623] ? clear_bhb_loop+0x40/0x90 [ 493.518668][T12623] ? clear_bhb_loop+0x40/0x90 [ 493.523361][T12623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.529280][T12623] RIP: 0033:0x7f9253b8ebe9 [ 493.533743][T12623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.553481][T12623] RSP: 002b:00007f9254961038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.561927][T12623] RAX: ffffffffffffffda RBX: 00007f9253dc5fa0 RCX: 00007f9253b8ebe9 [ 493.570007][T12623] RDX: 0000000004008010 RSI: 0000200000000000 RDI: 0000000000000004 [ 493.577996][T12623] RBP: 00007f9254961090 R08: 0000000000000000 R09: 0000000000000000 [ 493.585984][T12623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.593992][T12623] R13: 00007f9253dc6038 R14: 00007f9253dc5fa0 R15: 00007ffd92ebecc8 [ 493.602028][T12623] [ 495.586764][T12639] netlink: 'syz.2.2204': attribute type 17 has an invalid length. [ 495.594701][T12639] netlink: 'syz.2.2204': attribute type 16 has an invalid length. [ 495.684216][T12639] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2204'. [ 496.144453][T12641] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 496.153294][T12641] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2205'. [ 496.179060][T12641] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 498.439404][T12672] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 498.459702][T12672] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2216'. [ 498.491914][T12676] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 498.649969][T12678] netlink: 'syz.0.2217': attribute type 17 has an invalid length. [ 498.724996][T12678] netlink: 'syz.0.2217': attribute type 16 has an invalid length. [ 498.793041][T12678] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2217'. [ 498.848292][T12686] FAULT_INJECTION: forcing a failure. [ 498.848292][T12686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.874467][T12686] CPU: 1 PID: 12686 Comm: syz.2.2219 Not tainted syzkaller #0 [ 498.882032][T12686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.892138][T12686] Call Trace: [ 498.895464][T12686] [ 498.898428][T12686] dump_stack_lvl+0x16c/0x230 [ 498.903220][T12686] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 498.909481][T12686] ? show_regs_print_info+0x20/0x20 [ 498.914878][T12686] ? load_image+0x3b0/0x3b0 [ 498.919500][T12686] should_fail_ex+0x39d/0x4d0 [ 498.924298][T12686] _copy_from_user+0x2f/0xe0 [ 498.928905][T12686] __sys_bpf+0x1e9/0x800 [ 498.933257][T12686] ? bpf_link_show_fdinfo+0x350/0x350 [ 498.938665][T12686] __x64_sys_bpf+0x7c/0x90 [ 498.943098][T12686] do_syscall_64+0x55/0xb0 [ 498.947534][T12686] ? clear_bhb_loop+0x40/0x90 [ 498.952227][T12686] ? clear_bhb_loop+0x40/0x90 [ 498.956921][T12686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.962845][T12686] RIP: 0033:0x7f9253b8ebe9 [ 498.967394][T12686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.987128][T12686] RSP: 002b:00007f9254961038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 498.995559][T12686] RAX: ffffffffffffffda RBX: 00007f9253dc5fa0 RCX: 00007f9253b8ebe9 [ 499.003548][T12686] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 499.011547][T12686] RBP: 00007f9254961090 R08: 0000000000000000 R09: 0000000000000000 [ 499.019537][T12686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.027529][T12686] R13: 00007f9253dc6038 R14: 00007f9253dc5fa0 R15: 00007ffd92ebecc8 [ 499.035533][T12686] [ 500.421945][T12702] netlink: 'syz.0.2226': attribute type 9 has an invalid length. [ 500.450268][T12702] netlink: 371 bytes leftover after parsing attributes in process `syz.0.2226'. [ 500.873944][T12707] netlink: 'syz.3.2228': attribute type 1 has an invalid length. [ 500.890265][T12707] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2228'. [ 501.142502][T12707] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 501.240131][T12719] netlink: 'syz.0.2231': attribute type 17 has an invalid length. [ 501.254169][T12719] netlink: 'syz.0.2231': attribute type 16 has an invalid length. [ 501.262963][T12719] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2231'. [ 502.566609][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.575335][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.903291][T12740] netlink: 'syz.3.2238': attribute type 9 has an invalid length. [ 502.913041][T12740] netlink: 371 bytes leftover after parsing attributes in process `syz.3.2238'. [ 504.006751][T12755] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 504.095298][T12752] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 504.147115][T12752] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2241'. [ 504.415284][T12762] FAULT_INJECTION: forcing a failure. [ 504.415284][T12762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.436711][T12762] CPU: 0 PID: 12762 Comm: syz.3.2245 Not tainted syzkaller #0 [ 504.444364][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.454563][T12762] Call Trace: [ 504.457892][T12762] [ 504.460871][T12762] dump_stack_lvl+0x16c/0x230 [ 504.465622][T12762] ? show_regs_print_info+0x20/0x20 [ 504.470883][T12762] ? load_image+0x3b0/0x3b0 [ 504.475488][T12762] ? __lock_acquire+0x7c80/0x7c80 [ 504.480597][T12762] ? snprintf+0xdb/0x120 [ 504.484926][T12762] should_fail_ex+0x39d/0x4d0 [ 504.489783][T12762] _copy_to_user+0x2f/0xa0 [ 504.494263][T12762] simple_read_from_buffer+0xe7/0x150 [ 504.499707][T12762] proc_fail_nth_read+0x1e3/0x250 [ 504.504783][T12762] ? proc_fault_inject_write+0x340/0x340 [ 504.510458][T12762] ? fsnotify_perm+0x271/0x5e0 [ 504.515283][T12762] ? proc_fault_inject_write+0x340/0x340 [ 504.520945][T12762] vfs_read+0x27e/0x920 [ 504.525145][T12762] ? kernel_read+0x1e0/0x1e0 [ 504.529769][T12762] ? __fget_files+0x28/0x4d0 [ 504.534392][T12762] ? __fget_files+0x44a/0x4d0 [ 504.539113][T12762] ? __fdget_pos+0x2a3/0x330 [ 504.543738][T12762] ? ksys_read+0x75/0x250 [ 504.548129][T12762] ksys_read+0x147/0x250 [ 504.552411][T12762] ? vfs_write+0x940/0x940 [ 504.556951][T12762] ? lockdep_hardirqs_on+0x98/0x150 [ 504.562275][T12762] do_syscall_64+0x55/0xb0 [ 504.566716][T12762] ? clear_bhb_loop+0x40/0x90 [ 504.571422][T12762] ? clear_bhb_loop+0x40/0x90 [ 504.576127][T12762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 504.582080][T12762] RIP: 0033:0x7ff646b8d5fc [ 504.586532][T12762] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 504.606270][T12762] RSP: 002b:00007ff647a4c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 504.614723][T12762] RAX: ffffffffffffffda RBX: 00007ff646dc5fa0 RCX: 00007ff646b8d5fc [ 504.622741][T12762] RDX: 000000000000000f RSI: 00007ff647a4c0a0 RDI: 0000000000000005 [ 504.630770][T12762] RBP: 00007ff647a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 504.638783][T12762] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 504.646783][T12762] R13: 00007ff646dc6038 R14: 00007ff646dc5fa0 R15: 00007fff8521fe38 [ 504.654808][T12762] [ 505.017993][T12768] netlink: 'syz.0.2247': attribute type 17 has an invalid length. [ 505.025981][T12768] netlink: 'syz.0.2247': attribute type 16 has an invalid length. [ 505.061753][T12768] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2247'. [ 505.106775][T12774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2250'. [ 505.140629][T12774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2250'. [ 505.164627][T12774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2250'. [ 505.181358][T12774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2250'. [ 505.679512][T12781] netlink: 'syz.2.2251': attribute type 9 has an invalid length. [ 505.691513][T12781] netlink: 371 bytes leftover after parsing attributes in process `syz.2.2251'. [ 506.094653][T12783] netlink: 'syz.3.2255': attribute type 1 has an invalid length. [ 506.136662][T12783] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2255'. [ 506.178631][T12789] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 506.747775][T12804] netlink: 'syz.2.2261': attribute type 17 has an invalid length. [ 506.780211][T12804] netlink: 'syz.2.2261': attribute type 16 has an invalid length. [ 506.819334][T12804] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2261'. [ 507.713162][T12814] netlink: 'syz.0.2272': attribute type 17 has an invalid length. [ 507.756356][T12814] netlink: 'syz.0.2272': attribute type 16 has an invalid length. [ 507.774616][T12814] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2272'. [ 508.301635][T12826] netlink: 'syz.3.2268': attribute type 1 has an invalid length. [ 508.340282][T12826] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 510.028480][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 510.068539][T12852] validate_nla: 1 callbacks suppressed [ 510.068559][T12852] netlink: 'syz.3.2278': attribute type 1 has an invalid length. [ 510.279526][T12852] __nla_validate_parse: 2 callbacks suppressed [ 510.279545][T12852] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2278'. [ 510.448935][T12852] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 510.554204][T12856] netlink: 'syz.2.2281': attribute type 17 has an invalid length. [ 510.562445][T12856] netlink: 'syz.2.2281': attribute type 16 has an invalid length. [ 510.574149][T12856] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2281'. [ 513.372653][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 513.408754][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 513.487894][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 513.503081][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 513.511534][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 513.523780][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 513.973502][T12904] netlink: 'syz.3.2296': attribute type 17 has an invalid length. [ 513.983518][T12904] netlink: 'syz.3.2296': attribute type 16 has an invalid length. [ 514.032685][T12904] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2296'. [ 514.261391][T12893] chnl_net:caif_netlink_parms(): no params data found [ 514.728303][T12893] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.746325][T12893] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.753646][T12893] bridge_slave_0: entered allmulticast mode [ 514.828257][T12893] bridge_slave_0: entered promiscuous mode [ 514.908323][T12893] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.915851][T12893] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.944199][T12893] bridge_slave_1: entered allmulticast mode [ 514.978651][T12893] bridge_slave_1: entered promiscuous mode [ 515.384690][T12893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.438448][T12893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.529331][T12893] team0: Port device team_slave_0 added [ 515.550907][T12893] team0: Port device team_slave_1 added [ 515.556479][ T5790] Bluetooth: hci4: command tx timeout [ 515.797056][T12893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.804088][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.850416][T12893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.942548][T12934] netlink: 'syz.2.2309': attribute type 17 has an invalid length. [ 515.970299][T12934] netlink: 'syz.2.2309': attribute type 16 has an invalid length. [ 515.982393][T12934] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2309'. [ 516.016562][T12893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.023584][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.096340][T12893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.257107][T12893] hsr_slave_0: entered promiscuous mode [ 516.272289][T12893] hsr_slave_1: entered promiscuous mode [ 516.307541][T12893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.315186][T12893] Cannot create hsr debugfs directory [ 517.022534][T12893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.363858][T12893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.592348][T12893] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.637589][ T5790] Bluetooth: hci4: command tx timeout [ 517.920676][T12893] : (slave netdevsim0): Releasing backup interface [ 518.006270][T12893] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.503415][T12893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 518.540176][T12893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 518.597580][T12893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 518.632248][T12893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 518.845529][T12973] netlink: 'syz.2.2322': attribute type 10 has an invalid length. [ 518.890824][T12973] netlink: 'syz.2.2322': attribute type 3 has an invalid length. [ 518.922982][T12973] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.2322'. [ 519.262529][T12971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.287415][T12893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.374632][T12893] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.425291][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.433470][ T6475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.510870][ T2875] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.518162][ T2875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.717387][ T5790] Bluetooth: hci4: command tx timeout [ 520.192025][T12998] netlink: 'syz.3.2329': attribute type 3 has an invalid length. [ 520.203190][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2329'. [ 520.263844][T12893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.409435][T12893] veth0_vlan: entered promiscuous mode [ 520.436048][T12893] veth1_vlan: entered promiscuous mode [ 520.550589][T12893] veth0_macvtap: entered promiscuous mode [ 520.569190][T12893] veth1_macvtap: entered promiscuous mode [ 520.619169][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.630468][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.642338][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.654119][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.665389][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.678815][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.692588][T12893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.713421][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.723949][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.734026][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.745689][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.756639][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.767951][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.778922][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.791137][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.806602][T12893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.820025][T12893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.842328][T12893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.859937][T12893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.873219][T12893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.453127][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.566489][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.738121][T13006] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 521.788382][ T6475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.805647][ T6475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.808582][ T5790] Bluetooth: hci4: command tx timeout [ 522.710478][T13020] netlink: 'syz.2.2337': attribute type 1 has an invalid length. [ 522.720286][T13020] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2337'. [ 522.796937][T13025] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 523.360677][T13034] FAULT_INJECTION: forcing a failure. [ 523.360677][T13034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.417076][T13034] CPU: 0 PID: 13034 Comm: syz.1.2340 Not tainted syzkaller #0 [ 523.424648][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 523.434769][T13034] Call Trace: [ 523.438120][T13034] [ 523.441094][T13034] dump_stack_lvl+0x16c/0x230 [ 523.445855][T13034] ? show_regs_print_info+0x20/0x20 [ 523.451198][T13034] ? load_image+0x3b0/0x3b0 [ 523.455763][T13034] ? __lock_acquire+0x7c80/0x7c80 [ 523.460869][T13034] ? snprintf+0xdb/0x120 [ 523.465191][T13034] should_fail_ex+0x39d/0x4d0 [ 523.469954][T13034] _copy_to_user+0x2f/0xa0 [ 523.474440][T13034] simple_read_from_buffer+0xe7/0x150 [ 523.479903][T13034] proc_fail_nth_read+0x1e3/0x250 [ 523.484998][T13034] ? proc_fault_inject_write+0x340/0x340 [ 523.490703][T13034] ? fsnotify_perm+0x271/0x5e0 [ 523.495538][T13034] ? proc_fault_inject_write+0x340/0x340 [ 523.501227][T13034] vfs_read+0x27e/0x920 [ 523.505452][T13034] ? kernel_read+0x1e0/0x1e0 [ 523.510105][T13034] ? __fget_files+0x28/0x4d0 [ 523.514753][T13034] ? __fget_files+0x44a/0x4d0 [ 523.519514][T13034] ? __fdget_pos+0x2a3/0x330 [ 523.524164][T13034] ? ksys_read+0x75/0x250 [ 523.528569][T13034] ksys_read+0x147/0x250 [ 523.532886][T13034] ? vfs_write+0x940/0x940 [ 523.537370][T13034] ? lockdep_hardirqs_on+0x98/0x150 [ 523.542642][T13034] do_syscall_64+0x55/0xb0 [ 523.547124][T13034] ? clear_bhb_loop+0x40/0x90 [ 523.551872][T13034] ? clear_bhb_loop+0x40/0x90 [ 523.556792][T13034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.562777][T13034] RIP: 0033:0x7f704bb8d5fc [ 523.567259][T13034] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 523.586927][T13034] RSP: 002b:00007f704ca0f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 523.595412][T13034] RAX: ffffffffffffffda RBX: 00007f704bdc5fa0 RCX: 00007f704bb8d5fc [ 523.603482][T13034] RDX: 000000000000000f RSI: 00007f704ca0f0a0 RDI: 0000000000000007 [ 523.611519][T13034] RBP: 00007f704ca0f090 R08: 0000000000000000 R09: 0000000000000000 [ 523.619562][T13034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.627603][T13034] R13: 00007f704bdc6038 R14: 00007f704bdc5fa0 R15: 00007ffdf5d90b78 [ 523.635690][T13034] [ 523.841285][T13040] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 525.259316][T13047] netlink: 'syz.1.2354': attribute type 1 has an invalid length. [ 525.271448][T13047] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2354'. [ 525.294495][T13060] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 525.461410][T13066] netlink: 'syz.0.2350': attribute type 11 has an invalid length. [ 525.470962][T13066] netlink: 195824 bytes leftover after parsing attributes in process `syz.0.2350'. [ 525.854286][T13072] netlink: 'syz.0.2355': attribute type 1 has an invalid length. [ 525.863459][T13072] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2355'. [ 526.087731][T13072] team0: Port device team_slave_0 removed [ 526.098476][T13072] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 526.599702][T13086] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2360'. [ 527.191048][T13093] netlink: 'syz.0.2362': attribute type 1 has an invalid length. [ 527.207992][T13093] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2362'. [ 527.258895][T13093] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 528.713286][T13109] netlink: 'syz.3.2369': attribute type 1 has an invalid length. [ 528.746535][T13109] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2369'. [ 528.790075][T13114] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 528.947732][T13118] netlink: 'syz.0.2372': attribute type 10 has an invalid length. [ 529.012745][T13121] netlink: 'syz.0.2372': attribute type 3 has an invalid length. [ 529.054454][T13121] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2372'. [ 529.733204][T13118] team0: Port device wlan1 added [ 529.846676][T13117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.919370][T13132] netlink: 'syz.2.2375': attribute type 3 has an invalid length. [ 529.944928][T13118] syz.0.2372 (13118) used greatest stack depth: 16808 bytes left [ 529.953209][T13132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2375'. [ 530.019473][T13130] netlink: 'syz.3.2376': attribute type 1 has an invalid length. [ 530.028993][T13130] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2376'. [ 530.071933][T13130] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 531.273674][T13152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 531.283169][T13152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 531.297385][T13152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 531.308292][T13152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 531.316648][T13152] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 531.324287][T13152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 531.616954][ T991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.865545][ T991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.009985][T13156] netlink: 'syz.2.2383': attribute type 1 has an invalid length. [ 532.026767][T13156] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2383'. [ 532.047962][T13157] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 532.148360][ T991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.249890][ T991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.473016][T13150] chnl_net:caif_netlink_parms(): no params data found [ 532.514365][T13167] netlink: 'syz.3.2387': attribute type 10 has an invalid length. [ 532.545695][T13167] netlink: 'syz.3.2387': attribute type 3 has an invalid length. [ 532.559558][T13167] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.2387'. [ 533.317351][T13164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.477348][ T5790] Bluetooth: hci3: command tx timeout [ 533.711938][T13181] netlink: 'syz.0.2390': attribute type 3 has an invalid length. [ 533.721650][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2390'. [ 533.726551][T13150] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.775712][T13150] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.790929][T13150] bridge_slave_0: entered allmulticast mode [ 533.800262][T13150] bridge_slave_0: entered promiscuous mode [ 533.830728][T13183] netlink: 'syz.3.2397': attribute type 10 has an invalid length. [ 533.859442][T13150] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.896378][T13150] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.936657][T13150] bridge_slave_1: entered allmulticast mode [ 533.955797][T13150] bridge_slave_1: entered promiscuous mode [ 534.586802][T13182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.865612][T13150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.904797][T13150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.995015][T13197] netlink: 'syz.0.2392': attribute type 1 has an invalid length. [ 535.039922][T13197] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2392'. [ 535.197395][T13201] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 535.359781][T13150] team0: Port device team_slave_0 added [ 535.526979][T13204] netlink: 'syz.3.2395': attribute type 1 has an invalid length. [ 535.556609][T13204] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2395'. [ 535.556904][ T5790] Bluetooth: hci3: command tx timeout [ 535.620383][T13150] team0: Port device team_slave_1 added [ 535.700738][T13211] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 535.953301][T13150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.964814][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.056739][T13150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.179622][T13150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.207065][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.266329][T13150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.530711][T13150] hsr_slave_0: entered promiscuous mode [ 536.548909][T13150] hsr_slave_1: entered promiscuous mode [ 536.566467][T13150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.574107][T13150] Cannot create hsr debugfs directory [ 537.100723][T13227] netlink: 'syz.2.2400': attribute type 1 has an invalid length. [ 537.157236][T13227] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2400'. [ 537.435855][T13232] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 537.638155][ T5790] Bluetooth: hci3: command tx timeout [ 537.900113][ T991] [ 537.902516][ T991] ====================================================== [ 537.909566][ T991] WARNING: possible circular locking dependency detected [ 537.916632][ T991] syzkaller #0 Not tainted [ 537.921092][ T991] ------------------------------------------------------ [ 537.928146][ T991] kworker/u4:5/991 is trying to acquire lock: [ 537.934244][ T991] ffff88807a900d00 (team->team_lock_key#3){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 537.943886][ T991] [ 537.943886][ T991] but task is already holding lock: [ 537.951280][ T991] ffff888077468768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 537.961685][ T991] [ 537.961685][ T991] which lock already depends on the new lock. [ 537.961685][ T991] [ 537.972117][ T991] [ 537.972117][ T991] the existing dependency chain (in reverse order) is: [ 537.981165][ T991] [ 537.981165][ T991] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 537.988945][ T991] __mutex_lock+0x129/0xcc0 [ 537.994020][ T991] ieee80211_open+0x144/0x200 [ 537.999249][ T991] __dev_open+0x2bc/0x430 [ 538.004129][ T991] dev_open+0xab/0x170 [ 538.008744][ T991] team_add_slave+0xae7/0x2660 [ 538.014058][ T991] do_setlink+0xe14/0x3fb0 [ 538.019028][ T991] rtnl_newlink+0x175b/0x2020 [ 538.024268][ T991] rtnetlink_rcv_msg+0x7c7/0xf10 [ 538.029757][ T991] netlink_rcv_skb+0x216/0x480 [ 538.035070][ T991] netlink_unicast+0x751/0x8d0 [ 538.040387][ T991] netlink_sendmsg+0x8c1/0xbe0 [ 538.045698][ T991] ____sys_sendmsg+0x5bf/0x950 [ 538.051013][ T991] ___sys_sendmsg+0x220/0x290 [ 538.056249][ T991] __se_sys_sendmsg+0x1a5/0x270 [ 538.061647][ T991] do_syscall_64+0x55/0xb0 [ 538.066609][ T991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.073059][ T991] [ 538.073059][ T991] -> #0 (team->team_lock_key#3){+.+.}-{3:3}: [ 538.081260][ T991] __lock_acquire+0x2ddb/0x7c80 [ 538.086729][ T991] lock_acquire+0x197/0x410 [ 538.091783][ T991] __mutex_lock+0x129/0xcc0 [ 538.096835][ T991] team_del_slave+0x32/0x1c0 [ 538.101968][ T991] team_device_event+0x28d/0xa20 [ 538.107462][ T991] notifier_call_chain+0x197/0x390 [ 538.113124][ T991] unregister_netdevice_many_notify+0xf36/0x1810 [ 538.120011][ T991] unregister_netdevice_queue+0x324/0x360 [ 538.126287][ T991] _cfg80211_unregister_wdev+0x16b/0x580 [ 538.132490][ T991] ieee80211_remove_interfaces+0x496/0x680 [ 538.138845][ T991] ieee80211_unregister_hw+0x5d/0x2a0 [ 538.144853][ T991] mac80211_hwsim_del_radio+0x274/0x450 [ 538.150944][ T991] hwsim_exit_net+0x585/0x640 [ 538.156174][ T991] cleanup_net+0x6f4/0xb90 [ 538.161146][ T991] process_scheduled_works+0xa45/0x15b0 [ 538.167247][ T991] worker_thread+0xa55/0xfc0 [ 538.172381][ T991] kthread+0x2fa/0x390 [ 538.176988][ T991] ret_from_fork+0x48/0x80 [ 538.181952][ T991] ret_from_fork_asm+0x11/0x20 [ 538.187274][ T991] [ 538.187274][ T991] other info that might help us debug this: [ 538.187274][ T991] [ 538.197519][ T991] Possible unsafe locking scenario: [ 538.197519][ T991] [ 538.204987][ T991] CPU0 CPU1 [ 538.210411][ T991] ---- ---- [ 538.215840][ T991] lock(&rdev->wiphy.mtx); [ 538.220364][ T991] lock(team->team_lock_key#3); [ 538.227855][ T991] lock(&rdev->wiphy.mtx); [ 538.234904][ T991] lock(team->team_lock_key#3); [ 538.239874][ T991] [ 538.239874][ T991] *** DEADLOCK *** [ 538.239874][ T991] [ 538.248033][ T991] 5 locks held by kworker/u4:5/991: [ 538.253241][ T991] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 538.264175][ T991] #1: ffffc9000422fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 538.274826][ T991] #2: ffffffff8dfaf510 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 538.284260][ T991] #3: ffffffff8dfbc348 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 538.294141][ T991] #4: ffff888077468768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 538.305058][ T991] [ 538.305058][ T991] stack backtrace: [ 538.310959][ T991] CPU: 0 PID: 991 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 538.318435][ T991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 538.328515][ T991] Workqueue: netns cleanup_net [ 538.333315][ T991] Call Trace: [ 538.336612][ T991] [ 538.339654][ T991] dump_stack_lvl+0x16c/0x230 [ 538.344366][ T991] ? load_image+0x3b0/0x3b0 [ 538.348891][ T991] ? show_regs_print_info+0x20/0x20 [ 538.354122][ T991] ? print_circular_bug+0x12b/0x1a0 [ 538.359353][ T991] check_noncircular+0x2bd/0x3c0 [ 538.364408][ T991] ? print_deadlock_bug+0x5d0/0x5d0 [ 538.369634][ T991] ? lockdep_lock+0xe0/0x220 [ 538.374256][ T991] ? _find_first_zero_bit+0xd3/0x100 [ 538.379588][ T991] __lock_acquire+0x2ddb/0x7c80 [ 538.384500][ T991] ? verify_lock_unused+0x140/0x140 [ 538.389727][ T991] ? verify_lock_unused+0x140/0x140 [ 538.394962][ T991] lock_acquire+0x197/0x410 [ 538.399498][ T991] ? team_del_slave+0x32/0x1c0 [ 538.404289][ T991] ? __might_sleep+0xe0/0xe0 [ 538.408893][ T991] ? read_lock_is_recursive+0x20/0x20 [ 538.414284][ T991] __mutex_lock+0x129/0xcc0 [ 538.418986][ T991] ? team_del_slave+0x32/0x1c0 [ 538.423865][ T991] ? __lock_acquire+0x7c80/0x7c80 [ 538.428911][ T991] ? rcu_is_watching+0x15/0xb0 [ 538.433782][ T991] ? trace_contention_end+0x39/0xe0 [ 538.439007][ T991] ? __mutex_lock+0x304/0xcc0 [ 538.443706][ T991] ? team_del_slave+0x32/0x1c0 [ 538.448485][ T991] ? mutex_lock_nested+0x20/0x20 [ 538.453443][ T991] ? bond_netdev_event+0xe1/0xef0 [ 538.458510][ T991] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 538.464178][ T991] ? bond_ipsec_offload_ok+0x410/0x410 [ 538.469668][ T991] team_del_slave+0x32/0x1c0 [ 538.474277][ T991] team_device_event+0x28d/0xa20 [ 538.479233][ T991] notifier_call_chain+0x197/0x390 [ 538.484373][ T991] unregister_netdevice_many_notify+0xf36/0x1810 [ 538.490730][ T991] ? lock_chain_count+0x20/0x20 [ 538.495605][ T991] ? unregister_netdevice_many+0x20/0x20 [ 538.501269][ T991] ? kernfs_remove_by_name_ns+0x117/0x150 [ 538.507006][ T991] ? __lock_acquire+0x7c80/0x7c80 [ 538.512051][ T991] unregister_netdevice_queue+0x324/0x360 [ 538.517794][ T991] ? list_netdevice+0x730/0x730 [ 538.522752][ T991] ? kernfs_remove_by_name_ns+0x117/0x150 [ 538.528502][ T991] _cfg80211_unregister_wdev+0x16b/0x580 [ 538.534168][ T991] ieee80211_remove_interfaces+0x496/0x680 [ 538.540004][ T991] ? ieee80211_do_stop+0x1db0/0x1db0 [ 538.545319][ T991] ? rcu_is_watching+0x15/0xb0 [ 538.550199][ T991] ieee80211_unregister_hw+0x5d/0x2a0 [ 538.555596][ T991] mac80211_hwsim_del_radio+0x274/0x450 [ 538.561169][ T991] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 538.566737][ T991] hwsim_exit_net+0x585/0x640 [ 538.571449][ T991] ? hwsim_init_net+0x90/0x90 [ 538.576151][ T991] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 538.582007][ T991] cleanup_net+0x6f4/0xb90 [ 538.586463][ T991] ? ops_free_list+0x3b0/0x3b0 [ 538.591271][ T991] ? _raw_spin_unlock_irq+0x23/0x50 [ 538.596555][ T991] ? process_scheduled_works+0x957/0x15b0 [ 538.602304][ T991] ? process_scheduled_works+0x957/0x15b0 [ 538.608042][ T991] process_scheduled_works+0xa45/0x15b0 [ 538.613625][ T991] ? assign_work+0x400/0x400 [ 538.618239][ T991] ? assign_work+0x39e/0x400 [ 538.623020][ T991] worker_thread+0xa55/0xfc0 [ 538.627634][ T991] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 538.633552][ T991] ? _raw_spin_unlock+0x40/0x40 [ 538.638464][ T991] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 538.644405][ T991] kthread+0x2fa/0x390 [ 538.648508][ T991] ? pr_cont_work+0x560/0x560 [ 538.653303][ T991] ? kthread_blkcg+0xd0/0xd0 [ 538.657914][ T991] ret_from_fork+0x48/0x80 [ 538.662388][ T991] ? kthread_blkcg+0xd0/0xd0 [ 538.667004][ T991] ret_from_fork_asm+0x11/0x20 [ 538.671795][ T991] [ 538.805754][T13257] netlink: 'syz.2.2405': attribute type 3 has an invalid length. [ 538.815580][ T991] team0: Port device wlan1 removed [ 538.832541][T13257] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.2405'. [ 538.927791][T13250] netlink: 'syz.2.2405': attribute type 10 has an invalid length. [ 539.050761][T13249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.102053][ T991] hsr_slave_0: left promiscuous mode [ 539.113133][ T991] hsr_slave_1: left promiscuous mode [ 539.119853][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.128409][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.136845][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.144703][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.156800][ T991] veth1_macvtap: left promiscuous mode [ 539.162424][ T991] veth1_vlan: left promiscuous mode [ 539.721630][ T5790] Bluetooth: hci3: command tx timeout [ 540.990086][ T991] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 541.172016][ T991] team0 (unregistering): Port device team_slave_1 removed [ 541.239410][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.271589][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.352972][ T991] team0 (unregistering): Port device dummy0 removed [ 541.389753][ T991] bond0 (unregistering): Released all slaves [ 541.608803][T13150] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 541.622568][T13150] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 541.633467][T13150] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 541.667181][T13150] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 541.811396][T13150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.840334][T13150] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.853100][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.860328][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.891015][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.898254][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.133177][T13150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.190500][T13150] veth0_vlan: entered promiscuous mode [ 542.205870][T13150] veth1_vlan: entered promiscuous mode [ 542.250882][T13150] veth0_macvtap: entered promiscuous mode [ 542.265358][T13150] veth1_macvtap: entered promiscuous mode [ 542.292006][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.302588][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.316049][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.329513][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.339760][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.353485][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.365856][T13150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.388566][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.401221][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.412803][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.425476][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.435619][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.449009][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.460283][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.473613][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.490332][T13150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.504425][T13150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.516698][T13150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.525458][T13150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.538161][T13150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.589274][T13150] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 542.626579][ T2875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.634574][ T2875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.649945][T13150] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 542.691273][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.703043][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50