last executing test programs: 7.986634601s ago: executing program 2 (id=9963): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000580)=""/95}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r3, 0x29, 0x22, &(0x7f0000000100)=r4, 0x18) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20e0000a115001c00ff11142603600e12080005007a010401a80016002000034004000000035c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) close(0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002dd0100053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) close(r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001900)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000019c0)={{r9, 0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)='%pS \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_tracing={0x1a, 0x0, &(0x7f0000001340), &(0x7f0000001400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000018c0)={0x1, 0xc, 0x6, 0x3}, 0x10, 0x27572, r11, 0x0, &(0x7f0000000180)=[r2, r8, r1, r12, r12, r9], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x2, 0x0, 0x0, 0x200, 0x4c04, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x400000, 0x0, 0x0, 0x20000000, 0x0, 0xffff, 0x0, 0x9, 0x0, 0x200}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r13, 0x0, 0x7}, 0x38) 7.356146889s ago: executing program 2 (id=9972): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c003, 0xac5d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x12, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000e7db869b06f16a9205de59000000000000000000008000392aef8f5db393b75bb0945856c33ebe2e4c9b3360568b31dffd7e5336559f9e176651809d0ef9183735a0010f1c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x110100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, 0x0, 0x0) socketpair(0x8, 0x1, 0x10001, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x149000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="018d00000300"}) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x9, 0x1, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x2cddaeed1e918377) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f00000003c0)='./cgroup/../file0\x00', 0x0, 0x8, r2}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'ipvlan1\x00', @broadcast}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) 6.133044252s ago: executing program 2 (id=9983): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0xb3d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x102402, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.84083741s ago: executing program 2 (id=9986): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368e", 0x2c}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xce43, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40086602, 0x110e22fff2) close(0xffffffffffffffff) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x26, &(0x7f00000001c0), 0x4) 5.593840377s ago: executing program 2 (id=9990): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000200001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1}, 0x20) 5.329024424s ago: executing program 2 (id=9994): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x68020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2}, 0x206, 0x2000000003, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x8f3, 0x0, 0x4}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x80) 2.91298496s ago: executing program 1 (id=10017): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080005000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.625173068s ago: executing program 0 (id=10020): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000090245ca00"/20, @ANYRES32], 0x48) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00f'], 0xfe33) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000010000000000000000000000000000007e67a36b5aefe79c389f2cf410d572c693b713575a6df0cc08a24f7cf2a844690f85719396db7ec10dc38158bbfb6628be75fe158e45fa32e5f8229e05062dd170c43d927608c75cec9a4058c276e4215bc6595dc456042dd17a75fc7626212c4f5120a22d1340296737ba839ccd38db332a4dcf0c719930f3f08487d6b723f6019f4cabf9bac74c53b888d90dfaf26958592264226201f5136c5aecbc08be9a6e0158ad153eb0ee9187d548f704ca2b8a844e0f2f7e4b7aa9e9e9f234ee67ddb66e661445e64e724c0f515683336267b8e83e397c56b9a5cccd2720ed3c73154c406e17", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0xa50e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x21}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYRES32=0x0], 0x48) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000000000000001}, 0x215, 0x3ff, 0xfffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x6ebd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x14, &(0x7f0000000040), 0x3b) 2.605072988s ago: executing program 4 (id=10021): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59a5a4d33f921921320000005e140602ffffffff0d0013fe0100000002800000121f", 0x2e}], 0x1}, 0x0) 2.496964682s ago: executing program 1 (id=10022): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xc395, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x4, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001740)={0x1, 0x58, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'team_slave_1\x00', @random="01320032b0ff"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x81}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}]}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0xde, &(0x7f0000000680)=""/222, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xf8a9, r5, 0x4, &(0x7f0000000800)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x0, 0x4, 0xd, 0x9}, {0x2, 0x3, 0xd, 0xc}, {0x0, 0x1, 0x4, 0x7}, {0x4, 0x1, 0xc, 0x6}], 0x10, 0x11ad}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad88864"], 0xffdd) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001780), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x90a, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000006c0)=""/4096, 0x41100, 0x50, '\x00', r3, 0x25, r6, 0x8, &(0x7f00000017c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x4, 0x6, 0x5, 0x739b}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001840)=[{0x4, 0x3, 0xd, 0x5}]}, 0x94) 2.489417102s ago: executing program 3 (id=10023): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8d08ae394948"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 2.369250115s ago: executing program 0 (id=10024): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) perf_event_open$cgroup(&(0x7f0000001200)={0x1, 0x80, 0x4, 0xc8, 0x6, 0x2, 0x0, 0x40f, 0x80000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x6, 0x1}, 0xa00, 0xfffffffffffffffe, 0x1ff, 0x7, 0x9f3a, 0x9, 0x400, 0x0, 0xfffff4a7, 0x0, 0xd56}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)=""/146}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x109a42, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)) close(r1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) 2.236871179s ago: executing program 4 (id=10025): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90124fc60100c034002560100053582c137153e370248078000f01723", 0x2c}], 0x1}, 0x0) 2.059129963s ago: executing program 0 (id=10026): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008168e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x34}], 0x1}, 0x0) 1.966984226s ago: executing program 4 (id=10027): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368e", 0x2c}], 0x1, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x37}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xce43, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40086602, 0x110e22fff2) close(0xffffffffffffffff) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x26, &(0x7f00000001c0), 0x4) 1.966849856s ago: executing program 3 (id=10028): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf}, 0x50) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="89014000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 1.82280753s ago: executing program 1 (id=10029): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x5) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000030000000000001308000000005f30d08b"], &(0x7f0000001540)=""/4091, 0x2a, 0xffb, 0x1}, 0x28) 1.82263624s ago: executing program 3 (id=10030): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000090245ca00"/20, @ANYRES32], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00f'], 0xfe33) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000010000000000000000000000000000007e67a36b5aefe79c389f2cf410d572c693b713575a6df0cc08a24f7cf2a844690f85719396db7ec10dc38158bbfb6628be75fe158e45fa32e5f8229e05062dd170c43d927608c75cec9a4058c276e4215bc6595dc456042dd17a75fc7626212c4f5120a22d1340296737ba839ccd38db332a4dcf0c719930f3f08487d6b723f6019f4cabf9bac74c53b888d90dfaf26958592264226201f5136c5aecbc08be9a6e0158ad153eb0ee9187d548f704ca2b8a844e0f2f7e4b7aa9e9e9f234ee67ddb66e661445e64e724c0f515683336267b8e83e397c56b9a5cccd2720ed3c73154c406e17", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000000000000001}, 0x215, 0x3ff, 0xfffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x6ebd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x14, &(0x7f0000000040), 0x3b) 1.669938714s ago: executing program 0 (id=10031): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf}, 0x50) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) (fail_nth: 7) 1.611840316s ago: executing program 4 (id=10032): r0 = socket$kcm(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000000)=r1, 0x4) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0xac5d, 0x5, 0x0, 0x0, 0x0, 0x401, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x18, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x2808, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x8, r2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a80)}, 0x0, 0x0, 0x1, 0x1, 0x80000000, 0xffffffff, 0x0, 0x0, 0x40000}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r7 = socket$kcm(0x1e, 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="36d0936572d6ed9914fafc6aee6b9f7d3fe5a9f405fd414ee060fb7027c73b8efbe9313a1610842c3d56211293f19526dc1e242b5d8ae0ee6c143ab06e7fe98794391237bc61b5bfedb533d0b6fd11838757cf70"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000b80)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f00000003c0)=0x202, 0x12) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000140), 0x4d) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000005c0)={0x0, 0x80, 0x1, 0x7, 0xf6, 0x0, 0x0, 0x24, 0xaac8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0x4}, 0x2224, 0x1ff, 0x402, 0x0, 0x5, 0x7, 0x8, 0x0, 0x40, 0x0, 0x2}) bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r12) close(r6) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 1.516542229s ago: executing program 1 (id=10033): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00f'], 0xfe33) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000010000000000000000000000000000007e67a36b5aefe79c389f2cf410d572c693b713575a6df0cc08a24f7cf2a844690f85719396db7ec10dc38158bbfb6628be75fe158e45fa32e5f8229e05062dd170c43d927608c75cec9a4058c276e4215bc6595dc456042dd17a75fc7626212c4f5120a22d1340296737ba839ccd38db332a4dcf0c719930f3f08487d6b723f6019f4cabf9bac74c53b888d90dfaf26958592264226201f5136c5aecbc08be9a6e0158ad153eb0ee9187d548f704ca2b8a844e0f2f7e4b7aa9e9e9f234ee67ddb66e661445e64e724c0f515683336267b8e83e397c56b9a5cccd2720ed3c73154c406e17", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0xa50e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x21}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYRES32=0x0], 0x48) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000000000000001}, 0x215, 0x3ff, 0xfffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x6ebd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x14, &(0x7f0000000040), 0x3b) 807.035968ms ago: executing program 4 (id=10034): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000003dc0)={0x0, 0x0, 0x0}, 0x10100) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}, {&(0x7f0000000000)="c4754198658ca64590967863750789880e859854e5b2c3c622ee47131204e267936bce507f6483b340212052e58f1db96d62dc21134195f5b1d4d2e467726073bde93cf5b67286d060a0e07bcebb31e90585d7dbab9512530aa563f5", 0x5c}, {&(0x7f0000000180)="1a09e37445c7d5541f80361a46c6bd365d6c2b77bfa0f74bcbcb9532866cb550ac00baf2007896c8e53d7268d6bdce0a576df4089376e2108bcad463f6d83281d17f569c8773a892f99c8ba2e9ded9cdabfd3b897d8854374b37eb4117fe4726078f01762ddfcb358106fa8d30176524b4da837b79979379008b6d69062706e906fb403ebf9578c5f923e349e1c19b8e0c9b60530de86e15dc092bdd531116d301ec53e87e849c8a22f65e7fb0e31cb1ea4d3acbe15f704a4de69cbe3729cb066fd151eadca691354120baa32f89143809d6e3", 0xd3}, {&(0x7f0000000280)="cc3777a91b31abf2f2a7cc4d425a593ac5d203afcaafc540353a44c5b43bb5f7d1b1f6b583263c53065ff75bcf791b45edf70aa2254a6df191830fecfedd188d489cbdb7833bf78bac4541b7cfd8fb41a5a215c1bebe799f165372bac8d9b6e112c4656d4d959f9dbbf8e88b67f3b3bbf798b3cc1a879118c06d8604f67b6b0f3bf9c2401cd9e4da13ab3c68768495a0b314b33556fa2d9ae401aff6b0287f6d124a979fe263fc51d5d5c63912f417d5225d886a5ddf56bea20bc4", 0xbb}, {&(0x7f0000000340)="a23cdf10dfd1372a805b99f2602cb35a5bea11da2318e8f28d33d89de4ee0e766eaf08799167ed95d4c403731d163e5aa398c075bc0009df8e8cdba4b970d563c50e753c85d8f699d8b071b0424491fc0d45cd3b1efd24c185ba7c62dddd7e7591272f0830f8ba6a62cd", 0x6a}, {&(0x7f00000003c0)="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", 0xfe}], 0x6}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) 806.819658ms ago: executing program 1 (id=10035): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e040e75f800250003000f60000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340200000001f0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 806.650508ms ago: executing program 3 (id=10036): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90124fc60100c034002560100053582c137153e370248078000f01723d1", 0x2d}], 0x1}, 0x0) 687.095471ms ago: executing program 0 (id=10037): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) close(0xffffffffffffffff) socket$kcm(0x2, 0x2, 0x88) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) close(0xffffffffffffffff) 530.541596ms ago: executing program 3 (id=10038): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 366.84982ms ago: executing program 1 (id=10039): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x8, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x5, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000000010000081100000900000001", @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0, 0x0, 0x2000000}, 0x38) 152.047546ms ago: executing program 3 (id=10040): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008168e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x34}], 0x1}, 0x0) 88.967908ms ago: executing program 4 (id=10041): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368e", 0x2c}], 0x1, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x37}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xce43, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40086602, 0x110e22fff2) close(0xffffffffffffffff) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x26, &(0x7f00000001c0), 0x4) 0s ago: executing program 0 (id=10042): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x5) openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000030000000000001308000000005f30d08b"], &(0x7f0000001540)=""/4091, 0x2a, 0xffb, 0x1}, 0x28) kernel console output (not intermixed with test programs): 8][T31095] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1577.170347][T31095] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1577.221612][T31095] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1577.231952][T31095] Node 0 DMA32 free:1332856kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:60816kB inactive_anon:0kB active_file:86268kB inactive_file:161908kB unevictable:1536kB writepending:440kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:8352kB local_pcp:3520kB free_cma:0kB [ 1577.273353][T31095] lowmem_reserve[]: 0 0 1 1 1 [ 1577.280108][T31095] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1577.314702][T31095] lowmem_reserve[]: 0 0 0 0 0 [ 1577.320900][T31095] Node 1 Normal free:3909084kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:7360kB local_pcp:0kB free_cma:0kB [ 1577.355161][T31095] lowmem_reserve[]: 0 0 0 0 0 [ 1577.368081][T31095] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1577.384861][T31095] Node 0 DMA32: 672*4kB (UME) 779*8kB (UME) 484*16kB (UME) 1163*32kB (UME) 1416*64kB (UME) 695*128kB (UME) 401*256kB (UM) 125*512kB (UME) 51*1024kB (UME) 12*2048kB (UME) 209*4096kB (UM) = 1332984kB [ 1577.427210][T31095] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1577.458352][T31095] Node 1 Normal: 283*4kB (UE) 66*8kB (UE) 32*16kB (UME) 193*32kB (UME) 69*64kB (UME) 26*128kB (UME) 7*256kB (UM) 6*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3909084kB [ 1577.556597][T31095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1577.585884][T31095] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1577.647860][T31095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1577.710874][T31095] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1577.761305][T31095] 63458 total pagecache pages [ 1577.771919][T31095] 0 pages in swap cache [ 1577.786013][T31095] Free swap = 124996kB [ 1577.821386][T31095] Total swap = 124996kB [ 1577.846744][T31095] 2097051 pages RAM [ 1577.855514][T31095] 0 pages HighMem/MovableOnly [ 1577.882954][T31095] 415209 pages reserved [ 1577.892586][T31095] 0 pages cma reserved [ 1578.361998][T30921] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1578.418001][T31122] netlink: 'syz.4.8881': attribute type 21 has an invalid length. [ 1578.467816][T31122] netlink: 'syz.4.8881': attribute type 6 has an invalid length. [ 1578.546195][T31122] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8881'. [ 1580.335536][T30921] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1580.373187][T30921] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1580.447433][T31144] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1580.450726][T30921] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1580.506569][T31144] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1580.554061][T31144] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1580.591868][ T9983] device veth0_to_team left promiscuous mode [ 1580.609797][ T9983] Ÿë: port 1(veth0_to_team) entered disabled state [ 1580.756449][ T9983] device veth0_macvtap left promiscuous mode [ 1580.777164][ T9983] device veth1_vlan left promiscuous mode [ 1580.785480][ T9983] device veth0_vlan left promiscuous mode [ 1583.015466][ T9983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1583.090532][ T9983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1583.499005][ T9983] bond0 (unregistering): Released all slaves [ 1583.806038][T31213] netlink: 'syz.0.8896': attribute type 21 has an invalid length. [ 1583.840373][T31213] netlink: 'syz.0.8896': attribute type 6 has an invalid length. [ 1583.852806][T31213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8896'. [ 1583.884074][T31216] netlink: 'syz.1.8897': attribute type 21 has an invalid length. [ 1583.913578][T31216] netlink: 'syz.1.8897': attribute type 6 has an invalid length. [ 1583.924551][T31216] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8897'. [ 1584.694960][T30921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1584.790967][T10005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1584.844765][T10005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1584.874428][T30921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1584.887981][T31226] netlink: 'syz.0.8908': attribute type 21 has an invalid length. [ 1584.908999][T31226] netlink: 'syz.0.8908': attribute type 6 has an invalid length. [ 1584.932797][T31226] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8908'. [ 1585.024465][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1585.044094][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1585.071859][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.080350][ T9999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.094412][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1585.143512][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1585.173727][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1585.240714][T10007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.248348][T10007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.334854][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1585.380128][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1585.466120][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1585.566077][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1585.693901][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1585.722561][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1585.752960][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1585.766014][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1585.779549][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1585.819541][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1585.842057][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1585.868083][T30921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1587.127344][T10005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1587.159767][T10005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1587.220225][T30921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1587.282247][T31266] netlink: 'syz.1.8911': attribute type 21 has an invalid length. [ 1587.328635][T31266] netlink: 'syz.1.8911': attribute type 6 has an invalid length. [ 1587.395441][T31266] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8911'. [ 1587.447093][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1587.491659][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1587.585577][T31272] netlink: 'syz.4.8910': attribute type 10 has an invalid length. [ 1588.102217][T31272] device macvlan0 entered promiscuous mode [ 1588.195656][T31272] team0: Port device macvlan0 added [ 1588.245008][T31278] netlink: 'syz.0.8912': attribute type 10 has an invalid length. [ 1588.546772][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1588.569791][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1588.598713][T30921] device veth0_vlan entered promiscuous mode [ 1588.611584][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1588.628178][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1588.661260][T30921] device veth1_vlan entered promiscuous mode [ 1588.722165][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1588.733857][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1588.807660][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1588.830423][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1588.847262][T30921] device veth0_macvtap entered promiscuous mode [ 1588.887637][T30921] device veth1_macvtap entered promiscuous mode [ 1588.961840][T30921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1588.991809][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1589.010950][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1589.034160][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1589.050024][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1589.089372][T30921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1589.113744][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1589.131106][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1589.165792][T30921] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.176870][T30921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.186234][T30921] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.198506][T30921] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.313099][T31306] netlink: 'syz.1.8922': attribute type 21 has an invalid length. [ 1589.337917][T31306] netlink: 'syz.1.8922': attribute type 6 has an invalid length. [ 1589.388273][T31306] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8922'. [ 1590.128819][ T9999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.187552][ T9999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.233473][T10005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1590.269825][T10007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.287803][T10007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.320516][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1590.715662][T31327] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.8929'. [ 1591.042065][T31339] delete_channel: no stack [ 1591.220252][T31346] netlink: 'syz.0.8935': attribute type 21 has an invalid length. [ 1591.228483][T31346] netlink: 'syz.0.8935': attribute type 6 has an invalid length. [ 1591.239865][T31346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8935'. [ 1595.270530][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.0.1 [ 1595.529049][T31388] netlink: 'syz.0.8950': attribute type 21 has an invalid length. [ 1595.543529][T31388] netlink: 'syz.0.8950': attribute type 6 has an invalid length. [ 1595.576911][T31388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8950'. [ 1599.610905][T10007] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.682436][T31431] FAULT_INJECTION: forcing a failure. [ 1599.682436][T31431] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.709328][T31431] CPU: 0 PID: 31431 Comm: syz.4.8964 Not tainted syzkaller #0 [ 1599.718709][T31431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1599.728872][T21533] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1599.732355][T31431] Call Trace: [ 1599.743660][T31431] [ 1599.747008][T31431] dump_stack_lvl+0x188/0x24e [ 1599.753607][T31431] ? sctp_sendmsg+0x15b0/0x2940 [ 1599.758648][T31431] ? ___sys_sendmsg+0x2a2/0x360 [ 1599.761116][T21533] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1599.764019][T31431] ? show_regs_print_info+0x12/0x12 [ 1599.776485][T31431] ? load_image+0x400/0x400 [ 1599.779326][T30922] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1599.781375][T31431] should_fail_ex+0x399/0x4d0 [ 1599.792331][T30922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1599.793743][T31431] should_failslab+0x5/0x20 [ 1599.805465][T31431] slab_pre_alloc_hook+0x59/0x310 [ 1599.806597][T30922] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1599.810813][T31431] ? sctp_add_bind_addr+0x89/0x350 [ 1599.822812][T30922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1599.823310][T31431] __kmem_cache_alloc_node+0x4f/0x260 [ 1599.837410][T31431] ? sctp_add_bind_addr+0x89/0x350 [ 1599.842590][T31431] kmalloc_trace+0x26/0xe0 [ 1599.847238][T31431] sctp_add_bind_addr+0x89/0x350 [ 1599.852380][T31431] sctp_copy_local_addr_list+0x311/0x4e0 [ 1599.858075][T31431] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1599.863860][T31431] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1599.870153][T31431] ? sctp_v4_is_any+0x31/0x50 [ 1599.874880][T31431] ? sctp_copy_one_addr+0x93/0x660 [ 1599.880037][T31431] sctp_bind_addr_copy+0xaf/0x3c0 [ 1599.885138][T31431] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1599.892076][T31431] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1599.897519][T31431] ? __sctp_connect+0xd80/0xd80 [ 1599.902784][T31431] ? __local_bh_enable_ip+0x136/0x1c0 [ 1599.909372][T31431] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1599.915532][T31431] ? security_sctp_bind_connect+0x85/0xb0 [ 1599.921750][T31431] sctp_sendmsg+0x15b0/0x2940 [ 1599.926768][T31431] ? sctp_getsockopt+0x8a0/0x8a0 [ 1599.932459][T31431] ? __lock_acquire+0x7d10/0x7d10 [ 1599.937656][T31431] ? aa_af_perm+0x340/0x340 [ 1599.942703][T31431] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1599.949360][T31431] ? inet_sendmsg+0xe5/0x2f0 [ 1599.954812][T31431] ? inet_send_prepare+0x260/0x260 [ 1599.959993][T31431] ____sys_sendmsg+0x5be/0x970 [ 1599.964833][T31431] ? __sys_sendmsg_sock+0x30/0x30 [ 1599.970558][T31431] ? __import_iovec+0x315/0x500 [ 1599.975767][T31431] ? import_iovec+0x6f/0xa0 [ 1599.980467][T31431] ___sys_sendmsg+0x2a2/0x360 [ 1599.985237][T31431] ? __sys_sendmsg+0x290/0x290 [ 1599.990096][T31431] ? __lock_acquire+0x7d10/0x7d10 [ 1599.995255][T31431] __se_sys_sendmsg+0x1bb/0x2a0 [ 1600.000168][T31431] ? __x64_sys_sendmsg+0x80/0x80 [ 1600.005366][T31431] ? lockdep_hardirqs_on+0x94/0x140 [ 1600.010623][T31431] do_syscall_64+0x4c/0xa0 [ 1600.015291][T31431] ? clear_bhb_loop+0x60/0xb0 [ 1600.020101][T31431] ? clear_bhb_loop+0x60/0xb0 [ 1600.024837][T31431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1600.030858][T31431] RIP: 0033:0x7fcebc39cdd9 [ 1600.035602][T31431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1600.058605][T31431] RSP: 002b:00007fcebd178028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1600.067152][T31431] RAX: ffffffffffffffda RBX: 00007fcebc615fa0 RCX: 00007fcebc39cdd9 [ 1600.075270][T31431] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1600.083293][T31431] RBP: 00007fcebd178090 R08: 0000000000000000 R09: 0000000000000000 [ 1600.092476][T31431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1600.102032][T31431] R13: 00007fcebc616038 R14: 00007fcebc615fa0 R15: 00007ffffe9d9f88 [ 1600.112381][T31431] [ 1600.169783][T31433] netlink: 'syz.0.8965': attribute type 21 has an invalid length. [ 1600.178975][T31433] netlink: 'syz.0.8965': attribute type 6 has an invalid length. [ 1600.186907][T31433] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8965'. [ 1600.530046][T10007] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.723995][T31452] netlink: 'syz.4.8970': attribute type 2 has an invalid length. [ 1600.830898][T31456] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8971'. [ 1601.575613][T10007] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.605790][T31452] device 1 entered promiscuous mode [ 1601.626269][T31458] netlink: 'syz.2.8973': attribute type 21 has an invalid length. [ 1601.691107][T10007] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.148396][T12719] Bluetooth: hci1: command 0x0409 tx timeout [ 1602.174811][T31479] netlink: 'syz.3.8978': attribute type 15 has an invalid length. [ 1602.193484][T31479] netlink: 'syz.3.8978': attribute type 7 has an invalid length. [ 1602.408225][T31479] IPv6: Can't replace route, no match found [ 1602.463122][T31435] chnl_net:caif_netlink_parms(): no params data found [ 1602.504177][T10007] device 0 left promiscuous mode [ 1602.691748][T31496] netlink: 'syz.3.8982': attribute type 21 has an invalid length. [ 1602.737128][T31496] netlink: 'syz.3.8982': attribute type 6 has an invalid length. [ 1602.745423][T31496] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8982'. [ 1602.844805][T31502] netlink: 'syz.0.8985': attribute type 2 has an invalid length. [ 1603.136188][T31502] device 1 entered promiscuous mode [ 1603.154459][T31435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.190815][T31435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.229048][T31435] device bridge_slave_0 entered promiscuous mode [ 1603.362592][T31435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.402865][T31435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.414968][T31435] device bridge_slave_1 entered promiscuous mode [ 1603.709929][T31523] netlink: 'syz.3.8991': attribute type 3 has an invalid length. [ 1603.801092][T31523] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8991'. [ 1604.237495][T12719] Bluetooth: hci1: command 0x041b tx timeout [ 1604.629237][T31435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1604.678016][T31435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1604.753688][T31435] team0: Port device team_slave_0 added [ 1604.765284][T31435] team0: Port device team_slave_1 added [ 1604.954213][T31546] netlink: 'syz.3.8996': attribute type 21 has an invalid length. [ 1604.988606][T31546] netlink: 'syz.3.8996': attribute type 6 has an invalid length. [ 1605.011587][T31546] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8996'. [ 1605.033110][T31435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1605.048310][T31435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.102668][T31435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1605.174236][T31556] device 0 entered promiscuous mode [ 1605.189668][T31435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1605.232653][T31435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.332868][T31435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.631311][T31435] device hsr_slave_0 entered promiscuous mode [ 1605.699813][T31435] device hsr_slave_1 entered promiscuous mode [ 1605.734340][T31435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1605.759517][T31435] Cannot create hsr debugfs directory [ 1605.849911][T10007] device gretap0 left promiscuous mode [ 1605.856056][T10007] Ÿë: port 1(gretap0) entered disabled state [ 1605.913021][T31574] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.9006'. [ 1605.931929][T31574] bridge_slave_1: default FDB implementation only supports local addresses [ 1606.036699][T31575] validate_nla: 1 callbacks suppressed [ 1606.036721][T31575] netlink: 'syz.3.9005': attribute type 21 has an invalid length. [ 1606.080496][T31575] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9005'. [ 1606.229694][T31586] netlink: 'syz.4.9009': attribute type 21 has an invalid length. [ 1606.239100][T31586] netlink: 'syz.4.9009': attribute type 6 has an invalid length. [ 1606.248351][T31586] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9009'. [ 1606.307043][T12719] Bluetooth: hci1: command 0x040f tx timeout [ 1607.386625][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.395139][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.403278][T12719] Bluetooth: hci1: command 0x0419 tx timeout [ 1609.293089][T10007] bridge0: port 3(team0) entered disabled state [ 1609.335577][T10007] device bridge_slave_0 left promiscuous mode [ 1609.348725][T10007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.425844][T10007] device veth1_macvtap left promiscuous mode [ 1609.438763][T10007] device veth0_macvtap left promiscuous mode [ 1609.458842][T10007] device veth1_vlan left promiscuous mode [ 1609.480128][T10007] device veth0_vlan left promiscuous mode [ 1609.591941][T31636] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.9024'. [ 1610.545670][T10007] device team_slave_1 left promiscuous mode [ 1610.557138][T10007] team0 (unregistering): Port device team_slave_1 removed [ 1610.611089][T10007] device team_slave_0 left promiscuous mode [ 1610.618761][T10007] team0 (unregistering): Port device team_slave_0 removed [ 1610.670253][T10007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1610.722951][T10007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1610.773787][T10007] device bridge_slave_1 left promiscuous mode [ 1610.781380][T10007] team0 (unregistering): Port device bridge_slave_1 removed [ 1611.091115][T10007] bond0 (unregistering): Released all slaves [ 1611.271870][T31632] netlink: 'syz.2.9023': attribute type 21 has an invalid length. [ 1611.282365][T31632] netlink: 'syz.2.9023': attribute type 6 has an invalid length. [ 1611.290780][T31632] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9023'. [ 1611.301416][T31636] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.9024'. [ 1611.326917][T31641] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9024'. [ 1611.892585][T31435] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1611.966200][T31435] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1611.995496][T31435] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1612.028941][T31435] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1612.375124][T31435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.463477][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1612.518519][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1612.565689][T31435] 8021q: adding VLAN 0 to HW filter on device team0 [ 1612.629690][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1612.700151][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1612.783472][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.792546][ T9999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.877269][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1612.934407][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1612.978267][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1613.028445][ T9999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.036662][ T9999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1613.274482][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1613.389659][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1613.420539][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1613.453969][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1613.519460][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1613.555707][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1613.596377][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1613.678298][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1613.717860][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1613.772884][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1613.802359][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1613.853613][T31435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1614.440875][T31699] netlink: 'syz.3.9037': attribute type 21 has an invalid length. [ 1614.546989][T31699] netlink: 'syz.3.9037': attribute type 6 has an invalid length. [ 1614.555839][T31699] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9037'. [ 1615.081547][T31708] netlink: 'syz.2.9038': attribute type 3 has an invalid length. [ 1615.162465][T31708] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9038'. [ 1615.848679][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1615.862208][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1615.923856][T31435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1616.074924][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1616.122358][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1616.262034][T10021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1616.287830][T10021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1616.340862][T10021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1616.363469][T10021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1616.400602][T31435] device veth0_vlan entered promiscuous mode [ 1616.515511][T31435] device veth1_vlan entered promiscuous mode [ 1616.673263][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1616.697551][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1616.723406][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1616.767606][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1616.801990][T31435] device veth0_macvtap entered promiscuous mode [ 1616.853486][T31435] device veth1_macvtap entered promiscuous mode [ 1616.879237][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1616.898466][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1616.944614][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.990151][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.058729][T31435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1617.092291][T31753] netlink: 'syz.3.9048': attribute type 21 has an invalid length. [ 1617.152355][T31753] netlink: 'syz.3.9048': attribute type 6 has an invalid length. [ 1617.200434][T31753] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9048'. [ 1617.236324][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1617.252929][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1617.283424][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1617.325664][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.370575][T31435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1617.424323][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1617.448657][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1617.510147][T31435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.547686][T31435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.583816][T31435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.606711][T31435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.850728][ T9999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.870159][ T9999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.944106][T10021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1618.048607][ T9974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1618.116654][ T9974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1618.150624][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1618.427518][T31782] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8957'. [ 1618.853119][T31791] -1: renamed from syzkaller0 [ 1618.971437][T31798] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.9058'. [ 1619.584345][T31805] netlink: 'syz.1.9061': attribute type 21 has an invalid length. [ 1619.616165][T31805] netlink: 'syz.1.9061': attribute type 6 has an invalid length. [ 1619.690211][T31805] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9061'. [ 1619.841038][T31808] netlink: 'syz.4.9062': attribute type 10 has an invalid length. [ 1619.914955][T31808] netlink: 168 bytes leftover after parsing attributes in process `syz.4.9062'. [ 1621.394992][T31847] netlink: 'syz.0.9074': attribute type 11 has an invalid length. [ 1621.454375][T31847] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9074'. [ 1621.501258][T31854] netlink: 'syz.3.9077': attribute type 21 has an invalid length. [ 1621.546867][T31854] netlink: 'syz.3.9077': attribute type 6 has an invalid length. [ 1621.569300][T31854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9077'. [ 1622.558419][T31891] FAULT_INJECTION: forcing a failure. [ 1622.558419][T31891] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.571728][T31891] CPU: 0 PID: 31891 Comm: syz.4.9088 Not tainted syzkaller #0 [ 1622.579243][T31891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1622.589435][T31891] Call Trace: [ 1622.592750][T31891] [ 1622.595714][T31891] dump_stack_lvl+0x188/0x24e [ 1622.600570][T31891] ? trace_event_raw_event_lock+0x250/0x250 [ 1622.606902][T31891] ? show_regs_print_info+0x12/0x12 [ 1622.612362][T31891] ? load_image+0x400/0x400 [ 1622.616991][T31891] ? fib_rules_lookup+0x98/0xb40 [ 1622.621980][T31891] should_fail_ex+0x399/0x4d0 [ 1622.626703][T31891] should_failslab+0x5/0x20 [ 1622.631280][T31891] slab_pre_alloc_hook+0x59/0x310 [ 1622.636356][T31891] kmem_cache_alloc+0x56/0x2f0 [ 1622.641157][T31891] ? dst_alloc+0x101/0x160 [ 1622.645702][T31891] dst_alloc+0x101/0x160 [ 1622.650076][T31891] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 1622.656186][T31891] ? ip_route_output_key_hash+0x139/0x330 [ 1622.661945][T31891] ip_route_output_key_hash+0x1ef/0x330 [ 1622.667527][T31891] ? ip_route_input_rcu+0x3160/0x3160 [ 1622.672944][T31891] ? skb_crc32c_csum_help+0x520/0x520 [ 1622.678359][T31891] ? bpf_lsm_xfrm_decode_session+0x5/0x10 [ 1622.684308][T31891] xfrmi_xmit+0x37d/0x1660 [ 1622.688948][T31891] ? xfrmi_dev_uninit+0x1f0/0x1f0 [ 1622.694134][T31891] dev_hard_start_xmit+0x262/0x870 [ 1622.699908][T31891] __dev_queue_xmit+0x1aa3/0x37c0 [ 1622.704995][T31891] ? __dev_queue_xmit+0x26b/0x37c0 [ 1622.710249][T31891] ? netdev_core_pick_tx+0x340/0x340 [ 1622.715657][T31891] ? packet_parse_headers+0x7b8/0xab0 [ 1622.721107][T31891] ? packet_parse_headers+0x7c9/0xab0 [ 1622.726606][T31891] ? __virt_addr_valid+0x188/0x540 [ 1622.731790][T31891] ? __check_object_size+0x500/0xa40 [ 1622.737138][T31891] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 1622.742953][T31891] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 1622.749023][T31891] ? skb_put+0x117/0x210 [ 1622.753430][T31891] packet_sendmsg+0x3bc3/0x4e60 [ 1622.758456][T31891] ? __might_sleep+0xd0/0xd0 [ 1622.763218][T31891] ? trace_event_raw_event_lock+0x250/0x250 [ 1622.769198][T31891] ? aa_sk_perm+0x81f/0x950 [ 1622.773788][T31891] ? packet_getsockopt+0x9a0/0x9a0 [ 1622.778967][T31891] ? aa_sock_msg_perm+0x94/0x150 [ 1622.784045][T31891] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1622.789413][T31891] ? security_socket_sendmsg+0x7c/0xa0 [ 1622.795088][T31891] ? packet_getsockopt+0x9a0/0x9a0 [ 1622.800249][T31891] ____sys_sendmsg+0x5be/0x970 [ 1622.805149][T31891] ? __sys_sendmsg_sock+0x30/0x30 [ 1622.810505][T31891] ? __import_iovec+0x315/0x500 [ 1622.815409][T31891] ? import_iovec+0x6f/0xa0 [ 1622.820333][T31891] ___sys_sendmsg+0x2a2/0x360 [ 1622.825114][T31891] ? __sys_sendmsg+0x290/0x290 [ 1622.829980][T31891] ? __lock_acquire+0x7d10/0x7d10 [ 1622.835182][T31891] __se_sys_sendmsg+0x1bb/0x2a0 [ 1622.840227][T31891] ? ct_nmi_exit+0x145/0x1c0 [ 1622.844881][T31891] ? __x64_sys_sendmsg+0x80/0x80 [ 1622.850068][T31891] ? lockdep_hardirqs_on+0x94/0x140 [ 1622.855428][T31891] do_syscall_64+0x4c/0xa0 [ 1622.859957][T31891] ? clear_bhb_loop+0x60/0xb0 [ 1622.864961][T31891] ? clear_bhb_loop+0x60/0xb0 [ 1622.869891][T31891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1622.876135][T31891] RIP: 0033:0x7fcebc39cdd9 [ 1622.880694][T31891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1622.901149][T31891] RSP: 002b:00007fcebd178028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1622.909938][T31891] RAX: ffffffffffffffda RBX: 00007fcebc615fa0 RCX: 00007fcebc39cdd9 [ 1622.917960][T31891] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000003 [ 1622.925964][T31891] RBP: 00007fcebd178090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.934151][T31891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.942359][T31891] R13: 00007fcebc616038 R14: 00007fcebc615fa0 R15: 00007ffffe9d9f88 [ 1622.950401][T31891] [ 1623.018343][T31894] netlink: 22 bytes leftover after parsing attributes in process `syz.1.9089'. [ 1623.736744][T31910] netlink: 'syz.2.9092': attribute type 21 has an invalid length. [ 1623.823616][T31910] netlink: 'syz.2.9092': attribute type 6 has an invalid length. [ 1623.866639][T31910] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9092'. [ 1626.069707][T31958] netlink: 'syz.3.9104': attribute type 19 has an invalid length. [ 1626.206136][T31965] netlink: 'syz.1.9106': attribute type 21 has an invalid length. [ 1626.266599][T31965] netlink: 'syz.1.9106': attribute type 6 has an invalid length. [ 1626.346757][T31965] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9106'. [ 1626.429925][T31963] device syzkaller0 entered promiscuous mode [ 1626.563867][T31963] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1626.669036][T31976] netlink: 'syz.4.9108': attribute type 21 has an invalid length. [ 1626.705457][T31976] netlink: 'syz.4.9108': attribute type 6 has an invalid length. [ 1626.736737][T31976] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9108'. [ 1627.157328][T31997] device lo left promiscuous mode [ 1627.619188][T32013] netlink: 'syz.0.9118': attribute type 19 has an invalid length. [ 1627.812531][T32020] netlink: 'syz.3.9121': attribute type 21 has an invalid length. [ 1627.848287][T32020] netlink: 'syz.3.9121': attribute type 6 has an invalid length. [ 1627.912359][T32020] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9121'. [ 1627.949998][T32024] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.9123'. [ 1627.977888][T32024] openvswitch: netlink: Flow actions attr not present in new flow. [ 1629.729342][T32050] FAULT_INJECTION: forcing a failure. [ 1629.729342][T32050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1629.760665][T32050] CPU: 1 PID: 32050 Comm: syz.4.9132 Not tainted syzkaller #0 [ 1629.768217][T32050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1629.778763][T32050] Call Trace: [ 1629.782693][T32050] [ 1629.785755][T32050] dump_stack_lvl+0x188/0x24e [ 1629.790489][T32050] ? show_regs_print_info+0x12/0x12 [ 1629.795910][T32050] ? load_image+0x400/0x400 [ 1629.800468][T32050] ? __lock_acquire+0x7d10/0x7d10 [ 1629.805655][T32050] should_fail_ex+0x399/0x4d0 [ 1629.810676][T32050] _copy_from_user+0x2c/0x170 [ 1629.815403][T32050] __sys_bpf+0x2ea/0x780 [ 1629.819699][T32050] ? bpf_link_show_fdinfo+0x380/0x380 [ 1629.825130][T32050] ? lock_chain_count+0x20/0x20 [ 1629.830033][T32050] __x64_sys_bpf+0x78/0x90 [ 1629.834497][T32050] do_syscall_64+0x4c/0xa0 [ 1629.838954][T32050] ? clear_bhb_loop+0x60/0xb0 [ 1629.843670][T32050] ? clear_bhb_loop+0x60/0xb0 [ 1629.848498][T32050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1629.854890][T32050] RIP: 0033:0x7fcebc39cdd9 [ 1629.859361][T32050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1629.879011][T32050] RSP: 002b:00007fcebd178028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1629.887549][T32050] RAX: ffffffffffffffda RBX: 00007fcebc615fa0 RCX: 00007fcebc39cdd9 [ 1629.895642][T32050] RDX: 0000000000000010 RSI: 00002000000005c0 RDI: 000000000000000f [ 1629.906099][T32050] RBP: 00007fcebd178090 R08: 0000000000000000 R09: 0000000000000000 [ 1629.914213][T32050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1629.922442][T32050] R13: 00007fcebc616038 R14: 00007fcebc615fa0 R15: 00007ffffe9d9f88 [ 1629.931392][T32050] [ 1629.963398][T32052] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1629.977397][T32055] netlink: 'syz.3.9134': attribute type 21 has an invalid length. [ 1630.019082][T32055] netlink: 'syz.3.9134': attribute type 6 has an invalid length. [ 1630.027803][T32055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9134'. [ 1630.366126][T32058] netlink: 188 bytes leftover after parsing attributes in process `syz.1.9135'. [ 1630.392692][T32058] ksmbd: Unknown IPC event: 10, ignore. [ 1631.026094][T32082] netlink: 'syz.2.9141': attribute type 19 has an invalid length. [ 1631.349591][T32095] netlink: 'syz.3.9148': attribute type 21 has an invalid length. [ 1631.387168][T32095] netlink: 'syz.3.9148': attribute type 6 has an invalid length. [ 1631.417969][T32095] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9148'. [ 1631.458872][T32091] netlink: 'syz.0.9146': attribute type 21 has an invalid length. [ 1631.482945][T32091] netlink: 'syz.0.9146': attribute type 6 has an invalid length. [ 1631.531694][T32091] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9146'. [ 1631.875591][T32114] netlink: 'syz.3.9153': attribute type 2 has an invalid length. [ 1631.907819][T32114] netlink: 116 bytes leftover after parsing attributes in process `syz.3.9153'. [ 1635.229576][T32127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9160'. [ 1635.833850][T32135] netlink: 'syz.1.9162': attribute type 21 has an invalid length. [ 1635.884081][T32139] netlink: 'syz.0.9164': attribute type 29 has an invalid length. [ 1635.901942][T32135] netlink: 'syz.1.9162': attribute type 6 has an invalid length. [ 1635.928780][T32135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9162'. [ 1636.012861][T32139] netlink: 'syz.0.9164': attribute type 29 has an invalid length. [ 1636.087137][T32142] netlink: 'syz.0.9164': attribute type 10 has an invalid length. [ 1636.721834][T32142] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1636.767101][T32142] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1636.788954][T32142] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1636.802218][T32142] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1636.809538][T32143] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9165'. [ 1636.826750][T32143] device hsr_slave_0 left promiscuous mode [ 1636.834239][T32143] device hsr_slave_1 left promiscuous mode [ 1636.968606][T32144] netlink: 'syz.0.9164': attribute type 15 has an invalid length. [ 1636.986657][T32144] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.9164'. [ 1637.376753][T32161] netlink: 'syz.2.9172': attribute type 12 has an invalid length. [ 1637.393748][T32163] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.9173'. [ 1637.595417][T32167] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9175'. [ 1637.829032][T32177] netlink: 'syz.0.9179': attribute type 21 has an invalid length. [ 1637.922443][T32177] netlink: 'syz.0.9179': attribute type 6 has an invalid length. [ 1637.937518][T32177] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9179'. [ 1637.950271][T32179] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9181'. [ 1638.098045][T32184] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9181'. [ 1638.144165][T32186] netlink: 'syz.3.9182': attribute type 29 has an invalid length. [ 1638.338662][T32188] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9183'. [ 1638.372941][T32188] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1638.540054][T32199] pimreg1: tun_chr_ioctl cmd 1074025673 [ 1638.614521][T32202] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1639.187658][T32215] tap0: tun_chr_ioctl cmd 1074025677 [ 1639.202555][T32215] tap0: linktype set to 773 [ 1640.528006][T32249] __nla_validate_parse: 4 callbacks suppressed [ 1640.528027][T32249] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.9200'. [ 1640.723775][T32259] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9206'. [ 1640.750432][T32259] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1642.197726][T32289] FAULT_INJECTION: forcing a failure. [ 1642.197726][T32289] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.218114][T32289] CPU: 1 PID: 32289 Comm: syz.0.9215 Not tainted syzkaller #0 [ 1642.225680][T32289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1642.235993][T32289] Call Trace: [ 1642.239380][T32289] [ 1642.242464][T32289] dump_stack_lvl+0x188/0x24e [ 1642.247246][T32289] ? show_regs_print_info+0x12/0x12 [ 1642.252527][T32289] ? load_image+0x400/0x400 [ 1642.257116][T32289] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1642.263202][T32289] should_fail_ex+0x399/0x4d0 [ 1642.267981][T32289] should_failslab+0x5/0x20 [ 1642.272545][T32289] slab_pre_alloc_hook+0x59/0x310 [ 1642.277745][T32289] kmem_cache_alloc+0x56/0x2f0 [ 1642.282571][T32289] ? __build_skb+0x2a/0x3c0 [ 1642.287192][T32289] __build_skb+0x2a/0x3c0 [ 1642.291714][T32289] build_skb+0x1e/0x230 [ 1642.295977][T32289] bpf_prog_test_run_skb+0x37e/0x12a0 [ 1642.301449][T32289] ? __fget_files+0x28/0x4b0 [ 1642.306171][T32289] ? __fget_files+0x43d/0x4b0 [ 1642.310970][T32289] ? cpu_online+0xa0/0xa0 [ 1642.315370][T32289] bpf_prog_test_run+0x31e/0x390 [ 1642.320392][T32289] __sys_bpf+0x62b/0x780 [ 1642.325236][T32289] ? bpf_link_show_fdinfo+0x380/0x380 [ 1642.330823][T32289] ? lock_chain_count+0x20/0x20 [ 1642.335947][T32289] __x64_sys_bpf+0x78/0x90 [ 1642.340458][T32289] do_syscall_64+0x4c/0xa0 [ 1642.344954][T32289] ? clear_bhb_loop+0x60/0xb0 [ 1642.349697][T32289] ? clear_bhb_loop+0x60/0xb0 [ 1642.354457][T32289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1642.360731][T32289] RIP: 0033:0x7fb22059cdd9 [ 1642.365248][T32289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1642.385006][T32289] RSP: 002b:00007fb22153d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1642.393596][T32289] RAX: ffffffffffffffda RBX: 00007fb220815fa0 RCX: 00007fb22059cdd9 [ 1642.401644][T32289] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 1642.409689][T32289] RBP: 00007fb22153d090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.417867][T32289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1642.426046][T32289] R13: 00007fb220816038 R14: 00007fb220815fa0 R15: 00007fff6b1c9598 [ 1642.434314][T32289] [ 1642.540984][T32292] validate_nla: 9 callbacks suppressed [ 1642.541029][T32292] netlink: 'syz.4.9216': attribute type 21 has an invalid length. [ 1642.974256][T32305] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9221'. [ 1643.798484][T32317] netlink: 'syz.1.9223': attribute type 9 has an invalid length. [ 1644.332245][T32339] FAULT_INJECTION: forcing a failure. [ 1644.332245][T32339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1644.445834][T32339] CPU: 1 PID: 32339 Comm: syz.1.9229 Not tainted syzkaller #0 [ 1644.453460][T32339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1644.463669][T32339] Call Trace: [ 1644.467004][T32339] [ 1644.469983][T32339] dump_stack_lvl+0x188/0x24e [ 1644.475019][T32339] ? show_regs_print_info+0x12/0x12 [ 1644.480307][T32339] ? load_image+0x400/0x400 [ 1644.484978][T32339] ? __lock_acquire+0x7d10/0x7d10 [ 1644.490566][T32339] should_fail_ex+0x399/0x4d0 [ 1644.495882][T32339] _copy_from_user+0x2c/0x170 [ 1644.500841][T32339] __sys_bpf+0x2ea/0x780 [ 1644.505287][T32339] ? bpf_link_show_fdinfo+0x380/0x380 [ 1644.510755][T32339] ? lock_chain_count+0x20/0x20 [ 1644.515667][T32339] __x64_sys_bpf+0x78/0x90 [ 1644.520157][T32339] do_syscall_64+0x4c/0xa0 [ 1644.524663][T32339] ? clear_bhb_loop+0x60/0xb0 [ 1644.529413][T32339] ? clear_bhb_loop+0x60/0xb0 [ 1644.534306][T32339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1644.540565][T32339] RIP: 0033:0x7fe81ff9cdd9 [ 1644.545097][T32339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1644.564777][T32339] RSP: 002b:00007fe820e0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1644.573442][T32339] RAX: ffffffffffffffda RBX: 00007fe820215fa0 RCX: 00007fe81ff9cdd9 [ 1644.581505][T32339] RDX: 0000000000000010 RSI: 00002000000005c0 RDI: 000000000000000f [ 1644.589980][T32339] RBP: 00007fe820e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1644.598058][T32339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.606187][T32339] R13: 00007fe820216038 R14: 00007fe820215fa0 R15: 00007ffc24e67ba8 [ 1644.614789][T32339] [ 1644.879898][T32346] FAULT_INJECTION: forcing a failure. [ 1644.879898][T32346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1644.932608][T32346] CPU: 0 PID: 32346 Comm: syz.1.9234 Not tainted syzkaller #0 [ 1644.940404][T32346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1644.951067][T32346] Call Trace: [ 1644.954432][T32346] [ 1644.957644][T32346] dump_stack_lvl+0x188/0x24e [ 1644.962414][T32346] ? show_regs_print_info+0x12/0x12 [ 1644.967959][T32346] ? load_image+0x400/0x400 [ 1644.972540][T32346] ? __lock_acquire+0x7d10/0x7d10 [ 1644.977680][T32346] ? lockdep_hardirqs_on+0x94/0x140 [ 1644.982979][T32346] should_fail_ex+0x399/0x4d0 [ 1644.987766][T32346] _copy_from_user+0x2c/0x170 [ 1644.992794][T32346] __sys_bpf+0x2ea/0x780 [ 1644.997294][T32346] ? bpf_link_show_fdinfo+0x380/0x380 [ 1645.003064][T32346] ? lock_chain_count+0x20/0x20 [ 1645.008346][T32346] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1645.014801][T32346] __x64_sys_bpf+0x78/0x90 [ 1645.019494][T32346] do_syscall_64+0x4c/0xa0 [ 1645.024013][T32346] ? clear_bhb_loop+0x60/0xb0 [ 1645.028875][T32346] ? clear_bhb_loop+0x60/0xb0 [ 1645.033813][T32346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1645.039775][T32346] RIP: 0033:0x7fe81ff9cdd9 [ 1645.044435][T32346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1645.064458][T32346] RSP: 002b:00007fe820e0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1645.073066][T32346] RAX: ffffffffffffffda RBX: 00007fe820215fa0 RCX: 00007fe81ff9cdd9 [ 1645.081282][T32346] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1645.089319][T32346] RBP: 00007fe820e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1645.097717][T32346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.106271][T32346] R13: 00007fe820216038 R14: 00007fe820215fa0 R15: 00007ffc24e67ba8 [ 1645.114765][T32346] [ 1645.491214][T32354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9237'. [ 1645.585962][T32352] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9236'. [ 1645.700004][T32359] device wlan1 entered promiscuous mode [ 1645.937052][T32369] netlink: 'syz.0.9242': attribute type 12 has an invalid length. [ 1646.253165][T32371] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9243'. [ 1646.571334][T32379] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.9245'. [ 1646.828138][T32370] delete_channel: no stack [ 1647.161858][T32385] syz.3.9248[32385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1647.162029][T32385] syz.3.9248[32385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1647.191933][T32386] syz.3.9248[32386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1647.218369][T32386] syz.3.9248[32386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1647.669943][T32398] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9251'. [ 1647.912777][T32409] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9256'. [ 1648.224718][T32414] netlink: 'syz.4.9257': attribute type 10 has an invalid length. [ 1648.804921][T32436] FAULT_INJECTION: forcing a failure. [ 1648.804921][T32436] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.893212][T32436] CPU: 0 PID: 32436 Comm: syz.0.9266 Not tainted syzkaller #0 [ 1648.900867][T32436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1648.911339][T32436] Call Trace: [ 1648.914941][T32436] [ 1648.917932][T32436] dump_stack_lvl+0x188/0x24e [ 1648.924027][T32436] ? show_regs_print_info+0x12/0x12 [ 1648.929440][T32436] ? load_image+0x400/0x400 [ 1648.934209][T32436] ? __might_sleep+0xd0/0xd0 [ 1648.938952][T32436] ? __lock_acquire+0x7d10/0x7d10 [ 1648.944057][T32436] ? mark_lock+0x94/0x320 [ 1648.948600][T32436] should_fail_ex+0x399/0x4d0 [ 1648.953475][T32436] should_failslab+0x5/0x20 [ 1648.958039][T32436] slab_pre_alloc_hook+0x59/0x310 [ 1648.963128][T32436] ? trace_call_bpf+0xbf/0x6b0 [ 1648.967959][T32436] ? __get_vm_area_node+0x122/0x330 [ 1648.973310][T32436] __kmem_cache_alloc_node+0x4f/0x260 [ 1648.978949][T32436] ? __get_vm_area_node+0x122/0x330 [ 1648.984234][T32436] kmalloc_node_trace+0x22/0xe0 [ 1648.989177][T32436] __get_vm_area_node+0x122/0x330 [ 1648.994354][T32436] __vmalloc_node_range+0x357/0x13b0 [ 1649.000071][T32436] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1649.006845][T32436] ? free_vm_area+0x50/0x50 [ 1649.011907][T32436] ? end_current_label_crit_section+0x170/0x170 [ 1649.018218][T32436] ? __lock_acquire+0x7d10/0x7d10 [ 1649.023340][T32436] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1649.029057][T32436] __vmalloc+0x76/0x80 [ 1649.034133][T32436] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1649.039765][T32436] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1649.045183][T32436] ? bpf_lsm_capable+0x5/0x10 [ 1649.049909][T32436] bpf_prog_alloc+0x1c/0x1b0 [ 1649.054651][T32436] bpf_prog_load+0x7c9/0x1560 [ 1649.059404][T32436] ? map_freeze+0x390/0x390 [ 1649.063981][T32436] ? __might_fault+0xa6/0x120 [ 1649.068714][T32436] ? __might_fault+0xa6/0x120 [ 1649.073440][T32436] ? __might_fault+0xc2/0x120 [ 1649.078154][T32436] ? __might_fault+0xa6/0x120 [ 1649.082963][T32436] ? bpf_lsm_bpf+0x5/0x10 [ 1649.087435][T32436] ? security_bpf+0x7a/0xa0 [ 1649.091984][T32436] __sys_bpf+0x5b8/0x780 [ 1649.096299][T32436] ? bpf_link_show_fdinfo+0x380/0x380 [ 1649.102267][T32436] ? lock_chain_count+0x20/0x20 [ 1649.107495][T32436] __x64_sys_bpf+0x78/0x90 [ 1649.111978][T32436] do_syscall_64+0x4c/0xa0 [ 1649.116505][T32436] ? clear_bhb_loop+0x60/0xb0 [ 1649.121273][T32436] ? clear_bhb_loop+0x60/0xb0 [ 1649.126008][T32436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1649.131973][T32436] RIP: 0033:0x7fb22059cdd9 [ 1649.136553][T32436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.156490][T32436] RSP: 002b:00007fb22153d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1649.165052][T32436] RAX: ffffffffffffffda RBX: 00007fb220815fa0 RCX: 00007fb22059cdd9 [ 1649.173067][T32436] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1649.181090][T32436] RBP: 00007fb22153d090 R08: 0000000000000000 R09: 0000000000000000 [ 1649.189108][T32436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.197124][T32436] R13: 00007fb220816038 R14: 00007fb220815fa0 R15: 00007fff6b1c9598 [ 1649.205243][T32436] [ 1649.469084][T32436] syz.0.9266: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1649.519036][T32436] CPU: 0 PID: 32436 Comm: syz.0.9266 Not tainted syzkaller #0 [ 1649.526901][T32436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1649.537273][T32436] Call Trace: [ 1649.541157][T32436] [ 1649.544174][T32436] dump_stack_lvl+0x188/0x24e [ 1649.549062][T32436] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1649.555609][T32436] ? show_regs_print_info+0x12/0x12 [ 1649.560904][T32436] ? load_image+0x400/0x400 [ 1649.565493][T32436] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1649.572797][T32436] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1649.580008][T32436] warn_alloc+0x242/0x330 [ 1649.584565][T32436] ? __get_vm_area_node+0x122/0x330 [ 1649.590346][T32436] ? zone_watermark_ok_safe+0x270/0x270 [ 1649.596009][T32436] ? rcu_is_watching+0x11/0xa0 [ 1649.600858][T32436] ? __get_vm_area_node+0x318/0x330 [ 1649.606136][T32436] __vmalloc_node_range+0x37c/0x13b0 [ 1649.611693][T32436] ? free_vm_area+0x50/0x50 [ 1649.616689][T32436] ? end_current_label_crit_section+0x170/0x170 [ 1649.623037][T32436] ? __lock_acquire+0x7d10/0x7d10 [ 1649.628163][T32436] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1649.633865][T32436] __vmalloc+0x76/0x80 [ 1649.637975][T32436] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1649.643573][T32436] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1649.649082][T32436] ? bpf_lsm_capable+0x5/0x10 [ 1649.653902][T32436] bpf_prog_alloc+0x1c/0x1b0 [ 1649.658623][T32436] bpf_prog_load+0x7c9/0x1560 [ 1649.663378][T32436] ? map_freeze+0x390/0x390 [ 1649.667969][T32436] ? __might_fault+0xa6/0x120 [ 1649.672919][T32436] ? __might_fault+0xa6/0x120 [ 1649.677648][T32436] ? __might_fault+0xc2/0x120 [ 1649.682385][T32436] ? __might_fault+0xa6/0x120 [ 1649.687094][T32436] ? bpf_lsm_bpf+0x5/0x10 [ 1649.691677][T32436] ? security_bpf+0x7a/0xa0 [ 1649.696438][T32436] __sys_bpf+0x5b8/0x780 [ 1649.700744][T32436] ? bpf_link_show_fdinfo+0x380/0x380 [ 1649.706195][T32436] ? lock_chain_count+0x20/0x20 [ 1649.711210][T32436] __x64_sys_bpf+0x78/0x90 [ 1649.715688][T32436] do_syscall_64+0x4c/0xa0 [ 1649.720239][T32436] ? clear_bhb_loop+0x60/0xb0 [ 1649.725835][T32436] ? clear_bhb_loop+0x60/0xb0 [ 1649.730571][T32436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1649.736649][T32436] RIP: 0033:0x7fb22059cdd9 [ 1649.741189][T32436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.761269][T32436] RSP: 002b:00007fb22153d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1649.769833][T32436] RAX: ffffffffffffffda RBX: 00007fb220815fa0 RCX: 00007fb22059cdd9 [ 1649.778039][T32436] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1649.786235][T32436] RBP: 00007fb22153d090 R08: 0000000000000000 R09: 0000000000000000 [ 1649.794254][T32436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.802361][T32436] R13: 00007fb220816038 R14: 00007fb220815fa0 R15: 00007fff6b1c9598 [ 1649.810636][T32436] [ 1649.883274][T32436] Mem-Info: [ 1649.889058][T32436] active_anon:15295 inactive_anon:0 isolated_anon:0 [ 1649.889058][T32436] active_file:21567 inactive_file:40559 isolated_file:0 [ 1649.889058][T32436] unevictable:768 dirty:312 writeback:0 [ 1649.889058][T32436] slab_reclaimable:21324 slab_unreclaimable:97140 [ 1649.889058][T32436] mapped:30655 shmem:1362 pagetables:663 [ 1649.889058][T32436] sec_pagetables:0 bounce:0 [ 1649.889058][T32436] kernel_misc_reclaimable:0 [ 1649.889058][T32436] free:1312016 free_pcp:5016 free_cma:0 [ 1650.005916][T32436] Node 0 active_anon:61180kB inactive_anon:0kB active_file:86268kB inactive_file:162032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122620kB dirty:1248kB writeback:0kB shmem:3912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9968kB pagetables:2652kB sec_pagetables:0kB all_unreclaimable? no [ 1650.125985][T32436] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1650.275922][T32448] netlink: 'syz.3.9269': attribute type 21 has an invalid length. [ 1650.311702][T32436] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1650.317233][T32448] netlink: 'syz.3.9269': attribute type 4 has an invalid length. [ 1650.349373][T32436] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1650.349446][T32436] Node 0 DMA32 free:1322276kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:61380kB inactive_anon:0kB active_file:86268kB inactive_file:162032kB unevictable:1536kB writepending:1248kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:12580kB local_pcp:4756kB free_cma:0kB [ 1650.349528][T32436] lowmem_reserve[]: 0 0 1 1 1 [ 1650.349584][T32436] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1650.349652][T32436] lowmem_reserve[]: 0 0 0 0 0 [ 1650.349708][T32436] Node 1 Normal free:3909084kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:7360kB local_pcp:7360kB free_cma:0kB [ 1650.349778][T32436] lowmem_reserve[]: 0 0 0 0 0 [ 1650.349834][T32436] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1650.350016][T32436] Node 0 DMA32: 1195*4kB (UM) 863*8kB (UME) 998*16kB (UME) 1727*32kB (UME) 1251*64kB (UME) 451*128kB (UME) 395*256kB (UM) 128*512kB (UME) 49*1024kB (UME) 14*2048kB (UME) 209*4096kB (UM) = 1322276kB [ 1650.350266][T32436] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1650.350438][T32436] Node 1 Normal: 283*4kB (UE) 66*8kB (UE) 32*16kB (UME) 193*32kB (UME) 69*64kB (UME) 26*128kB (UME) 7*256kB (UM) 6*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3909084kB [ 1650.350690][T32436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1650.350711][T32436] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1650.350732][T32436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1650.350753][T32436] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1650.350774][T32436] 63488 total pagecache pages [ 1650.350786][T32436] 0 pages in swap cache [ 1650.350796][T32436] Free swap = 124996kB [ 1650.350806][T32436] Total swap = 124996kB [ 1650.350817][T32436] 2097051 pages RAM [ 1650.350828][T32436] 0 pages HighMem/MovableOnly [ 1650.350837][T32436] 415209 pages reserved [ 1650.350848][T32436] 0 pages cma reserved [ 1650.777568][T32461] FAULT_INJECTION: forcing a failure. [ 1650.777568][T32461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1650.865016][T32461] CPU: 0 PID: 32461 Comm: syz.4.9273 Not tainted syzkaller #0 [ 1650.872773][T32461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1650.882932][T32461] Call Trace: [ 1650.886280][T32461] [ 1650.889299][T32461] dump_stack_lvl+0x188/0x24e [ 1650.894077][T32461] ? show_regs_print_info+0x12/0x12 [ 1650.899377][T32461] ? load_image+0x400/0x400 [ 1650.903980][T32461] ? __lock_acquire+0x7d10/0x7d10 [ 1650.909123][T32461] should_fail_ex+0x399/0x4d0 [ 1650.913996][T32461] _copy_from_user+0x2c/0x170 [ 1650.918870][T32461] ___sys_sendmsg+0x1c3/0x360 [ 1650.923672][T32461] ? __sys_sendmsg+0x290/0x290 [ 1650.928783][T32461] ? __lock_acquire+0x7d10/0x7d10 [ 1650.934066][T32461] __se_sys_sendmsg+0x1bb/0x2a0 [ 1650.939289][T32461] ? __x64_sys_sendmsg+0x80/0x80 [ 1650.944381][T32461] ? lockdep_hardirqs_on+0x94/0x140 [ 1650.949771][T32461] do_syscall_64+0x4c/0xa0 [ 1650.954281][T32461] ? clear_bhb_loop+0x60/0xb0 [ 1650.959319][T32461] ? clear_bhb_loop+0x60/0xb0 [ 1650.964100][T32461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1650.970124][T32461] RIP: 0033:0x7fcebc39cdd9 [ 1650.974623][T32461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1650.994611][T32461] RSP: 002b:00007fcebd178028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1651.003309][T32461] RAX: ffffffffffffffda RBX: 00007fcebc615fa0 RCX: 00007fcebc39cdd9 [ 1651.013033][T32461] RDX: 0000000020000000 RSI: 0000200000002ec0 RDI: 0000000000000005 [ 1651.021171][T32461] RBP: 00007fcebd178090 R08: 0000000000000000 R09: 0000000000000000 [ 1651.029422][T32461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1651.037666][T32461] R13: 00007fcebc616038 R14: 00007fcebc615fa0 R15: 00007ffffe9d9f88 [ 1651.045780][T32461] [ 1652.987579][T32480] netlink: 'syz.0.9281': attribute type 10 has an invalid length. [ 1653.017364][T32480] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9281'. [ 1653.051046][T32480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1653.099063][T32489] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9282'. [ 1653.214218][T32489] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9282'. [ 1653.274091][T32492] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9282'. [ 1653.294386][T32496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9282'. [ 1653.625342][T32506] netlink: 'syz.3.9287': attribute type 10 has an invalid length. [ 1653.738410][T32506] team0: Port device macvlan0 added [ 1653.810026][T32502] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.9285'. [ 1654.247868][T30922] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1654.260440][T30922] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1654.269234][T30922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1654.283782][T30922] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1654.293604][T30922] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1654.301514][T30922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1654.377942][T10024] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.628196][T10024] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.777679][T10024] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.121342][T10024] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.449392][T32537] device bridge_slave_0 left promiscuous mode [ 1655.476810][T32537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.859827][T10024] device 0 left promiscuous mode [ 1655.904396][T32511] chnl_net:caif_netlink_parms(): no params data found [ 1655.959572][T10024] device 1 left promiscuous mode [ 1655.996865][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.1 [ 1656.120453][T10024] tipc: Left network mode [ 1656.140433][T32511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.154364][T32511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.163344][T32511] device bridge_slave_0 entered promiscuous mode [ 1656.177296][T32511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.184605][T32511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.194375][T32511] device bridge_slave_1 entered promiscuous mode [ 1656.386626][T12719] Bluetooth: hci3: command 0x0409 tx timeout [ 1656.439462][T32511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1656.493562][T32511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1656.659573][T32511] team0: Port device team_slave_0 added [ 1656.728603][T32511] team0: Port device team_slave_1 added [ 1656.993589][T32511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.010735][T32511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.109601][T32511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.278572][T32572] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.9302'. [ 1657.825586][T12719] Bluetooth: hci1: ISO packet for unknown connection handle 24 [ 1658.085307][T32511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.116599][T32511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.181525][T32511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.473177][T12719] Bluetooth: hci3: command 0x041b tx timeout [ 1658.522151][T32511] device hsr_slave_0 entered promiscuous mode [ 1658.560988][T32511] device hsr_slave_1 entered promiscuous mode [ 1658.610154][T32511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1658.623481][T32511] Cannot create hsr debugfs directory [ 1658.881141][T32619] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.9314'. [ 1660.179700][T12719] Bluetooth: hci2: ISO packet for unknown connection handle 24 [ 1660.418843][T10024] device veth1_macvtap left promiscuous mode [ 1660.425139][T10024] device veth0_macvtap left promiscuous mode [ 1660.457485][T10024] device veth1_vlan left promiscuous mode [ 1660.480663][T10024] device veth0_vlan left promiscuous mode [ 1660.556678][T12719] Bluetooth: hci3: command 0x040f tx timeout [ 1661.728627][T10024] team0 (unregistering): Port device macvlan0 removed [ 1662.232357][T10024] device team_slave_1 left promiscuous mode [ 1662.247182][T10024] team0 (unregistering): Port device team_slave_1 removed [ 1662.313623][T10024] device team_slave_0 left promiscuous mode [ 1662.326342][T10024] team0 (unregistering): Port device team_slave_0 removed [ 1662.399790][T10024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1662.470960][T10024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1662.636581][T12719] Bluetooth: hci3: command 0x0419 tx timeout [ 1662.924270][T10024] bond0 (unregistering): Released all slaves [ 1663.452619][T32511] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1663.527994][T32511] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1663.876726][T12719] Bluetooth: hci0: ISO packet for unknown connection handle 24 [ 1663.916165][T32511] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1665.013318][T32511] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1665.900753][T32511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1666.001925][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1666.028503][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1666.100890][T32511] 8021q: adding VLAN 0 to HW filter on device team0 [ 1666.179505][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1666.197822][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1666.226153][ T9974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.233522][ T9974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1666.304178][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1666.325489][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1666.357568][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1666.422725][ T9974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.430076][ T9974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1666.536959][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1666.557402][ T9974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1666.640330][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1666.708254][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1666.770694][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1666.798086][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1666.838020][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1666.859341][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1666.931795][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1666.981973][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1667.022366][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1667.059771][T32511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1667.957692][ T305] netlink: 'syz.2.9352': attribute type 10 has an invalid length. [ 1667.999436][ T305] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9352'. [ 1668.058617][ T305] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1668.310936][T10021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1668.320844][T10021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1668.373268][T32511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1668.772958][ T316] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.9356'. [ 1668.791206][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.797672][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.816013][ T316] netlink: zone id is out of range [ 1668.840863][ T316] netlink: zone id is out of range [ 1668.873886][ T316] netlink: zone id is out of range [ 1668.903998][ T316] netlink: zone id is out of range [ 1668.928742][ T324] netlink: 'syz.1.9359': attribute type 29 has an invalid length. [ 1668.948035][ T316] netlink: zone id is out of range [ 1668.969616][ T316] netlink: zone id is out of range [ 1668.985943][ T324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9359'. [ 1669.007222][ T316] netlink: zone id is out of range [ 1669.035489][ T316] netlink: zone id is out of range [ 1669.063433][ T324] netlink: 'syz.1.9359': attribute type 29 has an invalid length. [ 1669.081517][ T316] netlink: zone id is out of range [ 1669.168095][ T324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9359'. [ 1669.996917][ T334] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.9362'. [ 1671.719488][ T334] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1671.734030][ T334] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1671.759076][ T334] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1672.114827][T32748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1672.147312][T32748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1672.275094][T10021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1672.295981][T10021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1672.343928][T10021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1672.364644][T10021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1672.384417][ T349] netlink: 'syz.1.9366': attribute type 39 has an invalid length. [ 1675.073749][T32511] device veth0_vlan entered promiscuous mode [ 1675.140679][T32511] device veth1_vlan entered promiscuous mode [ 1675.243365][ T359] FAULT_INJECTION: forcing a failure. [ 1675.243365][ T359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1675.303502][ T359] CPU: 0 PID: 359 Comm: syz.2.9370 Not tainted syzkaller #0 [ 1675.310887][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1675.321073][ T359] Call Trace: [ 1675.324378][ T359] [ 1675.327353][ T359] dump_stack_lvl+0x188/0x24e [ 1675.332100][ T359] ? show_regs_print_info+0x12/0x12 [ 1675.337347][ T359] ? load_image+0x400/0x400 [ 1675.342068][ T359] ? __lock_acquire+0x7d10/0x7d10 [ 1675.347142][ T359] should_fail_ex+0x399/0x4d0 [ 1675.351862][ T359] _copy_from_user+0x2c/0x170 [ 1675.356581][ T359] iovec_from_user+0x143/0x360 [ 1675.361389][ T359] __import_iovec+0x6d/0x500 [ 1675.366027][ T359] ? __might_fault+0xa6/0x120 [ 1675.370739][ T359] import_iovec+0x6f/0xa0 [ 1675.375100][ T359] ___sys_recvmsg+0x4b6/0x590 [ 1675.379828][ T359] ? __sys_recvmsg+0x290/0x290 [ 1675.384639][ T359] ? common_file_perm+0x171/0x1c0 [ 1675.389701][ T359] ? __fget_files+0x43d/0x4b0 [ 1675.394523][ T359] __x64_sys_recvmsg+0x205/0x2e0 [ 1675.399533][ T359] ? ___sys_recvmsg+0x590/0x590 [ 1675.404438][ T359] ? lockdep_hardirqs_on+0x94/0x140 [ 1675.409671][ T359] do_syscall_64+0x4c/0xa0 [ 1675.414131][ T359] ? clear_bhb_loop+0x60/0xb0 [ 1675.418848][ T359] ? clear_bhb_loop+0x60/0xb0 [ 1675.423577][ T359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1675.429506][ T359] RIP: 0033:0x7f9ded99cdd9 [ 1675.434130][ T359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.454038][ T359] RSP: 002b:00007f9dee78b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1675.462532][ T359] RAX: ffffffffffffffda RBX: 00007f9dedc15fa0 RCX: 00007f9ded99cdd9 [ 1675.470591][ T359] RDX: 00000000000040fd RSI: 0000200000000b00 RDI: 0000000000000003 [ 1675.478613][ T359] RBP: 00007f9dee78b090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.486671][ T359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.494775][ T359] R13: 00007f9dedc16038 R14: 00007f9dedc15fa0 R15: 00007ffcdae72248 [ 1675.502876][ T359] [ 1675.545740][T32511] device veth0_macvtap entered promiscuous mode [ 1675.568502][T32748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1675.595674][T32748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1675.624562][T32748] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1675.641360][T32511] device veth1_macvtap entered promiscuous mode [ 1675.716281][T32511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1675.749461][T32511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.766595][T32511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1675.781636][T32511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.794189][T32511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1675.816565][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1675.847351][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1675.867811][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1675.921066][T32511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1675.946759][T32511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.978176][T32511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.022536][T32511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.063506][T32511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1676.094922][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1676.118729][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1676.156324][T32511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.186297][T32511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.213162][T32511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.246365][T32511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.462029][ T381] net_ratelimit: 702 callbacks suppressed [ 1676.462048][ T381] sock: sock_set_timeout: `syz.1.9377' (pid 381) tries to set negative timeout [ 1676.506276][ T9983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1676.515732][ T9983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.562137][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1676.616048][ T384] netlink: 'syz.3.9378': attribute type 10 has an invalid length. [ 1676.643113][ T384] bridge0: port 3(veth0_to_bond) entered blocking state [ 1676.681621][ T384] bridge0: port 3(veth0_to_bond) entered disabled state [ 1676.701716][ T384] device veth0_to_bond entered promiscuous mode [ 1676.739058][T10007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1676.759644][T10007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.802666][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1677.039800][ T398] FAULT_INJECTION: forcing a failure. [ 1677.039800][ T398] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.110836][ T398] CPU: 0 PID: 398 Comm: syz.0.9383 Not tainted syzkaller #0 [ 1677.118225][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1677.128338][ T398] Call Trace: [ 1677.131711][ T398] [ 1677.134686][ T398] dump_stack_lvl+0x188/0x24e [ 1677.139470][ T398] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1677.146306][ T398] ? show_regs_print_info+0x12/0x12 [ 1677.151590][ T398] ? load_image+0x400/0x400 [ 1677.156264][ T398] should_fail_ex+0x399/0x4d0 [ 1677.161178][ T398] should_failslab+0x5/0x20 [ 1677.165879][ T398] slab_pre_alloc_hook+0x59/0x310 [ 1677.170975][ T398] ? __inet_diag_dump_start+0x8b/0x970 [ 1677.176520][ T398] __kmem_cache_alloc_node+0x4f/0x260 [ 1677.182024][ T398] ? __netlink_dump_start+0x11f/0x6f0 [ 1677.187577][ T398] ? __inet_diag_dump_start+0x8b/0x970 [ 1677.193150][ T398] kmalloc_trace+0x26/0xe0 [ 1677.197735][ T398] __inet_diag_dump_start+0x8b/0x970 [ 1677.203144][ T398] ? netlink_lookup+0x30/0x200 [ 1677.208080][ T398] __netlink_dump_start+0x3f9/0x6f0 [ 1677.213643][ T398] inet_diag_rcv_msg_compat+0x207/0x420 [ 1677.219254][ T398] ? __inet_diag_dump+0x380/0x380 [ 1677.224322][ T398] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1677.230513][ T398] ? sock_diag_rcv_msg+0x142/0x5f0 [ 1677.235691][ T398] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 1677.241503][ T398] ? inet_diag_dump_start_compat+0x20/0x20 [ 1677.247451][ T398] ? inet_diag_dump+0x50/0x50 [ 1677.252272][ T398] ? __inet_diag_dump+0x380/0x380 [ 1677.257601][ T398] sock_diag_rcv_msg+0x3cc/0x5f0 [ 1677.262579][ T398] netlink_rcv_skb+0x1fb/0x450 [ 1677.267387][ T398] ? sock_diag_bind+0xa0/0xa0 [ 1677.272237][ T398] ? netlink_ack+0x1170/0x1170 [ 1677.277089][ T398] ? netlink_deliver_tap+0x2e/0x1b0 [ 1677.282434][ T398] sock_diag_rcv+0x26/0x40 [ 1677.286973][ T398] netlink_unicast+0x74d/0x8d0 [ 1677.291813][ T398] netlink_sendmsg+0x8ad/0xbd0 [ 1677.296626][ T398] ? netlink_getsockopt+0x550/0x550 [ 1677.301884][ T398] ? aa_sock_msg_perm+0x94/0x150 [ 1677.307032][ T398] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1677.312365][ T398] ? security_socket_sendmsg+0x7c/0xa0 [ 1677.317893][ T398] ? netlink_getsockopt+0x550/0x550 [ 1677.323162][ T398] ____sys_sendmsg+0x5be/0x970 [ 1677.327982][ T398] ? __sys_sendmsg_sock+0x30/0x30 [ 1677.333327][ T398] ? __import_iovec+0x315/0x500 [ 1677.338215][ T398] ? import_iovec+0x6f/0xa0 [ 1677.342764][ T398] ___sys_sendmsg+0x2a2/0x360 [ 1677.347682][ T398] ? __sys_sendmsg+0x290/0x290 [ 1677.352547][ T398] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1677.358810][ T398] __se_sys_sendmsg+0x1bb/0x2a0 [ 1677.363798][ T398] ? __x64_sys_sendmsg+0x80/0x80 [ 1677.368832][ T398] ? lockdep_hardirqs_on+0x94/0x140 [ 1677.374077][ T398] do_syscall_64+0x4c/0xa0 [ 1677.378541][ T398] ? clear_bhb_loop+0x60/0xb0 [ 1677.383257][ T398] ? clear_bhb_loop+0x60/0xb0 [ 1677.387987][ T398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1677.394008][ T398] RIP: 0033:0x7fb22059cdd9 [ 1677.398467][ T398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.418828][ T398] RSP: 002b:00007fb22153d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1677.427282][ T398] RAX: ffffffffffffffda RBX: 00007fb220815fa0 RCX: 00007fb22059cdd9 [ 1677.435287][ T398] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1677.443293][ T398] RBP: 00007fb22153d090 R08: 0000000000000000 R09: 0000000000000000 [ 1677.451398][ T398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.459398][ T398] R13: 00007fb220816038 R14: 00007fb220815fa0 R15: 00007fff6b1c9598 [ 1677.467426][ T398] [ 1677.732977][ T416] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9388'. [ 1678.382135][T30922] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1678.395269][T30922] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1678.414172][T30922] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1678.423880][T30922] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1678.438321][T30922] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1678.445860][T30922] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1678.666150][ T426] chnl_net:caif_netlink_parms(): no params data found [ 1678.832639][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1678.855899][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.867721][ T426] device bridge_slave_0 entered promiscuous mode [ 1678.878870][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.902880][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.932462][ T426] device bridge_slave_1 entered promiscuous mode [ 1679.028105][ T426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1679.060482][ T426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1679.199140][ T426] team0: Port device team_slave_0 added [ 1679.242731][ T426] team0: Port device team_slave_1 added [ 1679.334140][ T426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.366635][ T426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1679.446981][ T426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.489889][ T426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.519799][ T426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1679.584592][ T426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1680.222993][ T426] device hsr_slave_0 entered promiscuous mode [ 1680.250944][ T426] device hsr_slave_1 entered promiscuous mode [ 1680.276176][ T426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1680.308122][ T426] Cannot create hsr debugfs directory [ 1680.472407][T12719] Bluetooth: hci4: command 0x0409 tx timeout [ 1680.564367][ T456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9402'. [ 1680.576532][ T456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9402'. [ 1680.596991][ T456] netlink: 33 bytes leftover after parsing attributes in process `syz.1.9402'. [ 1680.616544][ T458] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.9403'. [ 1680.646615][ T456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9402'. [ 1680.653572][ T458] netlink: zone id is out of range [ 1680.667077][ T458] netlink: zone id is out of range [ 1680.670748][ T456] netlink: 33 bytes leftover after parsing attributes in process `syz.1.9402'. [ 1680.724359][ T458] netlink: zone id is out of range [ 1680.735222][ T456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9402'. [ 1680.757943][ T458] netlink: zone id is out of range [ 1680.764012][ T458] netlink: zone id is out of range [ 1680.771962][ T458] netlink: zone id is out of range [ 1680.778969][ T458] netlink: zone id is out of range [ 1680.785067][ T458] netlink: zone id is out of range [ 1680.794344][ T458] netlink: zone id is out of range [ 1680.803768][ T456] netlink: 33 bytes leftover after parsing attributes in process `syz.1.9402'. [ 1681.287651][ T473] netlink: 'syz.3.9409': attribute type 3 has an invalid length. [ 1681.326241][ T473] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9409'. [ 1682.110800][ T426] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.429423][ T426] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.552743][T30922] Bluetooth: hci4: command 0x041b tx timeout [ 1682.638156][ T496] net_ratelimit: 334 callbacks suppressed [ 1682.638213][ T496] netlink: zone id is out of range [ 1682.653362][ T496] netlink: zone id is out of range [ 1682.669791][ T496] netlink: zone id is out of range [ 1682.683494][ T496] netlink: zone id is out of range [ 1682.691245][ T496] netlink: zone id is out of range [ 1682.704180][ T496] netlink: zone id is out of range [ 1682.713873][ T496] netlink: zone id is out of range [ 1682.726905][ T496] netlink: zone id is out of range [ 1682.732409][ T496] netlink: zone id is out of range [ 1682.745489][ T426] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.767820][ T496] netlink: zone id is out of range [ 1682.794943][ T498] __nla_validate_parse: 2 callbacks suppressed [ 1682.794982][ T498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9417'. [ 1682.815679][ T498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9417'. [ 1682.827224][ T498] netlink: 33 bytes leftover after parsing attributes in process `syz.3.9417'. [ 1682.837603][ T498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9417'. [ 1682.849330][ T498] netlink: 33 bytes leftover after parsing attributes in process `syz.3.9417'. [ 1682.880482][ T498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9417'. [ 1682.916781][ T498] netlink: 33 bytes leftover after parsing attributes in process `syz.3.9417'. [ 1683.061585][ T426] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.251626][ T513] netlink: 'syz.4.9421': attribute type 21 has an invalid length. [ 1683.322628][ T513] netlink: 'syz.4.9421': attribute type 6 has an invalid length. [ 1683.371026][ T513] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9421'. [ 1683.401376][ T516] netlink: 'syz.1.9422': attribute type 22 has an invalid length. [ 1683.419350][ T516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9422'. [ 1683.618937][ T426] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1683.665615][ T426] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1683.718936][ T426] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1683.739728][ T426] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1683.775136][ T527] FAULT_INJECTION: forcing a failure. [ 1683.775136][ T527] name failslab, interval 1, probability 0, space 0, times 0 [ 1683.786532][ T522] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9425'. [ 1683.886202][ T527] CPU: 0 PID: 527 Comm: syz.4.9424 Not tainted syzkaller #0 [ 1683.893747][ T527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1683.903989][ T527] Call Trace: [ 1683.907333][ T527] [ 1683.910319][ T527] dump_stack_lvl+0x188/0x24e [ 1683.915069][ T527] ? sctp_sendmsg+0x15b0/0x2940 [ 1683.919993][ T527] ? ___sys_sendmsg+0x2a2/0x360 [ 1683.925615][ T527] ? show_regs_print_info+0x12/0x12 [ 1683.930897][ T527] ? load_image+0x400/0x400 [ 1683.935489][ T527] should_fail_ex+0x399/0x4d0 [ 1683.940236][ T527] should_failslab+0x5/0x20 [ 1683.944802][ T527] slab_pre_alloc_hook+0x59/0x310 [ 1683.949941][ T527] ? sctp_add_bind_addr+0x89/0x350 [ 1683.955123][ T527] __kmem_cache_alloc_node+0x4f/0x260 [ 1683.960653][ T527] ? sctp_add_bind_addr+0x89/0x350 [ 1683.966001][ T527] kmalloc_trace+0x26/0xe0 [ 1683.970596][ T527] sctp_add_bind_addr+0x89/0x350 [ 1683.975609][ T527] sctp_copy_local_addr_list+0x311/0x4e0 [ 1683.981430][ T527] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1683.987235][ T527] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1683.993374][ T527] ? sctp_v4_is_any+0x31/0x50 [ 1683.998116][ T527] ? sctp_copy_one_addr+0x93/0x660 [ 1684.003304][ T527] sctp_bind_addr_copy+0xaf/0x3c0 [ 1684.008517][ T527] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1684.015057][ T527] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1684.020528][ T527] ? __sctp_connect+0xd80/0xd80 [ 1684.025512][ T527] ? __local_bh_enable_ip+0x136/0x1c0 [ 1684.031120][ T527] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1684.036735][ T527] ? security_sctp_bind_connect+0x85/0xb0 [ 1684.042703][ T527] sctp_sendmsg+0x15b0/0x2940 [ 1684.047471][ T527] ? sctp_getsockopt+0x8a0/0x8a0 [ 1684.052530][ T527] ? __lock_acquire+0x7d10/0x7d10 [ 1684.057621][ T527] ? aa_af_perm+0x340/0x340 [ 1684.062361][ T527] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1684.069035][ T527] ? inet_sendmsg+0xe5/0x2f0 [ 1684.073807][ T527] ? inet_send_prepare+0x260/0x260 [ 1684.078984][ T527] ____sys_sendmsg+0x5be/0x970 [ 1684.083824][ T527] ? __sys_sendmsg_sock+0x30/0x30 [ 1684.088944][ T527] ? __import_iovec+0x315/0x500 [ 1684.093909][ T527] ? import_iovec+0x6f/0xa0 [ 1684.098692][ T527] ___sys_sendmsg+0x2a2/0x360 [ 1684.103635][ T527] ? __sys_sendmsg+0x290/0x290 [ 1684.108500][ T527] ? __lock_acquire+0x7d10/0x7d10 [ 1684.113618][ T527] __se_sys_sendmsg+0x1bb/0x2a0 [ 1684.118538][ T527] ? __x64_sys_sendmsg+0x80/0x80 [ 1684.123562][ T527] ? lockdep_hardirqs_on+0x94/0x140 [ 1684.128833][ T527] do_syscall_64+0x4c/0xa0 [ 1684.133332][ T527] ? clear_bhb_loop+0x60/0xb0 [ 1684.138083][ T527] ? clear_bhb_loop+0x60/0xb0 [ 1684.142821][ T527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1684.148781][ T527] RIP: 0033:0x7f7cbcf9cdd9 [ 1684.153303][ T527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1684.172983][ T527] RSP: 002b:00007f7cbdd88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1684.181476][ T527] RAX: ffffffffffffffda RBX: 00007f7cbd215fa0 RCX: 00007f7cbcf9cdd9 [ 1684.189507][ T527] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1684.197627][ T527] RBP: 00007f7cbdd88090 R08: 0000000000000000 R09: 0000000000000000 [ 1684.205747][ T527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1684.213800][ T527] R13: 00007f7cbd216038 R14: 00007f7cbd215fa0 R15: 00007fff41b8e7a8 [ 1684.222107][ T527] [ 1684.626611][T30922] Bluetooth: hci4: command 0x040f tx timeout [ 1684.731289][ T426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1684.857048][T32748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1684.888294][T32748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1684.940752][ T426] 8021q: adding VLAN 0 to HW filter on device team0 [ 1684.991541][T32683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1685.012119][T32683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1685.044334][T32683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.051620][T32683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1685.151912][T32683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1685.190702][ T543] netlink: 'syz.2.9431': attribute type 15 has an invalid length. [ 1685.220026][ T543] netlink: 'syz.2.9431': attribute type 7 has an invalid length. [ 1685.322158][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1685.343483][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1685.375533][T10007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.382894][T10007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1685.475940][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1685.502787][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1685.564695][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1685.629511][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1685.720233][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1685.763416][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1685.795360][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1685.829736][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1685.884158][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1685.988929][ T426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1686.016865][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1686.044124][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1686.058283][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1686.212521][ T552] netlink: 'syz.4.9433': attribute type 21 has an invalid length. [ 1686.256596][ T552] netlink: 'syz.4.9433': attribute type 6 has an invalid length. [ 1686.373239][ T561] FAULT_INJECTION: forcing a failure. [ 1686.373239][ T561] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.437116][ T561] CPU: 1 PID: 561 Comm: syz.3.9436 Not tainted syzkaller #0 [ 1686.444853][ T561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1686.455144][ T561] Call Trace: [ 1686.458470][ T561] [ 1686.461440][ T561] dump_stack_lvl+0x188/0x24e [ 1686.466172][ T561] ? show_regs_print_info+0x12/0x12 [ 1686.471715][ T561] ? load_image+0x400/0x400 [ 1686.476725][ T561] ? __might_sleep+0xd0/0xd0 [ 1686.481623][ T561] ? __lock_acquire+0x7d10/0x7d10 [ 1686.486809][ T561] should_fail_ex+0x399/0x4d0 [ 1686.491547][ T561] should_failslab+0x5/0x20 [ 1686.496110][ T561] slab_pre_alloc_hook+0x59/0x310 [ 1686.501208][ T561] ? __kmem_cache_alloc_node+0x140/0x260 [ 1686.507250][ T561] kmem_cache_alloc_node+0x5a/0x320 [ 1686.512497][ T561] ? __alloc_skb+0xfc/0x7e0 [ 1686.517164][ T561] __alloc_skb+0xfc/0x7e0 [ 1686.522321][ T561] __ip6_append_data+0x2bb8/0x3d40 [ 1686.527719][ T561] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1686.532709][ T561] ? ip6_setup_cork+0xfe0/0xfe0 [ 1686.537605][ T561] ? ip6_setup_cork+0xa30/0xfe0 [ 1686.542520][ T561] ip6_append_data+0x1ea/0x3e0 [ 1686.547434][ T561] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1686.552330][ T561] l2tp_ip6_sendmsg+0x1208/0x1670 [ 1686.557461][ T561] ? l2tp_ip6_destroy_sock+0x50/0x50 [ 1686.563849][ T561] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1686.569902][ T561] ? sock_rps_record_flow+0x19/0x3f0 [ 1686.575244][ T561] ? inet_sendmsg+0x78/0x2f0 [ 1686.579874][ T561] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1686.585381][ T561] ? security_socket_sendmsg+0x7c/0xa0 [ 1686.590999][ T561] ? inet_send_prepare+0x260/0x260 [ 1686.596148][ T561] ____sys_sendmsg+0x5be/0x970 [ 1686.601249][ T561] ? __sys_sendmsg_sock+0x30/0x30 [ 1686.606512][ T561] ? __import_iovec+0x315/0x500 [ 1686.611732][ T561] ? import_iovec+0x6f/0xa0 [ 1686.616306][ T561] ___sys_sendmsg+0x2a2/0x360 [ 1686.621043][ T561] ? __sys_sendmsg+0x290/0x290 [ 1686.625894][ T561] __se_sys_sendmsg+0x1bb/0x2a0 [ 1686.630804][ T561] ? __x64_sys_sendmsg+0x80/0x80 [ 1686.635982][ T561] do_syscall_64+0x4c/0xa0 [ 1686.640451][ T561] ? clear_bhb_loop+0x60/0xb0 [ 1686.645631][ T561] ? clear_bhb_loop+0x60/0xb0 [ 1686.650348][ T561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1686.656395][ T561] RIP: 0033:0x7f928219cdd9 [ 1686.660863][ T561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1686.680783][ T561] RSP: 002b:00007f9283088028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1686.689420][ T561] RAX: ffffffffffffffda RBX: 00007f9282415fa0 RCX: 00007f928219cdd9 [ 1686.697422][ T561] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000005 [ 1686.705521][ T561] RBP: 00007f9283088090 R08: 0000000000000000 R09: 0000000000000000 [ 1686.713528][ T561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1686.721528][ T561] R13: 00007f9282416038 R14: 00007f9282415fa0 R15: 00007ffdd264cd18 [ 1686.729570][ T561] [ 1686.734263][T30922] Bluetooth: hci4: command 0x0419 tx timeout [ 1687.354526][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1687.367407][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1687.396039][ T426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1687.438919][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1687.457782][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1687.502555][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1687.513571][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1687.530999][ T426] device veth0_vlan entered promiscuous mode [ 1687.538995][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1687.557336][ T9983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1687.583306][ T426] device veth1_vlan entered promiscuous mode [ 1687.609772][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1687.621928][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1687.641571][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1687.651886][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1687.663229][ T426] device veth0_macvtap entered promiscuous mode [ 1687.687146][ T426] device veth1_macvtap entered promiscuous mode [ 1687.739933][ T426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.766593][ T426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.813414][ T426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.836136][ T426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.847622][ T426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.908159][ T426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.020663][ T426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.050866][ T589] __nla_validate_parse: 9 callbacks suppressed [ 1688.050890][ T589] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9442'. [ 1688.092559][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1688.109866][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1688.144334][ T589] net_ratelimit: 1019 callbacks suppressed [ 1688.144541][ T589] netlink: zone id is out of range [ 1688.159175][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1688.168071][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1688.228862][ T426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1688.252509][ T426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.272538][ T589] netlink: zone id is out of range [ 1688.275307][ T426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1688.306499][ T426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.312266][ T589] netlink: zone id is out of range [ 1688.340486][ T589] netlink: zone id is out of range [ 1688.351140][ T589] netlink: zone id is out of range [ 1688.359234][ T589] netlink: zone id is out of range [ 1688.369018][ T426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1688.383120][ T589] netlink: zone id is out of range [ 1688.389437][ T426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.401155][ T589] netlink: zone id is out of range [ 1688.410932][ T589] netlink: zone id is out of range [ 1688.423277][ T426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1688.431877][ T589] netlink: zone id is out of range [ 1688.444796][T32683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1688.503302][T32683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1688.541146][ T426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.645098][ T426] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.662998][ T426] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.687883][ T426] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.717029][ T597] netlink: 'syz.2.9446': attribute type 21 has an invalid length. [ 1688.725149][ T597] netlink: 'syz.2.9446': attribute type 6 has an invalid length. [ 1688.751086][ T597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9446'. [ 1688.966585][ T9999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.974597][ T9999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.026271][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1689.119668][T32683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.164910][T32683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.212649][T32683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1689.235077][ T605] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.9452'. [ 1689.596167][ T616] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9391'. [ 1689.934420][ T626] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.9457'. [ 1689.970035][ T626] bridge_slave_1: default FDB implementation only supports local addresses [ 1690.785389][ T640] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.9464'. [ 1691.021141][ T645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9466'. [ 1691.082571][ T645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9466'. [ 1691.141925][ T645] netlink: 33 bytes leftover after parsing attributes in process `syz.2.9466'. [ 1691.248154][ T645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9466'. [ 1691.346706][T12719] Bluetooth: hci5: command 0x0406 tx timeout [ 1695.617796][ T699] __nla_validate_parse: 3 callbacks suppressed [ 1695.617843][ T699] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.9483'. [ 1695.718007][ T698] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9482'. [ 1698.545023][ T713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9486'. [ 1698.595035][ T713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9486'. [ 1698.664667][ T713] netlink: 33 bytes leftover after parsing attributes in process `syz.4.9486'. [ 1698.689550][ T713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9486'. [ 1698.715256][ T713] netlink: 33 bytes leftover after parsing attributes in process `syz.4.9486'. [ 1698.736088][ T713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9486'. [ 1698.786929][ T713] netlink: 33 bytes leftover after parsing attributes in process `syz.4.9486'. [ 1699.670149][ T750] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9512'. [ 1702.933805][ T767] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9507'. [ 1702.950431][ T767] net_ratelimit: 676 callbacks suppressed [ 1702.974796][ T767] netlink: zone id is out of range [ 1703.006966][ T767] netlink: zone id is out of range [ 1703.166763][ T767] netlink: zone id is out of range [ 1703.230733][ T767] netlink: zone id is out of range [ 1703.239983][ T767] netlink: zone id is out of range [ 1703.269007][ T767] netlink: zone id is out of range [ 1703.274804][ T767] netlink: zone id is out of range [ 1703.350403][ T767] netlink: zone id is out of range [ 1703.369200][ T767] netlink: zone id is out of range [ 1703.405062][ T767] netlink: zone id is out of range [ 1703.690258][ T783] netlink: 'syz.0.9514': attribute type 10 has an invalid length. [ 1704.751425][ T788] netlink: 'syz.1.9516': attribute type 39 has an invalid length. [ 1705.497117][ T816] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.9525'. [ 1705.679634][ T822] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9529'. [ 1706.318933][ T840] device lo entered promiscuous mode [ 1706.838350][ T858] netlink: 61955 bytes leftover after parsing attributes in process `syz.2.9543'. [ 1706.853380][ T858] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9543'. [ 1707.295250][ T865] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9546'. [ 1707.329492][ T867] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9545'. [ 1708.514047][ T911] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9559'. [ 1708.524933][ T911] net_ratelimit: 1705 callbacks suppressed [ 1708.525430][ T911] netlink: zone id is out of range [ 1708.538217][ T911] netlink: zone id is out of range [ 1708.544655][ T911] netlink: zone id is out of range [ 1708.570100][ T911] netlink: zone id is out of range [ 1708.607469][ T920] FAULT_INJECTION: forcing a failure. [ 1708.607469][ T920] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.617537][ T911] netlink: zone id is out of range [ 1708.654029][ T911] netlink: zone id is out of range [ 1708.659953][ T920] CPU: 0 PID: 920 Comm: syz.0.9561 Not tainted syzkaller #0 [ 1708.667313][ T920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1708.677423][ T920] Call Trace: [ 1708.680773][ T920] [ 1708.683749][ T920] dump_stack_lvl+0x188/0x24e [ 1708.688506][ T920] ? show_regs_print_info+0x12/0x12 [ 1708.693783][ T920] ? load_image+0x400/0x400 [ 1708.698443][ T920] ? __might_sleep+0xd0/0xd0 [ 1708.703081][ T920] ? __lock_acquire+0x7d10/0x7d10 [ 1708.708171][ T920] should_fail_ex+0x399/0x4d0 [ 1708.712908][ T920] should_failslab+0x5/0x20 [ 1708.717469][ T920] slab_pre_alloc_hook+0x59/0x310 [ 1708.722566][ T920] ? tomoyo_encode+0x27e/0x540 [ 1708.727400][ T920] __kmem_cache_alloc_node+0x4f/0x260 [ 1708.732844][ T920] ? tomoyo_encode+0x27e/0x540 [ 1708.737681][ T920] __kmalloc+0xa0/0x240 [ 1708.741939][ T920] tomoyo_encode+0x27e/0x540 [ 1708.746654][ T920] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1708.752470][ T920] ? tomoyo_path_number_perm+0x205/0x650 [ 1708.758171][ T920] tomoyo_path_number_perm+0x22f/0x650 [ 1708.763737][ T920] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1708.769258][ T920] ? ksys_write+0x1c0/0x250 [ 1708.773826][ T920] ? common_file_perm+0x171/0x1c0 [ 1708.779079][ T920] ? __fget_files+0x28/0x4b0 [ 1708.783741][ T920] ? __fget_files+0x28/0x4b0 [ 1708.788409][ T920] security_file_ioctl+0x6c/0xa0 [ 1708.793538][ T920] __se_sys_ioctl+0x48/0x170 [ 1708.798196][ T920] do_syscall_64+0x4c/0xa0 [ 1708.802694][ T920] ? clear_bhb_loop+0x60/0xb0 [ 1708.807430][ T920] ? clear_bhb_loop+0x60/0xb0 [ 1708.812302][ T920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1708.818253][ T920] RIP: 0033:0x7f348b79cdd9 [ 1708.822976][ T920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1708.842645][ T920] RSP: 002b:00007f348c70b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1708.851644][ T920] RAX: ffffffffffffffda RBX: 00007f348ba15fa0 RCX: 00007f348b79cdd9 [ 1708.860114][ T920] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000033 [ 1708.868142][ T920] RBP: 00007f348c70b090 R08: 0000000000000000 R09: 0000000000000000 [ 1708.876257][ T920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1708.884370][ T920] R13: 00007f348ba16038 R14: 00007f348ba15fa0 R15: 00007ffdd0dac828 [ 1708.892595][ T920] [ 1708.914283][ T911] netlink: zone id is out of range [ 1708.970511][ T911] netlink: zone id is out of range [ 1708.982118][ T911] netlink: zone id is out of range [ 1708.999101][ T911] netlink: zone id is out of range [ 1709.056808][ T920] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1709.177238][ T923] netlink: 'syz.3.9562': attribute type 19 has an invalid length. [ 1709.402985][ T938] netlink: 'syz.2.9565': attribute type 39 has an invalid length. [ 1710.437171][ T974] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.9579'. [ 1710.513399][ T977] netlink: 'syz.1.9580': attribute type 16 has an invalid length. [ 1710.601512][ T977] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9580'. [ 1711.225064][ T993] netlink: 'syz.2.9583': attribute type 21 has an invalid length. [ 1711.309376][ T993] netlink: 'syz.2.9583': attribute type 6 has an invalid length. [ 1711.354126][ T993] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9583'. [ 1711.410807][ T1001] netlink: 'syz.1.9585': attribute type 21 has an invalid length. [ 1711.442417][ T1001] netlink: 'syz.1.9585': attribute type 6 has an invalid length. [ 1711.468592][ T1001] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9585'. [ 1712.016197][ T1021] netlink: 'syz.1.9591': attribute type 11 has an invalid length. [ 1712.053677][ T1021] netlink: 147680 bytes leftover after parsing attributes in process `syz.1.9591'. [ 1712.118712][ T1021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1712.565374][ T1052] netlink: 'syz.2.9600': attribute type 29 has an invalid length. [ 1712.590021][ T1052] netlink: 'syz.2.9600': attribute type 29 has an invalid length. [ 1712.612578][ T1053] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.9599'. [ 1712.849782][ T1052] netlink: 'syz.2.9600': attribute type 29 has an invalid length. [ 1712.917064][ T1058] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.9601'. [ 1713.345646][ T1071] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.9604'. [ 1714.189934][ T1090] validate_nla: 1 callbacks suppressed [ 1714.189976][ T1090] netlink: 'syz.2.9615': attribute type 10 has an invalid length. [ 1715.143418][ T1105] FAULT_INJECTION: forcing a failure. [ 1715.143418][ T1105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1715.168057][ T1105] CPU: 1 PID: 1105 Comm: syz.0.9619 Not tainted syzkaller #0 [ 1715.175543][ T1105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1715.185660][ T1105] Call Trace: [ 1715.188989][ T1105] [ 1715.191969][ T1105] dump_stack_lvl+0x188/0x24e [ 1715.196725][ T1105] ? show_regs_print_info+0x12/0x12 [ 1715.202000][ T1105] ? load_image+0x400/0x400 [ 1715.206589][ T1105] ? __lock_acquire+0x7d10/0x7d10 [ 1715.211682][ T1105] ? __fget_files+0x28/0x4b0 [ 1715.216428][ T1105] should_fail_ex+0x399/0x4d0 [ 1715.221250][ T1105] _copy_from_user+0x2c/0x170 [ 1715.225969][ T1105] bpf_obj_get_info_by_fd+0x45b/0x2f50 [ 1715.231466][ T1105] ? __lock_acquire+0x7d10/0x7d10 [ 1715.236534][ T1105] ? verify_lock_unused+0x140/0x140 [ 1715.241796][ T1105] ? bpf_map_get_fd_by_id+0x310/0x310 [ 1715.247214][ T1105] ? get_pid_task+0x1c/0x1e0 [ 1715.251863][ T1105] ? __might_fault+0xa6/0x120 [ 1715.256583][ T1105] ? __might_fault+0xc2/0x120 [ 1715.261296][ T1105] ? __might_fault+0xa6/0x120 [ 1715.266096][ T1105] ? bpf_lsm_bpf+0x5/0x10 [ 1715.270500][ T1105] ? security_bpf+0x7a/0xa0 [ 1715.275043][ T1105] __sys_bpf+0x505/0x780 [ 1715.279328][ T1105] ? bpf_link_show_fdinfo+0x380/0x380 [ 1715.284748][ T1105] ? lock_chain_count+0x20/0x20 [ 1715.289663][ T1105] __x64_sys_bpf+0x78/0x90 [ 1715.294122][ T1105] do_syscall_64+0x4c/0xa0 [ 1715.298595][ T1105] ? clear_bhb_loop+0x60/0xb0 [ 1715.303308][ T1105] ? clear_bhb_loop+0x60/0xb0 [ 1715.308025][ T1105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1715.313957][ T1105] RIP: 0033:0x7f348b79cdd9 [ 1715.318399][ T1105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1715.338070][ T1105] RSP: 002b:00007f348c70b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1715.346526][ T1105] RAX: ffffffffffffffda RBX: 00007f348ba15fa0 RCX: 00007f348b79cdd9 [ 1715.354526][ T1105] RDX: 0000000000000010 RSI: 00002000000005c0 RDI: 000000000000000f [ 1715.362617][ T1105] RBP: 00007f348c70b090 R08: 0000000000000000 R09: 0000000000000000 [ 1715.370621][ T1105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1715.378648][ T1105] R13: 00007f348ba16038 R14: 00007f348ba15fa0 R15: 00007ffdd0dac828 [ 1715.386672][ T1105] [ 1715.440183][ T1107] netlink: 'syz.4.9620': attribute type 11 has an invalid length. [ 1715.454523][ T1107] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9620'. [ 1715.479318][ T1107] netlink: 'syz.4.9620': attribute type 11 has an invalid length. [ 1715.493091][ T1107] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9620'. [ 1715.603483][ T1106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1715.912023][ T1119] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1715.976271][ T1119] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1716.004111][ T1122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1716.067375][ T1119] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1716.198890][ T1131] net_ratelimit: 335 callbacks suppressed [ 1716.198911][ T1131] sock: sock_set_timeout: `syz.0.9629' (pid 1131) tries to set negative timeout [ 1717.798048][ T1147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9636'. [ 1717.830475][ T1147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9636'. [ 1717.873307][ T1147] netlink: 33 bytes leftover after parsing attributes in process `syz.1.9636'. [ 1717.902976][ T1147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9636'. [ 1717.924006][ T1153] netlink: 'syz.0.9637': attribute type 10 has an invalid length. [ 1718.204441][ T1166] device hsr_slave_0 left promiscuous mode [ 1718.227318][ T1166] device hsr_slave_1 left promiscuous mode [ 1718.555095][ T1177] sock: sock_set_timeout: `syz.4.9647' (pid 1177) tries to set negative timeout [ 1719.018547][ T1187] netlink: zone id is out of range [ 1719.038438][ T1187] netlink: zone id is out of range [ 1719.196516][ T1187] netlink: zone id is out of range [ 1719.202878][ T1187] netlink: zone id is out of range [ 1719.240110][ T1187] netlink: zone id is out of range [ 1719.269281][ T1187] netlink: zone id is out of range [ 1719.317389][ T1187] netlink: zone id is out of range [ 1719.325428][ T1187] netlink: zone id is out of range [ 1719.401194][ T1196] netlink: 'syz.4.9652': attribute type 10 has an invalid length. [ 1720.128150][ T9999] device 0 left promiscuous mode [ 1720.521881][ T1226] __nla_validate_parse: 14 callbacks suppressed [ 1720.522004][ T1226] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9663'. [ 1721.385041][ T9999] device 1 left promiscuous mode [ 1721.476903][ T1226] net_ratelimit: 338 callbacks suppressed [ 1721.476921][ T1226] netlink: zone id is out of range [ 1721.508408][ T1226] netlink: zone id is out of range [ 1721.518565][ T1226] netlink: zone id is out of range [ 1721.523846][ T1226] netlink: zone id is out of range [ 1721.556693][ T1226] netlink: zone id is out of range [ 1721.561888][ T1226] netlink: zone id is out of range [ 1721.598210][ T9999] tipc: Left network mode [ 1721.598281][ T1226] netlink: zone id is out of range [ 1721.690337][ T1237] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.9668'. [ 1721.711085][ T1226] netlink: zone id is out of range [ 1721.727804][ T1226] netlink: zone id is out of range [ 1721.728668][ T1237] netlink: zone id is out of range [ 1722.845429][ T1270] netlink: 'syz.4.9676': attribute type 10 has an invalid length. [ 1722.864183][ T1266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9675'. [ 1722.886887][ T1266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9675'. [ 1722.905647][ T1266] netlink: 33 bytes leftover after parsing attributes in process `syz.0.9675'. [ 1722.917496][ T1266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9675'. [ 1722.928023][ T1266] netlink: 33 bytes leftover after parsing attributes in process `syz.0.9675'. [ 1722.968555][ T1266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9675'. [ 1722.992257][ T1266] netlink: 33 bytes leftover after parsing attributes in process `syz.0.9675'. [ 1723.153675][ T1285] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.9679'. [ 1724.971107][ T1325] netlink: 'syz.1.9697': attribute type 11 has an invalid length. [ 1725.061445][ T1324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1725.166620][ T9999] device vlan0 left promiscuous mode [ 1725.172264][ T9999] @: port 1(vlan0) entered disabled state [ 1725.243623][ T9999] device hsr_slave_0 left promiscuous mode [ 1725.268987][ T9999] device hsr_slave_1 left promiscuous mode [ 1725.400647][ T9999] device veth0_macvtap left promiscuous mode [ 1725.407369][ T9999] device veth1_vlan left promiscuous mode [ 1725.413282][ T9999] device veth0_vlan left promiscuous mode [ 1725.769854][ T1349] __nla_validate_parse: 10 callbacks suppressed [ 1725.769878][ T1349] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9705'. [ 1727.049061][ T1354] net_ratelimit: 1361 callbacks suppressed [ 1727.049083][ T1354] sock: sock_set_timeout: `syz.0.9708' (pid 1354) tries to set negative timeout [ 1727.187134][T30922] Bluetooth: hci1: command 0x0406 tx timeout [ 1727.304615][ T9999] device macvlan0 left promiscuous mode [ 1727.327462][ T9999] team0 (unregistering): Port device macvlan0 removed [ 1727.878077][ T9999] device team_slave_1 left promiscuous mode [ 1727.885192][ T9999] team0 (unregistering): Port device team_slave_1 removed [ 1727.946171][ T9999] device team_slave_0 left promiscuous mode [ 1727.960031][ T9999] team0 (unregistering): Port device team_slave_0 removed [ 1728.052136][ T9999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1728.110502][ T9999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1728.595329][ T9999] bond0 (unregistering): Released all slaves [ 1728.640089][ T1335] netlink: 'syz.1.9700': attribute type 21 has an invalid length. [ 1728.648154][ T1335] netlink: 'syz.1.9700': attribute type 6 has an invalid length. [ 1728.655894][ T1335] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9700'. [ 1728.665537][ T1331] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9699'. [ 1728.681041][ T1342] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9699'. [ 1728.724804][ T1369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9713'. [ 1728.776782][ T1369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9713'. [ 1728.786085][ T1369] netlink: 33 bytes leftover after parsing attributes in process `syz.2.9713'. [ 1728.856779][ T1369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9713'. [ 1728.885971][ T1369] netlink: 33 bytes leftover after parsing attributes in process `syz.2.9713'. [ 1728.927452][ T1369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9713'. [ 1728.965804][ T1379] FAULT_INJECTION: forcing a failure. [ 1728.965804][ T1379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1729.019622][ T1379] CPU: 0 PID: 1379 Comm: syz.3.9716 Not tainted syzkaller #0 [ 1729.027101][ T1379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1729.037310][ T1379] Call Trace: [ 1729.040748][ T1379] [ 1729.043824][ T1379] dump_stack_lvl+0x188/0x24e [ 1729.048592][ T1379] ? show_regs_print_info+0x12/0x12 [ 1729.053875][ T1379] ? load_image+0x400/0x400 [ 1729.058462][ T1379] ? __lock_acquire+0x7d10/0x7d10 [ 1729.063641][ T1379] ? __rcu_read_unlock+0x78/0xd0 [ 1729.068654][ T1379] should_fail_ex+0x399/0x4d0 [ 1729.073409][ T1379] _copy_to_user+0x2c/0x130 [ 1729.077995][ T1379] bpf_test_finish+0x198/0x600 [ 1729.082836][ T1379] ? convert___skb_to_skb+0x580/0x580 [ 1729.088277][ T1379] ? convert_skb_to___skb+0x420/0x420 [ 1729.093803][ T1379] ? __build_skb+0x257/0x3c0 [ 1729.098481][ T1379] bpf_prog_test_run_skb+0xc99/0x12a0 [ 1729.103953][ T1379] ? cpu_online+0xa0/0xa0 [ 1729.108361][ T1379] bpf_prog_test_run+0x31e/0x390 [ 1729.113549][ T1379] __sys_bpf+0x62b/0x780 [ 1729.117870][ T1379] ? bpf_link_show_fdinfo+0x380/0x380 [ 1729.123358][ T1379] ? lock_chain_count+0x20/0x20 [ 1729.128300][ T1379] __x64_sys_bpf+0x78/0x90 [ 1729.132795][ T1379] do_syscall_64+0x4c/0xa0 [ 1729.137284][ T1379] ? clear_bhb_loop+0x60/0xb0 [ 1729.142039][ T1379] ? clear_bhb_loop+0x60/0xb0 [ 1729.146884][ T1379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1729.152860][ T1379] RIP: 0033:0x7f928219cdd9 [ 1729.158057][ T1379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.178335][ T1379] RSP: 002b:00007f9283088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1729.187008][ T1379] RAX: ffffffffffffffda RBX: 00007f9282415fa0 RCX: 00007f928219cdd9 [ 1729.195045][ T1379] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 1729.203084][ T1379] RBP: 00007f9283088090 R08: 0000000000000000 R09: 0000000000000000 [ 1729.211137][ T1379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1729.219190][ T1379] R13: 00007f9282416038 R14: 00007f9282415fa0 R15: 00007ffdd264cd18 [ 1729.227617][ T1379] [ 1729.323923][ T1381] netlink: 'syz.1.9718': attribute type 12 has an invalid length. [ 1729.335848][ T1383] sock: sock_set_timeout: `syz.0.9717' (pid 1383) tries to set negative timeout [ 1729.356716][ T1381] netlink: 'syz.1.9718': attribute type 15 has an invalid length. [ 1730.062435][ T1396] netlink: zone id is out of range [ 1730.072458][ T1396] netlink: zone id is out of range [ 1730.201089][ T1399] netlink: 'syz.1.9724': attribute type 21 has an invalid length. [ 1730.273764][ T1403] sock: sock_set_timeout: `syz.3.9725' (pid 1403) tries to set negative timeout [ 1730.285697][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.292162][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.309563][ T1399] netlink: 'syz.1.9724': attribute type 6 has an invalid length. [ 1730.316056][ T1396] netlink: del zone limit has 4 unknown bytes [ 1730.445105][ T1407] netlink: 'syz.0.9727': attribute type 10 has an invalid length. [ 1730.868554][ T1421] __nla_validate_parse: 10 callbacks suppressed [ 1730.868575][ T1421] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9731'. [ 1731.080786][ T1423] device bridge_slave_1 left promiscuous mode [ 1731.105789][ T1423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.199176][ T1423] device bridge_slave_0 left promiscuous mode [ 1731.259444][ T1423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.397721][ T1437] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.9737'. [ 1731.415546][ T1440] FAULT_INJECTION: forcing a failure. [ 1731.415546][ T1440] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.420292][ T1437] netlink: zone id is out of range [ 1731.450581][ T1437] netlink: zone id is out of range [ 1731.480122][ T1440] CPU: 0 PID: 1440 Comm: syz.1.9738 Not tainted syzkaller #0 [ 1731.487598][ T1440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1731.497796][ T1440] Call Trace: [ 1731.501268][ T1440] [ 1731.504248][ T1440] dump_stack_lvl+0x188/0x24e [ 1731.508989][ T1440] ? show_regs_print_info+0x12/0x12 [ 1731.513498][ T1437] netlink: del zone limit has 4 unknown bytes [ 1731.514241][ T1440] ? load_image+0x400/0x400 [ 1731.514279][ T1440] ? __might_sleep+0xd0/0xd0 [ 1731.514303][ T1440] ? __lock_acquire+0x7d10/0x7d10 [ 1731.514340][ T1440] should_fail_ex+0x399/0x4d0 [ 1731.514370][ T1440] should_failslab+0x5/0x20 [ 1731.514392][ T1440] slab_pre_alloc_hook+0x59/0x310 [ 1731.514420][ T1440] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1731.514451][ T1440] __kmem_cache_alloc_node+0x4f/0x260 [ 1731.514482][ T1440] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1731.565669][ T1440] __kmalloc+0xa0/0x240 [ 1731.569896][ T1440] bpf_prog_test_run_skb+0x234/0x12a0 [ 1731.575383][ T1440] ? lockdep_hardirqs_on+0x94/0x140 [ 1731.580729][ T1440] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1731.586956][ T1440] ? cpu_online+0xa0/0xa0 [ 1731.591348][ T1440] bpf_prog_test_run+0x31e/0x390 [ 1731.596432][ T1440] __sys_bpf+0x62b/0x780 [ 1731.600747][ T1440] ? bpf_link_show_fdinfo+0x380/0x380 [ 1731.606207][ T1440] ? lock_chain_count+0x20/0x20 [ 1731.611114][ T1440] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1731.617253][ T1440] __x64_sys_bpf+0x78/0x90 [ 1731.622341][ T1440] do_syscall_64+0x4c/0xa0 [ 1731.626816][ T1440] ? clear_bhb_loop+0x60/0xb0 [ 1731.631552][ T1440] ? clear_bhb_loop+0x60/0xb0 [ 1731.636294][ T1440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1731.642255][ T1440] RIP: 0033:0x7fe81ff9cdd9 [ 1731.646714][ T1440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1731.666370][ T1440] RSP: 002b:00007fe820e0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1731.674832][ T1440] RAX: ffffffffffffffda RBX: 00007fe820215fa0 RCX: 00007fe81ff9cdd9 [ 1731.682853][ T1440] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1731.690876][ T1440] RBP: 00007fe820e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1731.698896][ T1440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1731.706930][ T1440] R13: 00007fe820216038 R14: 00007fe820215fa0 R15: 00007ffc24e67ba8 [ 1731.715050][ T1440] [ 1731.842524][ T1446] sock: sock_set_timeout: `syz.2.9740' (pid 1446) tries to set negative timeout [ 1731.876919][ T1443] netlink: 'syz.3.9739': attribute type 21 has an invalid length. [ 1731.885070][ T1443] netlink: 'syz.3.9739': attribute type 6 has an invalid length. [ 1731.901611][ T1443] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9739'. [ 1732.102464][ T1450] netlink: 'syz.4.9742': attribute type 10 has an invalid length. [ 1732.255892][ T1456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9745'. [ 1732.708820][ T1471] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.9751'. [ 1732.733301][ T1471] netlink: zone id is out of range [ 1732.745953][ T1471] netlink: zone id is out of range [ 1732.761346][ T1476] sock: sock_set_timeout: `syz.3.9753' (pid 1476) tries to set negative timeout [ 1732.780245][ T1480] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9755'. [ 1732.825712][ T1471] netlink: del zone limit has 4 unknown bytes [ 1733.000905][ T1478] can: request_module (can-proto-5) failed. [ 1736.065241][ T1514] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9766'. [ 1736.096816][ T1514] netlink: zone id is out of range [ 1736.105515][ T1514] netlink: zone id is out of range [ 1736.201756][ T1514] netlink: del zone limit has 4 unknown bytes [ 1737.010495][ T1550] validate_nla: 2 callbacks suppressed [ 1737.010518][ T1550] netlink: 'syz.3.9780': attribute type 21 has an invalid length. [ 1737.065940][ T1550] netlink: 'syz.3.9780': attribute type 4 has an invalid length. [ 1737.097086][ T1554] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9782'. [ 1737.127702][ T1554] netlink: zone id is out of range [ 1737.134011][ T1554] netlink: zone id is out of range [ 1737.263069][ T1554] netlink: del zone limit has 4 unknown bytes [ 1737.452946][ T1566] FAULT_INJECTION: forcing a failure. [ 1737.452946][ T1566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.519320][ T1566] CPU: 0 PID: 1566 Comm: syz.0.9788 Not tainted syzkaller #0 [ 1737.526818][ T1566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1737.536987][ T1566] Call Trace: [ 1737.540428][ T1566] [ 1737.543478][ T1566] dump_stack_lvl+0x188/0x24e [ 1737.548334][ T1566] ? show_regs_print_info+0x12/0x12 [ 1737.553632][ T1566] ? load_image+0x400/0x400 [ 1737.558227][ T1566] ? __lock_acquire+0x7d10/0x7d10 [ 1737.563366][ T1566] should_fail_ex+0x399/0x4d0 [ 1737.568316][ T1566] _copy_from_user+0x2c/0x170 [ 1737.573081][ T1566] __copy_msghdr+0x3b7/0x580 [ 1737.577876][ T1566] ___sys_sendmsg+0x210/0x360 [ 1737.582668][ T1566] ? __sys_sendmsg+0x290/0x290 [ 1737.588189][ T1566] ? __lock_acquire+0x7d10/0x7d10 [ 1737.593406][ T1566] __se_sys_sendmsg+0x1bb/0x2a0 [ 1737.598480][ T1566] ? __x64_sys_sendmsg+0x80/0x80 [ 1737.603607][ T1566] ? lockdep_hardirqs_on+0x94/0x140 [ 1737.608907][ T1566] do_syscall_64+0x4c/0xa0 [ 1737.613409][ T1566] ? clear_bhb_loop+0x60/0xb0 [ 1737.618187][ T1566] ? clear_bhb_loop+0x60/0xb0 [ 1737.622966][ T1566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1737.628960][ T1566] RIP: 0033:0x7f348b79cdd9 [ 1737.633456][ T1566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.653140][ T1566] RSP: 002b:00007f348c70b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1737.661743][ T1566] RAX: ffffffffffffffda RBX: 00007f348ba15fa0 RCX: 00007f348b79cdd9 [ 1737.669800][ T1566] RDX: 0000000020000000 RSI: 0000200000002ec0 RDI: 0000000000000005 [ 1737.677868][ T1566] RBP: 00007f348c70b090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.685926][ T1566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.694173][ T1566] R13: 00007f348ba16038 R14: 00007f348ba15fa0 R15: 00007ffdd0dac828 [ 1737.702282][ T1566] [ 1737.864286][ T1569] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9789'. [ 1737.893208][ T1569] bridge_slave_1: default FDB implementation only supports local addresses [ 1738.253640][ T1584] netlink: 'syz.4.9796': attribute type 21 has an invalid length. [ 1738.276751][ T1584] netlink: 'syz.4.9796': attribute type 6 has an invalid length. [ 1738.285228][ T1584] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9796'. [ 1738.413234][ T1589] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9798'. [ 1738.453889][ T1589] netlink: zone id is out of range [ 1738.486927][ T1589] netlink: zone id is out of range [ 1738.588616][ T1589] netlink: del zone limit has 4 unknown bytes [ 1738.802781][ T1596] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9801'. [ 1738.838561][ T1596] netlink: zone id is out of range [ 1738.844466][ T1596] netlink: zone id is out of range [ 1738.910299][ T1596] netlink: del zone limit has 4 unknown bytes [ 1739.473917][ T1612] netlink: 'syz.1.9807': attribute type 10 has an invalid length. [ 1739.619461][ T1612] team0: Port device macvlan0 added [ 1739.627118][ T1615] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9809'. [ 1740.061674][ T1626] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9812'. [ 1740.088933][ T1626] netlink: zone id is out of range [ 1740.095376][ T1626] netlink: zone id is out of range [ 1740.160475][ T1626] netlink: del zone limit has 4 unknown bytes [ 1740.391376][ T1637] netlink: 'syz.1.9816': attribute type 21 has an invalid length. [ 1740.416656][ T1637] netlink: 'syz.1.9816': attribute type 6 has an invalid length. [ 1740.434877][ T1637] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9816'. [ 1741.235709][ T1650] netlink: 'syz.0.9821': attribute type 10 has an invalid length. [ 1741.641521][ T1652] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.9822'. [ 1741.666737][ T1656] netlink: 'syz.1.9822': attribute type 19 has an invalid length. [ 1742.070436][ T1663] netlink: 'syz.0.9827': attribute type 21 has an invalid length. [ 1742.085582][ T1663] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9827'. [ 1742.096680][ T1663] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9827'. [ 1742.124178][ T1666] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.9828'. [ 1742.141038][ T1666] netlink: zone id is out of range [ 1743.059337][ T1680] netlink: 'syz.0.9833': attribute type 21 has an invalid length. [ 1743.096219][ T1680] netlink: 'syz.0.9833': attribute type 6 has an invalid length. [ 1743.146264][ T1680] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9833'. [ 1743.240792][ T1684] netlink: 'syz.1.9834': attribute type 10 has an invalid length. [ 1743.553293][ T1694] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.9838'. [ 1744.334330][ T1702] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9841'. [ 1744.350483][ T1703] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9840'. [ 1744.360483][ T1702] net_ratelimit: 2 callbacks suppressed [ 1744.360500][ T1702] netlink: zone id is out of range [ 1744.434144][ T1702] netlink: zone id is out of range [ 1744.457772][ T1709] device veth0_to_bond left promiscuous mode [ 1744.479531][ T1709] bridge0: port 3(veth0_to_bond) entered disabled state [ 1744.515705][ T1702] netlink: del zone limit has 4 unknown bytes [ 1744.594819][ T1709] device bridge_slave_1 left promiscuous mode [ 1744.622125][ T1709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.669297][ T1709] device bridge_slave_0 left promiscuous mode [ 1744.676330][ T1709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.462816][ T1735] netlink: 'syz.0.9849': attribute type 21 has an invalid length. [ 1748.471014][ T1735] netlink: 'syz.0.9849': attribute type 6 has an invalid length. [ 1748.480221][ T1735] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9849'. [ 1748.908848][ T1745] netlink: 'syz.1.9852': attribute type 10 has an invalid length. [ 1749.243441][ T1752] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9854'. [ 1749.297092][ T1752] netlink: zone id is out of range [ 1749.302840][ T1752] netlink: zone id is out of range [ 1749.373219][ T1755] netlink: 'syz.1.9855': attribute type 3 has an invalid length. [ 1749.491894][ T1752] netlink: del zone limit has 4 unknown bytes [ 1749.500390][ T1759] device bridge_slave_1 left promiscuous mode [ 1749.510921][ T1755] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.9855'. [ 1749.522560][ T1759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.714626][ T1759] device bridge_slave_0 left promiscuous mode [ 1749.729860][ T1759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.189137][ T1774] netlink: 'syz.2.9863': attribute type 21 has an invalid length. [ 1750.218248][ T1774] netlink: 'syz.2.9863': attribute type 6 has an invalid length. [ 1750.276511][ T1774] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9863'. [ 1750.419035][ T1780] netlink: 'syz.1.9866': attribute type 10 has an invalid length. [ 1750.663745][ T1787] netlink: 'syz.0.9868': attribute type 25 has an invalid length. [ 1750.691756][ T1787] netlink: 'syz.0.9868': attribute type 3 has an invalid length. [ 1750.760633][ T1787] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9868'. [ 1750.945617][ T1792] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.9870'. [ 1750.973086][ T1792] netlink: zone id is out of range [ 1751.001764][ T1792] netlink: zone id is out of range [ 1751.111503][ T1792] netlink: del zone limit has 4 unknown bytes [ 1751.287678][ T1804] netlink: 'syz.1.9872': attribute type 39 has an invalid length. [ 1752.011809][ T1814] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9878'. [ 1752.663484][ T1836] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9886'. [ 1752.699541][ T1836] netlink: zone id is out of range [ 1752.717963][ T1836] netlink: zone id is out of range [ 1752.840864][ T1836] netlink: del zone limit has 4 unknown bytes [ 1753.088978][ T1847] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9892'. [ 1753.406030][ T1854] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9906'. [ 1754.343317][ T1877] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9903'. [ 1754.368431][ T1877] netlink: zone id is out of range [ 1754.404173][ T1877] netlink: zone id is out of range [ 1754.552539][ T1877] netlink: del zone limit has 4 unknown bytes [ 1754.570593][ T1886] validate_nla: 8 callbacks suppressed [ 1754.570614][ T1886] netlink: 'syz.4.9908': attribute type 10 has an invalid length. Stopping sshd: [ 1755.102805][ T1897] netlink: 'syz.3.9912': attribute type 21 has an invalid length. [ 1755.167225][ T1897] netlink: 'syz.3.9912': attribute type 6 has an invalid length. [ 1755.175141][ T1897] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9912'. stopped /usr/sbin/sshd (pid 4027) OK Stopping crond: stopped /usr/sbin/crond (pid 4012) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3932) Stopping network: OK [ 1758.132812][ T1952] netlink: 'syz.3.9921': attribute type 10 has an invalid length. [ 1758.230958][ T1948] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9920'. [ 1758.277853][ T1948] netlink: zone id is out of range [ 1758.308436][ T1948] netlink: zone id is out of range Stopping iptables: [ 1758.411555][ T1948] netlink: del zone limit has 4 unknown bytes OK [ 1758.678599][ T1965] netlink: 'syz.0.9925': attribute type 28 has an invalid length. [ 1758.702748][ T1965] netlink: 'syz.0.9925': attribute type 3 has an invalid length. [ 1758.737913][ T1965] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9925'. [ 1758.761228][ T1966] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.9925'. [ 1758.816980][ T1966] openvswitch: netlink: Key type 386 is out of range max 32 Stopping system message bus: [ 1759.476174][ T1984] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.9932'. [ 1759.535842][ T1984] netlink: zone id is out of range [ 1759.586966][ T1984] netlink: zone id is out of range [ 1759.619794][ T1986] netlink: 'syz.3.9933': attribute type 7 has an invalid length. [ 1759.658985][ T1986] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9933'. [ 1759.684833][ T1984] netlink: del zone limit has 4 unknown bytes [ 1759.804527][ T1990] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9936'. [ 1759.831625][ T1990] netlink: zone id is out of range [ 1759.847728][ T1990] netlink: zone id is out of range [ 1759.953005][ T1990] netlink: del zone limit has 4 unknown bytes done [ 1760.271687][ T2002] netlink: 'syz.0.9942': attribute type 10 has an invalid length. [ 1760.323813][ T2005] netlink: 'syz.4.9941': attribute type 28 has an invalid length. [ 1760.360353][ T2005] netlink: 'syz.4.9941': attribute type 3 has an invalid length. [ 1760.388989][ T2005] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9941'. [ 1760.403981][ T2010] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.9941'. [ 1760.464390][ T2010] openvswitch: netlink: Key type 386 is out of range max 32 [ 1761.073845][ T2028] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9951'. [ 1761.105774][ T2028] netlink: zone id is out of range [ 1761.112156][ T2028] netlink: zone id is out of range [ 1761.144616][ T2028] netlink: zone id is out of range [ 1761.163185][ T2028] netlink: zone id is out of range [ 1761.235788][ T2036] netlink: 'syz.2.9955': attribute type 10 has an invalid length. [ 1761.779468][ T2053] netlink: 'syz.2.9963': attribute type 28 has an invalid length. [ 1761.812865][ T2053] netlink: 'syz.2.9963': attribute type 3 has an invalid length. [ 1761.834875][ T2053] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9963'. [ 1761.870808][ T2057] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.9963'. [ 1762.134528][ T2068] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9967'. [ 1762.342580][ T2074] netlink: 'syz.0.9970': attribute type 10 has an invalid length. Stopping klogd: [ 1763.839608][ T2110] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9984'. [ 1763.915341][ T2116] netlink: 'syz.1.9987': attribute type 10 has an invalid length. [ 1763.955038][ T2115] netlink: 'syz.3.9985': attribute type 28 has an invalid length. OK Stopping acpid: [ 1764.237575][ T2121] team0: Device wg1 is of different type [ 1764.943627][ T2148] __nla_validate_parse: 2 callbacks suppressed [ 1764.943648][ T2148] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9999'. [ 1764.967948][ T2148] net_ratelimit: 290 callbacks suppressed [ 1764.967969][ T2148] netlink: zone id is out of range [ 1765.027944][ T2148] netlink: zone id is out of range [ 1765.079851][ T2148] netlink: zone id is out of range [ 1765.119174][ T2148] netlink: zone id is out of range [ 1765.139260][ T2152] validate_nla: 3 callbacks suppressed [ 1765.139300][ T2152] netlink: 'syz.4.10001': attribute type 10 has an invalid length. [ 1765.155479][ T2148] netlink: zone id is out of range [ 1765.175814][ T2148] netlink: zone id is out of range [ 1765.185810][ T2148] netlink: zone id is out of range [ 1765.232058][ T2148] netlink: zone id is out of range [ 1765.253417][ T2148] netlink: zone id is out of range [ 1765.281842][ T2148] netlink: zone id is out of range [ 1765.332176][ T2156] FAULT_INJECTION: forcing a failure. [ 1765.332176][ T2156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1765.406741][ T2156] CPU: 1 PID: 2156 Comm: syz.3.10003 Not tainted syzkaller #0 [ 1765.414295][ T2156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1765.425014][ T2156] Call Trace: [ 1765.428339][ T2156] [ 1765.431312][ T2156] dump_stack_lvl+0x188/0x24e [ 1765.436101][ T2156] ? show_regs_print_info+0x12/0x12 [ 1765.441365][ T2156] ? load_image+0x400/0x400 [ 1765.445928][ T2156] ? __might_fault+0xa6/0x120 [ 1765.450752][ T2156] should_fail_ex+0x399/0x4d0 [ 1765.455484][ T2156] copyout+0x1b/0x120 [ 1765.459544][ T2156] _copy_to_iter+0x48b/0x1040 [ 1765.464388][ T2156] ? iov_iter_init+0x1f0/0x1f0 [ 1765.469217][ T2156] ? __virt_addr_valid+0x188/0x540 [ 1765.474415][ T2156] ? __virt_addr_valid+0x465/0x540 [ 1765.479849][ T2156] ? __phys_addr_symbol+0x2b/0x70 [ 1765.484947][ T2156] ? __check_object_size+0x500/0xa40 [ 1765.490322][ T2156] __skb_datagram_iter+0xde/0x740 [ 1765.495414][ T2156] ? skb_copy_datagram_iter+0x290/0x290 [ 1765.501127][ T2156] skb_copy_datagram_iter+0xd7/0x290 [ 1765.506471][ T2156] tipc_recvmsg+0x7c8/0x1400 [ 1765.511144][ T2156] ? tipc_send_packet+0x90/0x90 [ 1765.516086][ T2156] ? aa_sock_msg_perm+0x94/0x150 [ 1765.521096][ T2156] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1765.526432][ T2156] ? security_socket_recvmsg+0x85/0xb0 [ 1765.531962][ T2156] ? tipc_send_packet+0x90/0x90 [ 1765.536870][ T2156] ____sys_recvmsg+0x2cb/0x5e0 [ 1765.541717][ T2156] ? __sys_recvmsg_sock+0x40/0x40 [ 1765.546827][ T2156] ? import_iovec+0x6f/0xa0 [ 1765.551385][ T2156] ___sys_recvmsg+0x212/0x590 [ 1765.556185][ T2156] ? __sys_recvmsg+0x290/0x290 [ 1765.561019][ T2156] ? common_file_perm+0x171/0x1c0 [ 1765.566129][ T2156] ? __fget_files+0x43d/0x4b0 [ 1765.570879][ T2156] __x64_sys_recvmsg+0x205/0x2e0 [ 1765.575882][ T2156] ? ___sys_recvmsg+0x590/0x590 [ 1765.580803][ T2156] ? lockdep_hardirqs_on+0x94/0x140 [ 1765.586219][ T2156] do_syscall_64+0x4c/0xa0 [ 1765.590809][ T2156] ? clear_bhb_loop+0x60/0xb0 [ 1765.595531][ T2156] ? clear_bhb_loop+0x60/0xb0 [ 1765.600258][ T2156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1765.606365][ T2156] RIP: 0033:0x7f928219cdd9 [ 1765.610903][ T2156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1765.630646][ T2156] RSP: 002b:00007f9283088028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1765.639194][ T2156] RAX: ffffffffffffffda RBX: 00007f9282415fa0 RCX: 00007f928219cdd9 [ 1765.647216][ T2156] RDX: 00000000000040fd RSI: 0000200000000b00 RDI: 0000000000000003 [ 1765.655241][ T2156] RBP: 00007f9283088090 R08: 0000000000000000 R09: 0000000000000000 [ 1765.663248][ T2156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.671257][ T2156] R13: 00007f9282416038 R14: 00007f9282415fa0 R15: 00007ffdd264cd18 [ 1765.679279][ T2156] [ 1765.731459][ T2160] netlink: 'syz.4.10004': attribute type 28 has an invalid length. [ 1765.740694][T12719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1765.751972][T12719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1765.763512][T12719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1765.774460][T12719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1765.776866][ T2160] netlink: 'syz.4.10004': attribute type 3 has an invalid length. [ 1765.791952][ T2164] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.10004'. [ 1765.803953][T21533] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1765.817590][T21533] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 OK [ 1765.868258][ T2160] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10004'. [ 1765.894656][T32748] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Stopping syslogd: stopped /sbin/syslogd (pid 3620) [ 1766.108557][T32748] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 OK [ 1766.270826][T32748] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.377773][T32748] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.506000][ T2186] netlink: 'syz.1.10013': attribute type 10 has an invalid length. [ 1766.808075][T32748] device 0 left promiscuous mode [ 1766.864058][ T2200] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10017'. [ 1766.942673][ T2161] chnl_net:caif_netlink_parms(): no params data found umount: can't remount debugfs read-only [ 1767.722331][ T2225] netlink: 'syz.0.10026': attribute type 10 has an invalid length. [ 1767.856991][ T2161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.864181][ T2161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.906715][T21533] Bluetooth: hci0: command 0x0409 tx timeout [ 1767.915635][ T2161] device bridge_slave_0 entered promiscuous mode [ 1767.959152][ T2161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.966549][ T2161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.975997][ T2161] device bridge_slave_1 entered promiscuous mode [ 1768.112056][ T2237] FAULT_INJECTION: forcing a failure. [ 1768.112056][ T2237] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.168372][ T2237] CPU: 0 PID: 2237 Comm: syz.0.10031 Not tainted syzkaller #0 [ 1768.175934][ T2237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1768.186040][ T2237] Call Trace: [ 1768.189367][ T2237] [ 1768.192346][ T2237] dump_stack_lvl+0x188/0x24e [ 1768.197093][ T2237] ? show_regs_print_info+0x12/0x12 [ 1768.202376][ T2237] ? load_image+0x400/0x400 [ 1768.206929][ T2237] should_fail_ex+0x399/0x4d0 [ 1768.211670][ T2237] should_failslab+0x5/0x20 [ 1768.216225][ T2237] slab_pre_alloc_hook+0x59/0x310 [ 1768.221314][ T2237] ? __inet_diag_dump_start+0x8b/0x970 [ 1768.226933][ T2237] __kmem_cache_alloc_node+0x4f/0x260 [ 1768.232369][ T2237] ? __netlink_dump_start+0x11f/0x6f0 [ 1768.237809][ T2237] ? __inet_diag_dump_start+0x8b/0x970 [ 1768.243417][ T2237] kmalloc_trace+0x26/0xe0 [ 1768.247933][ T2237] __inet_diag_dump_start+0x8b/0x970 [ 1768.253281][ T2237] ? netlink_lookup+0x30/0x200 [ 1768.258122][ T2237] __netlink_dump_start+0x3f9/0x6f0 [ 1768.263389][ T2237] inet_diag_rcv_msg_compat+0x207/0x420 [ 1768.268993][ T2237] ? __inet_diag_dump+0x380/0x380 [ 1768.274078][ T2237] ? sock_diag_rcv_msg+0x142/0x5f0 [ 1768.279238][ T2237] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 1768.285085][ T2237] ? inet_diag_dump_start_compat+0x20/0x20 [ 1768.290952][ T2237] ? inet_diag_dump+0x50/0x50 [ 1768.295691][ T2237] ? __inet_diag_dump+0x380/0x380 [ 1768.300761][ T2237] sock_diag_rcv_msg+0x3cc/0x5f0 [ 1768.305743][ T2237] netlink_rcv_skb+0x1fb/0x450 [ 1768.310558][ T2237] ? sock_diag_bind+0xa0/0xa0 [ 1768.315271][ T2237] ? netlink_ack+0x1170/0x1170 [ 1768.320181][ T2237] ? __rcu_read_unlock+0x78/0xd0 [ 1768.325240][ T2237] ? netlink_deliver_tap+0x2e/0x1b0 [ 1768.330491][ T2237] sock_diag_rcv+0x26/0x40 [ 1768.334945][ T2237] netlink_unicast+0x74d/0x8d0 [ 1768.339760][ T2237] netlink_sendmsg+0x8ad/0xbd0 [ 1768.344571][ T2237] ? netlink_getsockopt+0x550/0x550 [ 1768.349818][ T2237] ? aa_sock_msg_perm+0x94/0x150 [ 1768.354816][ T2237] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1768.360134][ T2237] ? security_socket_sendmsg+0x7c/0xa0 [ 1768.365635][ T2237] ? netlink_getsockopt+0x550/0x550 [ 1768.371049][ T2237] ____sys_sendmsg+0x5be/0x970 [ 1768.375878][ T2237] ? __sys_sendmsg_sock+0x30/0x30 [ 1768.380972][ T2237] ? __import_iovec+0x315/0x500 [ 1768.385977][ T2237] ? import_iovec+0x6f/0xa0 [ 1768.390520][ T2237] ___sys_sendmsg+0x2a2/0x360 [ 1768.395369][ T2237] ? __sys_sendmsg+0x290/0x290 [ 1768.400195][ T2237] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1768.406866][ T2237] __se_sys_sendmsg+0x1bb/0x2a0 [ 1768.411839][ T2237] ? __x64_sys_sendmsg+0x80/0x80 [ 1768.417031][ T2237] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1768.423002][ T2237] do_syscall_64+0x4c/0xa0 [ 1768.427556][ T2237] ? clear_bhb_loop+0x60/0xb0 [ 1768.432359][ T2237] ? clear_bhb_loop+0x60/0xb0 [ 1768.437081][ T2237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1768.443009][ T2237] RIP: 0033:0x7f348b79cdd9 [ 1768.447472][ T2237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1768.467218][ T2237] RSP: 002b:00007f348c70b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1768.475669][ T2237] RAX: ffffffffffffffda RBX: 00007f348ba15fa0 RCX: 00007f348b79cdd9 [ 1768.483673][ T2237] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1768.491676][ T2237] RBP: 00007f348c70b090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.499687][ T2237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.507777][ T2237] R13: 00007f348ba16038 R14: 00007f348ba15fa0 R15: 00007ffdd0dac828 [ 1768.515904][ T2237] [ 1768.528725][ T2161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.603515][ T2161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1768.666343][ T2161] team0: Port device team_slave_0 added [ 1768.711496][ T2161] team0: Port device team_slave_1 added [ 1768.825698][ T2161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1768.866707][ T2161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1768.968475][ T2161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1769.015381][ T2161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1769.043470][ T2161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1769.113292][ T2161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1769.305014][ T2257] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.10038'. [ 1769.690886][ T2161] device hsr_slave_0 entered promiscuous mode [ 1769.707021][ T2161] device hsr_slave_1 entered promiscuous mode umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read[ 1769.737553][ T2266] netlink: 'syz.3.10040': attribute type 10 has an invalid length. -only umount: can't remount /dev/root read-only [ 1769.832889][T32748] device veth0_to_team left promiscuous mode [ 1769.842232][T32748] Ÿë: port 1(veth0_to_team) entered disabled state The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.41 closed by remote host. [ 1769.986535][T21533] Bluetooth: hci0: command 0x041b tx timeout [ 1770.096934][T32748] device veth1_vlan left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 1771.222772][T32748] team0 (unregistering): Port device team_slave_1 removed [ 1771.273949][T32748] team0 (unregistering): Port device team_slave_0 removed [ 1771.319294][T32748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1771.409017][T32748] team0 (unregistering): Port device bridge_slave_1 removed [ 1771.673899][T32748] bond0 (unregistering): Released all slaves [ 1772.066680][T21533] Bluetooth: hci0: command 0x040f tx timeout [ 1772.171341][ T2268] kvm: exiting hardware virtualization [ 1772.208144][ T2268] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1772.232880][ T2268] ACPI: PM: Preparing to enter system sleep state S5 [ 1772.256726][ T2268] reboot: Power down serialport: VM disconnected.