last executing test programs: 12.460471127s ago: executing program 0 (id=1427): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0xfffffffffffffffe) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r1, &(0x7f0000000740)=ANY=[], 0xffdd) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 7.011451619s ago: executing program 0 (id=1445): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x1d, 0x0, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) 6.680920318s ago: executing program 0 (id=1450): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x100600, 0x7ff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0xa4ff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000010000"], 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}, 0x1}}, 0x80, 0x0}, 0x0) 6.58554547s ago: executing program 3 (id=1451): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019fe88acae69a2ffe69ee517534460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70ea1fd21ba022f3d5876c7cf", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001c40)=""/4138, 0x102a}, {&(0x7f0000000700)=""/159, 0x9f}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f00000002c0)=""/197, 0xc5}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f0000000a80)=""/147, 0x93}, {&(0x7f0000000180)=""/93, 0x5d}], 0x7, 0x0, 0x45}, 0x0) 6.503511512s ago: executing program 0 (id=1452): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/254, 0x26, 0xfe, 0x1}, 0x20) 6.358945675s ago: executing program 0 (id=1455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 6.291277987s ago: executing program 2 (id=1457): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}, 0x0) 6.291187807s ago: executing program 3 (id=1458): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000a80)=@hci={0x1f, 0x500, 0x6}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000013c0)="62031400d70000000010122f1eafbcf72be12b30087f5c582d26116642c4", 0x1e}], 0x1}, 0x4041) 6.132459211s ago: executing program 3 (id=1460): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1}, 0x12200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d64050000000000650404000100000004"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 5.930655696s ago: executing program 3 (id=1462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(r0) socket$kcm(0x2d, 0x2, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x89e0, 0x110e22fff6) 5.3273535s ago: executing program 1 (id=1467): perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6149, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48440, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x11, 0x20000000000000a, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.32712912s ago: executing program 2 (id=1468): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0xc800, 0x40, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x8f, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f088a847e0ffff00124000632f77fbac14fe1688a8030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b62063", 0x0, 0x8024, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 4.92933615s ago: executing program 2 (id=1469): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="660a01000000000061118c000000000085000000cc00000095"], &(0x7f0000000500)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2160) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x12) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 3.721536559s ago: executing program 3 (id=1470): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 3.623432242s ago: executing program 0 (id=1471): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10000, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.611476862s ago: executing program 1 (id=1472): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'erspan0\x00', @random="004023ea1c00"}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) 3.485267105s ago: executing program 2 (id=1473): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) 3.375474168s ago: executing program 1 (id=1474): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x2, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 3.28963637s ago: executing program 1 (id=1475): r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x80108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYRESDEC=r0], 0x50) 3.238126021s ago: executing program 2 (id=1476): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x40009, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x5ea9, 0x0, 0x2, 0xffffffa1, 0xfffc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 3.059128286s ago: executing program 2 (id=1477): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x3, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.058935726s ago: executing program 1 (id=1478): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x7, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) 2.835528931s ago: executing program 1 (id=1479): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 0s ago: executing program 3 (id=1480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f00000002c0)='%pI4 \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2092, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): interface: batadv_slave_0 [ 95.443589][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.469949][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.482629][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.492092][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.519140][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.531554][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.539236][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.566470][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.597079][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.604132][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.633330][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.639440][ T5086] Bluetooth: hci3: command tx timeout [ 95.644658][ T5789] Bluetooth: hci2: command tx timeout [ 95.664693][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.672175][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.699977][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.714097][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.722099][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.733126][ T5086] Bluetooth: hci0: command tx timeout [ 95.756799][ T5789] Bluetooth: hci1: command tx timeout [ 95.757709][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.900107][ T5777] hsr_slave_0: entered promiscuous mode [ 95.908220][ T5777] hsr_slave_1: entered promiscuous mode [ 95.914964][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.923023][ T5777] Cannot create hsr debugfs directory [ 95.947903][ T5775] hsr_slave_0: entered promiscuous mode [ 95.957314][ T5775] hsr_slave_1: entered promiscuous mode [ 95.964635][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.972482][ T5775] Cannot create hsr debugfs directory [ 96.033787][ T5774] hsr_slave_0: entered promiscuous mode [ 96.041166][ T5774] hsr_slave_1: entered promiscuous mode [ 96.047851][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.055505][ T5774] Cannot create hsr debugfs directory [ 96.318327][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.369904][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.412777][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.438865][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.536874][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.548681][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.560391][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.579711][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.660510][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.705536][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.721071][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.742985][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.817893][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.842587][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.867350][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.883284][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.920334][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.005257][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.024825][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.081554][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.088977][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.105640][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.112910][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.124204][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.176079][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.183441][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.235654][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.264729][ T2917] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.272122][ T2917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.313625][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.393263][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.419113][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.426354][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.442929][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.450277][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.467607][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.502082][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.509411][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.560744][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.568593][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.724230][ T5789] Bluetooth: hci3: command tx timeout [ 97.724244][ T5086] Bluetooth: hci2: command tx timeout [ 97.797049][ T5789] Bluetooth: hci0: command tx timeout [ 97.802604][ T5789] Bluetooth: hci1: command tx timeout [ 97.819792][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.985950][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.050917][ T5778] veth0_vlan: entered promiscuous mode [ 98.092395][ T5778] veth1_vlan: entered promiscuous mode [ 98.154492][ T5777] veth0_vlan: entered promiscuous mode [ 98.219101][ T5777] veth1_vlan: entered promiscuous mode [ 98.262859][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.312434][ T5778] veth0_macvtap: entered promiscuous mode [ 98.323579][ T5777] veth0_macvtap: entered promiscuous mode [ 98.355292][ T5778] veth1_macvtap: entered promiscuous mode [ 98.389713][ T5777] veth1_macvtap: entered promiscuous mode [ 98.430589][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.455766][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.473221][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.487136][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.499740][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.519766][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.531464][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.542882][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.555762][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.565272][ T5775] veth0_vlan: entered promiscuous mode [ 98.581586][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.591348][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.601129][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.610546][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.625615][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.636082][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.645506][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.654768][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.676069][ T5775] veth1_vlan: entered promiscuous mode [ 98.820718][ T5774] veth0_vlan: entered promiscuous mode [ 98.842431][ T5774] veth1_vlan: entered promiscuous mode [ 98.944590][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.956231][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.970009][ T5775] veth0_macvtap: entered promiscuous mode [ 99.000057][ T5775] veth1_macvtap: entered promiscuous mode [ 99.087875][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.095895][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.142287][ T5774] veth0_macvtap: entered promiscuous mode [ 99.170996][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.182548][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.194069][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.208563][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.221973][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.231680][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.255607][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.298054][ T5774] veth1_macvtap: entered promiscuous mode [ 99.316245][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.335214][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.346307][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.361920][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.374251][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.400646][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.412329][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.434776][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.444860][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.459899][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.470086][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.509523][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.521604][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.535384][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.560939][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.572022][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.584911][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.598840][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.698785][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.715033][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.726775][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.738284][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.750705][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.784420][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.798168][ T5789] Bluetooth: hci3: command tx timeout [ 99.803907][ T5789] Bluetooth: hci2: command tx timeout [ 99.829396][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.878663][ T5789] Bluetooth: hci0: command tx timeout [ 99.878672][ T5086] Bluetooth: hci1: command tx timeout [ 99.978045][ C1] hrtimer: interrupt took 70697 ns [ 100.041177][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.051207][ T5843] netlink: 668 bytes leftover after parsing attributes in process `syz.1.2'. [ 100.065235][ T5843] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 100.079157][ T5843] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.096802][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.096871][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.096903][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.214746][ T5845] netlink: 'syz.1.2': attribute type 25 has an invalid length. [ 100.214777][ T5845] netlink: 'syz.1.2': attribute type 9 has an invalid length. [ 100.214796][ T5845] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 100.302750][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.302801][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.736763][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.754612][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.926548][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.946521][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.232156][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.252475][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.886539][ T5789] Bluetooth: hci3: command tx timeout [ 101.886550][ T5086] Bluetooth: hci2: command tx timeout [ 101.962463][ T5789] Bluetooth: hci0: command tx timeout [ 101.962743][ T5086] Bluetooth: hci1: command tx timeout [ 102.004081][ T5864] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1'. [ 102.391385][ T5870] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9'. [ 102.476805][ T5871] warning: `syz.1.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.537536][ T5871] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 102.917796][ T5864] syz.0.1 (5864) used greatest stack depth: 20584 bytes left [ 103.973774][ T972] cfg80211: failed to load regulatory.db [ 104.686657][ T34] wlan1: Trigger new scan to find an IBSS to join [ 108.119434][ T5914] netlink: 'syz.3.22': attribute type 25 has an invalid length. [ 108.142162][ T5914] netlink: 'syz.3.22': attribute type 9 has an invalid length. [ 108.159134][ T5914] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22'. [ 108.187470][ T5917] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.23'. [ 108.225429][ T5915] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.23'. [ 108.262255][ T5918] netlink: 'syz.0.24': attribute type 16 has an invalid length. [ 108.280610][ T5918] netlink: 'syz.0.24': attribute type 3 has an invalid length. [ 108.302408][ T5918] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24'. [ 108.371662][ T5920] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.25'. [ 108.686582][ T75] wlan1: Trigger new scan to find an IBSS to join [ 108.829447][ T5931] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.30'. [ 109.858814][ T5934] Zero length message leads to an empty skb [ 110.200717][ T1000] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 111.502505][ T5951] netlink: 'syz.0.37': attribute type 21 has an invalid length. [ 111.538043][ T5951] netlink: 156 bytes leftover after parsing attributes in process `syz.0.37'. [ 113.083220][ T5964] netlink: 'syz.0.40': attribute type 10 has an invalid length. [ 113.126685][ T5964] netlink: 40 bytes leftover after parsing attributes in process `syz.0.40'. [ 113.136039][ T5964] team0: entered promiscuous mode [ 113.146744][ T5964] team_slave_0: entered promiscuous mode [ 113.187288][ T5964] team_slave_1: entered promiscuous mode [ 113.222717][ T5964] team0: entered allmulticast mode [ 113.236524][ T5964] team_slave_0: entered allmulticast mode [ 113.242600][ T5964] team_slave_1: entered allmulticast mode [ 113.287934][ T5964] bridge0: port 3(team0) entered blocking state [ 113.294860][ T5964] bridge0: port 3(team0) entered disabled state [ 113.366112][ T5964] bridge0: port 3(team0) entered blocking state [ 113.373191][ T5964] bridge0: port 3(team0) entered forwarding state [ 113.410761][ T5970] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 113.719188][ T5973] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.796303][ T5983] netlink: 'syz.1.46': attribute type 10 has an invalid length. [ 115.312247][ T5983] team0: Device wg1 is of different type [ 117.260582][ T5995] netlink: 'syz.1.49': attribute type 21 has an invalid length. [ 117.277743][ T5995] netlink: 156 bytes leftover after parsing attributes in process `syz.1.49'. [ 117.850323][ T6008] netlink: 'syz.0.53': attribute type 25 has an invalid length. [ 117.886710][ T6008] netlink: 'syz.0.53': attribute type 9 has an invalid length. [ 117.928528][ T6008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.53'. [ 117.972618][ T6004] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.52'. [ 118.010559][ T6009] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.52'. [ 118.717372][ T6019] netlink: 'syz.2.59': attribute type 10 has an invalid length. [ 118.725442][ T6019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.59'. [ 118.746846][ T6019] team0: entered promiscuous mode [ 118.752034][ T6019] team_slave_0: entered promiscuous mode [ 118.764692][ T6019] team_slave_1: entered promiscuous mode [ 118.771083][ T6019] team0: entered allmulticast mode [ 118.777050][ T6019] team_slave_0: entered allmulticast mode [ 118.782999][ T6019] team_slave_1: entered allmulticast mode [ 118.790496][ T6019] bridge0: port 3(team0) entered blocking state [ 118.798087][ T6019] bridge0: port 3(team0) entered disabled state [ 118.809035][ T6019] bridge0: port 3(team0) entered blocking state [ 118.815644][ T6019] bridge0: port 3(team0) entered forwarding state [ 119.024581][ T6022] netlink: 76 bytes leftover after parsing attributes in process `syz.0.60'. [ 119.211054][ T6029] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 120.259402][ T6039] netlink: 'syz.3.64': attribute type 21 has an invalid length. [ 120.334566][ T6039] netlink: 156 bytes leftover after parsing attributes in process `syz.3.64'. [ 120.594471][ T6044] netlink: 'syz.2.67': attribute type 25 has an invalid length. [ 120.616654][ T6044] netlink: 'syz.2.67': attribute type 9 has an invalid length. [ 120.646738][ T6044] netlink: 40 bytes leftover after parsing attributes in process `syz.2.67'. [ 120.952321][ T6052] netlink: 668 bytes leftover after parsing attributes in process `syz.3.70'. [ 121.030895][ T6052] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 121.129051][ T6052] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 121.717245][ T11] wlan1: Trigger new scan to find an IBSS to join [ 121.922269][ T6064] netlink: 'syz.3.73': attribute type 10 has an invalid length. [ 121.930404][ T6064] netlink: 40 bytes leftover after parsing attributes in process `syz.3.73'. [ 121.941220][ T6064] team0: entered promiscuous mode [ 121.946363][ T6064] team_slave_0: entered promiscuous mode [ 121.953117][ T6064] team_slave_1: entered promiscuous mode [ 121.983289][ T6064] team0: entered allmulticast mode [ 122.009840][ T6064] team_slave_0: entered allmulticast mode [ 122.015839][ T6064] team_slave_1: entered allmulticast mode [ 122.037709][ T6064] bridge0: port 3(team0) entered blocking state [ 122.053078][ T6064] bridge0: port 3(team0) entered disabled state [ 122.110460][ T6064] bridge0: port 3(team0) entered blocking state [ 122.117058][ T6064] bridge0: port 3(team0) entered forwarding state [ 122.594242][ T6072] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 123.490022][ T6083] netlink: 'syz.1.80': attribute type 25 has an invalid length. [ 123.506776][ T6083] netlink: 'syz.1.80': attribute type 9 has an invalid length. [ 123.514840][ T6083] netlink: 40 bytes leftover after parsing attributes in process `syz.1.80'. [ 123.624659][ T6085] netlink: 668 bytes leftover after parsing attributes in process `syz.2.83'. [ 123.646739][ T6085] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 123.675340][ T6085] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 124.676707][ T2917] wlan1: Trigger new scan to find an IBSS to join [ 124.775315][ T6099] IPv6: pim6reg1: Disabled Multicast RS [ 125.432018][ T6111] netlink: 'syz.0.92': attribute type 10 has an invalid length. [ 125.580808][ T6117] netlink: 668 bytes leftover after parsing attributes in process `syz.2.98'. [ 125.596187][ T6117] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 125.604965][ T6117] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 125.618307][ T6111] wg1: entered promiscuous mode [ 125.636873][ T6111] wg1: entered allmulticast mode [ 125.641981][ T6111] team0: Device wg1 is of different type [ 125.693192][ T6114] netlink: 'syz.1.96': attribute type 25 has an invalid length. [ 125.719541][ T6114] netlink: 'syz.1.96': attribute type 9 has an invalid length. [ 125.737814][ T6114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.96'. [ 125.920550][ T6122] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.100'. [ 126.062807][ T6122] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 126.290876][ T6128] IPv6: pim6reg1: Disabled Multicast RS [ 126.467215][ T6122] syz.2.100 (6122) used greatest stack depth: 20520 bytes left [ 126.757103][ T63] wlan1: Trigger new scan to find an IBSS to join [ 126.904641][ T6143] netlink: 'syz.3.109': attribute type 25 has an invalid length. [ 126.932794][ T6143] netlink: 'syz.3.109': attribute type 9 has an invalid length. [ 126.948998][ T6142] netlink: 668 bytes leftover after parsing attributes in process `syz.1.108'. [ 126.967053][ T6143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.109'. [ 126.976554][ T6142] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 126.984897][ T6142] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.714838][ T6162] netlink: 'syz.3.115': attribute type 10 has an invalid length. [ 127.722942][ T2917] wlan1: Trigger new scan to find an IBSS to join [ 127.993063][ T4348] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 128.353140][ T6162] wg1: entered promiscuous mode [ 128.362911][ T6162] wg1: entered allmulticast mode [ 128.369059][ T6162] team0: Device wg1 is of different type [ 128.395336][ T6170] netlink: 'syz.1.119': attribute type 25 has an invalid length. [ 128.412035][ T6170] netlink: 'syz.1.119': attribute type 9 has an invalid length. [ 128.423916][ T6170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.119'. [ 128.559651][ T6173] netlink: 668 bytes leftover after parsing attributes in process `syz.0.120'. [ 128.598494][ T6173] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 128.621365][ T6173] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 129.159122][ T6193] IPv6: pim6reg1: Disabled Multicast RS [ 130.676854][ T75] wlan1: Trigger new scan to find an IBSS to join [ 131.550307][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 131.612284][ T6242] netlink: 168 bytes leftover after parsing attributes in process `syz.3.148'. [ 131.724235][ T6245] netlink: 'syz.3.148': attribute type 21 has an invalid length. [ 131.958480][ T11] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 133.886598][ T6259] netlink: 668 bytes leftover after parsing attributes in process `syz.0.155'. [ 133.895953][ T6259] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 133.904355][ T6259] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.722542][ T6291] IPv6: pim6reg1: Disabled Multicast RS [ 135.194830][ T6303] netlink: 'syz.3.170': attribute type 25 has an invalid length. [ 135.286990][ T6303] netlink: 'syz.3.170': attribute type 9 has an invalid length. [ 135.291526][ T6301] netlink: 668 bytes leftover after parsing attributes in process `syz.1.171'. [ 135.358227][ T6303] netlink: 40 bytes leftover after parsing attributes in process `syz.3.170'. [ 136.409155][ T6301] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 136.427772][ T6301] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 136.733102][ T6319] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.768687][ T6319] netlink: 'syz.1.177': attribute type 5 has an invalid length. [ 136.834203][ T6317] delete_channel: no stack [ 137.615200][ T6335] netlink: 'syz.2.186': attribute type 25 has an invalid length. [ 137.655916][ T6335] netlink: 'syz.2.186': attribute type 9 has an invalid length. [ 137.694043][ T6335] netlink: 40 bytes leftover after parsing attributes in process `syz.2.186'. [ 137.795376][ T6337] netlink: 'syz.3.185': attribute type 25 has an invalid length. [ 137.826883][ T6337] netlink: 'syz.3.185': attribute type 9 has an invalid length. [ 137.866677][ T6337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.185'. [ 139.069332][ T6348] netlink: 'syz.0.190': attribute type 25 has an invalid length. [ 139.093227][ T6348] netlink: 'syz.0.190': attribute type 9 has an invalid length. [ 139.110859][ T6348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.190'. [ 139.127006][ T6352] netlink: 'syz.2.192': attribute type 27 has an invalid length. [ 139.135100][ T6352] netlink: 'syz.2.192': attribute type 25 has an invalid length. [ 139.470679][ T6365] netlink: 'syz.3.197': attribute type 25 has an invalid length. [ 139.493477][ T6365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.197'. [ 140.007702][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.015226][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.259811][ T1000] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 140.963112][ T6379] hsr0: entered promiscuous mode [ 140.977265][ T6379] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 141.140333][ T6381] netlink: 9 bytes leftover after parsing attributes in process `syz.1.203'. [ 141.309024][ T6386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.329026][ T6386] bond0: entered promiscuous mode [ 141.334225][ T6386] bond_slave_0: entered promiscuous mode [ 141.350298][ T6386] bond_slave_1: entered promiscuous mode [ 141.359195][ T6386] bond0: entered allmulticast mode [ 141.364627][ T6386] bond_slave_0: entered allmulticast mode [ 141.371154][ T6386] bond_slave_1: entered allmulticast mode [ 141.381801][ T6386] team0: Port device bond0 added [ 141.408987][ T6386] syz.0.205 (6386) used greatest stack depth: 20040 bytes left [ 141.935884][ T6395] validate_nla: 5 callbacks suppressed [ 141.935922][ T6395] netlink: 'syz.1.209': attribute type 25 has an invalid length. [ 141.980001][ T6395] netlink: 'syz.1.209': attribute type 9 has an invalid length. [ 141.995025][ T6395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.209'. [ 142.034976][ T6399] FAULT_INJECTION: forcing a failure. [ 142.034976][ T6399] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.061976][ T6399] CPU: 0 PID: 6399 Comm: syz.0.211 Not tainted syzkaller #0 [ 142.069563][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.079731][ T6399] Call Trace: [ 142.083197][ T6399] [ 142.086180][ T6399] dump_stack_lvl+0x18c/0x250 [ 142.090968][ T6399] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.097202][ T6399] ? show_regs_print_info+0x20/0x20 [ 142.102488][ T6399] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.108733][ T6399] should_fail_ex+0x394/0x4c0 [ 142.113492][ T6399] _copy_from_user+0x2f/0xe0 [ 142.118154][ T6399] __sys_bpf+0x23e/0x890 [ 142.122456][ T6399] ? bpf_link_show_fdinfo+0x390/0x390 [ 142.127973][ T6399] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.134201][ T6399] __x64_sys_bpf+0x7c/0x90 [ 142.138656][ T6399] do_syscall_64+0x55/0xb0 [ 142.143143][ T6399] ? clear_bhb_loop+0x40/0x90 [ 142.147857][ T6399] ? clear_bhb_loop+0x40/0x90 [ 142.152583][ T6399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.158560][ T6399] RIP: 0033:0x7f2b0c19e019 [ 142.163010][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.182677][ T6399] RSP: 002b:00007f2b0d133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.191131][ T6399] RAX: ffffffffffffffda RBX: 00007f2b0c425fa0 RCX: 00007f2b0c19e019 [ 142.199131][ T6399] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 142.207129][ T6399] RBP: 00007f2b0d133090 R08: 0000000000000000 R09: 0000000000000000 [ 142.215158][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.223160][ T6399] R13: 00007f2b0c426038 R14: 00007f2b0c425fa0 R15: 00007ffeb4128c78 [ 142.231172][ T6399] [ 143.315078][ T6420] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.220'. [ 143.744229][ T6425] netlink: 'syz.1.222': attribute type 25 has an invalid length. [ 143.782111][ T6425] netlink: 'syz.1.222': attribute type 9 has an invalid length. [ 143.822412][ T6425] netlink: 40 bytes leftover after parsing attributes in process `syz.1.222'. [ 144.270195][ T6437] netlink: 'syz.3.228': attribute type 25 has an invalid length. [ 144.270667][ T6433] netlink: 668 bytes leftover after parsing attributes in process `syz.0.226'. [ 144.294903][ T6437] netlink: 'syz.3.228': attribute type 9 has an invalid length. [ 144.315074][ T6433] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 144.350539][ T6437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.228'. [ 144.384749][ T6433] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 146.180955][ T6449] netlink: 'syz.1.232': attribute type 10 has an invalid length. [ 146.262014][ T6449] team0: Device wg1 is of different type [ 146.427804][ T6455] netlink: 'syz.0.235': attribute type 25 has an invalid length. [ 146.436149][ T6455] netlink: 'syz.0.235': attribute type 9 has an invalid length. [ 146.465469][ T6449] syz.1.232 (6449) used greatest stack depth: 19816 bytes left [ 146.473574][ T6455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 148.391964][ T6488] netlink: 'syz.1.247': attribute type 25 has an invalid length. [ 148.400873][ T6488] netlink: 'syz.1.247': attribute type 9 has an invalid length. [ 148.409738][ T6488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.247'. [ 149.154149][ T6505] netlink: 168 bytes leftover after parsing attributes in process `syz.3.253'. [ 149.220244][ T6505] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.253'. [ 149.275378][ T6505] netlink: 188 bytes leftover after parsing attributes in process `syz.3.253'. [ 149.463585][ T6512] netlink: 'syz.3.256': attribute type 25 has an invalid length. [ 149.481088][ T6512] netlink: 'syz.3.256': attribute type 9 has an invalid length. [ 149.499437][ T6515] netlink: 'syz.2.258': attribute type 28 has an invalid length. [ 149.508949][ T6512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.256'. [ 149.523886][ T6515] netlink: 'syz.2.258': attribute type 28 has an invalid length. [ 149.533684][ T6515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.258'. [ 151.013235][ T6541] netlink: 168 bytes leftover after parsing attributes in process `syz.1.269'. [ 151.045487][ T6541] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.269'. [ 151.094179][ T6541] netlink: 188 bytes leftover after parsing attributes in process `syz.1.269'. [ 151.171581][ T6543] netlink: 'syz.2.270': attribute type 25 has an invalid length. [ 151.181025][ T6543] netlink: 'syz.2.270': attribute type 9 has an invalid length. [ 151.197281][ T6543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.270'. [ 152.104975][ T6550] netlink: 'syz.3.273': attribute type 25 has an invalid length. [ 152.127472][ T6550] netlink: 'syz.3.273': attribute type 9 has an invalid length. [ 152.136126][ T6550] netlink: 40 bytes leftover after parsing attributes in process `syz.3.273'. [ 152.735478][ T6575] netlink: 40 bytes leftover after parsing attributes in process `syz.3.283'. [ 153.325975][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.361735][ T6586] team0: Port device bond0 added [ 154.369305][ T6604] validate_nla: 3 callbacks suppressed [ 154.369373][ T6604] netlink: 'syz.3.294': attribute type 25 has an invalid length. [ 154.406220][ T6604] netlink: 'syz.3.294': attribute type 9 has an invalid length. [ 154.423174][ T6604] netlink: 40 bytes leftover after parsing attributes in process `syz.3.294'. [ 154.688916][ T6612] FAULT_INJECTION: forcing a failure. [ 154.688916][ T6612] name failslab, interval 1, probability 0, space 0, times 1 [ 154.702124][ T6612] CPU: 1 PID: 6612 Comm: syz.0.299 Not tainted syzkaller #0 [ 154.709482][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.719602][ T6612] Call Trace: [ 154.722951][ T6612] [ 154.726297][ T6612] dump_stack_lvl+0x18c/0x250 [ 154.731056][ T6612] ? show_regs_print_info+0x20/0x20 [ 154.736326][ T6612] ? load_image+0x420/0x420 [ 154.740914][ T6612] should_fail_ex+0x394/0x4c0 [ 154.745635][ T6612] should_failslab+0x9/0x20 [ 154.750184][ T6612] slab_pre_alloc_hook+0x59/0x300 [ 154.755255][ T6612] kmem_cache_alloc+0x5a/0x2c0 [ 154.760067][ T6612] ? sctp_get_port_local+0x69f/0x15d0 [ 154.766033][ T6612] sctp_get_port_local+0x69f/0x15d0 [ 154.771437][ T6612] ? sctp_do_bind+0x8f0/0x8f0 [ 154.776183][ T6612] ? sctp_bind_addr_match+0x30/0x2a0 [ 154.781528][ T6612] sctp_do_bind+0x4c0/0x8f0 [ 154.786113][ T6612] sctp_connect_new_asoc+0x26a/0x6a0 [ 154.791470][ T6612] ? __sctp_connect+0xd80/0xd80 [ 154.796368][ T6612] ? __local_bh_enable_ip+0x13a/0x1c0 [ 154.801793][ T6612] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 154.807422][ T6612] ? security_sctp_bind_connect+0x89/0xb0 [ 154.813213][ T6612] sctp_sendmsg+0x1519/0x27b0 [ 154.817950][ T6612] ? sctp_getsockopt+0xb60/0xb60 [ 154.822968][ T6612] ? aa_af_perm+0x330/0x330 [ 154.827545][ T6612] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 154.834149][ T6612] ? sock_rps_record_flow+0x19/0x3f0 [ 154.839504][ T6612] ? inet_sendmsg+0xce/0x2a0 [ 154.844157][ T6612] ? inet_send_prepare+0x250/0x250 [ 154.849324][ T6612] ____sys_sendmsg+0x61b/0x980 [ 154.854178][ T6612] ? __sys_sendmsg_sock+0x30/0x30 [ 154.859244][ T6612] ? __import_iovec+0x5f2/0x850 [ 154.864151][ T6612] ? import_iovec+0x73/0xa0 [ 154.868706][ T6612] ___sys_sendmsg+0x2a6/0x360 [ 154.873450][ T6612] ? get_pid_task+0x20/0x1e0 [ 154.878107][ T6612] ? __sys_sendmsg+0x2b0/0x2b0 [ 154.882936][ T6612] ? __lock_acquire+0x7d80/0x7d80 [ 154.888053][ T6612] __se_sys_sendmsg+0x1d0/0x2c0 [ 154.892950][ T6612] ? __x64_sys_sendmsg+0x80/0x80 [ 154.897942][ T6612] ? lockdep_hardirqs_on+0x98/0x150 [ 154.903308][ T6612] do_syscall_64+0x55/0xb0 [ 154.907802][ T6612] ? clear_bhb_loop+0x40/0x90 [ 154.912608][ T6612] ? clear_bhb_loop+0x40/0x90 [ 154.917444][ T6612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.923980][ T6612] RIP: 0033:0x7f2b0c19e019 [ 154.928425][ T6612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.948062][ T6612] RSP: 002b:00007f2b0d133028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.956512][ T6612] RAX: ffffffffffffffda RBX: 00007f2b0c425fa0 RCX: 00007f2b0c19e019 [ 154.964530][ T6612] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 154.972528][ T6612] RBP: 00007f2b0d133090 R08: 0000000000000000 R09: 0000000000000000 [ 154.980533][ T6612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.988532][ T6612] R13: 00007f2b0c426038 R14: 00007f2b0c425fa0 R15: 00007ffeb4128c78 [ 154.996553][ T6612] [ 155.099564][ T6614] netlink: 'syz.3.298': attribute type 25 has an invalid length. [ 155.127886][ T6614] netlink: 'syz.3.298': attribute type 9 has an invalid length. [ 155.136133][ T6614] netlink: 40 bytes leftover after parsing attributes in process `syz.3.298'. [ 156.501817][ T6642] netlink: 'syz.2.307': attribute type 25 has an invalid length. [ 156.522778][ T6642] netlink: 'syz.2.307': attribute type 9 has an invalid length. [ 156.541985][ T6642] netlink: 40 bytes leftover after parsing attributes in process `syz.2.307'. [ 158.015628][ T6670] FAULT_INJECTION: forcing a failure. [ 158.015628][ T6670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.029762][ T6670] CPU: 1 PID: 6670 Comm: syz.3.319 Not tainted syzkaller #0 [ 158.037304][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.047417][ T6670] Call Trace: [ 158.050879][ T6670] [ 158.053852][ T6670] dump_stack_lvl+0x18c/0x250 [ 158.058599][ T6670] ? show_regs_print_info+0x20/0x20 [ 158.063850][ T6670] ? load_image+0x420/0x420 [ 158.068397][ T6670] ? __might_fault+0xaa/0x120 [ 158.073104][ T6670] ? __lock_acquire+0x7d80/0x7d80 [ 158.078176][ T6670] should_fail_ex+0x394/0x4c0 [ 158.082912][ T6670] _copy_from_user+0x2f/0xe0 [ 158.087544][ T6670] ___sys_recvmsg+0x174/0x590 [ 158.092268][ T6670] ? __sys_recvmsg+0x2a0/0x2a0 [ 158.097079][ T6670] ? ksys_write+0x1d2/0x260 [ 158.101632][ T6670] ? __fget_files+0x3fc/0x460 [ 158.106384][ T6670] __x64_sys_recvmsg+0x21e/0x2f0 [ 158.111394][ T6670] ? ___sys_recvmsg+0x590/0x590 [ 158.116306][ T6670] ? lockdep_hardirqs_on+0x98/0x150 [ 158.121565][ T6670] do_syscall_64+0x55/0xb0 [ 158.126028][ T6670] ? clear_bhb_loop+0x40/0x90 [ 158.130831][ T6670] ? clear_bhb_loop+0x40/0x90 [ 158.135538][ T6670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.141469][ T6670] RIP: 0033:0x7f6fe839e019 [ 158.145922][ T6670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.165568][ T6670] RSP: 002b:00007f6fe925b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 158.174025][ T6670] RAX: ffffffffffffffda RBX: 00007f6fe8625fa0 RCX: 00007f6fe839e019 [ 158.182037][ T6670] RDX: 0000000000000102 RSI: 0000200000001ec0 RDI: 0000000000000003 [ 158.190040][ T6670] RBP: 00007f6fe925b090 R08: 0000000000000000 R09: 0000000000000000 [ 158.198113][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.207202][ T6670] R13: 00007f6fe8626038 R14: 00007f6fe8625fa0 R15: 00007ffc24732558 [ 158.215268][ T6670] [ 158.223697][ T4348] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 158.369914][ T6672] netlink: 'syz.0.318': attribute type 25 has an invalid length. [ 158.384335][ T6672] netlink: 'syz.0.318': attribute type 9 has an invalid length. [ 158.394083][ T6672] netlink: 40 bytes leftover after parsing attributes in process `syz.0.318'. [ 158.792494][ T6689] netlink: 'syz.1.325': attribute type 25 has an invalid length. [ 158.803667][ T6689] netlink: 'syz.1.325': attribute type 9 has an invalid length. [ 158.824775][ T6689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.325'. [ 158.878316][ T6687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.326'. [ 159.377751][ T6704] validate_nla: 2 callbacks suppressed [ 159.377788][ T6704] netlink: 'syz.2.332': attribute type 25 has an invalid length. [ 159.438070][ T6704] netlink: 'syz.2.332': attribute type 9 has an invalid length. [ 159.446274][ T6704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.332'. [ 159.902852][ T6723] netlink: 'syz.0.340': attribute type 25 has an invalid length. [ 159.949560][ T6723] netlink: 'syz.0.340': attribute type 9 has an invalid length. [ 160.018927][ T6723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.340'. [ 160.046877][ T6721] netlink: 'syz.1.338': attribute type 25 has an invalid length. [ 160.055191][ T6721] netlink: 'syz.1.338': attribute type 9 has an invalid length. [ 160.075401][ T6721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.338'. [ 160.417347][ T6733] netlink: 'syz.1.345': attribute type 25 has an invalid length. [ 160.425554][ T6733] netlink: 'syz.1.345': attribute type 9 has an invalid length. [ 160.466745][ T6733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.345'. [ 162.120087][ T6762] netlink: 668 bytes leftover after parsing attributes in process `syz.1.356'. [ 162.291339][ T6766] netlink: 'syz.0.357': attribute type 25 has an invalid length. [ 162.300538][ T6766] netlink: 'syz.0.357': attribute type 9 has an invalid length. [ 162.309439][ T6766] netlink: 40 bytes leftover after parsing attributes in process `syz.0.357'. [ 162.328586][ T6762] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 162.414100][ T6762] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 164.227187][ T6794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.368'. [ 164.484807][ T6799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.603101][ T6805] netlink: 668 bytes leftover after parsing attributes in process `syz.0.373'. [ 164.616625][ T6799] syz.3.369 (6799) used greatest stack depth: 19048 bytes left [ 164.632081][ T6805] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 164.656765][ T6805] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 164.822384][ T6810] FAULT_INJECTION: forcing a failure. [ 164.822384][ T6810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.822418][ T6810] CPU: 1 PID: 6810 Comm: syz.1.375 Not tainted syzkaller #0 [ 164.822440][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.822453][ T6810] Call Trace: [ 164.822463][ T6810] [ 164.822472][ T6810] dump_stack_lvl+0x18c/0x250 [ 164.822505][ T6810] ? show_regs_print_info+0x20/0x20 [ 164.822531][ T6810] ? load_image+0x420/0x420 [ 164.822567][ T6810] ? __lock_acquire+0x7d80/0x7d80 [ 164.822602][ T6810] should_fail_ex+0x394/0x4c0 [ 164.822638][ T6810] _copy_from_user+0x2f/0xe0 [ 164.822664][ T6810] __copy_msghdr+0x388/0x560 [ 164.822697][ T6810] ___sys_sendmsg+0x214/0x360 [ 164.822721][ T6810] ? get_pid_task+0x20/0x1e0 [ 164.822760][ T6810] ? __sys_sendmsg+0x2b0/0x2b0 [ 164.822810][ T6810] ? __lock_acquire+0x7d80/0x7d80 [ 164.822865][ T6810] __se_sys_sendmsg+0x1d0/0x2c0 [ 164.822893][ T6810] ? __x64_sys_sendmsg+0x80/0x80 [ 164.822936][ T6810] ? lockdep_hardirqs_on+0x98/0x150 [ 164.822979][ T6810] do_syscall_64+0x55/0xb0 [ 164.823001][ T6810] ? clear_bhb_loop+0x40/0x90 [ 164.823025][ T6810] ? clear_bhb_loop+0x40/0x90 [ 164.823052][ T6810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.823075][ T6810] RIP: 0033:0x7f26f779e019 [ 164.823095][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.823113][ T6810] RSP: 002b:00007f26f8647028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.823146][ T6810] RAX: ffffffffffffffda RBX: 00007f26f7a25fa0 RCX: 00007f26f779e019 [ 164.823163][ T6810] RDX: 00000000240048cd RSI: 0000200000000240 RDI: 0000000000000003 [ 164.823178][ T6810] RBP: 00007f26f8647090 R08: 0000000000000000 R09: 0000000000000000 [ 164.823192][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.823205][ T6810] R13: 00007f26f7a26038 R14: 00007f26f7a25fa0 R15: 00007fffc6c90658 [ 164.823239][ T6810] [ 166.193443][ T6830] syz.3.383 uses obsolete (PF_INET,SOCK_PACKET) [ 166.340881][ T6833] netlink: 668 bytes leftover after parsing attributes in process `syz.0.390'. [ 166.385767][ T6833] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 166.409386][ T6833] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.820454][ T6862] netlink: 668 bytes leftover after parsing attributes in process `syz.3.395'. [ 167.849718][ T6862] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 167.864394][ T6862] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 170.562941][ T6900] validate_nla: 2 callbacks suppressed [ 170.562962][ T6900] netlink: 'syz.1.412': attribute type 7 has an invalid length. [ 170.598892][ T6900] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 170.618985][ T6900] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.412'. [ 172.012991][ T6937] netlink: 'syz.2.428': attribute type 16 has an invalid length. [ 172.024707][ T6937] netlink: 'syz.2.428': attribute type 3 has an invalid length. [ 172.046473][ T6937] netlink: 132 bytes leftover after parsing attributes in process `syz.2.428'. [ 172.269881][ T6948] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.432'. [ 174.640514][ T6983] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 174.955527][ T6991] netlink: 'syz.0.450': attribute type 7 has an invalid length. [ 174.985522][ T6991] netlink: 'syz.0.450': attribute type 1 has an invalid length. [ 175.020808][ T6991] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.450'. [ 175.145981][ T6997] netlink: 668 bytes leftover after parsing attributes in process `syz.1.454'. [ 175.155712][ T6997] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 175.176712][ T6997] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 176.017960][ T7018] FAULT_INJECTION: forcing a failure. [ 176.017960][ T7018] name failslab, interval 1, probability 0, space 0, times 0 [ 176.055818][ T7018] CPU: 0 PID: 7018 Comm: syz.2.464 Not tainted syzkaller #0 [ 176.063332][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.073521][ T7018] Call Trace: [ 176.076922][ T7018] [ 176.079973][ T7018] dump_stack_lvl+0x18c/0x250 [ 176.084810][ T7018] ? show_regs_print_info+0x20/0x20 [ 176.090140][ T7018] ? load_image+0x420/0x420 [ 176.094813][ T7018] ? __might_sleep+0xe0/0xe0 [ 176.099536][ T7018] ? __lock_acquire+0x7d80/0x7d80 [ 176.104719][ T7018] should_fail_ex+0x394/0x4c0 [ 176.109575][ T7018] should_failslab+0x9/0x20 [ 176.114181][ T7018] slab_pre_alloc_hook+0x59/0x300 [ 176.119285][ T7018] ? trace_event_raw_event_lock+0x240/0x240 [ 176.125353][ T7018] ? netdevice_event+0x3ab/0x890 [ 176.130403][ T7018] __kmem_cache_alloc_node+0x53/0x250 [ 176.135912][ T7018] ? netdevice_event+0x3ab/0x890 [ 176.140923][ T7018] kmalloc_trace+0x2a/0xe0 [ 176.145420][ T7018] netdevice_event+0x3ab/0x890 [ 176.150317][ T7018] ? __up_read+0x2b8/0x6b0 [ 176.154882][ T7018] ? inet6addr_event+0xd0/0xd0 [ 176.159766][ T7018] ? netdevice_event+0x890/0x890 [ 176.164834][ T7018] ? add_default_gids+0xe0/0xe0 [ 176.169828][ T7018] ? is_ndev_for_default_gid_filter+0x2f0/0x2f0 [ 176.176199][ T7018] ? enum_all_gids_of_dev_cb+0x290/0x290 [ 176.181975][ T7018] ? netdev_upper_walk+0x210/0x210 [ 176.187258][ T7018] ? add_default_gids+0xe0/0xe0 [ 176.192321][ T7018] notifier_call_chain+0x18f/0x380 [ 176.197631][ T7018] dev_set_mac_address+0x38e/0x4d0 [ 176.202926][ T7018] ? dev_pre_changeaddr_notify+0x120/0x120 [ 176.208885][ T7018] ? down_write+0x16e/0x200 [ 176.213610][ T7018] dev_set_mac_address_user+0x31/0x50 [ 176.219116][ T7018] dev_ioctl+0x7b4/0x1140 [ 176.223602][ T7018] sock_do_ioctl+0x239/0x310 [ 176.228338][ T7018] ? sock_show_fdinfo+0xb0/0xb0 [ 176.233423][ T7018] sock_ioctl+0x5be/0x7e0 [ 176.238438][ T7018] ? sock_poll+0x3e0/0x3e0 [ 176.243065][ T7018] ? bpf_lsm_file_ioctl+0x9/0x10 [ 176.248120][ T7018] ? security_file_ioctl+0x80/0xa0 [ 176.253370][ T7018] ? sock_poll+0x3e0/0x3e0 [ 176.257923][ T7018] __se_sys_ioctl+0xfd/0x170 [ 176.262669][ T7018] do_syscall_64+0x55/0xb0 [ 176.267216][ T7018] ? clear_bhb_loop+0x40/0x90 [ 176.272006][ T7018] ? clear_bhb_loop+0x40/0x90 [ 176.276820][ T7018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.282827][ T7018] RIP: 0033:0x7f9dabb9e019 [ 176.287359][ T7018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.307104][ T7018] RSP: 002b:00007f9dac9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.315674][ T7018] RAX: ffffffffffffffda RBX: 00007f9dabe25fa0 RCX: 00007f9dabb9e019 [ 176.323735][ T7018] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000009 [ 176.331786][ T7018] RBP: 00007f9dac9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 176.339832][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.347888][ T7018] R13: 00007f9dabe26038 R14: 00007f9dabe25fa0 R15: 00007ffcf7a855d8 [ 176.356016][ T7018] [ 176.470406][ T7024] netlink: 668 bytes leftover after parsing attributes in process `syz.3.466'. [ 176.496822][ T7024] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 176.505288][ T7024] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 177.041808][ T7031] netlink: 'syz.2.467': attribute type 7 has an invalid length. [ 177.174363][ T7031] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 177.206645][ T7031] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.467'. [ 177.636107][ T7044] netlink: 'syz.1.474': attribute type 25 has an invalid length. [ 177.658423][ T7044] netlink: 'syz.1.474': attribute type 9 has an invalid length. [ 177.685824][ T7044] netlink: 40 bytes leftover after parsing attributes in process `syz.1.474'. [ 177.878378][ T7048] netlink: 'syz.3.476': attribute type 25 has an invalid length. [ 177.938306][ T7048] netlink: 'syz.3.476': attribute type 9 has an invalid length. [ 177.988058][ T7048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.476'. [ 178.852367][ T7068] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.485'. [ 178.886890][ T7068] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.485'. [ 178.909562][ T7068] tipc: Started in network mode [ 178.929657][ T7068] tipc: Node identity b, cluster identity 73 [ 178.946820][ T7068] tipc: Node number set to 11 [ 179.099037][ T7071] netlink: 'syz.1.486': attribute type 25 has an invalid length. [ 179.109735][ T7071] netlink: 'syz.1.486': attribute type 9 has an invalid length. [ 179.148001][ T7071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.486'. [ 179.518282][ T7077] netlink: 'syz.2.488': attribute type 25 has an invalid length. [ 179.545400][ T7077] netlink: 'syz.2.488': attribute type 9 has an invalid length. [ 179.580193][ T7077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.488'. [ 180.045318][ T7098] FAULT_INJECTION: forcing a failure. [ 180.045318][ T7098] name failslab, interval 1, probability 0, space 0, times 0 [ 180.100817][ T7094] netlink: 40 bytes leftover after parsing attributes in process `syz.1.498'. [ 180.115754][ T7098] CPU: 0 PID: 7098 Comm: syz.0.496 Not tainted syzkaller #0 [ 180.123169][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.133249][ T7098] Call Trace: [ 180.136583][ T7098] [ 180.139544][ T7098] dump_stack_lvl+0x18c/0x250 [ 180.144263][ T7098] ? show_regs_print_info+0x20/0x20 [ 180.149527][ T7098] ? load_image+0x420/0x420 [ 180.154095][ T7098] ? __might_sleep+0xe0/0xe0 [ 180.158748][ T7098] ? __lock_acquire+0x7d80/0x7d80 [ 180.163822][ T7098] should_fail_ex+0x394/0x4c0 [ 180.168591][ T7098] should_failslab+0x9/0x20 [ 180.173135][ T7098] slab_pre_alloc_hook+0x59/0x300 [ 180.178202][ T7098] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 180.183956][ T7098] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 180.189716][ T7098] __kmem_cache_alloc_node+0x53/0x250 [ 180.195129][ T7098] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 180.200922][ T7098] __kmalloc+0xa7/0x240 [ 180.205117][ T7098] tomoyo_realpath_from_path+0xe6/0x5c0 [ 180.210698][ T7098] ? tomoyo_domain+0xd6/0x120 [ 180.215419][ T7098] tomoyo_path_number_perm+0x248/0x5e0 [ 180.220911][ T7098] ? tomoyo_path_number_perm+0x217/0x5e0 [ 180.226577][ T7098] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 180.232070][ T7098] ? ksys_write+0x1d2/0x260 [ 180.236631][ T7098] ? __fget_files+0x28/0x460 [ 180.241266][ T7098] security_file_ioctl+0x70/0xa0 [ 180.246241][ T7098] __se_sys_ioctl+0x48/0x170 [ 180.250867][ T7098] do_syscall_64+0x55/0xb0 [ 180.255313][ T7098] ? clear_bhb_loop+0x40/0x90 [ 180.260020][ T7098] ? clear_bhb_loop+0x40/0x90 [ 180.264726][ T7098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.270647][ T7098] RIP: 0033:0x7f2b0c19e019 [ 180.275147][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.294809][ T7098] RSP: 002b:00007f2b0d133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.303273][ T7098] RAX: ffffffffffffffda RBX: 00007f2b0c425fa0 RCX: 00007f2b0c19e019 [ 180.311269][ T7098] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 180.319267][ T7098] RBP: 00007f2b0d133090 R08: 0000000000000000 R09: 0000000000000000 [ 180.327266][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.335273][ T7098] R13: 00007f2b0c426038 R14: 00007f2b0c425fa0 R15: 00007ffeb4128c78 [ 180.343316][ T7098] [ 180.382601][ T7098] ERROR: Out of memory at tomoyo_realpath_from_path. [ 180.571637][ T7101] netlink: 40 bytes leftover after parsing attributes in process `syz.1.501'. [ 181.223444][ T7119] netlink: 40 bytes leftover after parsing attributes in process `syz.2.508'. [ 182.581474][ T7148] validate_nla: 8 callbacks suppressed [ 182.581539][ T7148] netlink: 'syz.3.522': attribute type 25 has an invalid length. [ 182.630896][ T7148] netlink: 'syz.3.522': attribute type 9 has an invalid length. [ 182.672818][ T7148] __nla_validate_parse: 1 callbacks suppressed [ 182.672865][ T7148] netlink: 40 bytes leftover after parsing attributes in process `syz.3.522'. [ 183.259753][ T7166] netlink: 'syz.2.527': attribute type 10 has an invalid length. [ 183.275375][ T7166] netlink: 2 bytes leftover after parsing attributes in process `syz.2.527'. [ 183.284500][ T7166] hsr0: entered promiscuous mode [ 183.295022][ T7166] bridge0: port 4(hsr0) entered blocking state [ 183.305958][ T7166] bridge0: port 4(hsr0) entered disabled state [ 183.314485][ T7166] hsr0: entered allmulticast mode [ 183.324664][ T7166] hsr_slave_0: entered allmulticast mode [ 183.333199][ T7166] hsr_slave_1: entered allmulticast mode [ 183.345983][ T7166] bridge0: port 4(hsr0) entered blocking state [ 183.352459][ T7166] bridge0: port 4(hsr0) entered forwarding state [ 184.127313][ T7178] netlink: 'syz.1.533': attribute type 25 has an invalid length. [ 184.185066][ T7178] netlink: 'syz.1.533': attribute type 9 has an invalid length. [ 184.213549][ T7178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.533'. [ 184.220174][ T7174] netlink: 668 bytes leftover after parsing attributes in process `syz.2.531'. [ 184.260453][ T7174] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 184.407542][ T7174] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 184.760306][ T7189] netlink: 'syz.1.536': attribute type 10 has an invalid length. [ 184.794427][ T7189] netlink: 2 bytes leftover after parsing attributes in process `syz.1.536'. [ 184.805641][ T7189] bridge0: port 3(hsr0) entered blocking state [ 184.818468][ T7189] bridge0: port 3(hsr0) entered disabled state [ 184.828525][ T7189] hsr0: entered allmulticast mode [ 184.833929][ T7189] hsr_slave_0: entered allmulticast mode [ 184.843974][ T7189] hsr_slave_1: entered allmulticast mode [ 184.911816][ T7189] bridge0: port 3(hsr0) entered blocking state [ 184.919554][ T7189] bridge0: port 3(hsr0) entered forwarding state [ 184.964726][ T7191] netlink: 'syz.2.537': attribute type 3 has an invalid length. [ 184.972908][ T7191] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 184.985569][ T7197] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.538'. [ 184.999148][ T7191] netlink: 120 bytes leftover after parsing attributes in process `syz.2.537'. [ 185.495638][ T7213] netlink: 'syz.1.545': attribute type 25 has an invalid length. [ 185.504210][ T7213] netlink: 'syz.1.545': attribute type 9 has an invalid length. [ 185.527684][ T7213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.545'. [ 185.555012][ T7209] netlink: 668 bytes leftover after parsing attributes in process `syz.2.543'. [ 185.997314][ T7209] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 186.710208][ T7209] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.352486][ T7247] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.555'. [ 187.845339][ T7256] validate_nla: 2 callbacks suppressed [ 187.845357][ T7256] netlink: 'syz.0.559': attribute type 25 has an invalid length. [ 187.879202][ T7256] netlink: 'syz.0.559': attribute type 9 has an invalid length. [ 187.904573][ T7256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.559'. [ 188.125064][ T7261] netlink: 'syz.2.561': attribute type 10 has an invalid length. [ 188.133735][ T7261] netlink: 2 bytes leftover after parsing attributes in process `syz.2.561'. [ 188.262265][ T7263] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 188.300845][ T7263] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 188.321482][ T7266] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 188.374406][ T7263] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 188.420404][ T7263] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 188.487034][ T7268] netlink: 668 bytes leftover after parsing attributes in process `syz.2.564'. [ 188.527771][ T7268] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 188.573613][ T7268] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 188.918982][ T7277] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.566'. [ 188.936047][ T7266] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 189.256819][ T7287] netlink: 'syz.1.570': attribute type 25 has an invalid length. [ 189.291065][ T7287] netlink: 40 bytes leftover after parsing attributes in process `syz.1.570'. [ 190.104480][ T7298] netlink: 668 bytes leftover after parsing attributes in process `syz.3.574'. [ 190.148777][ T7298] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 190.208789][ T7298] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.055052][ T7318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.581'. [ 193.094186][ T7354] validate_nla: 9 callbacks suppressed [ 193.094225][ T7354] netlink: 'syz.3.593': attribute type 25 has an invalid length. [ 193.094850][ T7345] netlink: 668 bytes leftover after parsing attributes in process `syz.2.589'. [ 193.130996][ T7354] netlink: 'syz.3.593': attribute type 9 has an invalid length. [ 193.131046][ T7354] netlink: 40 bytes leftover after parsing attributes in process `syz.3.593'. [ 193.242100][ T7345] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 193.250843][ T7345] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 197.046230][ T7393] netlink: 'syz.2.604': attribute type 25 has an invalid length. [ 197.062444][ T7393] netlink: 'syz.2.604': attribute type 9 has an invalid length. [ 197.076165][ T7393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.604'. [ 197.304791][ T7397] netlink: 668 bytes leftover after parsing attributes in process `syz.1.605'. [ 197.371238][ T7397] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 197.481223][ T7397] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 201.242606][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.256266][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.701142][ T7437] netlink: 'syz.3.615': attribute type 25 has an invalid length. [ 203.710902][ T7437] netlink: 'syz.3.615': attribute type 9 has an invalid length. [ 203.733217][ T7437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.615'. [ 204.137642][ T7446] netlink: 14 bytes leftover after parsing attributes in process `syz.2.619'. [ 204.931914][ T7460] netlink: 'syz.0.625': attribute type 25 has an invalid length. [ 204.940857][ T7460] netlink: 'syz.0.625': attribute type 9 has an invalid length. [ 204.950010][ T7460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.625'. [ 205.082644][ T7462] netlink: 'syz.1.627': attribute type 29 has an invalid length. [ 205.101109][ T7462] netlink: 'syz.1.627': attribute type 29 has an invalid length. [ 205.142431][ T7468] netlink: 'syz.1.627': attribute type 29 has an invalid length. [ 205.569285][ T7475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.630'. [ 205.637285][ T7477] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.631'. [ 205.638347][ T7475] FAULT_INJECTION: forcing a failure. [ 205.638347][ T7475] name failslab, interval 1, probability 0, space 0, times 0 [ 205.669098][ T7477] openvswitch: netlink: Key type 4112 is out of range max 32 [ 205.714470][ T7475] CPU: 0 PID: 7475 Comm: syz.0.630 Not tainted syzkaller #0 [ 205.721914][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.732037][ T7475] Call Trace: [ 205.735351][ T7475] [ 205.738319][ T7475] dump_stack_lvl+0x18c/0x250 [ 205.743041][ T7475] ? show_regs_print_info+0x20/0x20 [ 205.748270][ T7475] ? load_image+0x420/0x420 [ 205.752813][ T7475] ? trace_event_raw_event_lock+0x240/0x240 [ 205.758746][ T7475] should_fail_ex+0x394/0x4c0 [ 205.763467][ T7475] should_failslab+0x9/0x20 [ 205.768007][ T7475] slab_pre_alloc_hook+0x59/0x300 [ 205.773071][ T7475] kmem_cache_alloc_node+0x5e/0x310 [ 205.778346][ T7475] ? __alloc_skb+0x103/0x2c0 [ 205.782979][ T7475] __alloc_skb+0x103/0x2c0 [ 205.787426][ T7475] ? __neigh_notify+0x29/0x300 [ 205.792234][ T7475] __neigh_notify+0x15c/0x300 [ 205.796953][ T7475] __neigh_update+0xc0e/0x2500 [ 205.801775][ T7475] neigh_add+0xa89/0xdf0 [ 205.806058][ T7475] ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0 [ 205.812417][ T7475] ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0 [ 205.818699][ T7475] rtnetlink_rcv_msg+0x843/0xf90 [ 205.823669][ T7475] ? rtnetlink_rcv_msg+0x220/0xf90 [ 205.828816][ T7475] ? rtnetlink_bind+0x80/0x80 [ 205.833535][ T7475] ? perf_trace_preemptirq_template+0xac/0x330 [ 205.839725][ T7475] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 205.845744][ T7475] ? lock_chain_count+0x20/0x20 [ 205.850634][ T7475] ? __local_bh_enable_ip+0x13a/0x1c0 [ 205.856036][ T7475] ? lockdep_hardirqs_on+0x98/0x150 [ 205.861274][ T7475] ? __local_bh_enable_ip+0x13a/0x1c0 [ 205.866696][ T7475] ? _local_bh_enable+0xa0/0xa0 [ 205.871601][ T7475] ? __dev_queue_xmit+0x275/0x3630 [ 205.876775][ T7475] ? __dev_queue_xmit+0x1bc2/0x3630 [ 205.882022][ T7475] ? __dev_queue_xmit+0x275/0x3630 [ 205.887195][ T7475] ? perf_trace_lock+0xfc/0x3b0 [ 205.892087][ T7475] netlink_rcv_skb+0x235/0x4c0 [ 205.896881][ T7475] ? rtnetlink_bind+0x80/0x80 [ 205.901598][ T7475] ? netlink_ack+0x1160/0x1160 [ 205.906432][ T7475] ? __lock_acquire+0x7d80/0x7d80 [ 205.911525][ T7475] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.916757][ T7475] netlink_unicast+0x7b1/0x930 [ 205.921574][ T7475] netlink_sendmsg+0x8d0/0xbf0 [ 205.926380][ T7475] ? netlink_getsockopt+0x590/0x590 [ 205.931636][ T7475] ? apparmor_socket_sendmsg+0x170/0x330 [ 205.937303][ T7475] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 205.942624][ T7475] ? security_socket_sendmsg+0x80/0xa0 [ 205.948110][ T7475] ? netlink_getsockopt+0x590/0x590 [ 205.953341][ T7475] ____sys_sendmsg+0x61b/0x980 [ 205.958152][ T7475] ? __asan_memset+0x22/0x40 [ 205.962779][ T7475] ? __sys_sendmsg_sock+0x30/0x30 [ 205.967827][ T7475] ? __import_iovec+0x5f2/0x850 [ 205.972723][ T7475] ? import_iovec+0x73/0xa0 [ 205.977282][ T7475] ___sys_sendmsg+0x2a6/0x360 [ 205.981999][ T7475] ? __sys_sendmsg+0x2b0/0x2b0 [ 205.986814][ T7475] ? __lock_acquire+0x7d80/0x7d80 [ 205.991899][ T7475] __se_sys_sendmsg+0x1d0/0x2c0 [ 205.996790][ T7475] ? __x64_sys_sendmsg+0x80/0x80 [ 206.001778][ T7475] ? lockdep_hardirqs_on+0x98/0x150 [ 206.007014][ T7475] do_syscall_64+0x55/0xb0 [ 206.011470][ T7475] ? clear_bhb_loop+0x40/0x90 [ 206.016177][ T7475] ? clear_bhb_loop+0x40/0x90 [ 206.020896][ T7475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.026902][ T7475] RIP: 0033:0x7f2b0c19e019 [ 206.031369][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.051023][ T7475] RSP: 002b:00007f2b0d112028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.059477][ T7475] RAX: ffffffffffffffda RBX: 00007f2b0c426090 RCX: 00007f2b0c19e019 [ 206.067476][ T7475] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 206.075482][ T7475] RBP: 00007f2b0d112090 R08: 0000000000000000 R09: 0000000000000000 [ 206.083518][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.092128][ T7475] R13: 00007f2b0c426128 R14: 00007f2b0c426090 R15: 00007ffeb4128c78 [ 206.100150][ T7475] [ 206.106897][ T7479] netlink: 188 bytes leftover after parsing attributes in process `syz.1.631'. [ 206.459084][ T7478] netlink: 'syz.0.630': attribute type 17 has an invalid length. [ 206.470793][ T7478] netlink: 'syz.0.630': attribute type 16 has an invalid length. [ 206.478784][ T7478] netlink: 152 bytes leftover after parsing attributes in process `syz.0.630'. [ 206.512122][ T7477] FAULT_INJECTION: forcing a failure. [ 206.512122][ T7477] name failslab, interval 1, probability 0, space 0, times 0 [ 206.525487][ T7477] CPU: 1 PID: 7477 Comm: syz.1.631 Not tainted syzkaller #0 [ 206.532885][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.543042][ T7477] Call Trace: [ 206.546480][ T7477] [ 206.549458][ T7477] dump_stack_lvl+0x18c/0x250 [ 206.554197][ T7477] ? show_regs_print_info+0x20/0x20 [ 206.559465][ T7477] ? load_image+0x420/0x420 [ 206.564049][ T7477] should_fail_ex+0x394/0x4c0 [ 206.568787][ T7477] should_failslab+0x9/0x20 [ 206.573349][ T7477] slab_pre_alloc_hook+0x59/0x300 [ 206.578462][ T7477] kmem_cache_alloc+0x5a/0x2c0 [ 206.583505][ T7477] ? skb_clone+0x1eb/0x370 [ 206.588262][ T7477] skb_clone+0x1eb/0x370 [ 206.592566][ T7477] bpf_clone_redirect+0x16d/0x4a0 [ 206.597687][ T7477] bpf_prog_e97454e6a39c6b06+0x61/0x66 [ 206.603481][ T7477] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 206.609806][ T7477] ? __lock_acquire+0x7d80/0x7d80 [ 206.614881][ T7477] ? lock_chain_count+0x20/0x20 [ 206.619802][ T7477] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 206.626495][ T7477] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 206.631937][ T7477] ? ktime_get+0x7f/0x280 [ 206.636423][ T7477] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 206.642745][ T7477] ? ktime_get_real_ts64+0x440/0x440 [ 206.648095][ T7477] ? __x64_sys_bpf+0x7c/0x90 [ 206.652744][ T7477] ? __local_bh_disable_ip+0x108/0x1a0 [ 206.658233][ T7477] ? __cant_sleep+0x220/0x220 [ 206.662945][ T7477] ? read_tsc+0x9/0x20 [ 206.667080][ T7477] ? ktime_get+0x24b/0x280 [ 206.671566][ T7477] ? bpf_test_run+0x174/0x870 [ 206.676285][ T7477] bpf_test_run+0x2df/0x870 [ 206.680921][ T7477] ? bpf_test_run+0x174/0x870 [ 206.685812][ T7477] ? dst_hold+0x70/0x70 [ 206.690094][ T7477] ? eth_get_headlen+0x210/0x210 [ 206.695074][ T7477] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 206.700587][ T7477] ? cpu_online+0x60/0x60 [ 206.704980][ T7477] bpf_prog_test_run+0x31f/0x390 [ 206.709958][ T7477] __sys_bpf+0x49d/0x890 [ 206.714236][ T7477] ? read_tsc+0x9/0x20 [ 206.718372][ T7477] ? bpf_link_show_fdinfo+0x390/0x390 [ 206.723815][ T7477] ? lock_chain_count+0x20/0x20 [ 206.728722][ T7477] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 206.735113][ T7477] __x64_sys_bpf+0x7c/0x90 [ 206.739603][ T7477] do_syscall_64+0x55/0xb0 [ 206.744771][ T7477] ? clear_bhb_loop+0x40/0x90 [ 206.749643][ T7477] ? clear_bhb_loop+0x40/0x90 [ 206.754447][ T7477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.760836][ T7477] RIP: 0033:0x7f26f779e019 [ 206.765282][ T7477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.784922][ T7477] RSP: 002b:00007f26f8647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.793368][ T7477] RAX: ffffffffffffffda RBX: 00007f26f7a25fa0 RCX: 00007f26f779e019 [ 206.801368][ T7477] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 206.809394][ T7477] RBP: 00007f26f8647090 R08: 0000000000000000 R09: 0000000000000000 [ 206.817580][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.825583][ T7477] R13: 00007f26f7a26038 R14: 00007f26f7a25fa0 R15: 00007fffc6c90658 [ 206.833617][ T7477] [ 207.172266][ T7485] netlink: 'syz.3.634': attribute type 25 has an invalid length. [ 207.196848][ T7485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.634'. [ 207.380710][ T7489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.637'. [ 207.672225][ T7495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.323543][ T7511] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.645'. [ 208.968064][ T7525] netlink: 668 bytes leftover after parsing attributes in process `syz.2.647'. [ 209.003610][ T7525] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 209.045051][ T7525] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 209.618104][ T7529] validate_nla: 5 callbacks suppressed [ 209.618152][ T7529] netlink: 'syz.1.649': attribute type 25 has an invalid length. [ 209.686994][ T7529] netlink: 'syz.1.649': attribute type 9 has an invalid length. [ 209.717105][ T7529] netlink: 40 bytes leftover after parsing attributes in process `syz.1.649'. [ 210.120433][ T7541] netlink: 132 bytes leftover after parsing attributes in process `syz.1.653'. [ 210.228084][ T7541] netlink: 'syz.1.653': attribute type 17 has an invalid length. [ 210.241026][ T7541] netlink: 'syz.1.653': attribute type 16 has an invalid length. [ 210.249469][ T7541] netlink: 152 bytes leftover after parsing attributes in process `syz.1.653'. [ 210.335057][ T7545] netlink: 'syz.0.654': attribute type 10 has an invalid length. [ 210.909352][ T7545] team0: Device wg1 is of different type [ 211.008621][ T7559] netlink: 'syz.3.656': attribute type 21 has an invalid length. [ 211.073319][ T7564] FAULT_INJECTION: forcing a failure. [ 211.073319][ T7564] name failslab, interval 1, probability 0, space 0, times 0 [ 211.079545][ T7559] netlink: 'syz.3.656': attribute type 20 has an invalid length. [ 211.086466][ T7564] CPU: 0 PID: 7564 Comm: syz.1.658 Not tainted syzkaller #0 [ 211.101261][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.111370][ T7564] Call Trace: [ 211.114695][ T7564] [ 211.117671][ T7564] dump_stack_lvl+0x18c/0x250 [ 211.122407][ T7564] ? show_regs_print_info+0x20/0x20 [ 211.127658][ T7564] ? load_image+0x420/0x420 [ 211.132219][ T7564] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 211.138257][ T7564] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 211.145532][ T7564] ? lock_chain_count+0x20/0x20 [ 211.150441][ T7564] should_fail_ex+0x394/0x4c0 [ 211.155179][ T7564] should_failslab+0x9/0x20 [ 211.159745][ T7564] slab_pre_alloc_hook+0x59/0x300 [ 211.164880][ T7564] kmem_cache_alloc+0x5a/0x2c0 [ 211.169710][ T7564] ? skb_clone+0x1eb/0x370 [ 211.174220][ T7564] skb_clone+0x1eb/0x370 [ 211.178520][ T7564] bpf_clone_redirect+0x16d/0x4a0 [ 211.183599][ T7564] ? lock_chain_count+0x20/0x20 [ 211.188512][ T7564] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 211.194018][ T7564] ? __static_call_text_end+0x8be10/0x8be10 [ 211.199961][ T7564] ? lockdep_hardirqs_on+0x98/0x150 [ 211.205218][ T7564] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 211.211427][ T7564] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 211.217721][ T7564] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 211.223080][ T7564] ? seqcount_lockdep_reader_access+0x19a/0x1d0 [ 211.229383][ T7564] ? ktime_get_real_ts64+0x440/0x440 [ 211.234721][ T7564] ? __x64_sys_bpf+0x7c/0x90 [ 211.239367][ T7564] ? __local_bh_disable_ip+0x108/0x1a0 [ 211.244883][ T7564] ? __cant_sleep+0x220/0x220 [ 211.249625][ T7564] ? read_tsc+0x9/0x20 [ 211.253741][ T7564] ? ktime_get+0x24b/0x280 [ 211.258212][ T7564] ? bpf_test_run+0x174/0x870 [ 211.262951][ T7564] bpf_test_run+0x2df/0x870 [ 211.267526][ T7564] ? bpf_test_run+0x174/0x870 [ 211.272240][ T7564] ? dst_hold+0x70/0x70 [ 211.276435][ T7564] ? bpf_prog_test_run_skb+0x7ec/0x18f0 [ 211.282020][ T7564] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 211.287444][ T7564] ? cpu_online+0x60/0x60 [ 211.291805][ T7564] bpf_prog_test_run+0x31f/0x390 [ 211.296786][ T7564] __sys_bpf+0x49d/0x890 [ 211.301152][ T7564] ? bpf_link_show_fdinfo+0x390/0x390 [ 211.306568][ T7564] ? lock_chain_count+0x20/0x20 [ 211.311449][ T7564] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 211.317483][ T7564] __x64_sys_bpf+0x7c/0x90 [ 211.321954][ T7564] do_syscall_64+0x55/0xb0 [ 211.326414][ T7564] ? clear_bhb_loop+0x40/0x90 [ 211.331128][ T7564] ? clear_bhb_loop+0x40/0x90 [ 211.335846][ T7564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.341778][ T7564] RIP: 0033:0x7f26f779e019 [ 211.346229][ T7564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.365900][ T7564] RSP: 002b:00007f26f8647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.374345][ T7564] RAX: ffffffffffffffda RBX: 00007f26f7a25fa0 RCX: 00007f26f779e019 [ 211.382346][ T7564] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 211.390338][ T7564] RBP: 00007f26f8647090 R08: 0000000000000000 R09: 0000000000000000 [ 211.398343][ T7564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.406344][ T7564] R13: 00007f26f7a26038 R14: 00007f26f7a25fa0 R15: 00007fffc6c90658 [ 211.414365][ T7564] [ 212.022976][ T7581] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.663'. [ 212.057702][ T7577] netlink: 128 bytes leftover after parsing attributes in process `syz.0.662'. [ 212.062270][ T7574] netlink: 668 bytes leftover after parsing attributes in process `syz.1.660'. [ 212.097450][ T7574] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 212.110929][ T7574] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 212.162963][ T7577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.166102][ T7581] syz.2.663[7581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.180719][ T7581] syz.2.663[7581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.630596][ T7588] netlink: 'syz.1.664': attribute type 13 has an invalid length. [ 212.670321][ T7588] netlink: 172 bytes leftover after parsing attributes in process `syz.1.664'. [ 212.860929][ T7588] erspan0: refused to change device tx_queue_len [ 213.081538][ T7599] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.669'. [ 213.503280][ T7618] netlink: 'syz.1.673': attribute type 25 has an invalid length. [ 213.515658][ T7618] netlink: 'syz.1.673': attribute type 9 has an invalid length. [ 213.526083][ T7618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.673'. [ 214.166929][ T7641] __nla_validate_parse: 3 callbacks suppressed [ 214.166968][ T7641] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.682'. [ 214.268772][ T7643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.685'. [ 214.479187][ T7652] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.688'. [ 214.637711][ T7650] validate_nla: 10 callbacks suppressed [ 214.637764][ T7650] netlink: 'syz.3.687': attribute type 25 has an invalid length. [ 214.674405][ T7650] netlink: 'syz.3.687': attribute type 9 has an invalid length. [ 214.685914][ T7656] FAULT_INJECTION: forcing a failure. [ 214.685914][ T7656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.699833][ T7650] netlink: 40 bytes leftover after parsing attributes in process `syz.3.687'. [ 214.715823][ T7656] CPU: 1 PID: 7656 Comm: syz.1.690 Not tainted syzkaller #0 [ 214.723251][ T7656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.733360][ T7656] Call Trace: [ 214.736683][ T7656] [ 214.739654][ T7656] dump_stack_lvl+0x18c/0x250 [ 214.744396][ T7656] ? show_regs_print_info+0x20/0x20 [ 214.749654][ T7656] ? load_image+0x420/0x420 [ 214.754214][ T7656] ? __might_fault+0xaa/0x120 [ 214.758946][ T7656] ? __lock_acquire+0x7d80/0x7d80 [ 214.764024][ T7656] should_fail_ex+0x394/0x4c0 [ 214.768763][ T7656] _copy_from_user+0x2f/0xe0 [ 214.773409][ T7656] __sys_bpf+0x23e/0x890 [ 214.777712][ T7656] ? bpf_link_show_fdinfo+0x390/0x390 [ 214.783168][ T7656] ? lock_chain_count+0x20/0x20 [ 214.788096][ T7656] __x64_sys_bpf+0x7c/0x90 [ 214.792566][ T7656] do_syscall_64+0x55/0xb0 [ 214.797044][ T7656] ? clear_bhb_loop+0x40/0x90 [ 214.801822][ T7656] ? clear_bhb_loop+0x40/0x90 [ 214.806563][ T7656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.812529][ T7656] RIP: 0033:0x7f26f779e019 [ 214.817040][ T7656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.836733][ T7656] RSP: 002b:00007f26f8647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.845204][ T7656] RAX: ffffffffffffffda RBX: 00007f26f7a25fa0 RCX: 00007f26f779e019 [ 214.853414][ T7656] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 214.861442][ T7656] RBP: 00007f26f8647090 R08: 0000000000000000 R09: 0000000000000000 [ 214.869468][ T7656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.877570][ T7656] R13: 00007f26f7a26038 R14: 00007f26f7a25fa0 R15: 00007fffc6c90658 [ 214.885646][ T7656] [ 215.124005][ T7665] netlink: 60 bytes leftover after parsing attributes in process `syz.2.694'. [ 215.146753][ T7665] netlink: 60 bytes leftover after parsing attributes in process `syz.2.694'. [ 215.168309][ T7665] netlink: 60 bytes leftover after parsing attributes in process `syz.2.694'. [ 215.414293][ T7676] netlink: 'syz.1.698': attribute type 25 has an invalid length. [ 215.423267][ T7676] netlink: 'syz.1.698': attribute type 9 has an invalid length. [ 215.436195][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.698'. [ 215.567134][ T7677] tap0: tun_chr_ioctl cmd 1074025677 [ 215.572771][ T7677] tap0: linktype set to 774 [ 216.372391][ T7688] netlink: 'syz.0.703': attribute type 25 has an invalid length. [ 216.404684][ T7688] netlink: 'syz.0.703': attribute type 9 has an invalid length. [ 216.427952][ T7688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.703'. [ 216.540292][ T7694] netlink: 10 bytes leftover after parsing attributes in process `syz.2.706'. [ 216.800449][ T7700] syzkaller0: entered promiscuous mode [ 216.820942][ T7700] syzkaller0: entered allmulticast mode [ 216.982800][ T7703] netlink: 'syz.2.709': attribute type 25 has an invalid length. [ 217.021804][ T7703] netlink: 'syz.2.709': attribute type 9 has an invalid length. [ 218.364222][ T7720] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 218.374918][ T7720] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 218.515847][ T7728] netlink: 'syz.1.716': attribute type 3 has an invalid length. [ 218.544598][ T7728] netlink: 'syz.1.716': attribute type 1 has an invalid length. [ 218.677016][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 218.683293][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 218.689892][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 218.690781][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 218.824683][ T7739] FAULT_INJECTION: forcing a failure. [ 218.824683][ T7739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.838405][ T7739] CPU: 1 PID: 7739 Comm: syz.3.721 Not tainted syzkaller #0 [ 218.845767][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.855855][ T7739] Call Trace: [ 218.859161][ T7739] [ 218.862126][ T7739] dump_stack_lvl+0x18c/0x250 [ 218.866850][ T7739] ? show_regs_print_info+0x20/0x20 [ 218.872083][ T7739] ? load_image+0x420/0x420 [ 218.876656][ T7739] ? __lock_acquire+0x7d80/0x7d80 [ 218.881715][ T7739] ? snprintf+0xe9/0x140 [ 218.886000][ T7739] should_fail_ex+0x394/0x4c0 [ 218.890716][ T7739] _copy_to_user+0x2f/0xa0 [ 218.895161][ T7739] simple_read_from_buffer+0xe7/0x150 [ 218.900567][ T7739] proc_fail_nth_read+0x1e8/0x260 [ 218.905851][ T7739] ? proc_fault_inject_write+0x360/0x360 [ 218.911559][ T7739] ? fsnotify_perm+0x271/0x5e0 [ 218.916424][ T7739] ? proc_fault_inject_write+0x360/0x360 [ 218.922110][ T7739] vfs_read+0x298/0x990 [ 218.926318][ T7739] ? kernel_read+0x1e0/0x1e0 [ 218.930949][ T7739] ? __fget_files+0x28/0x460 [ 218.935577][ T7739] ? __fget_files+0x3fc/0x460 [ 218.940295][ T7739] ? __fdget_pos+0x2a3/0x330 [ 218.944917][ T7739] ? ksys_read+0x74/0x260 [ 218.949288][ T7739] ksys_read+0x151/0x260 [ 218.953565][ T7739] ? vfs_write+0x9a0/0x9a0 [ 218.958053][ T7739] ? lockdep_hardirqs_on+0x98/0x150 [ 218.963294][ T7739] do_syscall_64+0x55/0xb0 [ 218.967737][ T7739] ? clear_bhb_loop+0x40/0x90 [ 218.972437][ T7739] ? clear_bhb_loop+0x40/0x90 [ 218.977147][ T7739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.983088][ T7739] RIP: 0033:0x7f6fe835e84e [ 218.987533][ T7739] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 219.007445][ T7739] RSP: 002b:00007f6fe925afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 219.015919][ T7739] RAX: ffffffffffffffda RBX: 00007f6fe925b6c0 RCX: 00007f6fe835e84e [ 219.023963][ T7739] RDX: 000000000000000f RSI: 00007f6fe925b0a0 RDI: 0000000000000004 [ 219.031981][ T7739] RBP: 00007f6fe925b090 R08: 0000000000000000 R09: 0000000000000000 [ 219.039988][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.047995][ T7739] R13: 00007f6fe8626038 R14: 00007f6fe8625fa0 R15: 00007ffc24732558 [ 219.056046][ T7739] [ 219.407759][ T7745] __nla_validate_parse: 8 callbacks suppressed [ 219.407834][ T7745] netlink: 668 bytes leftover after parsing attributes in process `syz.2.725'. [ 219.424592][ T7745] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 219.434392][ T7745] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 220.389455][ T7760] validate_nla: 2 callbacks suppressed [ 220.389474][ T7760] netlink: 'syz.0.729': attribute type 27 has an invalid length. [ 220.446539][ T7760] netlink: 'syz.0.729': attribute type 25 has an invalid length. [ 220.845321][ T7768] netlink: 'syz.2.733': attribute type 25 has an invalid length. [ 220.865034][ T7768] netlink: 'syz.2.733': attribute type 9 has an invalid length. [ 220.888655][ T7768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.733'. [ 221.726720][ T7787] netlink: 668 bytes leftover after parsing attributes in process `syz.2.741'. [ 221.747823][ T7787] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 221.788902][ T7787] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 222.255775][ T7801] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 222.289759][ T7801] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.746'. [ 222.309931][ T7801] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 222.552126][ T7806] netlink: 'syz.0.748': attribute type 25 has an invalid length. [ 222.577934][ T7806] netlink: 'syz.0.748': attribute type 9 has an invalid length. [ 222.601440][ T7806] netlink: 40 bytes leftover after parsing attributes in process `syz.0.748'. [ 223.973683][ T7833] netlink: 668 bytes leftover after parsing attributes in process `syz.1.761'. [ 224.241135][ T7833] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 224.254118][ T7833] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 225.906983][ T7874] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.778'. [ 227.015206][ T7890] can: request_module (can-proto-0) failed. [ 227.072417][ T7892] netlink: 'syz.2.786': attribute type 25 has an invalid length. [ 227.081444][ T7892] netlink: 'syz.2.786': attribute type 9 has an invalid length. [ 227.097025][ T7892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.786'. [ 227.116040][ T7896] syzkaller0: entered promiscuous mode [ 227.140492][ T7896] syzkaller0: entered allmulticast mode [ 228.002935][ T7911] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.792'. [ 228.027101][ T7913] netlink: 'syz.3.793': attribute type 25 has an invalid length. [ 228.062397][ T7913] netlink: 'syz.3.793': attribute type 9 has an invalid length. [ 228.086322][ T7913] netlink: 40 bytes leftover after parsing attributes in process `syz.3.793'. [ 228.250670][ T7924] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.798'. [ 228.289361][ T7921] netlink: 'syz.2.796': attribute type 25 has an invalid length. [ 228.301789][ T7921] netlink: 'syz.2.796': attribute type 9 has an invalid length. [ 228.311032][ T7921] netlink: 40 bytes leftover after parsing attributes in process `syz.2.796'. [ 228.777940][ T7929] netlink: 668 bytes leftover after parsing attributes in process `syz.2.801'. [ 228.793658][ T7929] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 228.804724][ T7929] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 229.323754][ T7944] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.805'. [ 229.661046][ T7954] netlink: 'syz.0.808': attribute type 25 has an invalid length. [ 229.683839][ T7954] netlink: 'syz.0.808': attribute type 9 has an invalid length. [ 229.715663][ T7954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.808'. [ 230.257528][ T7966] netlink: 'syz.0.814': attribute type 21 has an invalid length. [ 231.043598][ T7971] netlink: 668 bytes leftover after parsing attributes in process `syz.3.815'. [ 231.055178][ T7971] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 231.085333][ T7971] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 231.981793][ T7984] FAULT_INJECTION: forcing a failure. [ 231.981793][ T7984] name failslab, interval 1, probability 0, space 0, times 0 [ 231.994959][ T7984] CPU: 0 PID: 7984 Comm: syz.2.821 Not tainted syzkaller #0 [ 232.002299][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.012439][ T7984] Call Trace: [ 232.015763][ T7984] [ 232.018738][ T7984] dump_stack_lvl+0x18c/0x250 [ 232.023475][ T7984] ? show_regs_print_info+0x20/0x20 [ 232.028728][ T7984] ? load_image+0x420/0x420 [ 232.033309][ T7984] should_fail_ex+0x394/0x4c0 [ 232.038046][ T7984] should_failslab+0x9/0x20 [ 232.042610][ T7984] slab_pre_alloc_hook+0x59/0x300 [ 232.047693][ T7984] ? ida_alloc_range+0x5e7/0x860 [ 232.052687][ T7984] __kmem_cache_alloc_node+0x53/0x250 [ 232.058114][ T7984] ? ida_alloc_range+0x5e7/0x860 [ 232.063103][ T7984] kmalloc_trace+0x2a/0xe0 [ 232.067588][ T7984] ida_alloc_range+0x5e7/0x860 [ 232.072455][ T7984] ? __xdp_reg_mem_model+0x1fd/0x5a0 [ 232.077817][ T7984] ? idr_replace+0x1b0/0x1b0 [ 232.082497][ T7984] __xdp_reg_mem_model+0x219/0x5a0 [ 232.087673][ T7984] ? kvmalloc_node+0x70/0x180 [ 232.092419][ T7984] ? kvmalloc_node+0x70/0x180 [ 232.097149][ T7984] ? xdp_reg_mem_model+0x40/0x40 [ 232.102165][ T7984] xdp_reg_mem_model+0x22/0x40 [ 232.107088][ T7984] bpf_test_run_xdp_live+0x262/0x1b30 [ 232.112514][ T7984] ? verify_lock_unused+0x140/0x140 [ 232.117768][ T7984] ? kasan_set_track+0x4e/0x70 [ 232.122583][ T7984] ? __kasan_kmalloc+0x8f/0xa0 [ 232.127404][ T7984] ? __kmalloc+0xb7/0x240 [ 232.131797][ T7984] ? bpf_test_init+0x9f/0x140 [ 232.136525][ T7984] ? bpf_prog_test_run+0x31f/0x390 [ 232.141680][ T7984] ? __sys_bpf+0x49d/0x890 [ 232.146143][ T7984] ? __x64_sys_bpf+0x7c/0x90 [ 232.150782][ T7984] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.156928][ T7984] ? xdp_convert_md_to_buff+0x330/0x330 [ 232.162564][ T7984] ? __lock_acquire+0x7d80/0x7d80 [ 232.167662][ T7984] ? __virt_addr_valid+0x10c/0x380 [ 232.172843][ T7984] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 232.179185][ T7984] ? _copy_from_user+0xa5/0xe0 [ 232.184006][ T7984] ? bpf_test_init+0x119/0x140 [ 232.188820][ T7984] ? xdp_convert_md_to_buff+0x5b/0x330 [ 232.194324][ T7984] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 232.199734][ T7984] ? __lock_acquire+0x7d80/0x7d80 [ 232.204799][ T7984] ? dev_put+0x80/0x80 [ 232.208903][ T7984] ? dev_put+0x80/0x80 [ 232.213002][ T7984] bpf_prog_test_run+0x31f/0x390 [ 232.217964][ T7984] __sys_bpf+0x49d/0x890 [ 232.222227][ T7984] ? bpf_link_show_fdinfo+0x390/0x390 [ 232.227646][ T7984] ? lock_chain_count+0x20/0x20 [ 232.232561][ T7984] __x64_sys_bpf+0x7c/0x90 [ 232.237028][ T7984] do_syscall_64+0x55/0xb0 [ 232.241485][ T7984] ? clear_bhb_loop+0x40/0x90 [ 232.246208][ T7984] ? clear_bhb_loop+0x40/0x90 [ 232.250916][ T7984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.256861][ T7984] RIP: 0033:0x7f9dabb9e019 [ 232.261285][ T7984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.280914][ T7984] RSP: 002b:00007f9dac9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.289992][ T7984] RAX: ffffffffffffffda RBX: 00007f9dabe25fa0 RCX: 00007f9dabb9e019 [ 232.298026][ T7984] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 232.306013][ T7984] RBP: 00007f9dac9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 232.313998][ T7984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.321983][ T7984] R13: 00007f9dabe26038 R14: 00007f9dabe25fa0 R15: 00007ffcf7a855d8 [ 232.330009][ T7984] [ 232.946318][ T7997] netlink: 128 bytes leftover after parsing attributes in process `syz.0.825'. [ 232.997330][ T7997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.492180][ T8007] netlink: 668 bytes leftover after parsing attributes in process `syz.2.829'. [ 233.536575][ T8007] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 233.544986][ T8007] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 233.656007][ T8016] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.832'. [ 233.723876][ T8016] netlink: 51471 bytes leftover after parsing attributes in process `syz.3.832'. [ 233.925394][ T8024] netlink: 'syz.3.835': attribute type 21 has an invalid length. [ 234.909645][ T8031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.262895][ T8042] netlink: 668 bytes leftover after parsing attributes in process `syz.1.842'. [ 235.280834][ T8043] netlink: 128 bytes leftover after parsing attributes in process `syz.3.841'. [ 235.311834][ T8042] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 235.328282][ T8043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.343534][ T8042] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 236.064926][ T8056] netlink: 'syz.2.846': attribute type 21 has an invalid length. [ 237.923578][ T8077] netlink: 668 bytes leftover after parsing attributes in process `syz.1.853'. [ 237.981504][ T8077] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 238.007536][ T8077] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 239.619542][ T8090] netlink: 'syz.0.857': attribute type 10 has an invalid length. [ 239.705758][ T8090] bridge0: port 3(team0) entered disabled state [ 240.008062][ T8090] bridge0: port 3(team0) entered disabled state [ 240.238247][ T8090] team_slave_0: left promiscuous mode [ 240.287460][ T8090] team_slave_0: left allmulticast mode [ 240.465358][ T8090] team0 (unregistering): Port device team_slave_0 removed [ 240.473818][ T8090] team_slave_1: left promiscuous mode [ 240.486848][ T8090] team_slave_1: left allmulticast mode [ 240.605680][ T8090] team0 (unregistering): Port device team_slave_1 removed [ 240.669362][ T8090] bond0: left promiscuous mode [ 240.674351][ T8090] bond_slave_0: left promiscuous mode [ 240.747501][ T8090] bond_slave_1: left promiscuous mode [ 240.760069][ T8090] bond0: left allmulticast mode [ 240.776601][ T8090] bond_slave_0: left allmulticast mode [ 240.797093][ T8090] bond_slave_1: left allmulticast mode [ 240.919851][ T8090] team0 (unregistering): Port device bond0 removed [ 241.082996][ T8107] netlink: 'syz.3.862': attribute type 39 has an invalid length. [ 241.517056][ T8114] netlink: 668 bytes leftover after parsing attributes in process `syz.1.865'. [ 241.536808][ T8114] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 241.566875][ T8114] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 244.694181][ T8140] netlink: 128 bytes leftover after parsing attributes in process `syz.2.875'. [ 244.825486][ T8140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.246775][ T8142] netlink: 'syz.1.878': attribute type 25 has an invalid length. [ 245.266723][ T8142] netlink: 'syz.1.878': attribute type 9 has an invalid length. [ 245.274598][ T8142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.878'. [ 246.198070][ T8160] netlink: 'syz.0.883': attribute type 10 has an invalid length. [ 246.238881][ T8160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.883'. [ 246.386267][ T8160] netlink: 'syz.0.883': attribute type 10 has an invalid length. [ 246.847655][ T8174] netlink: 'syz.2.889': attribute type 25 has an invalid length. [ 246.855982][ T8174] netlink: 'syz.2.889': attribute type 9 has an invalid length. [ 246.895034][ T8174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.889'. [ 247.551844][ T8188] netlink: 'syz.2.895': attribute type 25 has an invalid length. [ 247.576787][ T8188] netlink: 'syz.2.895': attribute type 9 has an invalid length. [ 247.591645][ T8188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.895'. [ 248.759256][ T8217] netlink: 'syz.3.907': attribute type 25 has an invalid length. [ 248.788583][ T8217] netlink: 'syz.3.907': attribute type 9 has an invalid length. [ 248.806791][ T8217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.907'. [ 248.865345][ T8220] netlink: 40 bytes leftover after parsing attributes in process `syz.2.908'. [ 249.230256][ T8234] syzkaller0: entered allmulticast mode [ 250.042358][ T8249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.919'. [ 250.255625][ T8260] netlink: 132 bytes leftover after parsing attributes in process `syz.3.924'. [ 250.425967][ T8264] netlink: 'syz.3.926': attribute type 11 has an invalid length. [ 250.440344][ T8264] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.926'. [ 251.611859][ T8292] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.937'. [ 251.636096][ T8292] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.937'. [ 253.136029][ T8335] validate_nla: 4 callbacks suppressed [ 253.136047][ T8335] netlink: 'syz.3.955': attribute type 3 has an invalid length. [ 253.158278][ T8335] netlink: 'syz.3.955': attribute type 1 has an invalid length. [ 253.166090][ T8335] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.955'. [ 254.695158][ T8364] netlink: 'syz.3.965': attribute type 39 has an invalid length. [ 255.219925][ T8371] netlink: 'syz.2.968': attribute type 3 has an invalid length. [ 255.239072][ T8371] netlink: 'syz.2.968': attribute type 1 has an invalid length. [ 255.266729][ T8371] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.968'. [ 257.168921][ T8401] netlink: 'syz.2.981': attribute type 9 has an invalid length. [ 257.227960][ T8401] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.981'. [ 257.330520][ T8405] netlink: 'syz.0.980': attribute type 3 has an invalid length. [ 257.386640][ T8405] netlink: 'syz.0.980': attribute type 1 has an invalid length. [ 257.394585][ T8405] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.980'. [ 257.456902][ T8401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.032111][ T8412] netlink: 668 bytes leftover after parsing attributes in process `syz.1.984'. [ 258.083914][ T8412] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 258.116278][ T8412] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.153500][ T8420] IPv6: Can't replace route, no match found [ 258.196995][ T8418] netlink: 'syz.0.986': attribute type 25 has an invalid length. [ 258.231533][ T8418] netlink: 'syz.0.986': attribute type 9 has an invalid length. [ 258.263417][ T8418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.986'. [ 258.301178][ T8415] netlink: 'syz.2.985': attribute type 25 has an invalid length. [ 258.346738][ T8415] netlink: 'syz.2.985': attribute type 9 has an invalid length. [ 258.381376][ T8415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.985'. [ 259.697397][ T8442] syzkaller0: entered promiscuous mode [ 259.703087][ T8442] syzkaller0: entered allmulticast mode [ 259.956937][ T8440] syzkaller0: left promiscuous mode [ 259.962365][ T8440] syzkaller0: left allmulticast mode [ 261.256430][ T8455] netlink: 668 bytes leftover after parsing attributes in process `syz.1.998'. [ 261.413348][ T8455] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 261.439278][ T8455] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 262.366845][ T8463] netlink: 'syz.3.999': attribute type 25 has an invalid length. [ 262.405110][ T8463] netlink: 'syz.3.999': attribute type 9 has an invalid length. [ 262.484233][ T8463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.999'. [ 262.696608][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.703908][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.038025][ T8480] netlink: 'syz.0.1002': attribute type 25 has an invalid length. [ 263.068964][ T8480] netlink: 'syz.0.1002': attribute type 9 has an invalid length. [ 263.087446][ T8480] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1002'. [ 264.969380][ T8503] syzkaller0: entered promiscuous mode [ 264.975565][ T8503] syzkaller0: entered allmulticast mode [ 265.077624][ T8513] FAULT_INJECTION: forcing a failure. [ 265.077624][ T8513] name failslab, interval 1, probability 0, space 0, times 0 [ 265.164449][ T8513] CPU: 0 PID: 8513 Comm: syz.2.1016 Not tainted syzkaller #0 [ 265.172006][ T8513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.182113][ T8513] Call Trace: [ 265.185446][ T8513] [ 265.188421][ T8513] dump_stack_lvl+0x18c/0x250 [ 265.193156][ T8513] ? show_regs_print_info+0x20/0x20 [ 265.198407][ T8513] ? load_image+0x420/0x420 [ 265.202963][ T8513] ? perf_trace_lock+0xfc/0x3b0 [ 265.207878][ T8513] ? verify_lock_unused+0x140/0x140 [ 265.213148][ T8513] ? perf_trace_lock+0xfc/0x3b0 [ 265.218061][ T8513] should_fail_ex+0x394/0x4c0 [ 265.222814][ T8513] should_failslab+0x9/0x20 [ 265.227374][ T8513] slab_pre_alloc_hook+0x59/0x300 [ 265.232480][ T8513] kmem_cache_alloc+0x5a/0x2c0 [ 265.237296][ T8513] ? skb_clone+0x1eb/0x370 [ 265.241766][ T8513] skb_clone+0x1eb/0x370 [ 265.246056][ T8513] __netlink_deliver_tap+0x411/0x7f0 [ 265.251403][ T8513] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.256648][ T8513] netlink_deliver_tap+0x19c/0x1b0 [ 265.261828][ T8513] netlink_unicast+0x77b/0x930 [ 265.266691][ T8513] netlink_sendmsg+0x8d0/0xbf0 [ 265.271520][ T8513] ? netlink_getsockopt+0x590/0x590 [ 265.276811][ T8513] ? apparmor_socket_sendmsg+0x8e/0x330 [ 265.282407][ T8513] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 265.287745][ T8513] ? security_socket_sendmsg+0x80/0xa0 [ 265.293256][ T8513] ? netlink_getsockopt+0x590/0x590 [ 265.298504][ T8513] ____sys_sendmsg+0x61b/0x980 [ 265.303329][ T8513] ? __asan_memset+0x22/0x40 [ 265.307976][ T8513] ? __sys_sendmsg_sock+0x30/0x30 [ 265.313041][ T8513] ? __import_iovec+0x5f2/0x850 [ 265.317960][ T8513] ? import_iovec+0x73/0xa0 [ 265.322537][ T8513] ___sys_sendmsg+0x2a6/0x360 [ 265.327276][ T8513] ? __sys_sendmsg+0x2b0/0x2b0 [ 265.332110][ T8513] ? trace_call_bpf+0xc3/0x6c0 [ 265.336951][ T8513] __se_sys_sendmsg+0x1d0/0x2c0 [ 265.341849][ T8513] ? perf_trace_preemptirq_template+0x269/0x330 [ 265.348239][ T8513] ? __x64_sys_sendmsg+0x80/0x80 [ 265.353267][ T8513] ? lockdep_hardirqs_on+0x98/0x150 [ 265.358541][ T8513] do_syscall_64+0x55/0xb0 [ 265.363036][ T8513] ? clear_bhb_loop+0x40/0x90 [ 265.367772][ T8513] ? clear_bhb_loop+0x40/0x90 [ 265.372506][ T8513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.378458][ T8513] RIP: 0033:0x7f9dabb9e019 [ 265.382919][ T8513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.402609][ T8513] RSP: 002b:00007f9dac993028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.411073][ T8513] RAX: ffffffffffffffda RBX: 00007f9dabe26090 RCX: 00007f9dabb9e019 [ 265.419088][ T8513] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 265.427106][ T8513] RBP: 00007f9dac993090 R08: 0000000000000000 R09: 0000000000000000 [ 265.435118][ T8513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.443134][ T8513] R13: 00007f9dabe26128 R14: 00007f9dabe26090 R15: 00007ffcf7a855d8 [ 265.451209][ T8513] [ 265.516767][ T8513] netlink: 'syz.2.1016': attribute type 10 has an invalid length. [ 267.760917][ T8513] wg1: entered promiscuous mode [ 267.766095][ T8513] wg1: entered allmulticast mode [ 267.772854][ T8513] team0: Device wg1 is of different type [ 267.900277][ T8519] netlink: 'syz.3.1018': attribute type 25 has an invalid length. [ 267.913668][ T8519] netlink: 'syz.3.1018': attribute type 9 has an invalid length. [ 267.925878][ T8519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1018'. [ 268.135354][ T8526] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1021'. [ 268.154296][ T8526] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 268.163257][ T8526] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 269.037105][ T8540] netlink: 'syz.2.1026': attribute type 21 has an invalid length. [ 269.055386][ T8540] netlink: 'syz.2.1026': attribute type 12 has an invalid length. [ 269.073350][ T8540] netlink: 'syz.2.1026': attribute type 13 has an invalid length. [ 269.091955][ T8540] netlink: 'syz.2.1026': attribute type 14 has an invalid length. [ 269.112147][ T8540] netlink: 'syz.2.1026': attribute type 15 has an invalid length. [ 269.128794][ T8540] netlink: 'syz.2.1026': attribute type 16 has an invalid length. [ 269.146556][ T8540] netlink: 12926 bytes leftover after parsing attributes in process `syz.2.1026'. [ 272.228873][ T8554] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1032'. [ 272.247073][ T8554] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 272.255497][ T8554] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 273.154691][ T8572] netlink: 'syz.2.1040': attribute type 39 has an invalid length. [ 273.396115][ T8574] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1041'. [ 273.398461][ T8582] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1040'. [ 273.469664][ T8574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.505550][ T8582] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1040'. [ 273.518234][ T8576] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1040'. [ 273.528446][ T8586] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1040'. [ 273.852827][ T8591] netlink: 'syz.2.1046': attribute type 25 has an invalid length. [ 273.861804][ T8591] netlink: 'syz.2.1046': attribute type 9 has an invalid length. [ 273.872769][ T8591] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1046'. [ 274.905560][ T8615] syz.3.1055[8615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.905748][ T8615] syz.3.1055[8615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.007054][ T8648] netlink: 'syz.3.1071': attribute type 25 has an invalid length. [ 276.029906][ T8648] netlink: 'syz.3.1071': attribute type 9 has an invalid length. [ 276.038759][ T8648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1071'. [ 276.178468][ T8652] netlink: 668 bytes leftover after parsing attributes in process `syz.1.1073'. [ 276.202214][ T8652] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 276.212080][ T8652] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.724779][ T8679] netlink: 'syz.2.1084': attribute type 25 has an invalid length. [ 279.750509][ T8679] netlink: 'syz.2.1084': attribute type 9 has an invalid length. [ 279.785953][ T8679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1084'. [ 281.218885][ T8713] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1097'. [ 281.301222][ T8713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.639468][ T8716] netlink: 'syz.3.1098': attribute type 25 has an invalid length. [ 283.659770][ T8716] netlink: 'syz.3.1098': attribute type 9 has an invalid length. [ 283.689754][ T8716] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1098'. [ 285.119090][ T8749] netlink: 'syz.0.1111': attribute type 25 has an invalid length. [ 285.140763][ T8749] netlink: 'syz.0.1111': attribute type 9 has an invalid length. [ 285.155728][ T8749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1111'. [ 286.960683][ T8778] netlink: 'syz.3.1123': attribute type 25 has an invalid length. [ 286.978113][ T8778] netlink: 'syz.3.1123': attribute type 9 has an invalid length. [ 286.994178][ T8778] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1123'. [ 289.337044][ T8788] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1127'. [ 289.402598][ T8788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.053515][ T8814] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1138'. [ 291.595930][ T8831] sctp: [Deprecated]: syz.0.1145 (pid 8831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.595930][ T8831] Use struct sctp_sack_info instead [ 292.615643][ T8863] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1160'. [ 292.617140][ T8861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1159'. [ 292.656972][ T8861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1159'. [ 292.685207][ T8861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1159'. [ 292.713265][ T8861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1159'. [ 295.617620][ T8934] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1192'. [ 296.128961][ T8949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1198'. [ 296.144310][ T8949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1198'. [ 299.528084][ T5788] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 299.853788][ T5788] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 300.327013][ T8995] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1218'. [ 300.514132][ T9003] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1221'. [ 300.548399][ T9003] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1221'. [ 300.573915][ T9003] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1221'. [ 300.607469][ T9003] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1221'. [ 303.186958][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'. [ 303.471824][ T9077] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1256'. [ 304.791363][ T9109] netlink: 'syz.0.1271': attribute type 21 has an invalid length. [ 304.824207][ T9109] netlink: 'syz.0.1271': attribute type 6 has an invalid length. [ 304.853381][ T9109] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1271'. [ 305.455475][ T9120] netlink: 'syz.0.1275': attribute type 21 has an invalid length. [ 305.473320][ T9120] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.489411][ T9120] IPv6: Can't replace route, no match found [ 306.130554][ T5788] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 306.831215][ T5788] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 308.000557][ T9190] netlink: 'syz.0.1308': attribute type 29 has an invalid length. [ 308.020742][ T9190] netlink: 'syz.0.1308': attribute type 29 has an invalid length. [ 308.031717][ T9190] netlink: 'syz.0.1308': attribute type 29 has an invalid length. [ 309.024259][ T9219] netlink: 'syz.2.1324': attribute type 10 has an invalid length. [ 309.047186][ T9219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1324'. [ 309.075023][ T9219] batman_adv: batadv0: Adding interface: vlan1 [ 309.081931][ T9219] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.126414][ T9219] batman_adv: batadv0: Interface activated: vlan1 [ 309.149106][ T9222] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1323'. [ 309.161783][ T9222] bond0: entered allmulticast mode [ 309.168297][ T9222] bond_slave_0: entered allmulticast mode [ 309.174308][ T9222] bond_slave_1: entered allmulticast mode [ 309.404087][ T9233] syz.2.1327: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 309.441434][ T9233] CPU: 1 PID: 9233 Comm: syz.2.1327 Not tainted syzkaller #0 [ 309.448930][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.459029][ T9233] Call Trace: [ 309.462336][ T9233] [ 309.465342][ T9233] dump_stack_lvl+0x18c/0x250 [ 309.470072][ T9233] ? show_regs_print_info+0x20/0x20 [ 309.475309][ T9233] ? load_image+0x420/0x420 [ 309.479853][ T9233] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 309.486301][ T9233] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 309.492846][ T9233] warn_alloc+0x246/0x340 [ 309.497215][ T9233] ? filter_irq_stacks+0x29/0x90 [ 309.502208][ T9233] ? zone_watermark_ok_safe+0x230/0x230 [ 309.507793][ T9233] ? kasan_set_track+0x5f/0x70 [ 309.512588][ T9233] ? kasan_set_track+0x4e/0x70 [ 309.517645][ T9233] ? __kasan_kmalloc+0x8f/0xa0 [ 309.522447][ T9233] ? xsk_init_queue+0xad/0x100 [ 309.527250][ T9233] ? xsk_setsockopt+0x4c9/0x750 [ 309.532131][ T9233] ? do_sock_setsockopt+0x175/0x1a0 [ 309.537357][ T9233] ? __x64_sys_setsockopt+0x182/0x200 [ 309.542764][ T9233] __vmalloc_node_range+0x129/0x1320 [ 309.548093][ T9233] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 309.554108][ T9233] ? lock_chain_count+0x20/0x20 [ 309.558997][ T9233] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 309.565212][ T9233] ? free_vm_area+0x50/0x50 [ 309.569765][ T9233] vmalloc_user+0x74/0x80 [ 309.574579][ T9233] ? xskq_create+0xbf/0x170 [ 309.579123][ T9233] xskq_create+0xbf/0x170 [ 309.583504][ T9233] xsk_init_queue+0xad/0x100 [ 309.588140][ T9233] xsk_setsockopt+0x4c9/0x750 [ 309.592863][ T9233] ? xsk_poll+0x670/0x670 [ 309.597243][ T9233] ? __fget_files+0x28/0x460 [ 309.601882][ T9233] ? aa_sock_opt_perm+0x74/0x100 [ 309.606869][ T9233] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 309.612454][ T9233] ? security_socket_setsockopt+0x7e/0xa0 [ 309.618210][ T9233] ? xsk_poll+0x670/0x670 [ 309.622587][ T9233] do_sock_setsockopt+0x175/0x1a0 [ 309.627645][ T9233] ? __fdget+0x180/0x210 [ 309.631940][ T9233] __x64_sys_setsockopt+0x182/0x200 [ 309.637174][ T9233] do_syscall_64+0x55/0xb0 [ 309.641628][ T9233] ? clear_bhb_loop+0x40/0x90 [ 309.646342][ T9233] ? clear_bhb_loop+0x40/0x90 [ 309.651067][ T9233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.656994][ T9233] RIP: 0033:0x7f9dabb9e019 [ 309.661445][ T9233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.681086][ T9233] RSP: 002b:00007f9dac9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.689537][ T9233] RAX: ffffffffffffffda RBX: 00007f9dabe25fa0 RCX: 00007f9dabb9e019 [ 309.697537][ T9233] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 309.705541][ T9233] RBP: 00007f9dabc3500c R08: 0000000000000004 R09: 0000000000000000 [ 309.713544][ T9233] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 309.721550][ T9233] R13: 00007f9dabe26038 R14: 00007f9dabe25fa0 R15: 00007ffcf7a855d8 [ 309.729671][ T9233] [ 309.853321][ T9233] Mem-Info: [ 309.857864][ T9233] active_anon:5387 inactive_anon:0 isolated_anon:0 [ 309.857864][ T9233] active_file:18492 inactive_file:40035 isolated_file:0 [ 309.857864][ T9233] unevictable:768 dirty:23 writeback:0 [ 309.857864][ T9233] slab_reclaimable:10114 slab_unreclaimable:93902 [ 309.857864][ T9233] mapped:24481 shmem:1361 pagetables:507 [ 309.857864][ T9233] sec_pagetables:0 bounce:0 [ 309.857864][ T9233] kernel_misc_reclaimable:0 [ 309.857864][ T9233] free:1346140 free_pcp:10707 free_cma:0 [ 309.911526][ T9233] Node 0 active_anon:21548kB inactive_anon:0kB active_file:73968kB inactive_file:159936kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97924kB dirty:92kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10456kB pagetables:2028kB sec_pagetables:0kB all_unreclaimable? no [ 309.963112][ T9233] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 310.076960][ T9233] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 310.121003][ T9233] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 310.127343][ T9233] Node 0 DMA32 free:1468564kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21608kB inactive_anon:0kB active_file:73968kB inactive_file:159116kB unevictable:1536kB writepending:92kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:24780kB local_pcp:10364kB free_cma:0kB [ 310.166047][ T9233] lowmem_reserve[]: 0 0 0 0 0 [ 310.243981][ T9233] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 310.297817][ T9233] lowmem_reserve[]: 0 0 0 0 0 [ 310.302723][ T9233] Node 1 Normal free:3898380kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19936kB local_pcp:5504kB free_cma:0kB [ 310.345833][ T9233] lowmem_reserve[]: 0 0 0 0 0 [ 310.352370][ T9233] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 310.366560][ T9233] Node 0 DMA32: 979*4kB (UME) 811*8kB (ME) 1029*16kB (UM) 1049*32kB (UME) 478*64kB (UME) 116*128kB (UME) 48*256kB (UME) 26*512kB (UME) 16*1024kB (UME) 4*2048kB (M) 320*4096kB (UM) = 1466772kB [ 310.386797][ T9233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 310.424860][ T9233] Node 1 Normal: 263*4kB (UME) 76*8kB (UME) 47*16kB (UME) 107*32kB (UME) 29*64kB (UE) 10*128kB (UME) 3*256kB (UE) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3898380kB [ 310.453168][ T9233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.470531][ T9233] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 310.481857][ T9233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.495403][ T9233] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 310.520110][ T9233] 59888 total pagecache pages [ 310.525183][ T9233] 0 pages in swap cache [ 310.532692][ T9233] Free swap = 124996kB [ 310.537313][ T9233] Total swap = 124996kB [ 310.541520][ T9233] 2097051 pages RAM [ 310.545361][ T9233] 0 pages HighMem/MovableOnly [ 310.552775][ T9233] 416955 pages reserved [ 310.564388][ T9233] 0 pages cma reserved [ 310.573288][ T9252] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1335'. [ 310.608686][ T9252] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1335'. [ 310.635904][ T9253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1335'. [ 310.655816][ T9252] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1335'. [ 310.838326][ T5788] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 310.847248][ T5788] Bluetooth: hci0: Injecting HCI hardware error event [ 310.855622][ T5789] Bluetooth: hci0: hardware error 0x00 [ 312.680341][ T9293] netlink: 'syz.0.1349': attribute type 10 has an invalid length. [ 312.688655][ T9293] netlink: 'syz.0.1349': attribute type 19 has an invalid length. [ 312.716567][ T9293] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1349'. [ 312.916932][ T5789] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 312.931274][ T9302] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 312.941376][ T9302] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 313.459896][ T9323] netlink: 'syz.3.1363': attribute type 5 has an invalid length. [ 317.326010][ T5789] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 319.409224][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 323.704851][ T9468] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1422'. [ 323.756513][ T9468] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1422'. [ 323.778863][ T9470] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1422'. [ 323.834506][ T9468] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1422'. [ 324.167562][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.174063][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.810705][ T9482] syzkaller0: entered promiscuous mode [ 324.819759][ T9482] syzkaller0: entered allmulticast mode [ 330.572929][ T9545] netlink: 'syz.3.1451': attribute type 29 has an invalid length. [ 330.604867][ T9545] netlink: 'syz.3.1451': attribute type 29 has an invalid length. [ 330.637601][ T9545] netlink: 'syz.3.1451': attribute type 29 has an invalid length. [ 330.784520][ T9555] netlink: 'syz.1.1456': attribute type 29 has an invalid length. [ 330.799965][ T9555] netlink: 'syz.1.1456': attribute type 29 has an invalid length. [ 330.811271][ T9555] netlink: 'syz.1.1456': attribute type 29 has an invalid length. [ 331.722038][ T5788] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 331.738447][ T5788] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 331.752194][ T5788] CPU: 0 PID: 5788 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 331.759882][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.770001][ T5788] Workqueue: hci3 hci_rx_work [ 331.774828][ T5788] Call Trace: [ 331.778158][ T5788] [ 331.781124][ T5788] dump_stack_lvl+0x18c/0x250 [ 331.785846][ T5788] ? show_regs_print_info+0x20/0x20 [ 331.791080][ T5788] ? load_image+0x420/0x420 [ 331.795632][ T5788] sysfs_create_dir_ns+0x26e/0x2a0 [ 331.800780][ T5788] ? __lock_acquire+0x7d80/0x7d80 [ 331.805834][ T5788] ? sysfs_warn_dup+0xa0/0xa0 [ 331.810538][ T5788] ? do_raw_spin_unlock+0x121/0x230 [ 331.815770][ T5788] kobject_add_internal+0x617/0xc90 [ 331.821013][ T5788] kobject_add+0x164/0x240 [ 331.825475][ T5788] ? kobject_init+0x1d0/0x1d0 [ 331.830196][ T5788] ? get_device_parent+0x366/0x390 [ 331.835354][ T5788] device_add+0x3fa/0xc40 [ 331.839725][ T5788] hci_conn_add_sysfs+0xd5/0x1e0 [ 331.844700][ T5788] le_conn_complete_evt+0xe9f/0x1480 [ 331.850022][ T5788] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 331.856294][ T5788] ? bt_info+0x180/0x180 [ 331.860574][ T5788] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 331.866250][ T5788] ? mutex_unlock+0x10/0x10 [ 331.870784][ T5788] ? skb_pull_data+0xf0/0x1f0 [ 331.875492][ T5788] hci_le_conn_complete_evt+0x187/0x440 [ 331.881079][ T5788] ? hci_remote_host_features_evt+0x150/0x150 [ 331.887201][ T5788] hci_event_packet+0x7b4/0x1280 [ 331.892205][ T5788] ? __lock_acquire+0x7d80/0x7d80 [ 331.897278][ T5788] ? lock_chain_count+0x20/0x20 [ 331.902173][ T5788] ? bis_list+0x290/0x290 [ 331.906544][ T5788] ? lockdep_hardirqs_on+0x98/0x150 [ 331.911783][ T5788] ? hci_send_to_monitor+0xd7/0x4f0 [ 331.917021][ T5788] hci_rx_work+0x43a/0xd60 [ 331.921480][ T5788] ? process_scheduled_works+0x975/0x1600 [ 331.927238][ T5788] process_scheduled_works+0xa60/0x1600 [ 331.932846][ T5788] ? worker_attach_to_pool+0x370/0x370 [ 331.938345][ T5788] ? assign_work+0x3cc/0x5d0 [ 331.942975][ T5788] worker_thread+0xa5e/0xfe0 [ 331.947632][ T5788] kthread+0x2fa/0x390 [ 331.951740][ T5788] ? pr_cont_work+0x550/0x550 [ 331.956451][ T5788] ? kthread_blkcg+0xd0/0xd0 [ 331.961065][ T5788] ret_from_fork+0x48/0x80 [ 331.965511][ T5788] ? kthread_blkcg+0xd0/0xd0 [ 331.970131][ T5788] ret_from_fork_asm+0x11/0x20 [ 331.974943][ T5788] [ 331.986431][ T5788] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 332.000525][ T5788] Bluetooth: hci3: failed to register connection device [ 333.515513][ T9598] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1472'. [ 337.140538][ T9593] [ 337.143114][ T9593] ====================================================== [ 337.150180][ T9593] WARNING: possible circular locking dependency detected [ 337.157262][ T9593] syzkaller #0 Not tainted [ 337.161722][ T9593] ------------------------------------------------------ [ 337.168789][ T9593] syz.0.1471/9593 is trying to acquire lock: [ 337.174807][ T9593] ffff888025ba5238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x94/0x630 [ 337.183904][ T9593] [ 337.183904][ T9593] but task is already holding lock: [ 337.191314][ T9593] ffff8880b8f37de8 (stock_lock){-.-.}-{2:2}, at: refill_stock+0xea/0x450 [ 337.199868][ T9593] [ 337.199868][ T9593] which lock already depends on the new lock. [ 337.199868][ T9593] [ 337.210315][ T9593] [ 337.210315][ T9593] the existing dependency chain (in reverse order) is: [ 337.219372][ T9593] [ 337.219372][ T9593] -> #1 (stock_lock){-.-.}-{2:2}: [ 337.226642][ T9593] obj_cgroup_charge+0x10a/0x630 [ 337.232159][ T9593] slab_pre_alloc_hook+0x2e2/0x300 [ 337.237886][ T9593] __kmem_cache_alloc_node+0x53/0x250 [ 337.243839][ T9593] __kmalloc_node+0xa6/0x240 [ 337.249049][ T9593] bpf_map_kmalloc_node+0xbc/0x1b0 [ 337.254735][ T9593] trie_update_elem+0x172/0xd60 [ 337.260169][ T9593] bpf_map_update_value+0x64b/0x710 [ 337.265936][ T9593] map_update_elem+0x586/0x710 [ 337.271261][ T9593] __sys_bpf+0x6b5/0x890 [ 337.276065][ T9593] __x64_sys_bpf+0x7c/0x90 [ 337.281042][ T9593] do_syscall_64+0x55/0xb0 [ 337.286121][ T9593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.292712][ T9593] [ 337.292712][ T9593] -> #0 (&trie->lock){....}-{2:2}: [ 337.300114][ T9593] __lock_acquire+0x37ef/0x7d80 [ 337.305595][ T9593] lock_acquire+0x19e/0x420 [ 337.310664][ T9593] _raw_spin_lock_irqsave+0xb4/0x100 [ 337.316687][ T9593] trie_delete_elem+0x94/0x630 [ 337.322033][ T9593] bpf_prog_18dbf0bb98c5951f+0x45/0x49 [ 337.328066][ T9593] trace_call_bpf+0x333/0x6c0 [ 337.333359][ T9593] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 337.339473][ T9593] perf_trace_lock_acquire+0x342/0x400 [ 337.345487][ T9593] lock_acquire+0x3ef/0x420 [ 337.350560][ T9593] percpu_ref_put+0x35/0x180 [ 337.355725][ T9593] __refill_stock+0x238/0x3d0 [ 337.360983][ T9593] refill_stock+0x19e/0x450 [ 337.366069][ T9593] __memcg_kmem_uncharge_page+0xeb/0x290 [ 337.372285][ T9593] exit_task_stack_account+0x15d/0x310 [ 337.378395][ T9593] do_exit+0x1a99/0x2530 [ 337.383206][ T9593] do_group_exit+0x22d/0x2f0 [ 337.388369][ T9593] get_signal+0x12a6/0x1390 [ 337.393443][ T9593] arch_do_signal_or_restart+0xc2/0x7b0 [ 337.399640][ T9593] exit_to_user_mode_loop+0x70/0x110 [ 337.405506][ T9593] exit_to_user_mode_prepare+0xee/0x180 [ 337.411660][ T9593] syscall_exit_to_user_mode+0x1a/0x50 [ 337.417693][ T9593] do_syscall_64+0x61/0xb0 [ 337.422671][ T9593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.429129][ T9593] [ 337.429129][ T9593] other info that might help us debug this: [ 337.429129][ T9593] [ 337.439395][ T9593] Possible unsafe locking scenario: [ 337.439395][ T9593] [ 337.446878][ T9593] CPU0 CPU1 [ 337.452274][ T9593] ---- ---- [ 337.457670][ T9593] lock(stock_lock); [ 337.461696][ T9593] lock(&trie->lock); [ 337.468340][ T9593] lock(stock_lock); [ 337.474886][ T9593] lock(&trie->lock); [ 337.479000][ T9593] [ 337.479000][ T9593] *** DEADLOCK *** [ 337.479000][ T9593] [ 337.487176][ T9593] 2 locks held by syz.0.1471/9593: [ 337.492327][ T9593] #0: ffff8880b8f37de8 (stock_lock){-.-.}-{2:2}, at: refill_stock+0xea/0x450 [ 337.501285][ T9593] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: trace_call_bpf+0xc3/0x6c0 [ 337.510676][ T9593] [ 337.510676][ T9593] stack backtrace: [ 337.516598][ T9593] CPU: 1 PID: 9593 Comm: syz.0.1471 Not tainted syzkaller #0 [ 337.524009][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.534109][ T9593] Call Trace: [ 337.537609][ T9593] [ 337.540662][ T9593] dump_stack_lvl+0x18c/0x250 [ 337.545647][ T9593] ? load_image+0x420/0x420 [ 337.550280][ T9593] ? show_regs_print_info+0x20/0x20 [ 337.555541][ T9593] ? print_circular_bug+0x12b/0x1a0 [ 337.560803][ T9593] check_noncircular+0x2fc/0x400 [ 337.565848][ T9593] ? print_deadlock_bug+0x5d0/0x5d0 [ 337.571106][ T9593] ? lockdep_lock+0xf5/0x230 [ 337.575739][ T9593] ? perf_trace_lock_acquire+0x1a7/0x400 [ 337.581427][ T9593] ? _find_first_zero_bit+0xd6/0x100 [ 337.586851][ T9593] __lock_acquire+0x37ef/0x7d80 [ 337.591772][ T9593] ? perf_trace_buf_alloc+0x131/0x290 [ 337.597195][ T9593] ? verify_lock_unused+0x140/0x140 [ 337.602437][ T9593] ? perf_trace_lock_acquire+0x1a7/0x400 [ 337.608115][ T9593] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 337.614760][ T9593] lock_acquire+0x19e/0x420 [ 337.619323][ T9593] ? trie_delete_elem+0x94/0x630 [ 337.624362][ T9593] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 337.631001][ T9593] ? read_lock_is_recursive+0x20/0x20 [ 337.636432][ T9593] _raw_spin_lock_irqsave+0xb4/0x100 [ 337.641779][ T9593] ? trie_delete_elem+0x94/0x630 [ 337.646794][ T9593] ? _raw_spin_lock+0x40/0x40 [ 337.651545][ T9593] trie_delete_elem+0x94/0x630 [ 337.656385][ T9593] bpf_prog_18dbf0bb98c5951f+0x45/0x49 [ 337.661903][ T9593] trace_call_bpf+0x333/0x6c0 [ 337.666647][ T9593] ? trace_call_bpf+0xc3/0x6c0 [ 337.671470][ T9593] ? mark_lock+0x94/0x320 [ 337.675854][ T9593] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 337.681971][ T9593] ? __lock_acquire+0x1336/0x7d80 [ 337.687046][ T9593] ? trace_call_bpf+0xc3/0x6c0 [ 337.691858][ T9593] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 337.697471][ T9593] perf_trace_lock_acquire+0x342/0x400 [ 337.702988][ T9593] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 337.709637][ T9593] ? perf_trace_lock_acquire+0x342/0x400 [ 337.715325][ T9593] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 337.721970][ T9593] lock_acquire+0x3ef/0x420 [ 337.726521][ T9593] ? percpu_ref_put+0x19/0x180 [ 337.731353][ T9593] ? read_lock_is_recursive+0x20/0x20 [ 337.736794][ T9593] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 337.743522][ T9593] ? percpu_ref_put+0x19/0x180 [ 337.748342][ T9593] percpu_ref_put+0x35/0x180 [ 337.752977][ T9593] ? percpu_ref_put+0x19/0x180 [ 337.757791][ T9593] __refill_stock+0x238/0x3d0 [ 337.762524][ T9593] refill_stock+0x19e/0x450 [ 337.767089][ T9593] ? refill_stock+0xea/0x450 [ 337.771766][ T9593] ? mem_cgroup_uncharge_skmem+0x1b0/0x1b0 [ 337.777636][ T9593] ? percpu_ref_tryget+0x15/0x180 [ 337.782707][ T9593] ? percpu_ref_tryget+0x15/0x180 [ 337.787792][ T9593] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 337.793569][ T9593] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 337.799432][ T9593] __memcg_kmem_uncharge_page+0xeb/0x290 [ 337.805116][ T9593] exit_task_stack_account+0x15d/0x310 [ 337.810717][ T9593] do_exit+0x1a99/0x2530 [ 337.815051][ T9593] ? put_task_struct+0xc0/0xc0 [ 337.819965][ T9593] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 337.825994][ T9593] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 337.833243][ T9593] ? lock_chain_count+0x20/0x20 [ 337.838154][ T9593] ? _raw_spin_lock_irq+0xbb/0xf0 [ 337.843252][ T9593] do_group_exit+0x22d/0x2f0 [ 337.847905][ T9593] ? lockdep_hardirqs_on+0x98/0x150 [ 337.853696][ T9593] get_signal+0x12a6/0x1390 [ 337.858288][ T9593] arch_do_signal_or_restart+0xc2/0x7b0 [ 337.863926][ T9593] ? get_sigframe_size+0x20/0x20 [ 337.868937][ T9593] ? perf_trace_preemptirq_template+0xac/0x330 [ 337.875180][ T9593] ? exit_to_user_mode_loop+0x3b/0x110 [ 337.880723][ T9593] exit_to_user_mode_loop+0x70/0x110 [ 337.886086][ T9593] exit_to_user_mode_prepare+0xee/0x180 [ 337.891695][ T9593] syscall_exit_to_user_mode+0x1a/0x50 [ 337.897229][ T9593] do_syscall_64+0x61/0xb0 [ 337.901703][ T9593] ? clear_bhb_loop+0x40/0x90 [ 337.906574][ T9593] ? clear_bhb_loop+0x40/0x90 [ 337.911318][ T9593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.917265][ T9593] RIP: 0033:0x7f2b0c19e019 [ 337.921908][ T9593] Code: Unable to access opcode bytes at 0x7f2b0c19dfef. [ 337.929120][ T9593] RSP: 002b:00007ffeb4128dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 337.937760][ T9593] RAX: 0000000000000000 RBX: 00007f2b0c427da0 RCX: 00007f2b0c19e019 [ 337.945783][ T9593] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 337.953806][ T9593] RBP: 00007f2b0c427da0 R08: 0000000000000006 R09: 0000000000000000 [ 337.961827][ T9593] R10: 00007f2b0c427cb0 R11: 0000000000000246 R12: 00000000000518a0 [ 337.969851][ T9593] R13: 00007f2b0c425fac R14: 00000000000515b3 R15: 00007ffeb4128ee0 [ 337.977882][ T9593]