last executing test programs: 5.3012038s ago: executing program 2 (id=2431): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88f5d9965ff4a44, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x400100}, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3e971d"], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000dd8a00000000000073013500000000009500000000000000308700b9f3a02a72f4aa476a3bb0e2bcc655f64887a8c5d5fe00003f3e9621994f2971a9fbf7996c861769e8240b446b4841ac75fe8f1f4a2a23b5391ddcd22caeafd6e2c03c9e406fae9b4c66fad903c26b0883d00f2e7b413e7fb36456097091b786076b8c36a6836e528ee4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.167937871s ago: executing program 2 (id=2433): r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}, 0x40002000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000015000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000005c0)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000180)=r7, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r5, r4}) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r5}) 4.822660317s ago: executing program 1 (id=2436): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2600c055) 4.373185734s ago: executing program 1 (id=2438): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b23, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"}) socket$kcm(0xa, 0x3, 0x106) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) socket$kcm(0xa, 0x3, 0x106) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3, 0x0, 0x0, 0xfeff}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 4.135016237s ago: executing program 2 (id=2439): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) (async) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 4.119473808s ago: executing program 3 (id=2440): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x39, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 3.825625442s ago: executing program 2 (id=2441): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88f5d9965ff4a44, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x400100}, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3e971d"], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000dd8a00000000000073013500000000009500000000000000308700b9f3a02a72f4aa476a3bb0e2bcc655f64887a8c5d5fe00003f3e9621994f2971a9fbf7996c861769e8240b446b4841ac75fe8f1f4a2a23b5391ddcd22caeafd6e2c03c9e406fae9b4c66fad903c26b0883d00f2e7b413e7fb36456097091b786076b8c36a6836e528ee47d04019bcf19346adfb6bc805d35b27e1a535f6ace924b24"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.778235763s ago: executing program 1 (id=2442): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4e}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002080)={0x0, 0xffffff01, 0xc27fab25371ca062}, 0xc) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0xd0, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x8, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x3fff8002}, 0x5025, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r3, 0x29, 0x3, 0x0, 0x500) socket$kcm(0x2, 0x1, 0x0) r4 = syz_clone(0x40000, &(0x7f00000001c0)="e62b68375410e3fa6fb0579fcfef1b64a0a38c86fd6972d9bb8226246f1b342040cba7e2eb84e07acb431c424df636c4bd4283702e98c7666ca0e275ec8c0a6b3b839d8cad70705c22c4ef940f45dfec93bd4bf76f402c3ca8a92b19cd726dec7802d7410b22244b4e2e93edfaf408f1ae4aa5696ae7948377e2e4918fcb87f954355f60dae87228c25ce4b9e0669690c58848159e85c457fd1207319b34c00a5c1cb4da0ea8a3b0f9f885", 0xab, &(0x7f0000000280), &(0x7f00000002c0), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x11, 0x0, 0x0, 0x0, 0x0, 0x34510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x2, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000002}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 3.771516863s ago: executing program 3 (id=2443): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x14901, 0x7, 0x2, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000000048e8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) socket$kcm(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x10c511, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40040) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, &(0x7f0000000040)=r4, 0x4) 3.693586354s ago: executing program 0 (id=2444): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18b00000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40002000) r4 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481e0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.613546185s ago: executing program 2 (id=2445): socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x200000000000000, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="001a00000000f1ffffffffffffff0000000000000000000013efcf00"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x40008}, 0x0, 0xc, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x31}, 0x81c0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYBLOB=','], 0x9a) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 3.378581199s ago: executing program 3 (id=2446): r0 = socket$kcm(0xa, 0x2, 0x73) (async) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0xb, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x50000000, 0x2}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x15, 0x0, 0x1, 0x20}, {0x35}, {0x6}]}) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) (async) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e22, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x10000000000000c1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0xffffffffffffff08, 0x29, 0x34}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 2.940738305s ago: executing program 1 (id=2447): r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}, 0x40002000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000015000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000005c0)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000180)=r7, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r5, r4}) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r5}) 2.279621945s ago: executing program 0 (id=2448): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x80000000000000c8, 0x7fff, 0x0, 0xa45, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000ffff60007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4) 1.841623862s ago: executing program 0 (id=2449): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffb}, 0x820, 0x0, 0x0, 0x6, 0x0, 0x7ffffc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) 1.468995438s ago: executing program 1 (id=2450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x0, 0x8, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000040), 0x4) close(0x3) 1.425385748s ago: executing program 3 (id=2451): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006c00364683b9dad7aa21240", 0x3a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd}, 0x338bd4001d9e672f) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r6, 0x0, &(0x7f00000005c0)=""/32}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r5, &(0x7f00000005c0)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa) socketpair(0x1e, 0x4, 0x9, &(0x7f0000000000)) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0020001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) 1.085676383s ago: executing program 3 (id=2452): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x5, 0x9, 0x8001, 0x7, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9ff03318944268cb89914f00800", 0x0, 0x2005, 0x6000006c, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.084892463s ago: executing program 0 (id=2453): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88f5d9965ff4a44, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x400100}, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3e971d"], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000dd8a00000000000073013500000000009500000000000000308700b9f3a02a72f4aa476a3bb0e2bcc655f64887a8c5d5fe00003f3e9621994f2971a9fbf7996c861769e8240b446b4841ac75fe8f1f4a2a23b5391ddcd22caeafd6e2c03c9e406fae9b4c66fad903c26b0883d00f2e7b413e7fb36456097091b786076b8c36a6836e528ee47d04019bcf19346adfb6bc805d35b27e1a535f6ace924b24"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 845.863037ms ago: executing program 0 (id=2454): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x14901, 0x7, 0x2, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000000048e8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) socket$kcm(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x10c511, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40040) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, &(0x7f0000000040)=r4, 0x4) 469.529293ms ago: executing program 3 (id=2455): r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000010000000000000000001017"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000001f000000711032000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x0) recvmsg(r4, &(0x7f00000003c0)={&(0x7f0000000200)=@sco, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/140, 0x8c}], 0x1, &(0x7f0000000380)=""/64, 0x40}, 0x100) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff6a, &(0x7f0000000040)=[{&(0x7f00000000c0)="0901020028000b8c6394f90224fc600d00030009000100ff3582c137153e37024801b49dc41155b43f81e81a1ea32a8010000000d1bd", 0x33364}, {&(0x7f0000000100)="0d6e6914f3002c404b0be5d7e88f27170de93058e2cea4294b8851b3c932516cbe9dea6c43eb9eeeca4b02331824229822f9d32fed9d28aefc016d2b7730c66720df2c1a2906beceafb62d092db92a8c7fd24e1af9a13fc6828aca36a0804130fb3e3b0606d5d8368784459363af34cce42e0ac3f9ca4fdd3b951b17220c2b0e771c90d7a3e9897f658c65703b2646b268039892ea4a9d544bb09a76a38aba336853834fd0d91c4433186634b2d94f3b404fd9e2694543d54a3c2cb5191ff555eceb04ebf86f68b4c302b411677dfcc2cd3ebaa8700370a0"}], 0x1}, 0x4040880) 89.602868ms ago: executing program 0 (id=2456): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18b00000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40002000) r4 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481e0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 11.34678ms ago: executing program 1 (id=2457): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffff8c, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000002}, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=2458): r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000015000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000005c0)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000180)=r7, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r5, r4}) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r5}) kernel console output (not intermixed with test programs): 00000 [ 321.271962][ T9642] R13: 00007f9620216038 R14: 00007f9620215fa0 R15: 00007ffe1dc6bbd8 [ 321.279982][ T9642] [ 321.429385][ T9646] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1337'. [ 321.475368][ T9648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.483597][ T9648] IPv6: NLM_F_CREATE should be set when creating new route [ 321.492162][ T9648] IPv6: NLM_F_CREATE should be set when creating new route [ 321.500032][ T9648] IPv6: NLM_F_CREATE should be set when creating new route [ 321.539284][ T9646] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 321.548421][ T9646] CPU: 0 PID: 9646 Comm: syz.1.1337 Not tainted syzkaller #0 [ 321.555856][ T9646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 321.565956][ T9646] Call Trace: [ 321.569278][ T9646] [ 321.572249][ T9646] dump_stack_lvl+0x18c/0x250 [ 321.576992][ T9646] ? show_regs_print_info+0x20/0x20 [ 321.582250][ T9646] ? load_image+0x420/0x420 [ 321.586825][ T9646] sysfs_warn_dup+0x8e/0xa0 [ 321.591380][ T9646] sysfs_do_create_link_sd+0xc0/0x110 [ 321.596810][ T9646] device_add_class_symlinks+0x1cf/0x240 [ 321.602517][ T9646] device_add+0x4f9/0xc40 [ 321.606912][ T9646] wiphy_register+0x1d99/0x2ac0 [ 321.611831][ T9646] ? cfg80211_event_work+0x40/0x40 [ 321.616981][ T9646] ? minstrel_ht_alloc+0x88a/0x990 [ 321.622127][ T9646] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 321.628234][ T9646] ieee80211_register_hw+0x2dd8/0x3b30 [ 321.633738][ T9646] ? ieee80211_register_hw+0xfc1/0x3b30 [ 321.639321][ T9646] ? ieee80211_tasklet_handler+0x20/0x20 [ 321.644990][ T9646] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 321.650924][ T9646] ? __debug_object_init+0xec/0x450 [ 321.656167][ T9646] ? __asan_memset+0x22/0x40 [ 321.660798][ T9646] ? __hrtimer_init+0x189/0x270 [ 321.665690][ T9646] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 321.671463][ T9646] ? mac80211_hwsim_free+0x220/0x220 [ 321.676776][ T9646] ? rcu_is_watching+0x15/0xb0 [ 321.681583][ T9646] ? kstrndup+0xbd/0x140 [ 321.685881][ T9646] hwsim_new_radio_nl+0xdad/0x1a70 [ 321.691033][ T9646] ? mark_lock+0x94/0x320 [ 321.695397][ T9646] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 321.701410][ T9646] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 321.708697][ T9646] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 321.715062][ T9646] ? lockdep_hardirqs_on+0x98/0x150 [ 321.720301][ T9646] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.726505][ T9646] ? genl_family_rcv_msg_attrs_parse+0x1ca/0x290 [ 321.732901][ T9646] genl_family_rcv_msg_doit+0x21a/0x310 [ 321.738486][ T9646] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 321.744417][ T9646] ? bpf_lsm_capable+0x9/0x10 [ 321.749127][ T9646] ? security_capable+0x89/0xb0 [ 321.754022][ T9646] genl_rcv_msg+0x611/0x7a0 [ 321.758568][ T9646] ? genl_bind+0x360/0x360 [ 321.763015][ T9646] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 321.769385][ T9646] netlink_rcv_skb+0x235/0x4c0 [ 321.774183][ T9646] ? genl_bind+0x360/0x360 [ 321.778635][ T9646] ? netlink_ack+0x1160/0x1160 [ 321.783461][ T9646] ? __lock_acquire+0x7d80/0x7d80 [ 321.788546][ T9646] ? down_read+0x1ac/0x2e0 [ 321.793006][ T9646] genl_rcv+0x28/0x40 [ 321.797018][ T9646] netlink_unicast+0x7b1/0x930 [ 321.801823][ T9646] netlink_sendmsg+0x8d0/0xbf0 [ 321.806630][ T9646] ? netlink_getsockopt+0x590/0x590 [ 321.811866][ T9646] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 321.817878][ T9646] ? aa_sock_msg_perm+0x94/0x150 [ 321.822845][ T9646] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 321.828187][ T9646] ? security_socket_sendmsg+0x80/0xa0 [ 321.833692][ T9646] ? netlink_getsockopt+0x590/0x590 [ 321.838929][ T9646] ____sys_sendmsg+0x61b/0x980 [ 321.843729][ T9646] ? lockdep_hardirqs_on+0x98/0x150 [ 321.848964][ T9646] ? __asan_memset+0x22/0x40 [ 321.853592][ T9646] ? __sys_sendmsg_sock+0x30/0x30 [ 321.858654][ T9646] ? __import_iovec+0x5f2/0x850 [ 321.863545][ T9646] ? import_iovec+0x73/0xa0 [ 321.868079][ T9646] ___sys_sendmsg+0x2a6/0x360 [ 321.872788][ T9646] ? __sys_sendmsg+0x2b0/0x2b0 [ 321.877620][ T9646] __se_sys_sendmsg+0x1d0/0x2c0 [ 321.882503][ T9646] ? __x64_sys_sendmsg+0x80/0x80 [ 321.887495][ T9646] ? syscall_enter_from_user_mode+0x2e/0x80 [ 321.893437][ T9646] do_syscall_64+0x55/0xb0 [ 321.897891][ T9646] ? clear_bhb_loop+0x40/0x90 [ 321.902594][ T9646] ? clear_bhb_loop+0x40/0x90 [ 321.907301][ T9646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.913224][ T9646] RIP: 0033:0x7f5815d9ce59 [ 321.917669][ T9646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.937299][ T9646] RSP: 002b:00007f5816c7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.945755][ T9646] RAX: ffffffffffffffda RBX: 00007f5816015fa0 RCX: 00007f5815d9ce59 [ 321.953767][ T9646] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 321.961766][ T9646] RBP: 00007f5815e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 321.969757][ T9646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.977762][ T9646] R13: 00007f5816016038 R14: 00007f5816015fa0 R15: 00007ffea7f763b8 [ 321.985771][ T9646] [ 322.172489][ T9651] netlink: 'syz.2.1341': attribute type 10 has an invalid length. [ 322.466991][ T9658] netlink: 'syz.3.1345': attribute type 10 has an invalid length. [ 323.290907][ T9684] netlink: 'syz.1.1352': attribute type 10 has an invalid length. [ 323.602656][ T9688] syzkaller0: entered promiscuous mode [ 323.609669][ T9688] syzkaller0: entered allmulticast mode [ 325.670198][ T9695] netlink: 'syz.3.1356': attribute type 10 has an invalid length. [ 325.772611][ T9698] Q±6ã`Ò˜: renamed from lo (while UP) [ 326.038970][ T9704] netlink: 'syz.1.1360': attribute type 10 has an invalid length. [ 326.260604][ T9709] netlink: 'syz.0.1362': attribute type 6 has an invalid length. [ 326.268846][ T9709] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1362'. [ 326.402455][ T9715] netlink: 'syz.1.1372': attribute type 10 has an invalid length. [ 326.673600][ T9722] netlink: 'syz.0.1375': attribute type 10 has an invalid length. [ 327.595176][ T9734] netlink: 'syz.1.1367': attribute type 10 has an invalid length. [ 327.610387][ T9729] netlink: 'syz.3.1368': attribute type 3 has an invalid length. [ 327.624537][ T9729] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1368'. [ 328.316430][ T9755] netlink: 'syz.3.1378': attribute type 10 has an invalid length. [ 329.257965][ T9783] netlink: 'syz.0.1387': attribute type 3 has an invalid length. [ 329.287166][ T9783] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1387'. [ 329.417241][ T9784] lo: entered promiscuous mode [ 329.696855][ T9793] netlink: 'syz.1.1392': attribute type 10 has an invalid length. [ 330.587729][ T9816] netlink: 'syz.1.1399': attribute type 29 has an invalid length. [ 330.623946][ T9816] netlink: 'syz.1.1399': attribute type 29 has an invalid length. [ 330.906454][ T9822] netlink: 'syz.1.1403': attribute type 3 has an invalid length. [ 330.917730][ T9822] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1403'. [ 331.044856][ T9825] lo: entered promiscuous mode [ 331.497894][ T9832] netlink: 'syz.0.1405': attribute type 10 has an invalid length. [ 331.521362][ T9836] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1407'. [ 331.665788][ T9841] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1409'. [ 332.719582][ T9860] netlink: 'syz.3.1414': attribute type 153 has an invalid length. [ 332.755855][ T9860] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1414'. [ 333.530184][ T9871] netlink: 'syz.3.1418': attribute type 10 has an invalid length. [ 334.750602][ T9897] netlink: 'syz.3.1427': attribute type 10 has an invalid length. [ 334.791730][ T9894] netlink: 'syz.0.1426': attribute type 153 has an invalid length. [ 334.820717][ T9894] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1426'. [ 334.942953][ T9897] team0: Port device wlan1 added [ 334.985913][ T9903] netlink: 'syz.2.1428': attribute type 10 has an invalid length. [ 335.494166][ T9922] tap0: tun_chr_ioctl cmd 35108 [ 335.537525][ T9922] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1434'. [ 335.547337][ T9922] netlink: 21056 bytes leftover after parsing attributes in process `syz.1.1434'. [ 336.455274][ T9942] netlink: 'syz.3.1440': attribute type 10 has an invalid length. [ 336.727590][ T9952] sctp: [Deprecated]: syz.0.1442 (pid 9952) Use of int in maxseg socket option. [ 336.727590][ T9952] Use struct sctp_assoc_value instead [ 336.782020][ T9939] netlink: 'syz.1.1439': attribute type 153 has an invalid length. [ 336.796567][ T9939] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1439'. [ 336.864263][ T9956] netlink: 'syz.2.1446': attribute type 10 has an invalid length. [ 337.773239][ T9965] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1448'. [ 337.782481][ T9965] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 337.811546][ T9965] FAULT_INJECTION: forcing a failure. [ 337.811546][ T9965] name failslab, interval 1, probability 0, space 0, times 0 [ 337.835557][ T9965] CPU: 0 PID: 9965 Comm: syz.0.1448 Not tainted syzkaller #0 [ 337.842991][ T9965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 337.853090][ T9965] Call Trace: [ 337.856423][ T9965] [ 337.859405][ T9965] dump_stack_lvl+0x18c/0x250 [ 337.864150][ T9965] ? show_regs_print_info+0x20/0x20 [ 337.869407][ T9965] ? load_image+0x420/0x420 [ 337.873964][ T9965] ? __might_sleep+0xe0/0xe0 [ 337.878639][ T9965] ? __lock_acquire+0x7d80/0x7d80 [ 337.883724][ T9965] should_fail_ex+0x394/0x4c0 [ 337.888476][ T9965] should_failslab+0x9/0x20 [ 337.893034][ T9965] slab_pre_alloc_hook+0x59/0x300 [ 337.898115][ T9965] ? lockdep_hardirqs_on+0x98/0x150 [ 337.903374][ T9965] kmem_cache_alloc_node+0x5e/0x310 [ 337.908630][ T9965] ? __alloc_skb+0x103/0x2c0 [ 337.913274][ T9965] __alloc_skb+0x103/0x2c0 [ 337.917749][ T9965] netlink_ack+0x377/0x1160 [ 337.922317][ T9965] ? netlink_dump+0xec0/0xec0 [ 337.927048][ T9965] ? ref_tracker_free+0x686/0x830 [ 337.932136][ T9965] netlink_rcv_skb+0x2b3/0x4c0 [ 337.936960][ T9965] ? rtnetlink_bind+0x80/0x80 [ 337.941699][ T9965] ? netlink_ack+0x1160/0x1160 [ 337.946532][ T9965] ? __lock_acquire+0x7d80/0x7d80 [ 337.951622][ T9965] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.956871][ T9965] netlink_unicast+0x7b1/0x930 [ 337.961680][ T9965] netlink_sendmsg+0x8d0/0xbf0 [ 337.966484][ T9965] ? netlink_getsockopt+0x590/0x590 [ 337.971716][ T9965] ? aa_sock_msg_perm+0x94/0x150 [ 337.976689][ T9965] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 337.982012][ T9965] ? security_socket_sendmsg+0x80/0xa0 [ 337.987503][ T9965] ? netlink_getsockopt+0x590/0x590 [ 337.992737][ T9965] ____sys_sendmsg+0x61b/0x980 [ 337.997538][ T9965] ? __asan_memset+0x22/0x40 [ 338.002194][ T9965] ? __sys_sendmsg_sock+0x30/0x30 [ 338.007246][ T9965] ? __import_iovec+0x5f2/0x850 [ 338.012135][ T9965] ? import_iovec+0x73/0xa0 [ 338.016679][ T9965] ___sys_sendmsg+0x2a6/0x360 [ 338.021388][ T9965] ? get_pid_task+0x20/0x1e0 [ 338.026016][ T9965] ? __sys_sendmsg+0x2b0/0x2b0 [ 338.030830][ T9965] ? __lock_acquire+0x7d80/0x7d80 [ 338.035906][ T9965] __se_sys_sendmsg+0x1d0/0x2c0 [ 338.040797][ T9965] ? __x64_sys_sendmsg+0x80/0x80 [ 338.045782][ T9965] ? lockdep_hardirqs_on+0x98/0x150 [ 338.051016][ T9965] do_syscall_64+0x55/0xb0 [ 338.055465][ T9965] ? clear_bhb_loop+0x40/0x90 [ 338.060166][ T9965] ? clear_bhb_loop+0x40/0x90 [ 338.064877][ T9965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.070820][ T9965] RIP: 0033:0x7f3397d9ce59 [ 338.075266][ T9965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.094898][ T9965] RSP: 002b:00007f3398c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.103375][ T9965] RAX: ffffffffffffffda RBX: 00007f3398015fa0 RCX: 00007f3397d9ce59 [ 338.111378][ T9965] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 338.119375][ T9965] RBP: 00007f3398c55090 R08: 0000000000000000 R09: 0000000000000000 [ 338.127368][ T9965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.135362][ T9965] R13: 00007f3398016038 R14: 00007f3398015fa0 R15: 00007ffe99262678 [ 338.144247][ T9965] [ 338.544139][ T9974] netlink: 'syz.1.1452': attribute type 10 has an invalid length. [ 339.060786][ T9993] netlink: 'syz.2.1456': attribute type 153 has an invalid length. [ 339.082227][ T9993] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1456'. [ 340.457065][T10016] netlink: 'syz.3.1465': attribute type 10 has an invalid length. [ 340.794809][T10023] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1467'. [ 340.812359][T10023] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 340.926908][T10022] netlink: 'syz.1.1474': attribute type 10 has an invalid length. [ 341.339690][T10032] netlink: 'syz.0.1471': attribute type 10 has an invalid length. [ 342.081943][T10047] netlink: 'syz.0.1476': attribute type 10 has an invalid length. [ 342.957666][T10051] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1478'. [ 343.003529][T10057] netlink: 'syz.1.1479': attribute type 10 has an invalid length. [ 343.433924][T10069] netlink: 'syz.3.1493': attribute type 10 has an invalid length. [ 344.012276][T10085] netlink: 'syz.3.1490': attribute type 10 has an invalid length. [ 344.118328][T10085] team0: Device wg1 is of different type [ 345.131879][T10098] netlink: 'syz.0.1494': attribute type 10 has an invalid length. [ 345.346445][T10105] netlink: 'syz.3.1497': attribute type 10 has an invalid length. [ 345.581604][T10111] syzkaller0: entered promiscuous mode [ 345.594551][T10111] syzkaller0: entered allmulticast mode [ 345.663578][T10113] netlink: 'syz.3.1504': attribute type 4 has an invalid length. [ 345.671579][T10113] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1504'. [ 345.681408][T10114] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1502'. [ 347.902735][T10127] netlink: 'syz.3.1508': attribute type 10 has an invalid length. [ 347.935082][T10131] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1507'. [ 348.210491][T10136] netlink: 'syz.1.1511': attribute type 10 has an invalid length. [ 348.250079][T10143] netlink: 'syz.2.1513': attribute type 25 has an invalid length. [ 348.283517][T10143] netlink: 'syz.2.1513': attribute type 9 has an invalid length. [ 348.889561][T10161] netlink: 'syz.3.1523': attribute type 1 has an invalid length. [ 348.906319][T10161] netlink: 'syz.3.1523': attribute type 3 has an invalid length. [ 348.915997][T10161] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1523'. [ 349.097359][T10167] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1524'. [ 349.169132][T10167] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 349.193752][T10167] CPU: 1 PID: 10167 Comm: syz.1.1524 Not tainted syzkaller #0 [ 349.201306][T10167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 349.211430][T10167] Call Trace: [ 349.214763][T10167] [ 349.217737][T10167] dump_stack_lvl+0x18c/0x250 [ 349.222539][T10167] ? show_regs_print_info+0x20/0x20 [ 349.227795][T10167] ? load_image+0x420/0x420 [ 349.232398][T10167] sysfs_warn_dup+0x8e/0xa0 [ 349.236984][T10167] sysfs_do_create_link_sd+0xc0/0x110 [ 349.242416][T10167] device_add_class_symlinks+0x1cf/0x240 [ 349.248143][T10167] device_add+0x4f9/0xc40 [ 349.252535][T10167] wiphy_register+0x1d99/0x2ac0 [ 349.257512][T10167] ? cfg80211_event_work+0x40/0x40 [ 349.262707][T10167] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 349.268964][T10167] ? ieee80211_register_hw+0x2bff/0x3b30 [ 349.274696][T10167] ieee80211_register_hw+0x2dd8/0x3b30 [ 349.280238][T10167] ? ieee80211_register_hw+0xfc1/0x3b30 [ 349.285889][T10167] ? ieee80211_tasklet_handler+0x20/0x20 [ 349.291565][T10167] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 349.297536][T10167] ? __debug_object_init+0xec/0x450 [ 349.302841][T10167] ? __asan_memset+0x22/0x40 [ 349.307497][T10167] ? __hrtimer_init+0x189/0x270 [ 349.312455][T10167] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 349.318313][T10167] ? mac80211_hwsim_free+0x220/0x220 [ 349.323652][T10167] ? rcu_is_watching+0x15/0xb0 [ 349.328473][T10167] ? kstrndup+0xbd/0x140 [ 349.332810][T10167] hwsim_new_radio_nl+0xdad/0x1a70 [ 349.338005][T10167] ? __nla_validate+0x50/0x50 [ 349.342770][T10167] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 349.349189][T10167] ? __nla_parse+0x40/0x50 [ 349.353774][T10167] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 349.360222][T10167] genl_family_rcv_msg_doit+0x21a/0x310 [ 349.365882][T10167] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 349.371863][T10167] ? bpf_lsm_capable+0x9/0x10 [ 349.376594][T10167] ? security_capable+0x89/0xb0 [ 349.381542][T10167] genl_rcv_msg+0x611/0x7a0 [ 349.386134][T10167] ? genl_bind+0x360/0x360 [ 349.390636][T10167] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 349.396667][T10167] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 349.403060][T10167] ? ref_tracker_free+0x686/0x830 [ 349.408165][T10167] netlink_rcv_skb+0x235/0x4c0 [ 349.413003][T10167] ? genl_bind+0x360/0x360 [ 349.417475][T10167] ? netlink_ack+0x1160/0x1160 [ 349.422325][T10167] ? __lock_acquire+0x7d80/0x7d80 [ 349.427426][T10167] ? down_read+0x1ac/0x2e0 [ 349.431918][T10167] genl_rcv+0x28/0x40 [ 349.435951][T10167] netlink_unicast+0x7b1/0x930 [ 349.440801][T10167] netlink_sendmsg+0x8d0/0xbf0 [ 349.445645][T10167] ? netlink_getsockopt+0x590/0x590 [ 349.450900][T10167] ? aa_sock_msg_perm+0x94/0x150 [ 349.455903][T10167] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 349.461246][T10167] ? security_socket_sendmsg+0x80/0xa0 [ 349.466751][T10167] ? netlink_getsockopt+0x590/0x590 [ 349.472003][T10167] ____sys_sendmsg+0x61b/0x980 [ 349.476871][T10167] ? __asan_memset+0x22/0x40 [ 349.481520][T10167] ? __sys_sendmsg_sock+0x30/0x30 [ 349.486599][T10167] ? __import_iovec+0x5f2/0x850 [ 349.491532][T10167] ? import_iovec+0x73/0xa0 [ 349.496129][T10167] ___sys_sendmsg+0x2a6/0x360 [ 349.500876][T10167] ? __sys_sendmsg+0x2b0/0x2b0 [ 349.505793][T10167] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 349.512079][T10167] __se_sys_sendmsg+0x1d0/0x2c0 [ 349.517013][T10167] ? perf_trace_preemptirq_template+0x269/0x330 [ 349.523323][T10167] ? __x64_sys_sendmsg+0x80/0x80 [ 349.528384][T10167] ? lockdep_hardirqs_on+0x98/0x150 [ 349.533680][T10167] do_syscall_64+0x55/0xb0 [ 349.538174][T10167] ? clear_bhb_loop+0x40/0x90 [ 349.542945][T10167] ? clear_bhb_loop+0x40/0x90 [ 349.547675][T10167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.553632][T10167] RIP: 0033:0x7f5815d9ce59 [ 349.558117][T10167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.577771][T10167] RSP: 002b:00007f5816c7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.586244][T10167] RAX: ffffffffffffffda RBX: 00007f5816015fa0 RCX: 00007f5815d9ce59 [ 349.594268][T10167] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 349.602287][T10167] RBP: 00007f5815e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 349.610302][T10167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.618322][T10167] R13: 00007f5816016038 R14: 00007f5816015fa0 R15: 00007ffea7f763b8 [ 349.626391][T10167] [ 349.784047][T10171] validate_nla: 1 callbacks suppressed [ 349.784067][T10171] netlink: 'syz.0.1526': attribute type 10 has an invalid length. [ 350.230120][T10182] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1529'. [ 350.336824][T10182] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 350.348959][T10182] CPU: 1 PID: 10182 Comm: syz.1.1529 Not tainted syzkaller #0 [ 350.356479][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 350.366574][T10182] Call Trace: [ 350.369897][T10182] [ 350.372865][T10182] dump_stack_lvl+0x18c/0x250 [ 350.377613][T10182] ? show_regs_print_info+0x20/0x20 [ 350.382863][T10182] ? load_image+0x420/0x420 [ 350.387424][T10182] ? memset_orig+0x8a/0xac [ 350.391897][T10182] sysfs_warn_dup+0x8e/0xa0 [ 350.396452][T10182] sysfs_do_create_link_sd+0xc0/0x110 [ 350.401876][T10182] device_add_class_symlinks+0x1cf/0x240 [ 350.407570][T10182] device_add+0x4f9/0xc40 [ 350.411958][T10182] wiphy_register+0x1d99/0x2ac0 [ 350.416882][T10182] ? cfg80211_event_work+0x40/0x40 [ 350.422046][T10182] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 350.428264][T10182] ? ieee80211_register_hw+0x29bb/0x3b30 [ 350.433954][T10182] ieee80211_register_hw+0x2dd8/0x3b30 [ 350.439482][T10182] ? ieee80211_register_hw+0xfc1/0x3b30 [ 350.445100][T10182] ? ieee80211_tasklet_handler+0x20/0x20 [ 350.450786][T10182] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 350.456762][T10182] ? __debug_object_init+0xec/0x450 [ 350.462037][T10182] ? __asan_memset+0x22/0x40 [ 350.466687][T10182] ? __hrtimer_init+0x189/0x270 [ 350.471626][T10182] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 350.477446][T10182] ? mac80211_hwsim_free+0x220/0x220 [ 350.482781][T10182] ? rcu_is_watching+0x15/0xb0 [ 350.487599][T10182] ? kstrndup+0xbd/0x140 [ 350.491905][T10182] hwsim_new_radio_nl+0xdad/0x1a70 [ 350.497073][T10182] ? __nla_validate+0x50/0x50 [ 350.501813][T10182] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 350.508217][T10182] ? __nla_parse+0x40/0x50 [ 350.512690][T10182] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 350.519079][T10182] genl_family_rcv_msg_doit+0x21a/0x310 [ 350.524711][T10182] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 350.530677][T10182] ? bpf_lsm_capable+0x9/0x10 [ 350.535424][T10182] ? security_capable+0x89/0xb0 [ 350.540371][T10182] genl_rcv_msg+0x611/0x7a0 [ 350.544946][T10182] ? genl_bind+0x360/0x360 [ 350.549502][T10182] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 350.555923][T10182] netlink_rcv_skb+0x235/0x4c0 [ 350.560790][T10182] ? genl_bind+0x360/0x360 [ 350.565289][T10182] ? netlink_ack+0x1160/0x1160 [ 350.570126][T10182] ? __lock_acquire+0x7d80/0x7d80 [ 350.575212][T10182] ? down_read+0x1ac/0x2e0 [ 350.579691][T10182] genl_rcv+0x28/0x40 [ 350.583728][T10182] netlink_unicast+0x7b1/0x930 [ 350.588558][T10182] netlink_sendmsg+0x8d0/0xbf0 [ 350.593387][T10182] ? netlink_getsockopt+0x590/0x590 [ 350.598638][T10182] ? aa_sock_msg_perm+0x94/0x150 [ 350.603633][T10182] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 350.608975][T10182] ? security_socket_sendmsg+0x80/0xa0 [ 350.614489][T10182] ? netlink_getsockopt+0x590/0x590 [ 350.619745][T10182] ____sys_sendmsg+0x61b/0x980 [ 350.624597][T10182] ? __asan_memset+0x22/0x40 [ 350.629250][T10182] ? __sys_sendmsg_sock+0x30/0x30 [ 350.634330][T10182] ? __import_iovec+0x5f2/0x850 [ 350.639242][T10182] ? import_iovec+0x73/0xa0 [ 350.643801][T10182] ___sys_sendmsg+0x2a6/0x360 [ 350.648553][T10182] ? __sys_sendmsg+0x2b0/0x2b0 [ 350.653437][T10182] __se_sys_sendmsg+0x1d0/0x2c0 [ 350.658368][T10182] ? __x64_sys_sendmsg+0x80/0x80 [ 350.663399][T10182] do_syscall_64+0x55/0xb0 [ 350.667876][T10182] ? clear_bhb_loop+0x40/0x90 [ 350.672605][T10182] ? clear_bhb_loop+0x40/0x90 [ 350.677330][T10182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.683292][T10182] RIP: 0033:0x7f5815d9ce59 [ 350.687760][T10182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.707421][T10182] RSP: 002b:00007f5816c7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.715892][T10182] RAX: ffffffffffffffda RBX: 00007f5816015fa0 RCX: 00007f5815d9ce59 [ 350.723913][T10182] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 350.731929][T10182] RBP: 00007f5815e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 350.739946][T10182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.747966][T10182] R13: 00007f5816016038 R14: 00007f5816015fa0 R15: 00007ffea7f763b8 [ 350.756006][T10182] [ 350.863999][T10177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.402437][T10195] netlink: 'syz.1.1536': attribute type 10 has an invalid length. [ 351.553066][T10199] netlink: 'syz.3.1539': attribute type 10 has an invalid length. [ 351.830249][T10212] netlink: 'syz.0.1545': attribute type 7 has an invalid length. [ 352.469071][T10205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.064002][T10229] netlink: 'syz.3.1551': attribute type 10 has an invalid length. [ 354.272953][T10245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.991259][T10264] netlink: 'syz.3.1566': attribute type 10 has an invalid length. [ 355.333905][T10278] netlink: 'syz.0.1579': attribute type 10 has an invalid length. [ 356.045136][T10279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.690207][T10305] netlink: 'syz.3.1581': attribute type 10 has an invalid length. [ 356.787224][T10313] netlink: 'syz.3.1584': attribute type 29 has an invalid length. [ 356.797423][T10313] netlink: 'syz.3.1584': attribute type 29 has an invalid length. [ 357.101568][T10323] can: request_module (can-proto-3) failed. [ 357.324813][ T5085] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 357.529427][T10336] netlink: 'syz.0.1593': attribute type 10 has an invalid length. [ 358.088118][T10363] netlink: 'syz.0.1601': attribute type 10 has an invalid length. [ 358.097363][T10363] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1601'. [ 358.199459][T10365] netlink: 'syz.3.1602': attribute type 10 has an invalid length. [ 358.255721][T10365] team0: Device nlmon0 is of different type [ 358.631640][T10374] netlink: 'syz.3.1606': attribute type 10 has an invalid length. [ 358.767723][T10378] netlink: 'syz.1.1608': attribute type 10 has an invalid length. [ 358.824541][T10390] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1611'. [ 359.088486][T10392] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1612'. [ 360.471473][T10408] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1619'. [ 360.480923][T10408] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 360.650005][T10413] FAULT_INJECTION: forcing a failure. [ 360.650005][T10413] name failslab, interval 1, probability 0, space 0, times 0 [ 360.685742][T10413] CPU: 1 PID: 10413 Comm: syz.0.1621 Not tainted syzkaller #0 [ 360.693263][T10413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.703358][T10413] Call Trace: [ 360.706670][T10413] [ 360.709629][T10413] dump_stack_lvl+0x18c/0x250 [ 360.714440][T10413] ? show_regs_print_info+0x20/0x20 [ 360.719671][T10413] ? load_image+0x420/0x420 [ 360.724201][T10413] ? __might_sleep+0xe0/0xe0 [ 360.728831][T10413] ? __lock_acquire+0x7d80/0x7d80 [ 360.733882][T10413] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 360.739906][T10413] should_fail_ex+0x394/0x4c0 [ 360.744628][T10413] should_failslab+0x9/0x20 [ 360.749164][T10413] slab_pre_alloc_hook+0x59/0x300 [ 360.754229][T10413] ? lockdep_hardirqs_on+0x98/0x150 [ 360.759475][T10413] ? __get_vm_area_node+0x125/0x370 [ 360.764698][T10413] __kmem_cache_alloc_node+0x53/0x250 [ 360.770100][T10413] ? __get_vm_area_node+0x125/0x370 [ 360.775335][T10413] kmalloc_node_trace+0x26/0xe0 [ 360.780214][T10413] __get_vm_area_node+0x125/0x370 [ 360.785271][T10413] __vmalloc_node_range+0x36f/0x1320 [ 360.790601][T10413] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 360.796174][T10413] ? mark_lock+0x94/0x320 [ 360.800531][T10413] ? __lock_acquire+0x1336/0x7d80 [ 360.805619][T10413] ? aa_get_newest_label+0xfd/0x5c0 [ 360.810847][T10413] ? free_vm_area+0x50/0x50 [ 360.815379][T10413] ? end_current_label_crit_section+0x170/0x170 [ 360.821657][T10413] ? debug_object_activate+0x307/0x500 [ 360.827150][T10413] ? verify_lock_unused+0x140/0x140 [ 360.832379][T10413] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 360.837949][T10413] __vmalloc+0x7a/0x90 [ 360.842046][T10413] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 360.847790][T10413] bpf_prog_alloc_no_stats+0x46/0x430 [ 360.853199][T10413] bpf_prog_alloc+0x3d/0x1a0 [ 360.857829][T10413] bpf_prog_load+0x6b2/0x1610 [ 360.862537][T10413] ? map_freeze+0x420/0x420 [ 360.867075][T10413] ? lockdep_hardirqs_on+0x98/0x150 [ 360.872309][T10413] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.878509][T10413] ? rcuref_put_slowpath+0x141/0x150 [ 360.883820][T10413] ? _copy_from_user+0x7a/0xe0 [ 360.888610][T10413] ? kasan_check_range+0x1ba/0x290 [ 360.893751][T10413] ? bpf_lsm_bpf+0x9/0x10 [ 360.898132][T10413] ? security_bpf+0x7e/0xa0 [ 360.902667][T10413] __sys_bpf+0x5ba/0x890 [ 360.906933][T10413] ? read_tsc+0x9/0x20 [ 360.911033][T10413] ? bpf_link_show_fdinfo+0x390/0x390 [ 360.916456][T10413] ? lock_chain_count+0x20/0x20 [ 360.921358][T10413] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 360.927385][T10413] __x64_sys_bpf+0x7c/0x90 [ 360.931826][T10413] do_syscall_64+0x55/0xb0 [ 360.936269][T10413] ? clear_bhb_loop+0x40/0x90 [ 360.940990][T10413] ? clear_bhb_loop+0x40/0x90 [ 360.945695][T10413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.951619][T10413] RIP: 0033:0x7f3397d9ce59 [ 360.956074][T10413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.975721][T10413] RSP: 002b:00007f3398c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.984166][T10413] RAX: ffffffffffffffda RBX: 00007f3398015fa0 RCX: 00007f3397d9ce59 [ 360.992157][T10413] RDX: 0000000000000090 RSI: 0000200000000340 RDI: 0000000000000005 [ 361.000146][T10413] RBP: 00007f3398c55090 R08: 0000000000000000 R09: 0000000000000000 [ 361.008140][T10413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.016132][T10413] R13: 00007f3398016038 R14: 00007f3398015fa0 R15: 00007ffe99262678 [ 361.024162][T10413] [ 361.035231][T10411] validate_nla: 2 callbacks suppressed [ 361.035483][T10411] netlink: 'syz.3.1620': attribute type 10 has an invalid length. [ 361.050874][T10413] syz.0.1621: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 361.109115][T10413] CPU: 1 PID: 10413 Comm: syz.0.1621 Not tainted syzkaller #0 [ 361.116732][T10413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.126834][T10413] Call Trace: [ 361.130172][T10413] [ 361.133198][T10413] dump_stack_lvl+0x18c/0x250 [ 361.137945][T10413] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 361.144166][T10413] ? show_regs_print_info+0x20/0x20 [ 361.149421][T10413] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 361.155671][T10413] warn_alloc+0x246/0x340 [ 361.160064][T10413] ? __get_vm_area_node+0x125/0x370 [ 361.165362][T10413] ? zone_watermark_ok_safe+0x230/0x230 [ 361.170975][T10413] ? rcu_is_watching+0x15/0xb0 [ 361.175809][T10413] ? __get_vm_area_node+0x356/0x370 [ 361.181076][T10413] __vmalloc_node_range+0x394/0x1320 [ 361.186422][T10413] ? mark_lock+0x94/0x320 [ 361.190797][T10413] ? __lock_acquire+0x1336/0x7d80 [ 361.195873][T10413] ? aa_get_newest_label+0xfd/0x5c0 [ 361.201108][T10413] ? free_vm_area+0x50/0x50 [ 361.205655][T10413] ? end_current_label_crit_section+0x170/0x170 [ 361.211924][T10413] ? debug_object_activate+0x307/0x500 [ 361.217430][T10413] ? verify_lock_unused+0x140/0x140 [ 361.222671][T10413] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 361.228252][T10413] __vmalloc+0x7a/0x90 [ 361.232355][T10413] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 361.237988][T10413] bpf_prog_alloc_no_stats+0x46/0x430 [ 361.243396][T10413] bpf_prog_alloc+0x3d/0x1a0 [ 361.248034][T10413] bpf_prog_load+0x6b2/0x1610 [ 361.252765][T10413] ? map_freeze+0x420/0x420 [ 361.257295][T10413] ? lockdep_hardirqs_on+0x98/0x150 [ 361.262532][T10413] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 361.268776][T10413] ? rcuref_put_slowpath+0x141/0x150 [ 361.274110][T10413] ? _copy_from_user+0x7a/0xe0 [ 361.278913][T10413] ? kasan_check_range+0x1ba/0x290 [ 361.284057][T10413] ? bpf_lsm_bpf+0x9/0x10 [ 361.288417][T10413] ? security_bpf+0x7e/0xa0 [ 361.292970][T10413] __sys_bpf+0x5ba/0x890 [ 361.297246][T10413] ? read_tsc+0x9/0x20 [ 361.301343][T10413] ? bpf_link_show_fdinfo+0x390/0x390 [ 361.306757][T10413] ? lock_chain_count+0x20/0x20 [ 361.311633][T10413] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 361.317664][T10413] __x64_sys_bpf+0x7c/0x90 [ 361.322114][T10413] do_syscall_64+0x55/0xb0 [ 361.326563][T10413] ? clear_bhb_loop+0x40/0x90 [ 361.331266][T10413] ? clear_bhb_loop+0x40/0x90 [ 361.335971][T10413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.341895][T10413] RIP: 0033:0x7f3397d9ce59 [ 361.346336][T10413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.365973][T10413] RSP: 002b:00007f3398c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 361.374435][T10413] RAX: ffffffffffffffda RBX: 00007f3398015fa0 RCX: 00007f3397d9ce59 [ 361.382460][T10413] RDX: 0000000000000090 RSI: 0000200000000340 RDI: 0000000000000005 [ 361.390466][T10413] RBP: 00007f3398c55090 R08: 0000000000000000 R09: 0000000000000000 [ 361.398460][T10413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.406458][T10413] R13: 00007f3398016038 R14: 00007f3398015fa0 R15: 00007ffe99262678 [ 361.414510][T10413] [ 361.442039][T10413] Mem-Info: [ 361.473411][T10413] active_anon:5165 inactive_anon:0 isolated_anon:0 [ 361.473411][T10413] active_file:17709 inactive_file:40053 isolated_file:0 [ 361.473411][T10413] unevictable:768 dirty:328 writeback:0 [ 361.473411][T10413] slab_reclaimable:10523 slab_unreclaimable:94341 [ 361.473411][T10413] mapped:25034 shmem:1361 pagetables:536 [ 361.473411][T10413] sec_pagetables:0 bounce:0 [ 361.473411][T10413] kernel_misc_reclaimable:0 [ 361.473411][T10413] free:1346060 free_pcp:11152 free_cma:0 [ 361.536007][T10413] Node 0 active_anon:20760kB inactive_anon:0kB active_file:70836kB inactive_file:160008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100136kB dirty:1312kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10404kB pagetables:2244kB sec_pagetables:0kB all_unreclaimable? no [ 361.569792][T10413] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 361.602279][T10413] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.638176][T10413] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 361.664084][T10413] Node 0 DMA32 free:1470588kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20720kB inactive_anon:0kB active_file:70836kB inactive_file:159180kB unevictable:1536kB writepending:1312kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:27656kB local_pcp:17784kB free_cma:0kB [ 361.700710][T10417] netlink: 'syz.2.1622': attribute type 10 has an invalid length. [ 361.713025][T10413] lowmem_reserve[]: 0 0 0 0 0 [ 361.741238][T10413] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.817946][T10413] lowmem_reserve[]: 0 0 0 0 0 [ 361.822911][T10413] Node 1 Normal free:3897784kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16964kB local_pcp:9668kB free_cma:0kB [ 361.865995][T10413] lowmem_reserve[]: 0 0 0 0 0 [ 361.870874][T10413] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 361.890873][T10413] Node 0 DMA32: 441*4kB (UM) 863*8kB (UM) 571*16kB (UME) 1362*32kB (UME) 1430*64kB (UME) 444*128kB (UME) 147*256kB (UM) 51*512kB (UM) 27*1024kB (UM) 11*2048kB (UME) 280*4096kB (UM) = 1470540kB [ 361.938715][T10413] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 361.968386][T10426] netlink: 'syz.1.1624': attribute type 10 has an invalid length. [ 361.975954][T10413] Node 1 Normal: 222*4kB (UME) 42*8kB (UME) 39*16kB (UME) 132*32kB (UME) 28*64kB (UE) 8*128kB (UM) 1*256kB (U) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3897784kB [ 361.980385][T10426] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1624'. [ 362.030504][T10413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.047768][T10413] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.057386][T10413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.071199][T10413] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.080682][T10413] 59123 total pagecache pages [ 362.085787][T10413] 0 pages in swap cache [ 362.089977][T10413] Free swap = 124996kB [ 362.094222][T10413] Total swap = 124996kB [ 362.099027][T10413] 2097051 pages RAM [ 362.102884][T10413] 0 pages HighMem/MovableOnly [ 362.107969][T10413] 416931 pages reserved [ 362.112442][T10413] 0 pages cma reserved [ 362.389206][T10441] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 362.405174][T10441] syzkaller1: linktype set to 786 [ 362.645733][T10447] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1631'. [ 362.655340][T10447] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 362.757087][T10444] netlink: 'syz.3.1632': attribute type 10 has an invalid length. [ 363.909535][T10465] netlink: 'syz.2.1639': attribute type 10 has an invalid length. [ 363.922164][T10465] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1639'. [ 364.015363][T10468] netlink: 'syz.3.1638': attribute type 10 has an invalid length. [ 364.102675][T10474] FAULT_INJECTION: forcing a failure. [ 364.102675][T10474] name failslab, interval 1, probability 0, space 0, times 0 [ 364.125679][T10474] CPU: 1 PID: 10474 Comm: syz.1.1641 Not tainted syzkaller #0 [ 364.133199][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.143288][T10474] Call Trace: [ 364.146604][T10474] [ 364.149572][T10474] dump_stack_lvl+0x18c/0x250 [ 364.154301][T10474] ? show_regs_print_info+0x20/0x20 [ 364.159546][T10474] ? load_image+0x420/0x420 [ 364.164095][T10474] ? __might_sleep+0xe0/0xe0 [ 364.168738][T10474] ? __lock_acquire+0x7d80/0x7d80 [ 364.173863][T10474] ? __lock_acquire+0x1262/0x7d80 [ 364.178919][T10474] ? ima_match_policy+0x100/0x1fa0 [ 364.184093][T10474] should_fail_ex+0x394/0x4c0 [ 364.188816][T10474] should_failslab+0x9/0x20 [ 364.193363][T10474] slab_pre_alloc_hook+0x59/0x300 [ 364.198424][T10474] kmem_cache_alloc_node+0x5e/0x310 [ 364.203654][T10474] ? __alloc_skb+0x103/0x2c0 [ 364.208278][T10474] __alloc_skb+0x103/0x2c0 [ 364.212727][T10474] alloc_skb_with_frags+0xcd/0x7a0 [ 364.217884][T10474] ? mark_lock+0x94/0x320 [ 364.222242][T10474] sock_alloc_send_pskb+0x883/0x9a0 [ 364.227491][T10474] ? sock_kzfree_s+0x50/0x50 [ 364.232101][T10474] ? verify_lock_unused+0x140/0x140 [ 364.237325][T10474] ? dev_get_by_index+0x22/0x2d0 [ 364.242287][T10474] ? dev_get_by_index+0x22/0x2d0 [ 364.247263][T10474] packet_sendmsg+0x3058/0x4c70 [ 364.252189][T10474] ? verify_lock_unused+0x140/0x140 [ 364.257426][T10474] ? __lock_acquire+0x1262/0x7d80 [ 364.262482][T10474] ? verify_lock_unused+0x140/0x140 [ 364.267751][T10474] ? aa_sk_perm+0x83c/0x970 [ 364.272284][T10474] ? packet_getsockopt+0xad0/0xad0 [ 364.277428][T10474] ? tomoyo_path_number_perm+0x170/0x5e0 [ 364.283095][T10474] ? aa_sock_msg_perm+0x94/0x150 [ 364.288063][T10474] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 364.293382][T10474] ? security_socket_sendmsg+0x80/0xa0 [ 364.298868][T10474] ? packet_getsockopt+0xad0/0xad0 [ 364.304011][T10474] ____sys_sendmsg+0x61b/0x980 [ 364.308810][T10474] ? __asan_memset+0x22/0x40 [ 364.313427][T10474] ? __sys_sendmsg_sock+0x30/0x30 [ 364.318525][T10474] ? __import_iovec+0x3fa/0x850 [ 364.323404][T10474] ? import_iovec+0x73/0xa0 [ 364.327938][T10474] ___sys_sendmsg+0x2a6/0x360 [ 364.332675][T10474] ? get_pid_task+0x20/0x1e0 [ 364.337301][T10474] ? __sys_sendmsg+0x2b0/0x2b0 [ 364.342104][T10474] ? __lock_acquire+0x7d80/0x7d80 [ 364.347174][T10474] __se_sys_sendmsg+0x1d0/0x2c0 [ 364.352060][T10474] ? perf_trace_preemptirq_template+0x269/0x330 [ 364.358338][T10474] ? __x64_sys_sendmsg+0x80/0x80 [ 364.363339][T10474] ? lockdep_hardirqs_on+0x98/0x150 [ 364.368584][T10474] do_syscall_64+0x55/0xb0 [ 364.373029][T10474] ? clear_bhb_loop+0x40/0x90 [ 364.377733][T10474] ? clear_bhb_loop+0x40/0x90 [ 364.382437][T10474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.388360][T10474] RIP: 0033:0x7f5815d9ce59 [ 364.392802][T10474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.412440][T10474] RSP: 002b:00007f5816c7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.420918][T10474] RAX: ffffffffffffffda RBX: 00007f5816015fa0 RCX: 00007f5815d9ce59 [ 364.428912][T10474] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 364.436914][T10474] RBP: 00007f5816c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 364.444906][T10474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.452913][T10474] R13: 00007f5816016038 R14: 00007f5816015fa0 R15: 00007ffea7f763b8 [ 364.460918][T10474] [ 364.614530][T10478] netlink: 'syz.0.1645': attribute type 21 has an invalid length. [ 364.633460][T10478] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1645'. [ 364.808826][T10480] netlink: 'syz.3.1644': attribute type 10 has an invalid length. [ 365.447657][T10508] netlink: 'syz.2.1657': attribute type 3 has an invalid length. [ 365.467322][T10508] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1657'. [ 365.773417][T10518] netlink: 'syz.2.1662': attribute type 10 has an invalid length. [ 366.158524][T10535] netlink: set zone limit has 8 unknown bytes [ 366.240195][T10535] netlink: 'syz.2.1668': attribute type 10 has an invalid length. [ 367.248778][T10560] netlink: 'syz.1.1676': attribute type 10 has an invalid length. [ 368.219548][T10590] netlink: 'syz.2.1687': attribute type 10 has an invalid length. [ 368.358453][T10596] netlink: 'syz.1.1689': attribute type 21 has an invalid length. [ 369.444620][T10619] netlink: 'syz.2.1699': attribute type 10 has an invalid length. [ 369.702938][T10629] netlink: 'syz.2.1702': attribute type 10 has an invalid length. [ 370.565952][T10649] netlink: 'syz.3.1709': attribute type 10 has an invalid length. [ 371.518614][T10686] netlink: 'syz.3.1721': attribute type 10 has an invalid length. [ 372.377521][T10718] netlink: 'syz.1.1733': attribute type 10 has an invalid length. [ 372.486417][T10724] netlink: 'syz.0.1735': attribute type 21 has an invalid length. [ 372.502165][T10725] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1736'. [ 372.513930][T10724] FAULT_INJECTION: forcing a failure. [ 372.513930][T10724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.553536][T10724] CPU: 1 PID: 10724 Comm: syz.0.1735 Not tainted syzkaller #0 [ 372.561056][T10724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 372.571154][T10724] Call Trace: [ 372.574475][T10724] [ 372.577559][T10724] dump_stack_lvl+0x18c/0x250 [ 372.582300][T10724] ? show_regs_print_info+0x20/0x20 [ 372.587601][T10724] ? load_image+0x420/0x420 [ 372.592162][T10724] ? __lock_acquire+0x7d80/0x7d80 [ 372.597248][T10724] ? snprintf+0xe9/0x140 [ 372.601547][T10724] should_fail_ex+0x394/0x4c0 [ 372.606300][T10724] _copy_to_user+0x2f/0xa0 [ 372.610777][T10724] simple_read_from_buffer+0xe7/0x150 [ 372.616240][T10724] proc_fail_nth_read+0x1e8/0x260 [ 372.621316][T10724] ? proc_fault_inject_write+0x360/0x360 [ 372.626985][T10724] ? fsnotify_perm+0x271/0x5e0 [ 372.631795][T10724] ? proc_fault_inject_write+0x360/0x360 [ 372.637482][T10724] vfs_read+0x298/0x990 [ 372.641682][T10724] ? kernel_read+0x1e0/0x1e0 [ 372.646311][T10724] ? __fget_files+0x28/0x460 [ 372.650941][T10724] ? __fget_files+0x3fc/0x460 [ 372.655658][T10724] ? __fdget_pos+0x2a3/0x330 [ 372.660279][T10724] ? ksys_read+0x74/0x260 [ 372.664659][T10724] ksys_read+0x151/0x260 [ 372.668957][T10724] ? vfs_write+0x9a0/0x9a0 [ 372.673426][T10724] ? lockdep_hardirqs_on+0x98/0x150 [ 372.678666][T10724] do_syscall_64+0x55/0xb0 [ 372.683111][T10724] ? clear_bhb_loop+0x40/0x90 [ 372.687815][T10724] ? clear_bhb_loop+0x40/0x90 [ 372.692526][T10724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.698467][T10724] RIP: 0033:0x7f3397d5d68e [ 372.702912][T10724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 372.722545][T10724] RSP: 002b:00007f3398c54fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 372.730987][T10724] RAX: ffffffffffffffda RBX: 00007f3398c556c0 RCX: 00007f3397d5d68e [ 372.738985][T10724] RDX: 000000000000000f RSI: 00007f3398c550a0 RDI: 0000000000000004 [ 372.746983][T10724] RBP: 00007f3398c55090 R08: 0000000000000000 R09: 0000000000000000 [ 372.755102][T10724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 372.763101][T10724] R13: 00007f3398016038 R14: 00007f3398015fa0 R15: 00007ffe99262678 [ 372.771123][T10724] [ 373.021292][T10734] netlink: 'syz.0.1739': attribute type 3 has an invalid length. [ 373.513127][T10751] netlink: 'syz.0.1745': attribute type 21 has an invalid length. [ 373.742977][T10753] netlink: 'syz.2.1746': attribute type 10 has an invalid length. [ 373.951250][T10768] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 376.508424][T10777] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1753'. [ 376.555843][T10777] netlink: 'syz.0.1753': attribute type 10 has an invalid length. [ 376.569460][T10777] netlink: 'syz.0.1753': attribute type 10 has an invalid length. [ 376.583404][T10777] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.1753'. [ 376.602835][T10777] openvswitch: netlink: Message has 4 unknown bytes. [ 377.096543][T10794] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1756'. [ 377.384323][T10802] netlink: 'syz.0.1759': attribute type 10 has an invalid length. [ 377.776897][T10818] netlink: 174268 bytes leftover after parsing attributes in process `syz.1.1767'. [ 378.856888][T10837] syzkaller0: entered promiscuous mode [ 378.874193][T10837] syzkaller0: entered allmulticast mode [ 378.934963][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.941713][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.197459][T10844] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1773'. [ 379.258723][T10847] netlink: 'syz.2.1775': attribute type 10 has an invalid length. [ 379.371731][T10852] FAULT_INJECTION: forcing a failure. [ 379.371731][T10852] name failslab, interval 1, probability 0, space 0, times 0 [ 379.387449][T10852] CPU: 0 PID: 10852 Comm: syz.0.1777 Not tainted syzkaller #0 [ 379.394932][T10852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.405013][T10852] Call Trace: [ 379.408323][T10852] [ 379.411264][T10852] dump_stack_lvl+0x18c/0x250 [ 379.415978][T10852] ? sctp_sendmsg+0x1519/0x27b0 [ 379.420864][T10852] ? ___sys_sendmsg+0x2a6/0x360 [ 379.425757][T10852] ? show_regs_print_info+0x20/0x20 [ 379.430971][T10852] ? load_image+0x420/0x420 [ 379.435540][T10852] should_fail_ex+0x394/0x4c0 [ 379.440270][T10852] should_failslab+0x9/0x20 [ 379.444804][T10852] slab_pre_alloc_hook+0x59/0x300 [ 379.449881][T10852] ? sctp_add_bind_addr+0x8c/0x360 [ 379.455018][T10852] __kmem_cache_alloc_node+0x53/0x250 [ 379.460429][T10852] ? sctp_add_bind_addr+0x8c/0x360 [ 379.465579][T10852] kmalloc_trace+0x2a/0xe0 [ 379.470037][T10852] sctp_add_bind_addr+0x8c/0x360 [ 379.475041][T10852] sctp_copy_local_addr_list+0x31b/0x4e0 [ 379.480696][T10852] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 379.486438][T10852] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 379.492529][T10852] ? sctp_v4_is_any+0x35/0x60 [ 379.497233][T10852] ? sctp_copy_one_addr+0x8c/0x350 [ 379.502376][T10852] sctp_bind_addr_copy+0xb3/0x3c0 [ 379.507421][T10852] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 379.513787][T10852] sctp_connect_new_asoc+0x2f9/0x6a0 [ 379.519136][T10852] ? __sctp_connect+0xd80/0xd80 [ 379.524038][T10852] ? __local_bh_enable_ip+0x13a/0x1c0 [ 379.529470][T10852] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 379.535081][T10852] ? security_sctp_bind_connect+0x89/0xb0 [ 379.540824][T10852] sctp_sendmsg+0x1519/0x27b0 [ 379.545547][T10852] ? sctp_getsockopt+0xb60/0xb60 [ 379.550527][T10852] ? aa_sk_perm+0x83c/0x970 [ 379.555066][T10852] ? aa_af_perm+0x330/0x330 [ 379.559611][T10852] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 379.566068][T10852] ? sock_rps_record_flow+0x19/0x3f0 [ 379.571439][T10852] ? inet_sendmsg+0xce/0x2a0 [ 379.576087][T10852] ? inet_send_prepare+0x250/0x250 [ 379.581239][T10852] ____sys_sendmsg+0x61b/0x980 [ 379.586043][T10852] ? __asan_memset+0x22/0x40 [ 379.590649][T10852] ? __sys_sendmsg_sock+0x30/0x30 [ 379.595694][T10852] ? __import_iovec+0x5f2/0x850 [ 379.600583][T10852] ? import_iovec+0x73/0xa0 [ 379.605116][T10852] ___sys_sendmsg+0x2a6/0x360 [ 379.609808][T10852] ? get_pid_task+0x20/0x1e0 [ 379.614420][T10852] ? __sys_sendmsg+0x2b0/0x2b0 [ 379.619211][T10852] ? __lock_acquire+0x7d80/0x7d80 [ 379.624269][T10852] __se_sys_sendmsg+0x1d0/0x2c0 [ 379.629162][T10852] ? __x64_sys_sendmsg+0x80/0x80 [ 379.634131][T10852] ? lockdep_hardirqs_on+0x98/0x150 [ 379.639363][T10852] do_syscall_64+0x55/0xb0 [ 379.643815][T10852] ? clear_bhb_loop+0x40/0x90 [ 379.648557][T10852] ? clear_bhb_loop+0x40/0x90 [ 379.653285][T10852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.659240][T10852] RIP: 0033:0x7f3397d9ce59 [ 379.663682][T10852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.683320][T10852] RSP: 002b:00007f3398c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.691770][T10852] RAX: ffffffffffffffda RBX: 00007f3398015fa0 RCX: 00007f3397d9ce59 [ 379.699767][T10852] RDX: 0000000000040041 RSI: 00002000000007c0 RDI: 0000000000000003 [ 379.707771][T10852] RBP: 00007f3398c55090 R08: 0000000000000000 R09: 0000000000000000 [ 379.715753][T10852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 379.723757][T10852] R13: 00007f3398016038 R14: 00007f3398015fa0 R15: 00007ffe99262678 [ 379.731771][T10852] [ 379.958166][T10859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1779'. [ 380.616431][T10856] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1778'. [ 381.751387][T10856] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 382.011638][T10870] netlink: 174268 bytes leftover after parsing attributes in process `syz.3.1781'. [ 382.542834][T10877] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1786'. [ 382.682616][T10881] netlink: 'syz.2.1787': attribute type 10 has an invalid length. [ 383.271688][T10901] netlink: 'syz.0.1794': attribute type 21 has an invalid length. [ 383.390578][T10901] netlink: 'syz.0.1794': attribute type 15 has an invalid length. [ 383.411507][T10905] FAULT_INJECTION: forcing a failure. [ 383.411507][T10905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.424939][T10905] CPU: 1 PID: 10905 Comm: syz.2.1795 Not tainted syzkaller #0 [ 383.432480][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.442588][T10905] Call Trace: [ 383.445914][T10905] [ 383.448888][T10905] dump_stack_lvl+0x18c/0x250 [ 383.453625][T10905] ? show_regs_print_info+0x20/0x20 [ 383.458873][T10905] ? load_image+0x420/0x420 [ 383.463421][T10905] ? __might_fault+0xaa/0x120 [ 383.468149][T10905] ? __lock_acquire+0x7d80/0x7d80 [ 383.473229][T10905] should_fail_ex+0x394/0x4c0 [ 383.477971][T10905] _copy_from_iter+0x1cd/0x1290 [ 383.482882][T10905] ? rcu_is_watching+0x15/0xb0 [ 383.487729][T10905] ? copyout_mc+0x70/0x70 [ 383.492115][T10905] ? __virt_addr_valid+0x10c/0x380 [ 383.497279][T10905] ? __virt_addr_valid+0x10c/0x380 [ 383.502446][T10905] ? __virt_addr_valid+0x10c/0x380 [ 383.507621][T10905] ? __check_object_size+0x4fc/0xa40 [ 383.512992][T10905] netlink_sendmsg+0x76b/0xbf0 [ 383.517868][T10905] ? netlink_getsockopt+0x590/0x590 [ 383.523113][T10905] ? aa_sock_msg_perm+0x94/0x150 [ 383.528103][T10905] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 383.533452][T10905] ? security_socket_sendmsg+0x80/0xa0 [ 383.538968][T10905] ? netlink_getsockopt+0x590/0x590 [ 383.544222][T10905] ____sys_sendmsg+0x61b/0x980 [ 383.549104][T10905] ? __asan_memset+0x22/0x40 [ 383.553739][T10905] ? __sys_sendmsg_sock+0x30/0x30 [ 383.558832][T10905] ? __import_iovec+0x5f2/0x850 [ 383.563737][T10905] ? import_iovec+0x73/0xa0 [ 383.568294][T10905] ___sys_sendmsg+0x2a6/0x360 [ 383.573022][T10905] ? __sys_sendmsg+0x2b0/0x2b0 [ 383.577921][T10905] ? trace_call_bpf+0xc3/0x6c0 [ 383.582759][T10905] __se_sys_sendmsg+0x1d0/0x2c0 [ 383.587703][T10905] ? perf_trace_preemptirq_template+0x269/0x330 [ 383.594004][T10905] ? __x64_sys_sendmsg+0x80/0x80 [ 383.599004][T10905] ? lockdep_hardirqs_on+0x98/0x150 [ 383.604293][T10905] do_syscall_64+0x55/0xb0 [ 383.608754][T10905] ? clear_bhb_loop+0x40/0x90 [ 383.613474][T10905] ? clear_bhb_loop+0x40/0x90 [ 383.618222][T10905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.624182][T10905] RIP: 0033:0x7f961ff9ce59 [ 383.628662][T10905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.648315][T10905] RSP: 002b:00007f9620e1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.656782][T10905] RAX: ffffffffffffffda RBX: 00007f9620215fa0 RCX: 00007f961ff9ce59 [ 383.660901][T10893] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1791'. [ 383.664784][T10905] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 383.664803][T10905] RBP: 00007f9620e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 383.664818][T10905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.664832][T10905] R13: 00007f9620216038 R14: 00007f9620215fa0 R15: 00007ffe1dc6bbd8 [ 383.664866][T10905] [ 383.991015][T10893] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 384.347908][T10916] netlink: 174268 bytes leftover after parsing attributes in process `syz.0.1797'. [ 384.374099][T10919] netlink: 'syz.3.1800': attribute type 10 has an invalid length. [ 385.622202][T10946] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1807'. [ 385.660033][T10946] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 385.879409][T10952] netlink: 'syz.2.1811': attribute type 10 has an invalid length. [ 386.180080][T10960] netlink: 'syz.0.1813': attribute type 21 has an invalid length. [ 386.188316][T10960] netlink: 'syz.0.1813': attribute type 15 has an invalid length. [ 386.700478][T10980] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1819'. [ 386.731737][T10980] netlink: 21056 bytes leftover after parsing attributes in process `syz.3.1819'. [ 386.745989][T10980] tipc: Started in network mode [ 386.750911][T10980] tipc: Node identity 1a, cluster identity 106 [ 386.758649][T10980] tipc: Node number set to 26 [ 387.216358][T10990] netlink: 'syz.2.1822': attribute type 10 has an invalid length. [ 387.467491][T11000] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1825'. [ 387.650204][T11005] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1827'. [ 388.153153][T11013] tap0: tun_chr_ioctl cmd 35108 [ 388.219340][T11013] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1830'. [ 388.247053][T11013] netlink: 21056 bytes leftover after parsing attributes in process `syz.0.1830'. [ 388.432808][T11022] netlink: 'syz.3.1833': attribute type 10 has an invalid length. [ 389.005823][T11038] FAULT_INJECTION: forcing a failure. [ 389.005823][T11038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.034652][T11038] CPU: 1 PID: 11038 Comm: syz.3.1840 Not tainted syzkaller #0 [ 389.042176][T11038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 389.052269][T11038] Call Trace: [ 389.055594][T11038] [ 389.058576][T11038] dump_stack_lvl+0x18c/0x250 [ 389.063326][T11038] ? show_regs_print_info+0x20/0x20 [ 389.068580][T11038] ? load_image+0x420/0x420 [ 389.073132][T11038] ? __might_fault+0xaa/0x120 [ 389.077868][T11038] ? __lock_acquire+0x7d80/0x7d80 [ 389.082939][T11038] ? bpf_percpu_hash_update+0x2b/0x200 [ 389.088458][T11038] ? __virt_addr_valid+0x10c/0x380 [ 389.093626][T11038] should_fail_ex+0x394/0x4c0 [ 389.098358][T11038] _copy_from_user+0x2f/0xe0 [ 389.103022][T11038] generic_map_update_batch+0x58c/0x800 [ 389.108627][T11038] ? rcu_read_unlock+0xa0/0xa0 [ 389.113451][T11038] ? __fdget+0x180/0x210 [ 389.117743][T11038] ? rcu_read_unlock+0xa0/0xa0 [ 389.122547][T11038] bpf_map_do_batch+0x3f2/0x600 [ 389.127488][T11038] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 389.132996][T11038] __sys_bpf+0x381/0x890 [ 389.137369][T11038] ? bpf_link_show_fdinfo+0x390/0x390 [ 389.142815][T11038] ? lock_chain_count+0x20/0x20 [ 389.147805][T11038] __x64_sys_bpf+0x7c/0x90 [ 389.152257][T11038] do_syscall_64+0x55/0xb0 [ 389.156700][T11038] ? clear_bhb_loop+0x40/0x90 [ 389.161403][T11038] ? clear_bhb_loop+0x40/0x90 [ 389.166103][T11038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.172032][T11038] RIP: 0033:0x7f14b759ce59 [ 389.176468][T11038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.196100][T11038] RSP: 002b:00007f14b57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.204542][T11038] RAX: ffffffffffffffda RBX: 00007f14b7815fa0 RCX: 00007f14b759ce59 [ 389.212541][T11038] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 389.220541][T11038] RBP: 00007f14b57f6090 R08: 0000000000000000 R09: 0000000000000000 [ 389.228564][T11038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 389.236569][T11038] R13: 00007f14b7816038 R14: 00007f14b7815fa0 R15: 00007ffc3ab6be88 [ 389.244593][T11038] [ 390.326381][T11052] tap0: tun_chr_ioctl cmd 35108 [ 390.382143][T11052] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1843'. [ 390.394933][T11051] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1844'. [ 390.404340][T11052] netlink: 21056 bytes leftover after parsing attributes in process `syz.1.1843'. [ 390.702756][T11061] netlink: 'syz.0.1846': attribute type 10 has an invalid length. [ 390.956542][T11063] netlink: 'syz.2.1847': attribute type 10 has an invalid length. [ 391.259513][T11072] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1850'. [ 391.281945][T11072] netlink: 'syz.2.1850': attribute type 12 has an invalid length. [ 391.290624][T11072] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1850'. [ 393.114520][T11096] tap1: tun_chr_ioctl cmd 35108 [ 393.215983][T11096] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1859'. [ 393.255627][T11102] netlink: 'syz.2.1862': attribute type 10 has an invalid length. [ 393.303745][T11096] netlink: 21056 bytes leftover after parsing attributes in process `syz.1.1859'. [ 393.400864][T11100] netlink: 'syz.3.1861': attribute type 10 has an invalid length. [ 395.757716][T11142] netlink: 'syz.3.1875': attribute type 10 has an invalid length. [ 395.839726][T11143] netlink: 'syz.0.1873': attribute type 10 has an invalid length. [ 396.934897][T11147] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 396.942383][T11147] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 398.730726][T11173] netlink: 'syz.3.1885': attribute type 10 has an invalid length. [ 398.844198][T11179] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1886'. [ 398.893135][T11179] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 398.923702][T11179] CPU: 1 PID: 11179 Comm: syz.1.1886 Not tainted syzkaller #0 [ 398.931223][T11179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.941310][T11179] Call Trace: [ 398.944617][T11179] [ 398.947576][T11179] dump_stack_lvl+0x18c/0x250 [ 398.952290][T11179] ? show_regs_print_info+0x20/0x20 [ 398.957523][T11179] ? _printk+0x11f/0x130 [ 398.961795][T11179] sysfs_warn_dup+0x8e/0xa0 [ 398.966349][T11179] sysfs_do_create_link_sd+0xc0/0x110 [ 398.971748][T11179] device_add_class_symlinks+0x1cf/0x240 [ 398.977412][T11179] device_add+0x4f9/0xc40 [ 398.981777][T11179] wiphy_register+0x1d99/0x2ac0 [ 398.986710][T11179] ? cfg80211_event_work+0x40/0x40 [ 398.991852][T11179] ? minstrel_ht_alloc+0x88a/0x990 [ 398.997031][T11179] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 399.003161][T11179] ieee80211_register_hw+0x2dd8/0x3b30 [ 399.008659][T11179] ? ieee80211_register_hw+0xfc1/0x3b30 [ 399.014245][T11179] ? ieee80211_tasklet_handler+0x20/0x20 [ 399.019910][T11179] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 399.025839][T11179] ? __debug_object_init+0xec/0x450 [ 399.031088][T11179] ? __asan_memset+0x22/0x40 [ 399.035726][T11179] ? __hrtimer_init+0x189/0x270 [ 399.040613][T11179] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 399.046389][T11179] ? mac80211_hwsim_free+0x220/0x220 [ 399.051709][T11179] ? rcu_is_watching+0x15/0xb0 [ 399.056508][T11179] ? kstrndup+0xbd/0x140 [ 399.060805][T11179] hwsim_new_radio_nl+0xdad/0x1a70 [ 399.065954][T11179] ? __nla_validate+0x50/0x50 [ 399.070664][T11179] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 399.077042][T11179] ? __nla_parse+0x40/0x50 [ 399.081482][T11179] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 399.087843][T11179] genl_family_rcv_msg_doit+0x21a/0x310 [ 399.093425][T11179] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 399.099353][T11179] ? bpf_lsm_capable+0x9/0x10 [ 399.104063][T11179] ? security_capable+0x89/0xb0 [ 399.108949][T11179] genl_rcv_msg+0x611/0x7a0 [ 399.113484][T11179] ? genl_bind+0x360/0x360 [ 399.117965][T11179] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 399.124393][T11179] netlink_rcv_skb+0x235/0x4c0 [ 399.129198][T11179] ? genl_bind+0x360/0x360 [ 399.133653][T11179] ? netlink_ack+0x1160/0x1160 [ 399.138469][T11179] ? __lock_acquire+0x7d80/0x7d80 [ 399.143530][T11179] ? down_read+0x1ac/0x2e0 [ 399.147985][T11179] genl_rcv+0x28/0x40 [ 399.152024][T11179] netlink_unicast+0x7b1/0x930 [ 399.156846][T11179] netlink_sendmsg+0x8d0/0xbf0 [ 399.161637][T11179] ? lockdep_hardirqs_on+0x98/0x150 [ 399.166875][T11179] ? netlink_getsockopt+0x590/0x590 [ 399.172115][T11179] ? __sanitizer_cov_trace_pc+0x3b/0x60 [ 399.177698][T11179] ? security_socket_sendmsg+0x80/0xa0 [ 399.183205][T11179] ? netlink_getsockopt+0x590/0x590 [ 399.188439][T11179] ____sys_sendmsg+0x61b/0x980 [ 399.193240][T11179] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.199444][T11179] ? __asan_memset+0x22/0x40 [ 399.204068][T11179] ? __sys_sendmsg_sock+0x30/0x30 [ 399.209115][T11179] ? __import_iovec+0x5f2/0x850 [ 399.214002][T11179] ? import_iovec+0x73/0xa0 [ 399.218546][T11179] ___sys_sendmsg+0x2a6/0x360 [ 399.223274][T11179] ? __sys_sendmsg+0x2b0/0x2b0 [ 399.228115][T11179] __se_sys_sendmsg+0x1d0/0x2c0 [ 399.232999][T11179] ? __x64_sys_sendmsg+0x80/0x80 [ 399.238015][T11179] ? syscall_enter_from_user_mode+0x2e/0x80 [ 399.243960][T11179] do_syscall_64+0x55/0xb0 [ 399.248410][T11179] ? clear_bhb_loop+0x40/0x90 [ 399.253356][T11179] ? clear_bhb_loop+0x40/0x90 [ 399.258094][T11179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.264037][T11179] RIP: 0033:0x7f5815d9ce59 [ 399.268489][T11179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.288136][T11179] RSP: 002b:00007f5816c7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.296588][T11179] RAX: ffffffffffffffda RBX: 00007f5816015fa0 RCX: 00007f5815d9ce59 [ 399.304590][T11179] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 399.312599][T11179] RBP: 00007f5815e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 399.320604][T11179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.328597][T11179] R13: 00007f5816016038 R14: 00007f5816015fa0 R15: 00007ffea7f763b8 [ 399.336608][T11179] [ 399.618216][T11183] netlink: 'syz.2.1889': attribute type 10 has an invalid length. [ 401.035701][T11207] netlink: 'syz.0.1895': attribute type 10 has an invalid length. [ 401.273974][T11217] syzkaller0: entered promiscuous mode [ 401.279605][T11217] syzkaller0: entered allmulticast mode [ 402.040547][T11227] netlink: 'syz.2.1903': attribute type 10 has an invalid length. [ 402.084900][T11227] bond0: (slave netdevsim0): Releasing backup interface [ 404.330903][T11239] netlink: 'syz.1.1908': attribute type 10 has an invalid length. [ 404.754198][T11258] netlink: 'syz.0.1913': attribute type 6 has an invalid length. [ 404.762599][T11258] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1913'. [ 405.556614][T11271] netlink: 'syz.2.1919': attribute type 10 has an invalid length. [ 406.237206][T11299] netlink: 'syz.3.1929': attribute type 10 has an invalid length. [ 407.410832][T11325] netlink: 'syz.3.1940': attribute type 10 has an invalid length. [ 407.460460][T11334] netlink: 'syz.1.1942': attribute type 2 has an invalid length. [ 407.470283][T11334] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1942'. [ 407.489127][T11334] netlink: 'syz.1.1942': attribute type 3 has an invalid length. [ 407.497630][T11334] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1942'. [ 408.679553][T11356] netlink: 'syz.3.1951': attribute type 10 has an invalid length. [ 408.921512][T11367] netlink: 'syz.3.1953': attribute type 29 has an invalid length. [ 408.970951][T11367] netlink: 'syz.3.1953': attribute type 29 has an invalid length. [ 409.014815][T11370] netlink: 'syz.3.1953': attribute type 29 has an invalid length. [ 409.054130][T11367] netlink: 'syz.3.1953': attribute type 29 has an invalid length. [ 410.091591][T11386] netlink: 'syz.0.1962': attribute type 29 has an invalid length. [ 410.469432][T11401] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1968'. [ 411.500282][T11413] validate_nla: 2 callbacks suppressed [ 411.500422][T11413] netlink: 'syz.3.1973': attribute type 10 has an invalid length. [ 413.575590][T11462] netlink: 'syz.0.1985': attribute type 10 has an invalid length. [ 414.285944][T11486] netlink: 'syz.3.1994': attribute type 10 has an invalid length. [ 414.655121][T11498] netlink: 'syz.3.1997': attribute type 10 has an invalid length. [ 414.886770][T11504] syzkaller0: entered promiscuous mode [ 414.912090][T11504] syzkaller0: entered allmulticast mode [ 415.059903][T11504] netlink: 'syz.1.1998': attribute type 21 has an invalid length. [ 415.070815][T11504] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1998'. [ 415.520967][T11517] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2003'. [ 415.573901][T11517] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2003'. [ 415.679412][T11529] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2005'. [ 418.646962][T11526] tap0: tun_chr_ioctl cmd 35108 [ 418.662187][T11529] netlink: 21056 bytes leftover after parsing attributes in process `syz.1.2005'. [ 418.689861][T11535] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 418.702914][T11541] netlink: 'syz.0.2010': attribute type 10 has an invalid length. [ 418.929955][T11544] syzkaller0: entered promiscuous mode [ 418.935544][T11544] syzkaller0: entered allmulticast mode [ 418.963814][T11546] netlink: 'syz.0.2012': attribute type 10 has an invalid length. [ 419.054551][T11546] bridge_slave_1: left allmulticast mode [ 419.060695][T11546] bridge_slave_1: left promiscuous mode [ 419.084620][T11546] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.142523][T11546] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 419.242762][T11544] netlink: 'syz.3.2013': attribute type 21 has an invalid length. [ 419.273940][T11544] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2013'. [ 419.402457][T11557] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2017'. [ 419.434321][T11557] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 419.474888][T11557] FAULT_INJECTION: forcing a failure. [ 419.474888][T11557] name failslab, interval 1, probability 0, space 0, times 0 [ 419.503524][T11557] CPU: 0 PID: 11557 Comm: syz.0.2017 Not tainted syzkaller #0 [ 419.511164][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 419.521261][T11557] Call Trace: [ 419.524570][T11557] [ 419.527539][T11557] dump_stack_lvl+0x18c/0x250 [ 419.532250][T11557] ? show_regs_print_info+0x20/0x20 [ 419.537486][T11557] ? load_image+0x420/0x420 [ 419.542016][T11557] ? verify_lock_unused+0x140/0x140 [ 419.547245][T11557] should_fail_ex+0x394/0x4c0 [ 419.551959][T11557] should_failslab+0x9/0x20 [ 419.556500][T11557] slab_pre_alloc_hook+0x59/0x300 [ 419.561583][T11557] kmem_cache_alloc+0x5a/0x2c0 [ 419.566389][T11557] ? skb_clone+0x1eb/0x370 [ 419.570857][T11557] skb_clone+0x1eb/0x370 [ 419.575132][T11557] __netlink_deliver_tap+0x411/0x7f0 [ 419.580457][T11557] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.585698][T11557] netlink_deliver_tap+0x19c/0x1b0 [ 419.590883][T11557] netlink_sendskb+0x68/0x130 [ 419.595591][T11557] netlink_ack+0xcd5/0x1160 [ 419.600140][T11557] ? netlink_dump+0xec0/0xec0 [ 419.604846][T11557] ? ref_tracker_free+0x686/0x830 [ 419.609901][T11557] netlink_rcv_skb+0x2b3/0x4c0 [ 419.614703][T11557] ? rtnetlink_bind+0x80/0x80 [ 419.619470][T11557] ? netlink_ack+0x1160/0x1160 [ 419.624276][T11557] ? __lock_acquire+0x7d80/0x7d80 [ 419.629335][T11557] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.634575][T11557] netlink_unicast+0x7b1/0x930 [ 419.639379][T11557] netlink_sendmsg+0x8d0/0xbf0 [ 419.644178][T11557] ? netlink_getsockopt+0x590/0x590 [ 419.649407][T11557] ? aa_sock_msg_perm+0x94/0x150 [ 419.654378][T11557] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 419.659696][T11557] ? security_socket_sendmsg+0x80/0xa0 [ 419.665191][T11557] ? netlink_getsockopt+0x590/0x590 [ 419.670434][T11557] ____sys_sendmsg+0x61b/0x980 [ 419.675231][T11557] ? __asan_memset+0x22/0x40 [ 419.679859][T11557] ? __sys_sendmsg_sock+0x30/0x30 [ 419.684912][T11557] ? __import_iovec+0x5f2/0x850 [ 419.689797][T11557] ? import_iovec+0x73/0xa0 [ 419.694327][T11557] ___sys_sendmsg+0x2a6/0x360 [ 419.699029][T11557] ? get_pid_task+0x20/0x1e0 [ 419.703652][T11557] ? __sys_sendmsg+0x2b0/0x2b0 [ 419.708456][T11557] ? __lock_acquire+0x7d80/0x7d80 [ 419.713559][T11557] __se_sys_sendmsg+0x1d0/0x2c0 [ 419.718450][T11557] ? __x64_sys_sendmsg+0x80/0x80 [ 419.723432][T11557] ? lockdep_hardirqs_on+0x98/0x150 [ 419.728667][T11557] do_syscall_64+0x55/0xb0 [ 419.733106][T11557] ? clear_bhb_loop+0x40/0x90 [ 419.737804][T11557] ? clear_bhb_loop+0x40/0x90 [ 419.742503][T11557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.748426][T11557] RIP: 0033:0x7f3397d9ce59 [ 419.752861][T11557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.772487][T11557] RSP: 002b:00007f3398c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.780926][T11557] RAX: ffffffffffffffda RBX: 00007f3398015fa0 RCX: 00007f3397d9ce59 [ 419.788925][T11557] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 419.796919][T11557] RBP: 00007f3398c55090 R08: 0000000000000000 R09: 0000000000000000 [ 419.804922][T11557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.812918][T11557] R13: 00007f3398016038 R14: 00007f3398015fa0 R15: 00007ffe99262678 [ 419.820923][T11557] [ 421.514820][T11563] netlink: 'syz.3.2020': attribute type 10 has an invalid length. [ 421.723112][T11569] netlink: 'syz.0.2029': attribute type 10 has an invalid length. [ 422.024427][T11585] netlink: 'syz.2.2025': attribute type 10 has an invalid length. [ 422.103460][T11588] netlink: 'syz.0.2027': attribute type 10 has an invalid length. [ 422.137475][T11588] team0: Device hsr_slave_0 failed to register rx_handler [ 422.598316][T11592] syzkaller0: entered promiscuous mode [ 422.620344][T11592] syzkaller0: entered allmulticast mode [ 422.811755][T11592] netlink: 'syz.0.2028': attribute type 21 has an invalid length. [ 422.820070][T11592] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2028'. [ 424.002865][T11618] netlink: 'syz.2.2039': attribute type 9 has an invalid length. [ 424.021375][T11618] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2039'. [ 425.438296][T11609] netlink: 'syz.0.2036': attribute type 10 has an invalid length. [ 425.447012][T11612] netlink: 'syz.1.2037': attribute type 10 has an invalid length. [ 425.473724][T11623] netlink: 'syz.3.2040': attribute type 10 has an invalid length. [ 425.766167][T11635] syzkaller0: entered promiscuous mode [ 425.779392][T11635] syzkaller0: entered allmulticast mode [ 425.962438][T11635] netlink: 'syz.2.2046': attribute type 21 has an invalid length. [ 425.973463][T11635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2046'. [ 426.249593][T11650] netlink: 'syz.0.2049': attribute type 9 has an invalid length. [ 426.267776][T11650] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2049'. [ 426.287745][T11648] netlink: 'syz.3.2051': attribute type 10 has an invalid length. [ 426.296950][T11653] netlink: 'syz.1.2052': attribute type 10 has an invalid length. [ 426.310234][T11653] team0: Device wg1 is up. Set it down before adding it as a team port [ 428.083830][T11666] syzkaller0: entered promiscuous mode [ 428.089384][T11666] syzkaller0: entered allmulticast mode [ 428.100773][T11668] netlink: 'syz.1.2056': attribute type 10 has an invalid length. [ 428.318696][T11666] netlink: 'syz.3.2058': attribute type 21 has an invalid length. [ 428.333630][T11666] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2058'. [ 428.886053][T11689] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2065'. [ 429.093596][T11678] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2061'. [ 430.729446][T11692] validate_nla: 2 callbacks suppressed [ 430.729459][T11692] netlink: 'syz.0.2067': attribute type 4 has an invalid length. [ 430.743134][T11692] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2067'. [ 430.752337][T11706] netlink: 'syz.2.2072': attribute type 25 has an invalid length. [ 430.773349][T11706] netlink: 'syz.2.2072': attribute type 9 has an invalid length. [ 430.782656][T11708] netlink: 'syz.1.2073': attribute type 10 has an invalid length. [ 431.748735][T11722] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2079'. [ 431.829174][T11734] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2083'. [ 431.949766][T11734] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 431.979237][T11734] CPU: 1 PID: 11734 Comm: syz.0.2083 Not tainted syzkaller #0 [ 431.986779][T11734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.996883][T11734] Call Trace: [ 432.000210][T11734] [ 432.003192][T11734] dump_stack_lvl+0x18c/0x250 [ 432.007927][T11734] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.014155][T11734] ? show_regs_print_info+0x20/0x20 [ 432.019434][T11734] ? load_image+0x420/0x420 [ 432.023996][T11734] ? sysfs_warn_dup+0x65/0xa0 [ 432.028740][T11734] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.034872][T11734] sysfs_warn_dup+0x8e/0xa0 [ 432.039427][T11734] sysfs_do_create_link_sd+0xc0/0x110 [ 432.044857][T11734] device_add_class_symlinks+0x1cf/0x240 [ 432.050557][T11734] device_add+0x4f9/0xc40 [ 432.054961][T11734] wiphy_register+0x1d99/0x2ac0 [ 432.059899][T11734] ? cfg80211_event_work+0x40/0x40 [ 432.065071][T11734] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.071311][T11734] ieee80211_register_hw+0x2dd8/0x3b30 [ 432.076840][T11734] ? ieee80211_register_hw+0xfc1/0x3b30 [ 432.082477][T11734] ? ieee80211_tasklet_handler+0x20/0x20 [ 432.088190][T11734] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 432.094162][T11734] ? __debug_object_init+0xec/0x450 [ 432.099432][T11734] ? __asan_memset+0x22/0x40 [ 432.104088][T11734] ? __hrtimer_init+0x189/0x270 [ 432.108997][T11734] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 432.114822][T11734] ? mac80211_hwsim_free+0x220/0x220 [ 432.120208][T11734] ? rcu_is_watching+0x15/0xb0 [ 432.125038][T11734] ? kstrndup+0xbd/0x140 [ 432.129352][T11734] hwsim_new_radio_nl+0xdad/0x1a70 [ 432.134520][T11734] ? __nla_validate+0x50/0x50 [ 432.139266][T11734] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 432.145649][T11734] ? __nla_parse+0x24/0x50 [ 432.150121][T11734] ? __nla_parse+0x40/0x50 [ 432.154603][T11734] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 432.160996][T11734] genl_family_rcv_msg_doit+0x21a/0x310 [ 432.166606][T11734] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 432.172594][T11734] ? bpf_lsm_capable+0x9/0x10 [ 432.177333][T11734] ? security_capable+0x89/0xb0 [ 432.182274][T11734] genl_rcv_msg+0x611/0x7a0 [ 432.186845][T11734] ? genl_bind+0x360/0x360 [ 432.191310][T11734] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 432.197712][T11734] ? lockdep_hardirqs_on+0x98/0x150 [ 432.202976][T11734] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.209205][T11734] netlink_rcv_skb+0x235/0x4c0 [ 432.214038][T11734] ? genl_bind+0x360/0x360 [ 432.218523][T11734] ? netlink_ack+0x1160/0x1160 [ 432.223358][T11734] ? __lock_acquire+0x7d80/0x7d80 [ 432.228463][T11734] ? down_read+0x1ac/0x2e0 [ 432.232939][T11734] genl_rcv+0x28/0x40 [ 432.236973][T11734] netlink_unicast+0x7b1/0x930 [ 432.241794][T11734] netlink_sendmsg+0x8d0/0xbf0 [ 432.246604][T11734] ? netlink_getsockopt+0x590/0x590 [ 432.251853][T11734] ? aa_sock_msg_perm+0x94/0x150 [ 432.256827][T11734] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 432.262139][T11734] ? security_socket_sendmsg+0x80/0xa0 [ 432.267620][T11734] ? netlink_getsockopt+0x590/0x590 [ 432.272852][T11734] ____sys_sendmsg+0x61b/0x980 [ 432.277659][T11734] ? __asan_memset+0x22/0x40 [ 432.282276][T11734] ? __sys_sendmsg_sock+0x30/0x30 [ 432.287327][T11734] ? __import_iovec+0x5f2/0x850 [ 432.292225][T11734] ? import_iovec+0x73/0xa0 [ 432.296766][T11734] ___sys_sendmsg+0x2a6/0x360 [ 432.301481][T11734] ? __sys_sendmsg+0x2b0/0x2b0 [ 432.306305][T11734] ? trace_call_bpf+0xc3/0x6c0 [ 432.311139][T11734] __se_sys_sendmsg+0x1d0/0x2c0 [ 432.316026][T11734] ? perf_trace_preemptirq_template+0x269/0x330 [ 432.322313][T11734] ? __x64_sys_sendmsg+0x80/0x80 [ 432.327293][T11734] ? lockdep_hardirqs_on+0x98/0x150 [ 432.332524][T11734] do_syscall_64+0x55/0xb0 [ 432.336964][T11734] ? clear_bhb_loop+0x40/0x90 [ 432.341667][T11734] ? clear_bhb_loop+0x40/0x90 [ 432.346389][T11734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.352314][T11734] RIP: 0033:0x7f3397d9ce59 [ 432.356750][T11734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.376401][T11734] RSP: 002b:00007f3398c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.384844][T11734] RAX: ffffffffffffffda RBX: 00007f3398015fa0 RCX: 00007f3397d9ce59 [ 432.392858][T11734] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 432.400871][T11734] RBP: 00007f3397e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 432.408914][T11734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.416917][T11734] R13: 00007f3398016038 R14: 00007f3398015fa0 R15: 00007ffe99262678 [ 432.424931][T11734] [ 432.698642][T11739] netlink: 'syz.1.2085': attribute type 10 has an invalid length. [ 432.716835][T11745] netlink: 'syz.0.2087': attribute type 9 has an invalid length. [ 432.728274][T11745] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2087'. [ 433.647499][T11769] netlink: 'syz.2.2098': attribute type 10 has an invalid length. [ 433.686224][T11757] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2092'. [ 433.767079][T11776] netlink: 'syz.3.2099': attribute type 9 has an invalid length. [ 433.776714][T11776] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2099'. [ 434.401565][T11799] netlink: 'syz.0.2109': attribute type 10 has an invalid length. [ 434.432620][ T5085] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 434.762236][T11806] netlink: 'syz.0.2111': attribute type 25 has an invalid length. [ 434.906121][T11810] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2114'. [ 435.890468][T11845] validate_nla: 3 callbacks suppressed [ 435.890485][T11845] netlink: 'syz.1.2127': attribute type 9 has an invalid length. [ 435.906662][T11845] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2127'. [ 436.486761][ T5085] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 436.627551][T11860] netlink: 'syz.3.2132': attribute type 29 has an invalid length. [ 436.670617][T11860] netlink: 'syz.3.2132': attribute type 29 has an invalid length. [ 437.019402][T11862] netlink: 'syz.0.2133': attribute type 10 has an invalid length. [ 437.429391][ T5085] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 437.482354][T11878] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2140'. [ 437.540367][T11878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.736289][T11889] netlink: 'syz.2.2145': attribute type 10 has an invalid length. [ 437.956700][T11895] netlink: 'syz.1.2155': attribute type 10 has an invalid length. [ 438.248843][T11904] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2148'. [ 438.617963][T11908] netlink: 'syz.0.2150': attribute type 10 has an invalid length. [ 438.638566][T11908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2150'. [ 438.694512][ T5085] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 439.227653][T11924] netlink: 173820 bytes leftover after parsing attributes in process `syz.3.2161'. [ 439.473701][T11926] netlink: 'syz.2.2159': attribute type 10 has an invalid length. [ 440.362731][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.369232][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.198489][T11965] netlink: 'syz.1.2175': attribute type 10 has an invalid length. [ 441.475205][T11982] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2181'. [ 442.056324][T11996] netlink: 'syz.1.2187': attribute type 10 has an invalid length. [ 442.389726][T12003] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2189'. [ 442.416052][T12004] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2189'. [ 442.425759][T12003] openvswitch: netlink: Flow key attribute not present in set flow. [ 442.440287][T12004] openvswitch: netlink: Flow key attribute not present in set flow. [ 442.512321][T12003] netlink: 'syz.1.2189': attribute type 28 has an invalid length. [ 442.516537][T12006] netlink: set zone limit has 8 unknown bytes [ 442.531458][T12003] netlink: 'syz.1.2189': attribute type 29 has an invalid length. [ 442.562346][T12003] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2189'. [ 442.672363][T12006] netlink: 'syz.3.2190': attribute type 10 has an invalid length. [ 442.919553][T12021] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2195'. [ 443.200880][T12028] netlink: 'syz.3.2197': attribute type 10 has an invalid length. [ 443.586161][T12050] netlink: 'syz.3.2205': attribute type 21 has an invalid length. [ 443.597304][T12050] netlink: 'syz.3.2205': attribute type 1 has an invalid length. [ 443.609021][T12050] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2205'. [ 443.698630][T12055] netlink: 'syz.2.2206': attribute type 21 has an invalid length. [ 443.764287][T12057] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2207'. [ 443.926078][T12063] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2210'. [ 444.361729][T12067] netlink: 'syz.2.2211': attribute type 10 has an invalid length. [ 444.681835][T12087] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2219'. [ 445.528368][T12113] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2229'. [ 445.544386][T12113] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2229'. [ 446.595556][T12119] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2231'. [ 446.921864][T12129] validate_nla: 2 callbacks suppressed [ 446.921879][T12129] netlink: 'syz.1.2235': attribute type 10 has an invalid length. [ 447.628179][T12139] batman_adv: batadv0: Interface deactivated: vlan1 [ 448.201597][T12139] batman_adv: batadv0: Removing interface: vlan1 [ 448.287698][T12139] veth1_vlan (unregistering): left allmulticast mode [ 448.593842][T12160] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2248'. [ 448.617053][T12156] netlink: 'syz.2.2246': attribute type 10 has an invalid length. [ 449.256635][T12189] netlink: 'syz.3.2259': attribute type 21 has an invalid length. [ 449.270727][T12189] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 449.271123][T12187] netlink: 'syz.1.2258': attribute type 10 has an invalid length. [ 449.475169][T12196] netlink: 'syz.3.2261': attribute type 21 has an invalid length. [ 450.156334][T12221] netlink: 'syz.2.2270': attribute type 10 has an invalid length. [ 450.374802][ T5085] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 450.418894][T12238] FAULT_INJECTION: forcing a failure. [ 450.418894][T12238] name failslab, interval 1, probability 0, space 0, times 0 [ 450.431702][T12238] CPU: 1 PID: 12238 Comm: syz.2.2277 Not tainted syzkaller #0 [ 450.439231][T12238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 450.449339][T12238] Call Trace: [ 450.452651][T12238] [ 450.455619][T12238] dump_stack_lvl+0x18c/0x250 [ 450.460350][T12238] ? sctp_sendmsg+0x1519/0x27b0 [ 450.465307][T12238] ? ___sys_sendmsg+0x2a6/0x360 [ 450.470210][T12238] ? show_regs_print_info+0x20/0x20 [ 450.475492][T12238] ? load_image+0x420/0x420 [ 450.480056][T12238] should_fail_ex+0x394/0x4c0 [ 450.484806][T12238] should_failslab+0x9/0x20 [ 450.489358][T12238] slab_pre_alloc_hook+0x59/0x300 [ 450.494426][T12238] ? sctp_add_bind_addr+0x8c/0x360 [ 450.499615][T12238] __kmem_cache_alloc_node+0x53/0x250 [ 450.505023][T12238] ? sctp_add_bind_addr+0x8c/0x360 [ 450.510168][T12238] kmalloc_trace+0x2a/0xe0 [ 450.514632][T12238] sctp_add_bind_addr+0x8c/0x360 [ 450.519598][T12238] sctp_copy_local_addr_list+0x31b/0x4e0 [ 450.525265][T12238] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 450.531024][T12238] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 450.537127][T12238] ? sctp_v4_is_any+0x35/0x60 [ 450.541829][T12238] ? sctp_copy_one_addr+0x8c/0x350 [ 450.546970][T12238] sctp_bind_addr_copy+0xb3/0x3c0 [ 450.552025][T12238] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 450.558391][T12238] sctp_connect_new_asoc+0x2f9/0x6a0 [ 450.563714][T12238] ? __sctp_connect+0xd80/0xd80 [ 450.568594][T12238] ? __local_bh_enable_ip+0x13a/0x1c0 [ 450.574095][T12238] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 450.579668][T12238] ? security_sctp_bind_connect+0x89/0xb0 [ 450.585442][T12238] sctp_sendmsg+0x1519/0x27b0 [ 450.590161][T12238] ? sctp_getsockopt+0xb60/0xb60 [ 450.595131][T12238] ? aa_sk_perm+0x83c/0x970 [ 450.599691][T12238] ? aa_af_perm+0x330/0x330 [ 450.604213][T12238] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 450.610654][T12238] ? sock_rps_record_flow+0x19/0x3f0 [ 450.616007][T12238] ? inet_sendmsg+0xce/0x2a0 [ 450.620630][T12238] ? inet_send_prepare+0x250/0x250 [ 450.625778][T12238] ____sys_sendmsg+0x61b/0x980 [ 450.630595][T12238] ? __asan_memset+0x22/0x40 [ 450.635220][T12238] ? __sys_sendmsg_sock+0x30/0x30 [ 450.640273][T12238] ? __import_iovec+0x5f2/0x850 [ 450.645173][T12238] ? import_iovec+0x73/0xa0 [ 450.649707][T12238] ___sys_sendmsg+0x2a6/0x360 [ 450.654415][T12238] ? get_pid_task+0x20/0x1e0 [ 450.659041][T12238] ? __sys_sendmsg+0x2b0/0x2b0 [ 450.663853][T12238] ? __lock_acquire+0x7d80/0x7d80 [ 450.668932][T12238] __se_sys_sendmsg+0x1d0/0x2c0 [ 450.673818][T12238] ? __x64_sys_sendmsg+0x80/0x80 [ 450.678797][T12238] ? lockdep_hardirqs_on+0x98/0x150 [ 450.684032][T12238] do_syscall_64+0x55/0xb0 [ 450.688499][T12238] ? clear_bhb_loop+0x40/0x90 [ 450.693218][T12238] ? clear_bhb_loop+0x40/0x90 [ 450.697922][T12238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.703848][T12238] RIP: 0033:0x7f961ff9ce59 [ 450.708284][T12238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.727926][T12238] RSP: 002b:00007f9620e1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.736382][T12238] RAX: ffffffffffffffda RBX: 00007f9620215fa0 RCX: 00007f961ff9ce59 [ 450.744378][T12238] RDX: 0000000000040041 RSI: 00002000000007c0 RDI: 0000000000000003 [ 450.752464][T12238] RBP: 00007f9620e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 450.760487][T12238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.768478][T12238] R13: 00007f9620216038 R14: 00007f9620215fa0 R15: 00007ffe1dc6bbd8 [ 450.776488][T12238] [ 451.167811][T12240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2278'. [ 451.323987][T12261] netlink: 'syz.2.2284': attribute type 39 has an invalid length. [ 451.667626][T12264] netlink: 'syz.1.2285': attribute type 10 has an invalid length. [ 451.740036][T12269] netlink: 'syz.3.2287': attribute type 21 has an invalid length. [ 451.781222][T12271] FAULT_INJECTION: forcing a failure. [ 451.781222][T12271] name failslab, interval 1, probability 0, space 0, times 0 [ 451.856349][T12271] CPU: 1 PID: 12271 Comm: syz.2.2288 Not tainted syzkaller #0 [ 451.863874][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 451.873950][T12271] Call Trace: [ 451.877248][T12271] [ 451.880204][T12271] dump_stack_lvl+0x18c/0x250 [ 451.884933][T12271] ? show_regs_print_info+0x20/0x20 [ 451.890157][T12271] ? load_image+0x420/0x420 [ 451.894699][T12271] ? __might_sleep+0xe0/0xe0 [ 451.899338][T12271] ? __lock_acquire+0x7d80/0x7d80 [ 451.904393][T12271] should_fail_ex+0x394/0x4c0 [ 451.909116][T12271] should_failslab+0x9/0x20 [ 451.913654][T12271] slab_pre_alloc_hook+0x59/0x300 [ 451.918716][T12271] ? fib_create_info+0xa8d/0x2390 [ 451.923801][T12271] ? fib_create_info+0xa8d/0x2390 [ 451.928855][T12271] __kmem_cache_alloc_node+0x53/0x250 [ 451.934262][T12271] ? fib_create_info+0xa8d/0x2390 [ 451.939353][T12271] __kmalloc+0xa7/0x240 [ 451.943536][T12271] fib_create_info+0xa8d/0x2390 [ 451.948429][T12271] fib_table_insert+0xc6/0x1af0 [ 451.953322][T12271] ? lwtunnel_valid_encap_type+0x90/0x600 [ 451.959096][T12271] ? rtm_to_fib_config+0x1065/0x13b0 [ 451.964416][T12271] ? fib_new_table+0x10a/0x2d0 [ 451.969213][T12271] inet_rtm_newroute+0x14b/0x240 [ 451.974180][T12271] ? rcu_read_unlock+0xa0/0xa0 [ 451.978982][T12271] ? rcu_read_unlock+0xa0/0xa0 [ 451.983768][T12271] rtnetlink_rcv_msg+0x843/0xf90 [ 451.988748][T12271] ? rtnetlink_rcv_msg+0x220/0xf90 [ 451.993890][T12271] ? rtnetlink_bind+0x80/0x80 [ 451.998587][T12271] ? mark_lock+0x94/0x320 [ 452.002946][T12271] ? __lock_acquire+0x1262/0x7d80 [ 452.007997][T12271] ? mark_lock+0x94/0x320 [ 452.012354][T12271] ? mark_lock+0x94/0x320 [ 452.016726][T12271] ? __lock_acquire+0x1262/0x7d80 [ 452.021791][T12271] ? kmalloc_reserve+0x95/0x240 [ 452.026667][T12271] ? verify_lock_unused+0x140/0x140 [ 452.031889][T12271] ? verify_lock_unused+0x140/0x140 [ 452.037127][T12271] netlink_rcv_skb+0x235/0x4c0 [ 452.041920][T12271] ? rtnetlink_bind+0x80/0x80 [ 452.046629][T12271] ? netlink_ack+0x1160/0x1160 [ 452.051445][T12271] ? __lock_acquire+0x7d80/0x7d80 [ 452.056492][T12271] ? net_generic+0x1e/0x240 [ 452.061017][T12271] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.066242][T12271] netlink_unicast+0x7b1/0x930 [ 452.071056][T12271] netlink_sendmsg+0x8d0/0xbf0 [ 452.075862][T12271] ? netlink_getsockopt+0x590/0x590 [ 452.081169][T12271] ? aa_sock_msg_perm+0x94/0x150 [ 452.086131][T12271] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 452.091437][T12271] ? security_socket_sendmsg+0x80/0xa0 [ 452.096919][T12271] ? netlink_getsockopt+0x590/0x590 [ 452.102144][T12271] ____sys_sendmsg+0x61b/0x980 [ 452.106948][T12271] ? __asan_memset+0x22/0x40 [ 452.111580][T12271] ? __sys_sendmsg_sock+0x30/0x30 [ 452.116646][T12271] ? __import_iovec+0x5f2/0x850 [ 452.121534][T12271] ? import_iovec+0x73/0xa0 [ 452.126065][T12271] ___sys_sendmsg+0x2a6/0x360 [ 452.130776][T12271] ? __sys_sendmsg+0x2b0/0x2b0 [ 452.135589][T12271] ? trace_call_bpf+0xc3/0x6c0 [ 452.140414][T12271] __se_sys_sendmsg+0x1d0/0x2c0 [ 452.145300][T12271] ? perf_trace_preemptirq_template+0x269/0x330 [ 452.151617][T12271] ? __x64_sys_sendmsg+0x80/0x80 [ 452.156616][T12271] ? lockdep_hardirqs_on+0x98/0x150 [ 452.161853][T12271] do_syscall_64+0x55/0xb0 [ 452.166306][T12271] ? clear_bhb_loop+0x40/0x90 [ 452.171028][T12271] ? clear_bhb_loop+0x40/0x90 [ 452.175731][T12271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.181659][T12271] RIP: 0033:0x7f961ff9ce59 [ 452.186122][T12271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.205762][T12271] RSP: 002b:00007f9620e1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.214202][T12271] RAX: ffffffffffffffda RBX: 00007f9620215fa0 RCX: 00007f961ff9ce59 [ 452.222198][T12271] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 452.230193][T12271] RBP: 00007f9620e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 452.238188][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.246203][T12271] R13: 00007f9620216038 R14: 00007f9620215fa0 R15: 00007ffe1dc6bbd8 [ 452.254210][T12271] [ 452.851317][T12284] validate_nla: 3 callbacks suppressed [ 452.851339][T12284] netlink: 'syz.3.2291': attribute type 21 has an invalid length. [ 452.893863][T12284] netlink: 'syz.3.2291': attribute type 15 has an invalid length. [ 453.569714][T12295] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2296'. [ 455.419977][T12298] netlink: 'syz.0.2297': attribute type 10 has an invalid length. [ 455.849243][T12315] netlink: 'syz.3.2304': attribute type 3 has an invalid length. [ 455.882369][T12315] netlink: 'syz.3.2304': attribute type 4 has an invalid length. [ 455.913526][T12315] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.2304'. [ 456.402013][T12322] netlink: 'syz.2.2306': attribute type 10 has an invalid length. [ 456.418420][T12325] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2307'. [ 456.876158][T12335] netlink: 1039 bytes leftover after parsing attributes in process `syz.2.2311'. [ 457.379613][T12345] netlink: 'syz.0.2316': attribute type 10 has an invalid length. [ 457.872447][T12356] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2318'. [ 457.940603][T12356] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 457.968108][T12356] CPU: 0 PID: 12356 Comm: syz.1.2318 Not tainted syzkaller #0 [ 457.975631][T12356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 457.985726][T12356] Call Trace: [ 457.989058][T12356] [ 457.992043][T12356] dump_stack_lvl+0x18c/0x250 [ 457.996780][T12356] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 458.002994][T12356] ? show_regs_print_info+0x20/0x20 [ 458.008231][T12356] ? load_image+0x420/0x420 [ 458.012771][T12356] ? _printk+0x15/0x130 [ 458.016985][T12356] sysfs_warn_dup+0x8e/0xa0 [ 458.021523][T12356] sysfs_do_create_link_sd+0xc0/0x110 [ 458.026938][T12356] device_add_class_symlinks+0x1cf/0x240 [ 458.032611][T12356] device_add+0x4f9/0xc40 [ 458.036980][T12356] wiphy_register+0x1d99/0x2ac0 [ 458.041882][T12356] ? cfg80211_event_work+0x40/0x40 [ 458.047050][T12356] ? minstrel_ht_alloc+0x88a/0x990 [ 458.052190][T12356] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 458.058289][T12356] ieee80211_register_hw+0x2dd8/0x3b30 [ 458.063806][T12356] ? ieee80211_register_hw+0xfc1/0x3b30 [ 458.069395][T12356] ? ieee80211_tasklet_handler+0x20/0x20 [ 458.075067][T12356] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 458.081005][T12356] ? __debug_object_init+0xec/0x450 [ 458.086245][T12356] ? __asan_memset+0x22/0x40 [ 458.090884][T12356] ? __hrtimer_init+0x189/0x270 [ 458.095822][T12356] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 458.101595][T12356] ? mac80211_hwsim_free+0x220/0x220 [ 458.106910][T12356] ? rcu_is_watching+0x15/0xb0 [ 458.111709][T12356] ? kstrndup+0xbd/0x140 [ 458.116001][T12356] hwsim_new_radio_nl+0xdad/0x1a70 [ 458.121157][T12356] ? __nla_validate+0x50/0x50 [ 458.126061][T12356] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 458.132445][T12356] ? __nla_parse+0x40/0x50 [ 458.136901][T12356] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 458.143270][T12356] genl_family_rcv_msg_doit+0x21a/0x310 [ 458.148871][T12356] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 458.154817][T12356] ? bpf_lsm_capable+0x9/0x10 [ 458.159529][T12356] ? security_capable+0x89/0xb0 [ 458.164424][T12356] genl_rcv_msg+0x611/0x7a0 [ 458.168962][T12356] ? genl_bind+0x360/0x360 [ 458.173406][T12356] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 458.179785][T12356] netlink_rcv_skb+0x235/0x4c0 [ 458.184589][T12356] ? genl_bind+0x360/0x360 [ 458.189052][T12356] ? netlink_ack+0x1160/0x1160 [ 458.193870][T12356] ? __lock_acquire+0x7d80/0x7d80 [ 458.198945][T12356] ? down_read+0x1ac/0x2e0 [ 458.203400][T12356] genl_rcv+0x28/0x40 [ 458.207422][T12356] netlink_unicast+0x7b1/0x930 [ 458.212238][T12356] netlink_sendmsg+0x8d0/0xbf0 [ 458.217044][T12356] ? netlink_getsockopt+0x590/0x590 [ 458.222273][T12356] ? aa_sock_msg_perm+0x94/0x150 [ 458.227243][T12356] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 458.232560][T12356] ? security_socket_sendmsg+0x80/0xa0 [ 458.238050][T12356] ? netlink_getsockopt+0x590/0x590 [ 458.243286][T12356] ____sys_sendmsg+0x61b/0x980 [ 458.248090][T12356] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 458.254281][T12356] ? __asan_memset+0x22/0x40 [ 458.258915][T12356] ? __sys_sendmsg_sock+0x30/0x30 [ 458.263963][T12356] ? __import_iovec+0x5f2/0x850 [ 458.268895][T12356] ? import_iovec+0x73/0xa0 [ 458.273426][T12356] ___sys_sendmsg+0x2a6/0x360 [ 458.278133][T12356] ? __sys_sendmsg+0x2b0/0x2b0 [ 458.283009][T12356] __se_sys_sendmsg+0x1d0/0x2c0 [ 458.287899][T12356] ? __x64_sys_sendmsg+0x80/0x80 [ 458.292906][T12356] ? syscall_enter_from_user_mode+0x2e/0x80 [ 458.298842][T12356] do_syscall_64+0x55/0xb0 [ 458.303296][T12356] ? clear_bhb_loop+0x40/0x90 [ 458.308005][T12356] ? clear_bhb_loop+0x40/0x90 [ 458.312707][T12356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.318638][T12356] RIP: 0033:0x7f5815d9ce59 [ 458.323079][T12356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.342716][T12356] RSP: 002b:00007f5816c7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.351178][T12356] RAX: ffffffffffffffda RBX: 00007f5816015fa0 RCX: 00007f5815d9ce59 [ 458.359172][T12356] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 458.367166][T12356] RBP: 00007f5815e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 458.375194][T12356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.383215][T12356] R13: 00007f5816016038 R14: 00007f5816015fa0 R15: 00007ffea7f763b8 [ 458.391226][T12356] [ 458.457807][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 458.472230][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 458.480310][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 458.489813][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 458.497945][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 458.511349][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 458.886042][T12373] FAULT_INJECTION: forcing a failure. [ 458.886042][T12373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.922738][T12373] CPU: 1 PID: 12373 Comm: syz.1.2323 Not tainted syzkaller #0 [ 458.930267][T12373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 458.940362][T12373] Call Trace: [ 458.943690][T12373] [ 458.946665][T12373] dump_stack_lvl+0x18c/0x250 [ 458.951404][T12373] ? show_regs_print_info+0x20/0x20 [ 458.956658][T12373] ? load_image+0x420/0x420 [ 458.961217][T12373] ? __might_fault+0xaa/0x120 [ 458.965942][T12373] ? __lock_acquire+0x7d80/0x7d80 [ 458.971016][T12373] should_fail_ex+0x394/0x4c0 [ 458.975769][T12373] _copy_from_user+0x2f/0xe0 [ 458.980413][T12373] __sys_bpf+0x23e/0x890 [ 458.984717][T12373] ? bpf_link_show_fdinfo+0x390/0x390 [ 458.990173][T12373] ? lock_chain_count+0x20/0x20 [ 458.995084][T12373] __x64_sys_bpf+0x7c/0x90 [ 458.999542][T12373] do_syscall_64+0x55/0xb0 [ 459.003999][T12373] ? clear_bhb_loop+0x40/0x90 [ 459.008730][T12373] ? clear_bhb_loop+0x40/0x90 [ 459.013454][T12373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.019398][T12373] RIP: 0033:0x7f5815d9ce59 [ 459.023859][T12373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.043522][T12373] RSP: 002b:00007f5816c7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.051978][T12373] RAX: ffffffffffffffda RBX: 00007f5816015fa0 RCX: 00007f5815d9ce59 [ 459.059993][T12373] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 459.067989][T12373] RBP: 00007f5816c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 459.075984][T12373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.083993][T12373] R13: 00007f5816016038 R14: 00007f5816015fa0 R15: 00007ffea7f763b8 [ 459.092072][T12373] [ 459.229486][T12360] chnl_net:caif_netlink_parms(): no params data found [ 459.336480][T12381] netlink: 'syz.1.2327': attribute type 10 has an invalid length. [ 459.362616][T12387] tap0: tun_chr_ioctl cmd 1074025677 [ 459.373618][T12387] tap0: linktype set to 270 [ 459.383899][T12360] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.391273][T12360] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.403241][T12360] bridge_slave_0: entered allmulticast mode [ 459.412918][T12360] bridge_slave_0: entered promiscuous mode [ 459.429094][T12360] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.436626][T12360] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.448884][T12360] bridge_slave_1: entered allmulticast mode [ 459.465089][T12360] bridge_slave_1: entered promiscuous mode [ 459.502958][T12360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.516072][T12360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.556616][T12360] team0: Port device team_slave_0 added [ 459.567440][T12360] team0: Port device team_slave_1 added [ 459.628162][T12360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.637549][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.672985][T12360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.692861][T12360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.700119][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.726507][T12360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.770443][T12360] hsr_slave_0: entered promiscuous mode [ 459.777397][T12360] hsr_slave_1: entered promiscuous mode [ 459.785133][T12360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.792761][T12360] Cannot create hsr debugfs directory [ 459.925375][T12360] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.031567][T12360] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.132280][T12360] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.184686][T12360] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.327015][T12360] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 460.338641][T12360] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 460.349868][T12360] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 460.360286][T12360] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 460.437228][T12360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.463035][T12360] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.476434][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.483676][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.499784][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.506986][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.564525][ T5085] Bluetooth: hci3: command tx timeout [ 460.723261][T12360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.770530][T12360] veth0_vlan: entered promiscuous mode [ 460.782733][T12360] veth1_vlan: entered promiscuous mode [ 460.819088][T12360] veth0_macvtap: entered promiscuous mode [ 460.828713][T12360] veth1_macvtap: entered promiscuous mode [ 460.851959][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.862577][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.872928][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.883724][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.893611][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.904104][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.915651][T12360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.931877][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.942791][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.953122][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.963893][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.973863][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 460.983667][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.995154][T12360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.007816][T12360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.016667][T12360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.026812][T12360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.036440][T12360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.116772][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.138036][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.167357][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.178318][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.456601][T12399] netlink: 'syz.0.2336': attribute type 10 has an invalid length. [ 461.967942][T12409] netlink: 'syz.0.2331': attribute type 10 has an invalid length. [ 462.002344][T12408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.448497][T12415] netlink: 'syz.1.2334': attribute type 10 has an invalid length. [ 462.501689][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 462.506560][T12415] team0: Port device netdevsim0 added [ 462.515782][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 462.523906][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 462.537094][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 462.545484][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 462.552877][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 462.644105][ T5780] Bluetooth: hci3: command tx timeout [ 463.093871][T12424] syzkaller0: entered promiscuous mode [ 463.114335][T12424] syzkaller0: entered allmulticast mode [ 463.136610][T12429] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2341'. [ 463.150935][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2341'. [ 463.172279][T12430] netlink: 'syz.2.2341': attribute type 5 has an invalid length. [ 463.180865][T12430] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2341'. [ 464.317160][T12434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.645496][ T5085] Bluetooth: hci1: command tx timeout [ 464.736716][ T5085] Bluetooth: hci3: command tx timeout [ 465.293589][T12432] netlink: 'syz.1.2342': attribute type 10 has an invalid length. [ 465.301751][T12435] netlink: 'syz.2.2343': attribute type 10 has an invalid length. [ 465.352313][T12435] team0: Port device wlan1 added [ 465.430477][T12418] chnl_net:caif_netlink_parms(): no params data found [ 465.605398][T12418] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.612650][T12418] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.638969][T12418] bridge_slave_0: entered allmulticast mode [ 465.654315][T12418] bridge_slave_0: entered promiscuous mode [ 465.669930][T12418] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.677256][T12418] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.686498][T12418] bridge_slave_1: entered allmulticast mode [ 465.694278][T12418] bridge_slave_1: entered promiscuous mode [ 465.803403][T12418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.812728][T12447] netlink: 'syz.0.2346': attribute type 6 has an invalid length. [ 465.822293][T12447] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2346'. [ 465.836367][T12418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.886833][T12418] team0: Port device team_slave_0 added [ 465.898132][T12418] team0: Port device team_slave_1 added [ 465.969519][T12418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.984377][T12418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.032876][T12418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.062517][T12418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.073203][T12418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.123364][T12418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.189461][T12418] hsr_slave_0: entered promiscuous mode [ 466.196814][T12418] hsr_slave_1: entered promiscuous mode [ 466.203104][T12418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.211756][T12418] Cannot create hsr debugfs directory [ 466.517136][T12457] netlink: 'syz.2.2351': attribute type 10 has an invalid length. [ 466.595463][T12457] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 466.823736][ T5780] Bluetooth: hci3: command tx timeout [ 466.829323][ T5085] Bluetooth: hci1: command tx timeout [ 468.883548][ T5085] Bluetooth: hci1: command tx timeout [ 469.282876][T12418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.424766][T12418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.567095][T12418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.623866][T12463] netlink: 'syz.0.2360': attribute type 10 has an invalid length. [ 469.701540][T12418] bond0: (slave netdevsim0): Releasing backup interface [ 469.727582][T12418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.808194][T12466] netlink: 'syz.1.2353': attribute type 10 has an invalid length. [ 469.831918][T12465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.006817][T12418] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 470.046069][T12418] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 470.074468][T12418] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 470.099137][T12418] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 470.298891][T12483] netlink: 'syz.1.2361': attribute type 10 has an invalid length. [ 470.343010][T12418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.427831][T12418] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.463070][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.470270][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.528090][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.535332][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.681782][T12418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 470.747324][T12499] netlink: 'syz.1.2366': attribute type 10 has an invalid length. [ 470.963948][ T5085] Bluetooth: hci1: command tx timeout [ 470.988318][T12418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.050107][T12418] veth0_vlan: entered promiscuous mode [ 471.070741][T12418] veth1_vlan: entered promiscuous mode [ 471.202865][T12418] veth0_macvtap: entered promiscuous mode [ 471.245845][T12418] veth1_macvtap: entered promiscuous mode [ 471.307425][T12418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.326603][T12418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.339266][T12418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.356026][T12418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.372496][T12418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.392624][T12418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.402747][T12418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.420049][T12418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.440583][T12418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.468316][T12418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.483204][T12418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.507071][T12418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.520271][T12418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.536961][T12418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 471.547879][T12418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.562396][T12418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.579229][T12418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.592509][T12418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.635192][T12418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.649905][T12418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.661836][T12418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.677627][T12418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.861115][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.871855][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.004405][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.022816][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.595812][T12519] netlink: 'syz.3.2369': attribute type 10 has an invalid length. [ 472.818255][T12519] team0: Port device wlan1 added [ 472.864868][T12518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.237452][T12532] netlink: 'syz.3.2373': attribute type 10 has an invalid length. [ 473.587253][T12532] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 473.767037][T12545] netlink: 'syz.1.2378': attribute type 29 has an invalid length. [ 473.796744][T12545] netlink: 'syz.1.2378': attribute type 29 has an invalid length. [ 473.823049][T12539] netlink: 'syz.0.2375': attribute type 10 has an invalid length. Stopping sshd: [ 474.520831][T12560] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2385'. stopped /usr/sbin/sshd (pid 5528) OK Stopping crond: stopped /usr/sbin/crond (pid 5514) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5434) [ 475.928410][T12597] netlink: 'syz.0.2391': attribute type 10 has an invalid length. [ 476.310250][T12602] netlink: 'syz.1.2392': attribute type 10 has an invalid length. Stopping network: [ 476.960236][T12631] netlink: 'syz.2.2401': attribute type 21 has an invalid length. [ 478.189824][T12651] netlink: 'syz.1.2411': attribute type 10 has an invalid length. OK [ 478.306725][T12660] netlink: 'syz.2.2405': attribute type 10 has an invalid length. [ 478.377622][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state Stopping iptables: OK Stopping system message bus: [ 479.084799][T12679] netlink: 'syz.3.2408': attribute type 10 has an invalid length. [ 479.132998][T12687] netlink: 'syz.0.2413': attribute type 4 has an invalid length. [ 479.151747][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.158785][T12687] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2413'. [ 479.236517][T12688] netlink: 'syz.0.2413': attribute type 4 has an invalid length. [ 479.277633][T12688] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2413'. [ 479.549784][T12696] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2416'. [ 479.578788][T12696] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2416'. [ 479.624025][T12698] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2416'. done [ 479.651799][T12696] tap0: tun_chr_ioctl cmd 35108 [ 479.699069][T12697] netlink: 'syz.1.2418': attribute type 10 has an invalid length. [ 480.533780][T12718] tap0: tun_chr_ioctl cmd 35108 [ 480.805745][T12715] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2423'. [ 480.850457][T12715] netlink: 21056 bytes leftover after parsing attributes in process `syz.1.2423'. [ 480.883077][T12720] netlink: 'syz.2.2425': attribute type 10 has an invalid length. Stopping klogd: OK Stopping acpid: [ 483.512739][ T1140] tipc: Left network mode OK [ 483.869596][T12751] netlink: 'syz.1.2430': attribute type 10 has an invalid length. [ 483.974528][T12756] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2434'. Stopping syslogd: [ 484.022824][T12756] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 484.077057][T12756] FAULT_INJECTION: forcing a failure. [ 484.077057][T12756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.127941][T12756] CPU: 1 PID: 12756 Comm: syz.0.2434 Not tainted syzkaller #0 [ 484.135494][T12756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 484.145593][T12756] Call Trace: [ 484.148933][T12756] [ 484.151910][T12756] dump_stack_lvl+0x18c/0x250 [ 484.156686][T12756] ? show_regs_print_info+0x20/0x20 [ 484.161938][T12756] ? load_image+0x420/0x420 [ 484.166514][T12756] ? __lock_acquire+0x7d80/0x7d80 [ 484.171602][T12756] ? snprintf+0xe9/0x140 [ 484.175902][T12756] should_fail_ex+0x394/0x4c0 [ 484.180656][T12756] _copy_to_user+0x2f/0xa0 [ 484.185131][T12756] simple_read_from_buffer+0xe7/0x150 [ 484.190563][T12756] proc_fail_nth_read+0x1e8/0x260 [ 484.195658][T12756] ? proc_fault_inject_write+0x360/0x360 [ 484.201352][T12756] ? fsnotify_perm+0x271/0x5e0 [ 484.206162][T12756] ? proc_fault_inject_write+0x360/0x360 [ 484.211877][T12756] vfs_read+0x298/0x990 [ 484.216095][T12756] ? kernel_read+0x1e0/0x1e0 [ 484.220743][T12756] ? __fget_files+0x28/0x460 [ 484.225399][T12756] ? __fget_files+0x3fc/0x460 [ 484.230149][T12756] ? __fdget_pos+0x2a3/0x330 [ 484.234794][T12756] ? ksys_read+0x74/0x260 [ 484.239180][T12756] ksys_read+0x151/0x260 [ 484.243491][T12756] ? vfs_write+0x9a0/0x9a0 [ 484.247974][T12756] ? lockdep_hardirqs_on+0x98/0x150 [ 484.253242][T12756] do_syscall_64+0x55/0xb0 [ 484.257715][T12756] ? clear_bhb_loop+0x40/0x90 [ 484.262441][T12756] ? clear_bhb_loop+0x40/0x90 [ 484.267177][T12756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.273129][T12756] RIP: 0033:0x7f3397d5d68e [ 484.277594][T12756] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 484.297351][T12756] RSP: 002b:00007f3398c54fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 484.305815][T12756] RAX: ffffffffffffffda RBX: 00007f3398c556c0 RCX: 00007f3397d5d68e [ 484.313829][T12756] RDX: 000000000000000f RSI: 00007f3398c550a0 RDI: 0000000000000004 [ 484.321845][T12756] RBP: 00007f3398c55090 R08: 0000000000000000 R09: 0000000000000000 [ 484.329866][T12756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.337897][T12756] R13: 00007f3398016038 R14: 00007f3398015fa0 R15: 00007ffe99262678 [ 484.345954][T12756] stopped /sbin/syslogd (pid 5122) OK [ 484.913284][T12774] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2440'. [ 484.975838][T12774] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 485.029917][T12769] netlink: 'syz.0.2437': attribute type 10 has an invalid length. umount: can't remount debugfs read-only [ 486.429883][T12787] netlink: 'syz.0.2444': attribute type 10 has an invalid length. [ 487.419867][T12809] netlink: 'syz.0.2449': attribute type 10 has an invalid length. [ 488.929634][ T1140] [ 488.932022][ T1140] ====================================================== [ 488.939093][ T1140] WARNING: possible circular locking dependency detected [ 488.946169][ T1140] syzkaller #0 Not tainted [ 488.950610][ T1140] ------------------------------------------------------ [ 488.957652][ T1140] kworker/u4:7/1140 is trying to acquire lock: [ 488.963825][ T1140] ffff88807b910d80 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0 [ 488.973480][ T1140] [ 488.973480][ T1140] but task is already holding lock: [ 488.980874][ T1140] ffff88805d780768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 488.991297][ T1140] [ 488.991297][ T1140] which lock already depends on the new lock. [ 488.991297][ T1140] [ 489.001724][ T1140] [ 489.001724][ T1140] the existing dependency chain (in reverse order) is: [ 489.010764][ T1140] [ 489.010764][ T1140] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 489.018543][ T1140] __mutex_lock+0x135/0xc80 [ 489.023610][ T1140] ieee80211_open+0x144/0x200 [ 489.028854][ T1140] __dev_open+0x2cb/0x430 [ 489.033751][ T1140] dev_open+0xab/0x190 [ 489.038391][ T1140] team_add_slave+0x709/0x2880 [ 489.043709][ T1140] do_setlink+0xcde/0x3f40 [ 489.048681][ T1140] rtnl_newlink+0x1848/0x2170 [ 489.053913][ T1140] rtnetlink_rcv_msg+0x843/0xf90 [ 489.059393][ T1140] netlink_rcv_skb+0x235/0x4c0 [ 489.064698][ T1140] netlink_unicast+0x7b1/0x930 [ 489.070000][ T1140] netlink_sendmsg+0x8d0/0xbf0 [ 489.075318][ T1140] ____sys_sendmsg+0x61b/0x980 [ 489.080630][ T1140] ___sys_sendmsg+0x2a6/0x360 [ 489.085847][ T1140] __se_sys_sendmsg+0x1d0/0x2c0 [ 489.091238][ T1140] do_syscall_64+0x55/0xb0 [ 489.096202][ T1140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.102654][ T1140] [ 489.102654][ T1140] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 489.110856][ T1140] __lock_acquire+0x37ef/0x7d80 [ 489.116248][ T1140] lock_acquire+0x19e/0x420 [ 489.121286][ T1140] __mutex_lock+0x135/0xc80 [ 489.126336][ T1140] team_del_slave+0x31/0x1b0 [ 489.131460][ T1140] team_device_event+0x297/0xa30 [ 489.136938][ T1140] notifier_call_chain+0x18f/0x380 [ 489.142591][ T1140] unregister_netdevice_many_notify+0x1037/0x1910 [ 489.149554][ T1140] unregister_netdevice_queue+0x2e9/0x330 [ 489.155811][ T1140] _cfg80211_unregister_wdev+0x16d/0x580 [ 489.161990][ T1140] ieee80211_remove_interfaces+0x4b3/0x690 [ 489.168339][ T1140] ieee80211_unregister_hw+0x5d/0x2a0 [ 489.174265][ T1140] mac80211_hwsim_del_radio+0x289/0x480 [ 489.180358][ T1140] hwsim_exit_net+0x58d/0x650 [ 489.185582][ T1140] cleanup_net+0x707/0xbb0 [ 489.190550][ T1140] process_scheduled_works+0xa60/0x1600 [ 489.196637][ T1140] worker_thread+0xa5e/0xfe0 [ 489.201767][ T1140] kthread+0x2fa/0x390 [ 489.206376][ T1140] ret_from_fork+0x48/0x80 [ 489.211351][ T1140] ret_from_fork_asm+0x11/0x20 [ 489.216663][ T1140] [ 489.216663][ T1140] other info that might help us debug this: [ 489.216663][ T1140] [ 489.226904][ T1140] Possible unsafe locking scenario: [ 489.226904][ T1140] [ 489.234370][ T1140] CPU0 CPU1 [ 489.239745][ T1140] ---- ---- [ 489.245122][ T1140] lock(&rdev->wiphy.mtx); [ 489.249759][ T1140] lock(team->team_lock_key#2); [ 489.257239][ T1140] lock(&rdev->wiphy.mtx); [ 489.264278][ T1140] lock(team->team_lock_key#2); [ 489.269243][ T1140] [ 489.269243][ T1140] *** DEADLOCK *** [ 489.269243][ T1140] [ 489.277399][ T1140] 5 locks held by kworker/u4:7/1140: [ 489.282693][ T1140] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 489.293600][ T1140] #1: ffffc9000460fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 489.304161][ T1140] #2: ffffffff8e3b2e50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 489.313579][ T1140] #3: ffffffff8e3bfe48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 489.323439][ T1140] #4: ffff88805d780768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 489.334259][ T1140] [ 489.334259][ T1140] stack backtrace: [ 489.340155][ T1140] CPU: 1 PID: 1140 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 489.347718][ T1140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.357793][ T1140] Workqueue: netns cleanup_net [ 489.362580][ T1140] Call Trace: [ 489.365876][ T1140] [ 489.368825][ T1140] dump_stack_lvl+0x18c/0x250 [ 489.373531][ T1140] ? load_image+0x420/0x420 [ 489.378060][ T1140] ? show_regs_print_info+0x20/0x20 [ 489.383304][ T1140] ? print_circular_bug+0x12b/0x1a0 [ 489.388535][ T1140] check_noncircular+0x2fc/0x400 [ 489.393506][ T1140] ? print_deadlock_bug+0x5d0/0x5d0 [ 489.398727][ T1140] ? lockdep_lock+0xf5/0x230 [ 489.403333][ T1140] ? _find_first_zero_bit+0xd6/0x100 [ 489.408634][ T1140] __lock_acquire+0x37ef/0x7d80 [ 489.413527][ T1140] ? verify_lock_unused+0x140/0x140 [ 489.418749][ T1140] ? verify_lock_unused+0x140/0x140 [ 489.423969][ T1140] ? __up_read+0x2b8/0x6b0 [ 489.428404][ T1140] lock_acquire+0x19e/0x420 [ 489.432923][ T1140] ? team_del_slave+0x31/0x1b0 [ 489.437714][ T1140] ? __might_sleep+0xe0/0xe0 [ 489.442326][ T1140] ? read_lock_is_recursive+0x20/0x20 [ 489.447724][ T1140] __mutex_lock+0x135/0xc80 [ 489.452254][ T1140] ? team_del_slave+0x31/0x1b0 [ 489.457047][ T1140] ? __mutex_lock+0x30d/0xc80 [ 489.461743][ T1140] ? team_del_slave+0x31/0x1b0 [ 489.466529][ T1140] ? mutex_lock_nested+0x20/0x20 [ 489.471482][ T1140] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 489.477147][ T1140] team_del_slave+0x31/0x1b0 [ 489.481759][ T1140] team_device_event+0x297/0xa30 [ 489.486718][ T1140] notifier_call_chain+0x18f/0x380 [ 489.491851][ T1140] unregister_netdevice_many_notify+0x1037/0x1910 [ 489.498302][ T1140] ? unregister_netdevice_many+0x20/0x20 [ 489.503957][ T1140] ? kernfs_remove_by_name_ns+0x117/0x150 [ 489.509700][ T1140] ? __lock_acquire+0x7d80/0x7d80 [ 489.514748][ T1140] unregister_netdevice_queue+0x2e9/0x330 [ 489.520522][ T1140] ? list_netdevice+0x730/0x730 [ 489.525394][ T1140] ? kernfs_remove_by_name_ns+0x117/0x150 [ 489.531151][ T1140] _cfg80211_unregister_wdev+0x16d/0x580 [ 489.536809][ T1140] ieee80211_remove_interfaces+0x4b3/0x690 [ 489.542642][ T1140] ? ieee80211_do_stop+0x1df0/0x1df0 [ 489.547957][ T1140] ? rcu_is_watching+0x15/0xb0 [ 489.552748][ T1140] ieee80211_unregister_hw+0x5d/0x2a0 [ 489.558160][ T1140] mac80211_hwsim_del_radio+0x289/0x480 [ 489.563727][ T1140] ? rhashtable_remove_fast+0xc00/0xc00 [ 489.569385][ T1140] hwsim_exit_net+0x58d/0x650 [ 489.574098][ T1140] ? hwsim_init_net+0x90/0x90 [ 489.578815][ T1140] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 489.584674][ T1140] cleanup_net+0x707/0xbb0 [ 489.589128][ T1140] ? ops_free_list+0x3b0/0x3b0 [ 489.593920][ T1140] ? _raw_spin_unlock_irq+0x23/0x50 [ 489.599145][ T1140] ? process_scheduled_works+0x975/0x1600 [ 489.604885][ T1140] ? process_scheduled_works+0x975/0x1600 [ 489.610625][ T1140] process_scheduled_works+0xa60/0x1600 [ 489.616208][ T1140] ? worker_attach_to_pool+0x370/0x370 [ 489.621697][ T1140] ? assign_work+0x3cc/0x5d0 [ 489.626319][ T1140] worker_thread+0xa5e/0xfe0 [ 489.630948][ T1140] kthread+0x2fa/0x390 [ 489.635047][ T1140] ? pr_cont_work+0x550/0x550 [ 489.639750][ T1140] ? kthread_blkcg+0xd0/0xd0 [ 489.644392][ T1140] ret_from_fork+0x48/0x80 [ 489.648835][ T1140] ? kthread_blkcg+0xd0/0xd0 [ 489.653450][ T1140] ret_from_fork_asm+0x11/0x20 [ 489.658250][ T1140] [ 489.905388][ T1140] team0: Port device wlan1 removed [ 489.962826][T12827] netlink: 'syz.0.2456': attribute type 10 has an invalid length. [ 490.244426][ T1140] hsr_slave_0: left promiscuous mode [ 490.253446][ T1140] hsr_slave_1: left promiscuous mode [ 490.264783][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.290746][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.305801][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.335543][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.379425][ T1140] veth0_macvtap: left promiscuous mode umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.190 closed by remote host. [ 490.770679][ T1140] team0 (unregistering): Port device geneve1 removed [ 491.448598][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 491.468564][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 491.515444][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.544912][ T1140] bond0 (unregistering): (slave 1.@ÿ): Releasing backup interface [ 491.571206][ T1140] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 491.600266][ T1140] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface Sent SIGKILL to all processes Requesting system poweroff [ 491.756564][ T1140] bond0 (unregistering): Released all slaves [ 492.312596][ T1140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.451459][ T1140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.514259][ T1140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.586085][ T1140] team0: Port device netdevsim0 removed [ 492.592837][ T1140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.666947][ T1140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.708398][ T1140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.759025][T12835] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 492.761803][ T1140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.779102][T12835] ACPI: PM: Preparing to enter system sleep state S5 [ 492.786680][T12835] kvm: exiting hardware virtualization [ 492.792373][T12835] reboot: Power down serialport: VM disconnected.