last executing test programs: 6.093307307s ago: executing program 1 (id=3314): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], '%'}]}}, &(0x7f0000000100)=""/138, 0x2a, 0x8a, 0x1}, 0x28) 5.829539923s ago: executing program 1 (id=3315): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20645, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000280)='cpu==0||!') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) close(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x881) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.174599711s ago: executing program 1 (id=3317): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x185, 0xfffffffc, 0x9, 0xb0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x8000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) 1.874225955s ago: executing program 1 (id=3323): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x8000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc022, 0xa}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)="e700", 0x2}], 0x1}, 0x4000001) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 1.597515404s ago: executing program 2 (id=3325): perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.347930026s ago: executing program 2 (id=3327): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9e}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) 1.261717875s ago: executing program 0 (id=3328): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x8000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)}, 0xa) 1.166672675s ago: executing program 2 (id=3330): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x25}, @initr0, @exit, @alu={0x7, 0x0, 0x4, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1.033872362s ago: executing program 0 (id=3331): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000001080)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x8, 0xf, &(0x7f0000000a80)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0xf, &(0x7f0000000a80)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6b}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) 921.300326ms ago: executing program 3 (id=3332): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x0, 0x3, 0x0, 0xfae, 0x2402c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x1, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x9, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="001000001a00911c01"], 0xfe33) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000001801000020206925000000006300a8b57b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20000000}, 0x8}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 891.666213ms ago: executing program 2 (id=3333): perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 757.705251ms ago: executing program 0 (id=3334): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x10c800, 0x40, 0xfffffffc, 0x8, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x101}, 0x4146}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x1a, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x88}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 741.805094ms ago: executing program 1 (id=3335): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@generic={0x71, 0x0, 0x4, 0x4e, 0xfffffffc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xffffff9d, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xd}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x3, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x9}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2) r4 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) write$cgroup_int(r4, &(0x7f0000000040), 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x15}, 0x94) perf_event_open$cgroup(&(0x7f0000000500)={0x3, 0x80, 0x6, 0xd, 0x8, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000300), 0x1}, 0x800, 0xf3, 0x5, 0x1, 0x3, 0x4, 0xfe00, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x7) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r6}, 0x4) 619.79616ms ago: executing program 3 (id=3336): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80014, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10081, 0x2, @perf_config_ext={0x8, 0x55a5}, 0x10000, 0xc8, 0xfff, 0x0, 0x9, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000808100000081"], 0x48) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x15) 533.652838ms ago: executing program 2 (id=3337): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x2}, 0x50) 533.200098ms ago: executing program 0 (id=3338): bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_bp={0x0, 0x6}, 0x40a, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) close(r3) close(r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 532.990928ms ago: executing program 3 (id=3339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{r0}, &(0x7f0000001a40), &(0x7f0000001a80)='%+9llu \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0xfff, r0}, 0x38) 454.901984ms ago: executing program 1 (id=3340): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x7fff, 0xfffffff9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4be3f9cbb2623032, @perf_config_ext={0x5}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x60, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') 404.099745ms ago: executing program 3 (id=3341): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x61c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x83, 0x20000000000000c5}, 0x10204, 0x10000000c8, 0x7fff, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r2, 0x0, 0x15) write$cgroup_subtree(r2, &(0x7f0000010000)={[{0x2d, 'memory'}, {0x2d, 'freezer'}]}, 0x11) 336.544869ms ago: executing program 2 (id=3342): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@generic={0x71, 0x0, 0x4, 0x4e, 0xfffffffc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xffffff9d, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de7"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xd}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x3, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x9}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2) r4 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) write$cgroup_int(r4, &(0x7f0000000040), 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x15}, 0x94) perf_event_open$cgroup(&(0x7f0000000500)={0x3, 0x80, 0x6, 0xd, 0x8, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000300), 0x1}, 0x800, 0xf3, 0x5, 0x1, 0x3, 0x4, 0xfe00, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x7) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r6}, 0x4) 300.248457ms ago: executing program 0 (id=3343): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x100000000, 0x12) 261.772015ms ago: executing program 3 (id=3344): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x0, 0x3, 0x0, 0xfae, 0x2402c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x1, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x9, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="001000001a00911c01"], 0xfe33) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000001801000020206925000000006300a8b57b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20000000}, 0x8}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 1.5312ms ago: executing program 0 (id=3345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbada, 0x2, @perf_bp={0x0, 0x8}, 0x2900, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x640600, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x5, 0xffffffffffffff80}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x2000000000000137, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000020000000000000000ee00009574379d2db1586c575ad48cd9172b0933403dabd504f97baeafc898c3420b31702e13d4e77940e81cb78006744c00ece3cac5845e4c795765fd50d27e227acde70f622e1705e01121cff760b2ab152d94f445ea1e00800000d1ac57251b468ed32aa156625e02c707ef4ac09ed304be010a692ecb37e5e0455591d70dadd17292911c73cdfec4b98df4bb44b900c092891617190000000000000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f00000002c0), &(0x7f0000000540)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x11, 0x3, 0x300, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_clone(0x20000, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe2800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x120) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 0s ago: executing program 3 (id=3346): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a1102, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x5450, 0x0) ioctl$TUNGETVNETLE(r0, 0x80047456, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x2, 0x0, 0x9, 0x0, 0xffffffff, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) kernel console output (not intermixed with test programs): 7118][T12325] __alloc_pages+0x134/0x460 [ 422.561729][T12325] ? zone_statistics+0x170/0x170 [ 422.566715][T12325] ? do_wp_page+0x733/0x34d0 [ 422.571323][T12325] ? do_wp_page+0xf17/0x34d0 [ 422.575927][T12325] ? __lock_acquire+0x7d80/0x7d80 [ 422.580975][T12325] __folio_alloc+0x10/0x20 [ 422.585406][T12325] vma_alloc_folio+0x474/0x8f0 [ 422.590197][T12325] do_wp_page+0x118d/0x34d0 [ 422.594740][T12325] ? folio_put+0xd0/0xd0 [ 422.599000][T12325] ? do_raw_spin_lock+0x11f/0x2b0 [ 422.604049][T12325] ? __rwlock_init+0x150/0x150 [ 422.608843][T12325] handle_mm_fault+0x1306/0x4a50 [ 422.613800][T12325] ? handle_mm_fault+0xe6/0x4a50 [ 422.618773][T12325] ? numa_migrate_prep+0x350/0x350 [ 422.623924][T12325] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 422.629235][T12325] do_user_addr_fault+0x736/0x12d0 [ 422.634383][T12325] exc_page_fault+0x64/0x100 [ 422.638996][T12325] asm_exc_page_fault+0x26/0x30 [ 422.643868][T12325] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 422.649698][T12325] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 422.669331][T12325] RSP: 0018:ffffc900042efa70 EFLAGS: 00050206 [ 422.675415][T12325] RAX: ffffffff84342c01 RBX: 0000000000000240 RCX: 0000000000000180 [ 422.683405][T12325] RDX: 0000000000000000 RSI: ffff8880586f00c0 RDI: 0000200000002000 [ 422.691397][T12325] RBP: ffffc900042efba8 R08: ffff8880586f023f R09: 1ffff1100b0de047 [ 422.699386][T12325] R10: dffffc0000000000 R11: ffffed100b0de048 R12: 0000200000002180 [ 422.707375][T12325] R13: 0000000000000001 R14: 0000200000001f40 R15: ffff8880586f0000 [ 422.715371][T12325] ? _copy_from_user+0xb1/0xe0 [ 422.720168][T12325] _copy_to_user+0x85/0xa0 [ 422.724609][T12325] bpf_test_finish+0x3f5/0x650 [ 422.729404][T12325] ? convert_skb_to___skb+0x420/0x420 [ 422.734796][T12325] ? rcuref_put_slowpath+0x101/0x150 [ 422.740107][T12325] ? rep_movs_alternative+0x4a/0x90 [ 422.745331][T12325] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 422.750727][T12325] ? __lock_acquire+0x7d80/0x7d80 [ 422.755782][T12325] ? dev_put+0x80/0x80 [ 422.759893][T12325] ? dev_put+0x80/0x80 [ 422.763988][T12325] bpf_prog_test_run+0x31f/0x390 [ 422.768950][T12325] __sys_bpf+0x49d/0x890 [ 422.773218][T12325] ? bpf_link_show_fdinfo+0x560/0x560 [ 422.778628][T12325] ? lock_chain_count+0x20/0x20 [ 422.783508][T12325] __x64_sys_bpf+0x7c/0x90 [ 422.787940][T12325] do_syscall_64+0x55/0xb0 [ 422.792375][T12325] ? clear_bhb_loop+0x40/0x90 [ 422.797070][T12325] ? clear_bhb_loop+0x40/0x90 [ 422.801768][T12325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.807682][T12325] RIP: 0033:0x7f3de9d9e159 [ 422.812114][T12325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.831741][T12325] RSP: 002b:00007f3deacee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.840177][T12325] RAX: ffffffffffffffda RBX: 00007f3dea025fa0 RCX: 00007f3de9d9e159 [ 422.848161][T12325] RDX: 0000000000000024 RSI: 0000200000000200 RDI: 000000000000000a [ 422.856155][T12325] RBP: 00007f3deacee090 R08: 0000000000000000 R09: 0000000000000000 [ 422.864149][T12325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.872143][T12325] R13: 00007f3dea026038 R14: 00007f3dea025fa0 R15: 00007ffe944c5898 [ 422.880153][T12325] [ 424.358988][T12328] delete_channel: no stack [ 424.724367][T12358] FAULT_INJECTION: forcing a failure. [ 424.724367][T12358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.746587][T12358] CPU: 1 PID: 12358 Comm: syz.3.1962 Not tainted syzkaller #0 [ 424.754082][T12358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 424.764123][T12358] Call Trace: [ 424.767390][T12358] [ 424.770309][T12358] dump_stack_lvl+0x18c/0x250 [ 424.774976][T12358] ? show_regs_print_info+0x20/0x20 [ 424.780161][T12358] ? load_image+0x420/0x420 [ 424.784656][T12358] ? __might_fault+0xaa/0x120 [ 424.789343][T12358] ? __lock_acquire+0x7d80/0x7d80 [ 424.794357][T12358] should_fail_ex+0x394/0x4c0 [ 424.799047][T12358] _copy_to_user+0x2f/0xa0 [ 424.803456][T12358] bpf_test_finish+0x19f/0x650 [ 424.808232][T12358] ? convert_skb_to___skb+0x420/0x420 [ 424.813591][T12358] ? rcuref_put_slowpath+0x101/0x150 [ 424.818863][T12358] ? rep_movs_alternative+0x4a/0x90 [ 424.824049][T12358] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 424.829414][T12358] ? __lock_acquire+0x7d80/0x7d80 [ 424.834425][T12358] ? dev_put+0x80/0x80 [ 424.838486][T12358] ? dev_put+0x80/0x80 [ 424.842541][T12358] bpf_prog_test_run+0x31f/0x390 [ 424.847478][T12358] __sys_bpf+0x49d/0x890 [ 424.851735][T12358] ? bpf_link_show_fdinfo+0x560/0x560 [ 424.857136][T12358] ? lock_chain_count+0x20/0x20 [ 424.862013][T12358] __x64_sys_bpf+0x7c/0x90 [ 424.866425][T12358] do_syscall_64+0x55/0xb0 [ 424.870829][T12358] ? clear_bhb_loop+0x40/0x90 [ 424.875492][T12358] ? clear_bhb_loop+0x40/0x90 [ 424.880155][T12358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.886036][T12358] RIP: 0033:0x7f3de9d9e159 [ 424.890439][T12358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.910028][T12358] RSP: 002b:00007f3deacee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 424.918430][T12358] RAX: ffffffffffffffda RBX: 00007f3dea025fa0 RCX: 00007f3de9d9e159 [ 424.926385][T12358] RDX: 0000000000000024 RSI: 0000200000000200 RDI: 000000000000000a [ 424.934339][T12358] RBP: 00007f3deacee090 R08: 0000000000000000 R09: 0000000000000000 [ 424.942292][T12358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.950260][T12358] R13: 00007f3dea026038 R14: 00007f3dea025fa0 R15: 00007ffe944c5898 [ 424.958243][T12358] [ 425.236132][T12375] netlink: 'syz.0.1967': attribute type 3 has an invalid length. [ 425.254212][T12375] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1967'. [ 425.559994][T12382] netlink: 'syz.2.1972': attribute type 33 has an invalid length. [ 425.569478][T12382] netlink: 154700 bytes leftover after parsing attributes in process `syz.2.1972'. [ 428.142792][T12387] FAULT_INJECTION: forcing a failure. [ 428.142792][T12387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.159728][T12387] CPU: 0 PID: 12387 Comm: syz.1.1974 Not tainted syzkaller #0 [ 428.167221][T12387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.177288][T12387] Call Trace: [ 428.180582][T12387] [ 428.183527][T12387] dump_stack_lvl+0x18c/0x250 [ 428.188227][T12387] ? show_regs_print_info+0x20/0x20 [ 428.193443][T12387] ? load_image+0x420/0x420 [ 428.197966][T12387] ? __might_fault+0xaa/0x120 [ 428.202663][T12387] ? __lock_acquire+0x7d80/0x7d80 [ 428.207716][T12387] should_fail_ex+0x394/0x4c0 [ 428.212429][T12387] _copy_to_user+0x2f/0xa0 [ 428.216866][T12387] bpf_test_finish+0x25a/0x650 [ 428.221659][T12387] ? convert_skb_to___skb+0x420/0x420 [ 428.227056][T12387] ? rcuref_put_slowpath+0x101/0x150 [ 428.232364][T12387] ? rep_movs_alternative+0x4a/0x90 [ 428.237595][T12387] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 428.242990][T12387] ? __lock_acquire+0x7d80/0x7d80 [ 428.248043][T12387] ? dev_put+0x80/0x80 [ 428.252147][T12387] ? dev_put+0x80/0x80 [ 428.256235][T12387] bpf_prog_test_run+0x31f/0x390 [ 428.261181][T12387] __sys_bpf+0x49d/0x890 [ 428.265412][T12387] ? bpf_link_show_fdinfo+0x560/0x560 [ 428.270797][T12387] ? lock_chain_count+0x20/0x20 [ 428.275635][T12387] __x64_sys_bpf+0x7c/0x90 [ 428.280037][T12387] do_syscall_64+0x55/0xb0 [ 428.284439][T12387] ? clear_bhb_loop+0x40/0x90 [ 428.289101][T12387] ? clear_bhb_loop+0x40/0x90 [ 428.293792][T12387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.299671][T12387] RIP: 0033:0x7f0dd0b9e159 [ 428.304094][T12387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.311989][T12393] netlink: 'syz.3.1976': attribute type 3 has an invalid length. [ 428.323677][T12387] RSP: 002b:00007f0dd1a74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.323701][T12387] RAX: ffffffffffffffda RBX: 00007f0dd0e25fa0 RCX: 00007f0dd0b9e159 [ 428.323714][T12387] RDX: 0000000000000024 RSI: 0000200000000200 RDI: 000000000000000a [ 428.323726][T12387] RBP: 00007f0dd1a74090 R08: 0000000000000000 R09: 0000000000000000 [ 428.323737][T12387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 428.323754][T12387] R13: 00007f0dd0e26038 R14: 00007f0dd0e25fa0 R15: 00007ffe8482ec68 [ 428.323779][T12387] [ 428.877705][T12427] FAULT_INJECTION: forcing a failure. [ 428.877705][T12427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.892830][T12427] CPU: 1 PID: 12427 Comm: syz.3.1986 Not tainted syzkaller #0 [ 428.900330][T12427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.910401][T12427] Call Trace: [ 428.913692][T12427] [ 428.916634][T12427] dump_stack_lvl+0x18c/0x250 [ 428.921335][T12427] ? show_regs_print_info+0x20/0x20 [ 428.926553][T12427] ? load_image+0x420/0x420 [ 428.931076][T12427] ? __might_fault+0xaa/0x120 [ 428.935776][T12427] ? __lock_acquire+0x7d80/0x7d80 [ 428.940827][T12427] should_fail_ex+0x394/0x4c0 [ 428.945536][T12427] _copy_to_user+0x2f/0xa0 [ 428.949976][T12427] bpf_test_finish+0x4e7/0x650 [ 428.954773][T12427] ? convert_skb_to___skb+0x420/0x420 [ 428.960602][T12427] ? rcuref_put_slowpath+0x101/0x150 [ 428.965907][T12427] ? rep_movs_alternative+0x4a/0x90 [ 428.971131][T12427] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 428.976532][T12427] ? __lock_acquire+0x7d80/0x7d80 [ 428.981586][T12427] ? dev_put+0x80/0x80 [ 428.985690][T12427] ? dev_put+0x80/0x80 [ 428.989780][T12427] bpf_prog_test_run+0x31f/0x390 [ 428.994742][T12427] __sys_bpf+0x49d/0x890 [ 428.999002][T12427] ? bpf_link_show_fdinfo+0x560/0x560 [ 429.004403][T12427] ? lock_chain_count+0x20/0x20 [ 429.009366][T12427] __x64_sys_bpf+0x7c/0x90 [ 429.013801][T12427] do_syscall_64+0x55/0xb0 [ 429.018234][T12427] ? clear_bhb_loop+0x40/0x90 [ 429.022932][T12427] ? clear_bhb_loop+0x40/0x90 [ 429.027627][T12427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.033537][T12427] RIP: 0033:0x7f3de9d9e159 [ 429.037971][T12427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.057592][T12427] RSP: 002b:00007f3deacee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.066368][T12427] RAX: ffffffffffffffda RBX: 00007f3dea025fa0 RCX: 00007f3de9d9e159 [ 429.074353][T12427] RDX: 0000000000000024 RSI: 0000200000000200 RDI: 000000000000000a [ 429.082340][T12427] RBP: 00007f3deacee090 R08: 0000000000000000 R09: 0000000000000000 [ 429.090325][T12427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.098314][T12427] R13: 00007f3dea026038 R14: 00007f3dea025fa0 R15: 00007ffe944c5898 [ 429.106325][T12427] [ 431.940112][T12449] FAULT_INJECTION: forcing a failure. [ 431.940112][T12449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.953710][T12449] CPU: 0 PID: 12449 Comm: syz.1.1997 Not tainted syzkaller #0 [ 431.961193][T12449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.971262][T12449] Call Trace: [ 431.974551][T12449] [ 431.977495][T12449] dump_stack_lvl+0x18c/0x250 [ 431.982200][T12449] ? show_regs_print_info+0x20/0x20 [ 431.987420][T12449] ? load_image+0x420/0x420 [ 431.991943][T12449] ? __lock_acquire+0x7d80/0x7d80 [ 431.996993][T12449] ? snprintf+0xe9/0x140 [ 432.001242][T12449] should_fail_ex+0x394/0x4c0 [ 432.005928][T12449] _copy_to_user+0x2f/0xa0 [ 432.010350][T12449] simple_read_from_buffer+0xe7/0x150 [ 432.015721][T12449] proc_fail_nth_read+0x1e8/0x260 [ 432.020747][T12449] ? proc_fault_inject_write+0x360/0x360 [ 432.026384][T12449] ? fsnotify_perm+0x271/0x5e0 [ 432.031152][T12449] ? proc_fault_inject_write+0x360/0x360 [ 432.036782][T12449] vfs_read+0x298/0x990 [ 432.040941][T12449] ? kernel_read+0x1e0/0x1e0 [ 432.045535][T12449] ? __fget_files+0x28/0x460 [ 432.050124][T12449] ? __fget_files+0x3fc/0x460 [ 432.054806][T12449] ? __fdget_pos+0x2a3/0x330 [ 432.059394][T12449] ? ksys_read+0x74/0x260 [ 432.063724][T12449] ksys_read+0x151/0x260 [ 432.067971][T12449] ? vfs_write+0x9a0/0x9a0 [ 432.072387][T12449] ? lockdep_hardirqs_on+0x98/0x150 [ 432.077584][T12449] do_syscall_64+0x55/0xb0 [ 432.082000][T12449] ? clear_bhb_loop+0x40/0x90 [ 432.086676][T12449] ? clear_bhb_loop+0x40/0x90 [ 432.091352][T12449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.097244][T12449] RIP: 0033:0x7f0dd0b5e98e [ 432.101663][T12449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 432.121353][T12449] RSP: 002b:00007f0dd1a73fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 432.129764][T12449] RAX: ffffffffffffffda RBX: 00007f0dd1a746c0 RCX: 00007f0dd0b5e98e [ 432.137732][T12449] RDX: 000000000000000f RSI: 00007f0dd1a740a0 RDI: 0000000000000004 [ 432.145696][T12449] RBP: 00007f0dd1a74090 R08: 0000000000000000 R09: 0000000000000000 [ 432.153661][T12449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 432.161625][T12449] R13: 00007f0dd0e26038 R14: 00007f0dd0e25fa0 R15: 00007ffe8482ec68 [ 432.169605][T12449] [ 434.725678][T12528] syz.3.2020[12528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.228094][T12547] lo: left promiscuous mode [ 437.605429][ T5782] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 438.349555][T12574] netlink: 'syz.3.2036': attribute type 2 has an invalid length. [ 440.252732][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.259236][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.660170][T12618] netlink: 'syz.3.2049': attribute type 16 has an invalid length. [ 442.689572][T12618] netlink: 'syz.3.2049': attribute type 3 has an invalid length. [ 442.708330][T12618] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2049'. [ 444.235642][T12655] netlink: 'syz.0.2059': attribute type 4 has an invalid length. [ 444.244068][T12655] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2059'. [ 445.256067][T12665] C: renamed from team_slave_0 [ 445.310253][T12665] netlink: 'syz.3.2063': attribute type 2 has an invalid length. [ 445.330994][T12665] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2063'. [ 445.380584][T12665] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 446.471737][T12701] netlink: 'syz.1.2072': attribute type 10 has an invalid length. [ 446.573413][T12701] macvlan0: entered promiscuous mode [ 446.586290][T12701] macvlan0: entered allmulticast mode [ 446.621100][T12701] veth1_vlan: entered allmulticast mode [ 446.649678][T12701] : (slave macvlan0): Enslaving as an active interface with an up link [ 446.878670][T12719] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2077'. [ 446.901064][T12719] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2077'. [ 446.945192][T12711] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2077'. [ 446.965985][T12716] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2077'. [ 446.998702][T12711] netlink: 'syz.0.2077': attribute type 21 has an invalid length. [ 447.288796][T12725] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.2082'. [ 447.806798][T12743] netlink: 'syz.0.2087': attribute type 1 has an invalid length. [ 447.865732][T12747] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2089'. [ 448.040174][T12755] netlink: 'syz.3.2091': attribute type 1 has an invalid length. [ 448.159795][T12758] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2092'. [ 448.243191][T12758] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 448.737961][T12780] €Â0: renamed from batadv_slave_1 (while UP) [ 452.211887][T12858] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 452.220025][T12858] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 452.333095][T12867] netlink: 'syz.3.2126': attribute type 2 has an invalid length. [ 452.356241][T12867] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2126'. [ 452.414538][T12860] Ÿë: port 1(gretap0) entered blocking state [ 452.436321][T12860] Ÿë: port 1(gretap0) entered disabled state [ 452.442573][T12860] gretap0: entered allmulticast mode [ 452.454712][T12860] gretap0: entered promiscuous mode [ 452.497876][T12860] Ÿë: port 2(veth0_to_team) entered blocking state [ 452.504701][T12860] Ÿë: port 2(veth0_to_team) entered disabled state [ 452.526327][T12860] veth0_to_team: entered allmulticast mode [ 452.533634][T12860] veth0_to_team: entered promiscuous mode [ 452.718685][T12885] netlink: 'syz.0.2132': attribute type 10 has an invalid length. [ 452.736367][T12885] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2132'. [ 452.755250][T12885] hsr0: entered promiscuous mode [ 452.794877][T12890] netlink: 'syz.2.2134': attribute type 1 has an invalid length. [ 452.822588][T12890] netlink: 'syz.2.2134': attribute type 4 has an invalid length. [ 452.838938][T12890] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2134'. [ 452.900606][T12886] netlink: 'syz.1.2133': attribute type 4 has an invalid length. [ 452.923614][T12886] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2133'. [ 453.666598][T12931] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 453.673828][T12931] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 453.931873][T12937] netlink: 'syz.0.2139': attribute type 21 has an invalid length. [ 453.948662][T12937] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2139'. [ 454.099995][T12942] bridge_slave_0: mtu less than device minimum [ 454.435005][T12952] FAULT_INJECTION: forcing a failure. [ 454.435005][T12952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.474869][T12950] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2145'. [ 454.485636][T12952] CPU: 1 PID: 12952 Comm: syz.1.2144 Not tainted syzkaller #0 [ 454.493132][T12952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.503195][T12952] Call Trace: [ 454.506475][T12952] [ 454.509408][T12952] dump_stack_lvl+0x18c/0x250 [ 454.514097][T12952] ? show_regs_print_info+0x20/0x20 [ 454.519301][T12952] ? load_image+0x420/0x420 [ 454.523811][T12952] ? __might_fault+0xaa/0x120 [ 454.528491][T12952] ? __lock_acquire+0x7d80/0x7d80 [ 454.533526][T12952] should_fail_ex+0x394/0x4c0 [ 454.538220][T12952] _copy_from_user+0x2f/0xe0 [ 454.542818][T12952] ___sys_sendmsg+0x1c7/0x360 [ 454.547512][T12952] ? __sys_sendmsg+0x2b0/0x2b0 [ 454.552307][T12952] ? __lock_acquire+0x7d80/0x7d80 [ 454.557370][T12952] __se_sys_sendmsg+0x1d0/0x2c0 [ 454.562232][T12952] ? __x64_sys_sendmsg+0x80/0x80 [ 454.567197][T12952] ? lockdep_hardirqs_on+0x98/0x150 [ 454.572403][T12952] do_syscall_64+0x55/0xb0 [ 454.576824][T12952] ? clear_bhb_loop+0x40/0x90 [ 454.581506][T12952] ? clear_bhb_loop+0x40/0x90 [ 454.586194][T12952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.592090][T12952] RIP: 0033:0x7f0dd0b9e159 [ 454.596507][T12952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.616120][T12952] RSP: 002b:00007f0dd1a74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.624544][T12952] RAX: ffffffffffffffda RBX: 00007f0dd0e25fa0 RCX: 00007f0dd0b9e159 [ 454.632514][T12952] RDX: 00000000000080d1 RSI: 00002000000001c0 RDI: 0000000000000004 [ 454.640485][T12952] RBP: 00007f0dd1a74090 R08: 0000000000000000 R09: 0000000000000000 [ 454.648455][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.656429][T12952] R13: 00007f0dd0e26038 R14: 00007f0dd0e25fa0 R15: 00007ffe8482ec68 [ 454.664420][T12952] [ 454.761551][T12954] netlink: 'syz.0.2148': attribute type 10 has an invalid length. [ 454.770810][T12954] netlink: 211796 bytes leftover after parsing attributes in process `syz.0.2148'. [ 454.781174][T12954] openvswitch: netlink: Message has 4 unknown bytes. [ 454.936821][T12962] netlink: 'syz.0.2150': attribute type 3 has an invalid length. [ 454.956250][T12962] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2150'. [ 455.057549][T12960] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 455.072100][T12960] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 455.308430][T12981] FAULT_INJECTION: forcing a failure. [ 455.308430][T12981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.336241][T12981] CPU: 0 PID: 12981 Comm: syz.3.2158 Not tainted syzkaller #0 [ 455.343724][T12981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.353773][T12981] Call Trace: [ 455.357046][T12981] [ 455.359974][T12981] dump_stack_lvl+0x18c/0x250 [ 455.364660][T12981] ? show_regs_print_info+0x20/0x20 [ 455.369860][T12981] ? load_image+0x420/0x420 [ 455.374360][T12981] ? __lock_acquire+0x7d80/0x7d80 [ 455.379384][T12981] should_fail_ex+0x394/0x4c0 [ 455.384059][T12981] _copy_from_user+0x2f/0xe0 [ 455.388651][T12981] __copy_msghdr+0x388/0x560 [ 455.393242][T12981] ___sys_sendmsg+0x214/0x360 [ 455.397913][T12981] ? get_pid_task+0x20/0x1e0 [ 455.402503][T12981] ? __sys_sendmsg+0x2b0/0x2b0 [ 455.407275][T12981] ? __lock_acquire+0x7d80/0x7d80 [ 455.412307][T12981] __se_sys_sendmsg+0x1d0/0x2c0 [ 455.417154][T12981] ? __x64_sys_sendmsg+0x80/0x80 [ 455.422098][T12981] ? lockdep_hardirqs_on+0x98/0x150 [ 455.427293][T12981] do_syscall_64+0x55/0xb0 [ 455.431708][T12981] ? clear_bhb_loop+0x40/0x90 [ 455.436379][T12981] ? clear_bhb_loop+0x40/0x90 [ 455.441052][T12981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.446939][T12981] RIP: 0033:0x7f3de9d9e159 [ 455.451350][T12981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.470949][T12981] RSP: 002b:00007f3deaccd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.479382][T12981] RAX: ffffffffffffffda RBX: 00007f3dea026090 RCX: 00007f3de9d9e159 [ 455.487344][T12981] RDX: 00000000000080d1 RSI: 00002000000001c0 RDI: 0000000000000004 [ 455.495323][T12981] RBP: 00007f3deaccd090 R08: 0000000000000000 R09: 0000000000000000 [ 455.503303][T12981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.511274][T12981] R13: 00007f3dea026128 R14: 00007f3dea026090 R15: 00007ffe944c5898 [ 455.519255][T12981] [ 455.778100][T12987] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2159'. [ 456.091900][T12996] tap1: tun_chr_ioctl cmd 1074025675 [ 456.097777][T12996] tap1: persist enabled [ 456.120250][T12996] tap1: tun_chr_ioctl cmd 1074025675 [ 456.125705][T12996] tap1: persist enabled [ 456.461089][T13012] FAULT_INJECTION: forcing a failure. [ 456.461089][T13012] name failslab, interval 1, probability 0, space 0, times 0 [ 456.478067][T13012] CPU: 0 PID: 13012 Comm: syz.2.2168 Not tainted syzkaller #0 [ 456.485565][T13012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.495624][T13012] Call Trace: [ 456.498924][T13012] [ 456.501873][T13012] dump_stack_lvl+0x18c/0x250 [ 456.506587][T13012] ? show_regs_print_info+0x20/0x20 [ 456.511814][T13012] ? load_image+0x420/0x420 [ 456.516339][T13012] ? __might_sleep+0xe0/0xe0 [ 456.520951][T13012] ? __lock_acquire+0x7d80/0x7d80 [ 456.526004][T13012] should_fail_ex+0x394/0x4c0 [ 456.530707][T13012] should_failslab+0x9/0x20 [ 456.535231][T13012] slab_pre_alloc_hook+0x59/0x300 [ 456.540283][T13012] ? sctp_association_new+0x89/0x25b0 [ 456.545758][T13012] __kmem_cache_alloc_node+0x53/0x250 [ 456.551159][T13012] ? sctp_association_new+0x89/0x25b0 [ 456.556550][T13012] kmalloc_trace+0x2a/0xe0 [ 456.560988][T13012] sctp_association_new+0x89/0x25b0 [ 456.566201][T13012] ? security_capable+0x89/0xb0 [ 456.571079][T13012] sctp_connect_new_asoc+0x2de/0x6a0 [ 456.576452][T13012] ? __sctp_connect+0xd80/0xd80 [ 456.581323][T13012] ? __local_bh_enable_ip+0x13a/0x1c0 [ 456.586718][T13012] ? _local_bh_enable+0xa0/0xa0 [ 456.591582][T13012] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 456.597464][T13012] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 456.603313][T13012] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 456.608878][T13012] ? security_sctp_bind_connect+0x89/0xb0 [ 456.614623][T13012] sctp_sendmsg+0x1519/0x27b0 [ 456.619336][T13012] ? sctp_getsockopt+0xb60/0xb60 [ 456.624308][T13012] ? aa_af_perm+0x330/0x330 [ 456.628840][T13012] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 456.635273][T13012] ? sock_rps_record_flow+0x19/0x3f0 [ 456.640593][T13012] ? inet_sendmsg+0x7e/0x2a0 [ 456.645192][T13012] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 456.650494][T13012] ? inet_send_prepare+0x250/0x250 [ 456.655629][T13012] ____sys_sendmsg+0x61b/0x980 [ 456.660414][T13012] ? __asan_memset+0x22/0x40 [ 456.665018][T13012] ? __sys_sendmsg_sock+0x30/0x30 [ 456.670057][T13012] ? __import_iovec+0x5f2/0x850 [ 456.674936][T13012] ? import_iovec+0x73/0xa0 [ 456.679463][T13012] ___sys_sendmsg+0x2a6/0x360 [ 456.684169][T13012] ? __sys_sendmsg+0x2b0/0x2b0 [ 456.688971][T13012] ? __lock_acquire+0x7d80/0x7d80 [ 456.694039][T13012] __se_sys_sendmsg+0x1d0/0x2c0 [ 456.698908][T13012] ? __x64_sys_sendmsg+0x80/0x80 [ 456.703880][T13012] ? lockdep_hardirqs_on+0x98/0x150 [ 456.709099][T13012] do_syscall_64+0x55/0xb0 [ 456.713538][T13012] ? clear_bhb_loop+0x40/0x90 [ 456.718227][T13012] ? clear_bhb_loop+0x40/0x90 [ 456.722920][T13012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.728832][T13012] RIP: 0033:0x7f0c97d9e159 [ 456.733257][T13012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.752875][T13012] RSP: 002b:00007f0c98d31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.761304][T13012] RAX: ffffffffffffffda RBX: 00007f0c98025fa0 RCX: 00007f0c97d9e159 [ 456.769286][T13012] RDX: 00000000000080d1 RSI: 00002000000001c0 RDI: 0000000000000004 [ 456.777269][T13012] RBP: 00007f0c98d31090 R08: 0000000000000000 R09: 0000000000000000 [ 456.785248][T13012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.793228][T13012] R13: 00007f0c98026038 R14: 00007f0c98025fa0 R15: 00007ffebcf66348 [ 456.801230][T13012] [ 456.913124][T13018] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2171'. [ 457.151097][T13024] Ÿë: port 1(gretap0) entered blocking state [ 457.163074][T13024] Ÿë: port 1(gretap0) entered disabled state [ 457.170383][T13024] gretap0: entered allmulticast mode [ 457.179593][T13024] gretap0: entered promiscuous mode [ 457.256934][T13027] netlink: 'syz.1.2174': attribute type 2 has an invalid length. [ 457.290739][T13027] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2174'. [ 457.308913][T13024] Ÿë: port 2(veth0_to_team) entered blocking state [ 457.321369][T13024] Ÿë: port 2(veth0_to_team) entered disabled state [ 457.337245][T13024] veth0_to_team: entered allmulticast mode [ 457.344519][T13024] veth0_to_team: entered promiscuous mode [ 457.862433][T13051] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2182'. [ 458.316952][T13058] netlink: 'syz.0.2183': attribute type 46 has an invalid length. [ 461.437056][T13087] FAULT_INJECTION: forcing a failure. [ 461.437056][T13087] name failslab, interval 1, probability 0, space 0, times 0 [ 461.470267][T13087] CPU: 0 PID: 13087 Comm: syz.2.2193 Not tainted syzkaller #0 [ 461.477773][T13087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 461.487845][T13087] Call Trace: [ 461.491140][T13087] [ 461.494080][T13087] dump_stack_lvl+0x18c/0x250 [ 461.498792][T13087] ? show_regs_print_info+0x20/0x20 [ 461.504005][T13087] ? load_image+0x420/0x420 [ 461.508537][T13087] ? __lock_acquire+0x7d80/0x7d80 [ 461.513593][T13087] ? rcu_is_watching+0x15/0xb0 [ 461.518387][T13087] ? __alloc_pages+0x276/0x460 [ 461.523167][T13087] should_fail_ex+0x394/0x4c0 [ 461.527869][T13087] should_failslab+0x9/0x20 [ 461.532390][T13087] slab_pre_alloc_hook+0x59/0x300 [ 461.537439][T13087] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 461.543431][T13087] __kmem_cache_alloc_node+0x53/0x250 [ 461.548829][T13087] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 461.554741][T13087] kmalloc_trace+0x2a/0xe0 [ 461.559180][T13087] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 461.564920][T13087] ? sctp_stream_interleave_init+0x55/0x90 [ 461.570746][T13087] sctp_association_new+0x15be/0x25b0 [ 461.576148][T13087] sctp_connect_new_asoc+0x2de/0x6a0 [ 461.581445][T13087] ? __sctp_connect+0xd80/0xd80 [ 461.586293][T13087] ? __local_bh_enable_ip+0x13a/0x1c0 [ 461.591667][T13087] ? _local_bh_enable+0xa0/0xa0 [ 461.596510][T13087] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 461.602334][T13087] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 461.608154][T13087] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 461.613707][T13087] ? security_sctp_bind_connect+0x89/0xb0 [ 461.619427][T13087] sctp_sendmsg+0x1519/0x27b0 [ 461.624124][T13087] ? sctp_getsockopt+0xb60/0xb60 [ 461.629068][T13087] ? aa_af_perm+0x330/0x330 [ 461.633578][T13087] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 461.640010][T13087] ? sock_rps_record_flow+0x19/0x3f0 [ 461.645301][T13087] ? inet_sendmsg+0x7e/0x2a0 [ 461.649891][T13087] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 461.655184][T13087] ? inet_send_prepare+0x250/0x250 [ 461.660297][T13087] ____sys_sendmsg+0x61b/0x980 [ 461.665067][T13087] ? __asan_memset+0x22/0x40 [ 461.669659][T13087] ? __sys_sendmsg_sock+0x30/0x30 [ 461.674679][T13087] ? __import_iovec+0x5f2/0x850 [ 461.679537][T13087] ? import_iovec+0x73/0xa0 [ 461.684045][T13087] ___sys_sendmsg+0x2a6/0x360 [ 461.688725][T13087] ? __sys_sendmsg+0x2b0/0x2b0 [ 461.693504][T13087] ? trace_call_bpf+0xc3/0x6c0 [ 461.698286][T13087] __se_sys_sendmsg+0x1d0/0x2c0 [ 461.703135][T13087] ? perf_trace_preemptirq_template+0x269/0x330 [ 461.709378][T13087] ? __x64_sys_sendmsg+0x80/0x80 [ 461.714325][T13087] ? lockdep_hardirqs_on+0x98/0x150 [ 461.719523][T13087] do_syscall_64+0x55/0xb0 [ 461.723937][T13087] ? clear_bhb_loop+0x40/0x90 [ 461.728611][T13087] ? clear_bhb_loop+0x40/0x90 [ 461.733286][T13087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.739179][T13087] RIP: 0033:0x7f0c97d9e159 [ 461.743588][T13087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.763194][T13087] RSP: 002b:00007f0c98d31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.771604][T13087] RAX: ffffffffffffffda RBX: 00007f0c98025fa0 RCX: 00007f0c97d9e159 [ 461.779570][T13087] RDX: 00000000000080d1 RSI: 00002000000001c0 RDI: 0000000000000004 [ 461.787536][T13087] RBP: 00007f0c98d31090 R08: 0000000000000000 R09: 0000000000000000 [ 461.795496][T13087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.803458][T13087] R13: 00007f0c98026038 R14: 00007f0c98025fa0 R15: 00007ffebcf66348 [ 461.811435][T13087] [ 462.091289][T13075] delete_channel: no stack [ 462.712845][T13111] netlink: 'syz.1.2200': attribute type 46 has an invalid length. [ 463.421236][T13133] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.2209'. [ 468.555341][T13187] delete_channel: no stack [ 468.992222][T13199] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2230'. [ 469.996385][T13237] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2244'. [ 472.383497][T13296] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2261'. [ 472.475773][T13299] netlink: 145996 bytes leftover after parsing attributes in process `syz.3.2263'. [ 472.618652][T13303] netlink: 'syz.1.2262': attribute type 10 has an invalid length. [ 472.646408][T13303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2262'. [ 472.671953][T13303] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 472.998919][T13322] netlink: 'syz.1.2270': attribute type 10 has an invalid length. [ 475.749762][T13322] mac80211_hwsim hwsim7 Ý_«ã¢: left promiscuous mode [ 475.756905][T13322] mac80211_hwsim hwsim7 Ý_«ã¢: left allmulticast mode [ 475.916376][T13326] netlink: 'syz.2.2271': attribute type 10 has an invalid length. [ 475.924238][T13326] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2271'. [ 475.966168][T13326] hsr0: entered promiscuous mode [ 475.981797][T13326] bridge0: port 2(hsr0) entered blocking state [ 476.009018][T13326] bridge0: port 2(hsr0) entered disabled state [ 476.015381][T13326] hsr0: entered allmulticast mode [ 476.021755][T13326] hsr_slave_0: entered allmulticast mode [ 476.029316][T13326] hsr_slave_1: entered allmulticast mode [ 476.039474][T13326] bridge0: port 2(hsr0) entered blocking state [ 476.045755][T13326] bridge0: port 2(hsr0) entered forwarding state [ 476.254210][T13347] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2277'. [ 476.266386][T13347] : renamed from caif0 [ 476.282090][T13347] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 479.691308][T13361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2283'. [ 479.793827][T13367] netlink: 'syz.3.2286': attribute type 10 has an invalid length. [ 479.812335][T13367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2286'. [ 479.865882][T13367] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 480.207779][T13384] netlink: 'syz.1.2290': attribute type 10 has an invalid length. [ 480.225719][T13384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2290'. [ 480.471476][T13396] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 483.393049][T13405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2297'. [ 483.995919][T13424] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.2302'. [ 484.191296][T13423] netlink: 'syz.0.2303': attribute type 10 has an invalid length. [ 484.305296][T13423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2303'. [ 490.670004][ T5089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 490.703021][ T5089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 490.717561][ T5089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 490.737138][ T5089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 490.760678][ T5089] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 490.772264][ T5089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.896368][T13467] netlink: 'syz.3.2315': attribute type 10 has an invalid length. [ 491.904256][T13467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2315'. [ 491.914753][T13473] netlink: 'syz.2.2316': attribute type 10 has an invalid length. [ 491.926176][T13473] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2316'. [ 491.935289][T13473] vcan0: entered promiscuous mode [ 491.945398][T13473] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 492.042641][ T3451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.078654][T13477] netlink: 'syz.3.2317': attribute type 10 has an invalid length. [ 492.149455][ T3451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.208575][T13484] sock: sock_set_timeout: `syz.0.2320' (pid 13484) tries to set negative timeout [ 492.866291][ T5089] Bluetooth: hci2: command tx timeout [ 493.068094][ T3451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.182422][ T3451] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.283205][T13474] chnl_net:caif_netlink_parms(): no params data found [ 493.466268][T13474] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.482376][T13474] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.489816][T13474] bridge_slave_0: entered allmulticast mode [ 493.498646][T13474] bridge_slave_0: entered promiscuous mode [ 493.513909][T13474] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.523472][T13474] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.531503][T13474] bridge_slave_1: entered allmulticast mode [ 493.539001][T13474] bridge_slave_1: entered promiscuous mode [ 493.603963][T13474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.613744][ T3451] tipc: Left network mode [ 493.629878][T13474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.733045][T13474] team0: Port device team_slave_0 added [ 493.755072][T13474] team0: Port device team_slave_1 added [ 493.834183][T13474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.842393][T13474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.876757][T13474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.904312][T13474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.911829][T13474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.941639][T13474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.092378][T13474] hsr_slave_0: entered promiscuous mode [ 494.110592][T13474] hsr_slave_1: entered promiscuous mode [ 494.121453][T13474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.144024][T13474] Cannot create hsr debugfs directory [ 494.450715][T13530] netlink: 'syz.2.2326': attribute type 10 has an invalid length. [ 494.474514][T13530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2326'. [ 494.567003][ T3451] gretap0 (unregistering): left allmulticast mode [ 494.573833][ T3451] gretap0 (unregistering): left promiscuous mode [ 494.592284][ T3451] Ÿë: port 1(gretap0) entered disabled state [ 494.936285][ T5089] Bluetooth: hci2: command tx timeout [ 496.143555][T13566] netlink: 'syz.3.2337': attribute type 3 has an invalid length. [ 496.186799][T13566] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2337'. [ 496.358284][T13578] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2338'. [ 496.378771][T13578] openvswitch: netlink: Flow key attribute not present in set flow. [ 496.454843][T13576] tap2: tun_chr_ioctl cmd 1074025675 [ 496.467682][T13576] tap2: persist enabled [ 496.478391][T13576] tap2: tun_chr_ioctl cmd 1074025675 [ 496.506247][T13576] tap2: persist enabled [ 497.016282][ T5089] Bluetooth: hci2: command tx timeout [ 498.312215][ T3451] veth0_to_team: left allmulticast mode [ 498.335286][ T3451] veth0_to_team: left promiscuous mode [ 498.360557][ T3451] Ÿë: port 2(veth0_to_team) entered disabled state [ 499.096514][ T5089] Bluetooth: hci2: command tx timeout [ 501.180776][ T3451] veth1_macvtap: left promiscuous mode [ 501.186682][ T3451] veth0_macvtap: left promiscuous mode [ 501.192271][ T3451] veth1_vlan: left allmulticast mode [ 501.212173][ T3451] veth1_vlan: left promiscuous mode [ 501.573467][ T3451]  (unregistering): (slave macvlan0): Releasing backup interface [ 501.660463][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.666901][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.839322][ T3451]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.873899][ T3451]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.911755][ T3451]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 502.074940][ T3451]  (unregistering): Released all slaves [ 502.102825][T13474] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 502.113570][T13607] netlink: 'syz.3.2346': attribute type 10 has an invalid length. [ 502.213592][T13474] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 502.234851][T13474] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 502.771100][T13474] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 503.001985][T13474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.050767][T13474] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.083421][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.090621][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.155588][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.162792][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.926826][T13678] netlink: 'syz.2.2357': attribute type 10 has an invalid length. [ 503.943882][T13678] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2357'. [ 504.093874][T13474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.214240][T13474] veth0_vlan: entered promiscuous mode [ 504.238412][T13474] veth1_vlan: entered promiscuous mode [ 504.325079][T13474] veth0_macvtap: entered promiscuous mode [ 504.350357][T13474] veth1_macvtap: entered promiscuous mode [ 504.373330][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.390143][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.439398][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.459862][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.501457][T13474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.512458][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.523558][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.534384][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 504.563145][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.577798][T13474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.604766][T13474] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.613839][T13474] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.623709][T13474] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.632650][T13474] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.743425][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.754236][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.811007][ T6602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.823870][ T6602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.892791][T13726] netlink: 'syz.2.2371': attribute type 25 has an invalid length. [ 507.901734][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2371'. [ 507.930304][T13726] netlink: 'syz.2.2371': attribute type 5 has an invalid length. [ 510.648959][T13736] netlink: 'syz.1.2375': attribute type 10 has an invalid length. [ 510.679820][T13736] team0: Device hsr_slave_0 failed to register rx_handler [ 512.087138][T13766] netlink: 'syz.3.2386': attribute type 21 has an invalid length. [ 512.095112][T13766] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2386'. [ 512.281132][T13773] netlink: 'syz.1.2388': attribute type 21 has an invalid length. [ 512.346615][T13773] IPv6: NLM_F_CREATE should be specified when creating new route [ 512.608851][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.631897][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.643789][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.652832][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.664310][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 512.671990][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.405246][ T6602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.671983][ T6602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.726344][T13781] chnl_net:caif_netlink_parms(): no params data found [ 513.739299][T13796] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2393'. [ 514.706845][ T5782] Bluetooth: hci0: command tx timeout [ 515.111009][ T6602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.278378][ T6602] bond0: (slave netdevsim0): Releasing backup interface [ 516.300591][ T6602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.342089][T13781] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.349448][T13781] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.356843][T13781] bridge_slave_0: entered allmulticast mode [ 516.364172][T13781] bridge_slave_0: entered promiscuous mode [ 516.374391][T13781] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.382501][T13781] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.390004][T13781] bridge_slave_1: entered allmulticast mode [ 516.397659][T13781] bridge_slave_1: entered promiscuous mode [ 516.498908][T13781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.528450][T13781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.645678][T13781] team0: Port device team_slave_0 added [ 516.677192][T13781] team0: Port device team_slave_1 added [ 516.779900][ T5782] Bluetooth: hci0: command tx timeout [ 516.840882][T13781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.865423][T13781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.954453][T13781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.143475][T13813] delete_channel: no stack [ 517.937191][T13781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.972576][T13781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.017040][T13781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.103163][T13841] netlink: 'syz.0.2404': attribute type 3 has an invalid length. [ 518.121316][T13841] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2404'. [ 518.136986][T13845] delete_channel: no stack [ 518.151252][T13843] netlink: 'syz.1.2405': attribute type 21 has an invalid length. [ 518.168029][T13843] netlink: 14530 bytes leftover after parsing attributes in process `syz.1.2405'. [ 518.358203][T13781] hsr_slave_0: entered promiscuous mode [ 518.383246][T13781] hsr_slave_1: entered promiscuous mode [ 518.392212][T13781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.406226][T13781] Cannot create hsr debugfs directory [ 518.752899][T13868] delete_channel: no stack [ 518.766398][T13868] delete_channel: no stack [ 518.856467][ T5782] Bluetooth: hci0: command tx timeout [ 520.936335][ T5782] Bluetooth: hci0: command tx timeout [ 521.579091][ T6602] gretap0 (unregistering): left allmulticast mode [ 521.592631][ T6602] gretap0 (unregistering): left promiscuous mode [ 521.599277][ T6602] Ÿë: port 1(gretap0) entered disabled state [ 521.719651][T13877] netlink: 'syz.1.2415': attribute type 1 has an invalid length. [ 521.810094][T13877] netlink: 'syz.1.2415': attribute type 3 has an invalid length. [ 521.857330][T13879] netlink: 'syz.1.2415': attribute type 10 has an invalid length. [ 521.877963][T13877] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2415'. [ 521.886296][T13879] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2415'. [ 523.524363][T13903] syzkaller0: entered promiscuous mode [ 523.538146][T13903] syzkaller0: entered allmulticast mode [ 524.669708][T13937] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2426'. [ 526.229348][T13937] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2426'. [ 526.794562][T13781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 526.848515][T13781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 526.911620][T13781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 526.957622][ T6602] veth0_to_team: left allmulticast mode [ 526.972228][ T6602] veth0_to_team: left promiscuous mode [ 526.996413][ T6602] Ÿë: port 2(veth0_to_team) entered disabled state [ 527.043928][ T6602] hsr_slave_0: left promiscuous mode [ 527.064762][ T6602] hsr_slave_1: left promiscuous mode [ 527.078953][ T6602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.104981][ T6602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.128097][ T6602] batman_adv: batadv0: Interface deactivated: €Â0 [ 527.136353][ T6602] batman_adv: batadv0: Removing interface: €Â0 [ 527.162084][ T6602] hsr0: left allmulticast mode [ 527.167522][ T6602] bridge0: port 2(hsr0) entered disabled state [ 527.241016][ T6602] bridge_slave_0: left allmulticast mode [ 527.273494][ T6602] bridge_slave_0: left promiscuous mode [ 527.334070][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.574340][ T6602] veth1_macvtap: left promiscuous mode [ 527.586646][ T6602] veth1_vlan: left promiscuous mode [ 527.599871][ T6602] veth0_vlan: left promiscuous mode [ 528.080312][ T6602] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 528.898891][ T6602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.014743][ T6602] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 529.197131][ T6602] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 529.224391][ T6602] bond0 (unregistering): Released all slaves [ 529.308087][T13781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 529.585385][T13781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.689999][T13781] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.771279][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.778531][ T6610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.811825][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.819064][ T6610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.289592][T14011] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2440'. [ 530.317087][T14011] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.2440'. [ 530.381568][T13781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.528591][T13781] veth0_vlan: entered promiscuous mode [ 530.567812][T13781] veth1_vlan: entered promiscuous mode [ 530.636624][T13781] veth0_macvtap: entered promiscuous mode [ 530.664766][T13781] veth1_macvtap: entered promiscuous mode [ 530.692259][T14029] netlink: 'syz.0.2443': attribute type 46 has an invalid length. [ 530.770672][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.800964][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.824082][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.843550][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.865299][T13781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.901087][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.920558][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.936314][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.960745][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.989623][T13781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.005486][T13781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.028747][T13781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.076162][T13781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.105206][T13781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.192701][T14037] netlink: 'syz.1.2445': attribute type 1 has an invalid length. [ 531.246611][T14037] netlink: 'syz.1.2445': attribute type 2 has an invalid length. [ 531.304808][T14037] netlink: 'syz.1.2445': attribute type 2 has an invalid length. [ 531.336332][T14037] netlink: 'syz.1.2445': attribute type 3 has an invalid length. [ 531.363614][T14037] netlink: 'syz.1.2445': attribute type 4 has an invalid length. [ 531.382851][T14037] netlink: 'syz.1.2445': attribute type 5 has an invalid length. [ 531.413193][T14037] netlink: 'syz.1.2445': attribute type 6 has an invalid length. [ 531.458549][T14037] netlink: 'syz.1.2445': attribute type 7 has an invalid length. [ 531.513798][T14037] netlink: 'syz.1.2445': attribute type 9 has an invalid length. [ 531.580916][T14037] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.2445'. [ 531.770306][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.796008][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.843164][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.861133][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.173307][T14076] sctp_setsockopt_delayed_ack: 55 callbacks suppressed [ 532.173326][T14076] sctp: [Deprecated]: syz.1.2450 (pid 14076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 532.173326][T14076] Use struct sctp_sack_info instead [ 532.742112][T14081] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2454'. [ 533.242924][T13621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 533.256369][T13621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 533.265232][T13621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 533.276656][T13621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 533.285079][T13621] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 533.297480][T13621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 534.272915][T14089] chnl_net:caif_netlink_parms(): no params data found [ 534.948363][T14089] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.955558][T14089] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.988776][T14089] bridge_slave_0: entered allmulticast mode [ 534.995633][T14089] bridge_slave_0: entered promiscuous mode [ 535.137909][T14089] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.170669][T14089] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.206503][T14089] bridge_slave_1: entered allmulticast mode [ 535.213951][T14089] bridge_slave_1: entered promiscuous mode [ 535.345365][ T5782] Bluetooth: hci1: command tx timeout [ 535.540207][T14135] netlink: 152988 bytes leftover after parsing attributes in process `syz.3.2463'. [ 535.961415][T14135] validate_nla: 7 callbacks suppressed [ 535.961434][T14135] netlink: 'syz.3.2463': attribute type 6 has an invalid length. [ 536.046880][T14135] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2463'. [ 536.122581][T14089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.139906][T14089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.458438][T14089] team0: Port device team_slave_0 added [ 536.487665][T14089] team0: Port device team_slave_1 added [ 536.619193][T14089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.647323][T14089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.726299][T14089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.822513][T14089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.857642][T14089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.926191][T14089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.981089][T14198] netlink: 207808 bytes leftover after parsing attributes in process `syz.3.2468'. [ 536.998639][T14200] netlink: 207808 bytes leftover after parsing attributes in process `syz.3.2468'. [ 537.219561][T14089] hsr_slave_0: entered promiscuous mode [ 537.267761][T14089] hsr_slave_1: entered promiscuous mode [ 537.287552][T14089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.295176][T14089] Cannot create hsr debugfs directory [ 537.416381][ T5782] Bluetooth: hci1: command tx timeout [ 538.098353][T14089] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.752745][T14089] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.834509][T14234] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2479'. [ 538.902911][T14234] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.2479'. [ 538.941699][T14231] netlink: 'syz.1.2478': attribute type 21 has an invalid length. [ 538.965724][T14232] nla_validate_range_unsigned: 25 callbacks suppressed [ 538.965745][T14232] netlink: 'syz.1.2478': attribute type 11 has an invalid length. [ 539.072463][T14231] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2478'. [ 539.128435][T14232] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.2478'. [ 539.160714][T14231] netlink: 'syz.1.2478': attribute type 1 has an invalid length. [ 539.313006][T14089] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.496341][ T5782] Bluetooth: hci1: command tx timeout [ 539.762090][T14089] bond0: (slave netdevsim0): Releasing backup interface [ 539.793144][T14089] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.030537][T14237] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2479'. [ 540.056392][T14237] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.2479'. [ 540.545367][T14089] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 540.607453][T14089] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 540.777314][T14089] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 540.810514][T14089] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 541.511469][T14262] FAULT_INJECTION: forcing a failure. [ 541.511469][T14262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.536498][T14262] CPU: 0 PID: 14262 Comm: syz.1.2487 Not tainted syzkaller #0 [ 541.544068][T14262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 541.554174][T14262] Call Trace: [ 541.557472][T14262] [ 541.560427][T14262] dump_stack_lvl+0x18c/0x250 [ 541.565135][T14262] ? show_regs_print_info+0x20/0x20 [ 541.570363][T14262] ? load_image+0x420/0x420 [ 541.574886][T14262] ? __might_fault+0xaa/0x120 [ 541.579581][T14262] ? __lock_acquire+0x7d80/0x7d80 [ 541.584631][T14262] should_fail_ex+0x394/0x4c0 [ 541.589340][T14262] _copy_from_user+0x2f/0xe0 [ 541.593949][T14262] ___sys_sendmsg+0x1c7/0x360 [ 541.598659][T14262] ? __sys_sendmsg+0x2b0/0x2b0 [ 541.603483][T14262] ? __lock_acquire+0x7d80/0x7d80 [ 541.608576][T14262] __se_sys_sendmsg+0x1d0/0x2c0 [ 541.613881][T14262] ? __x64_sys_sendmsg+0x80/0x80 [ 541.618872][T14262] ? lockdep_hardirqs_on+0x98/0x150 [ 541.624104][T14262] do_syscall_64+0x55/0xb0 [ 541.628536][T14262] ? clear_bhb_loop+0x40/0x90 [ 541.633296][T14262] ? clear_bhb_loop+0x40/0x90 [ 541.638015][T14262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 541.643942][T14262] RIP: 0033:0x7f8fb459e159 [ 541.648385][T14262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.668105][T14262] RSP: 002b:00007f8fb546f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.676541][T14262] RAX: ffffffffffffffda RBX: 00007f8fb4825fa0 RCX: 00007f8fb459e159 [ 541.684558][T14262] RDX: 00000000000080d1 RSI: 00002000000001c0 RDI: 0000000000000007 [ 541.692646][T14262] RBP: 00007f8fb546f090 R08: 0000000000000000 R09: 0000000000000000 [ 541.700634][T14262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.708616][T14262] R13: 00007f8fb4826038 R14: 00007f8fb4825fa0 R15: 00007ffd0d725f78 [ 541.716635][T14262] [ 541.736190][ T5782] Bluetooth: hci1: command tx timeout [ 543.137820][T14273] netlink: 'syz.2.2489': attribute type 10 has an invalid length. [ 543.169916][T14273] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.189433][T14273] bridge_slave_1: left allmulticast mode [ 543.195146][T14273] bridge_slave_1: left promiscuous mode [ 543.204585][T14273] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.228646][T14273] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 543.379910][T14089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.424938][T14089] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.449713][T14284] netlink: 'syz.3.2490': attribute type 10 has an invalid length. [ 544.196544][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.203793][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.244814][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.252140][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.625686][T14303] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2496'. [ 544.644762][T14299] netlink: 'syz.3.2495': attribute type 21 has an invalid length. [ 544.663861][T14299] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2495'. [ 544.735505][T14299] netlink: 'syz.3.2495': attribute type 10 has an invalid length. [ 544.803381][T14299] bridge0: port 3(hsr0) entered disabled state [ 544.810927][T14299] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.819561][T14299] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.906879][T14305] netlink: 'syz.3.2495': attribute type 2 has an invalid length. [ 544.915020][T14305] netlink: 'syz.3.2495': attribute type 8 has an invalid length. [ 544.923173][T14305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2495'. [ 545.047422][T14089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.581331][ T6610] vlan0: left allmulticast mode [ 546.587221][ T6610] vlan0: left promiscuous mode [ 546.609417][ T6610] À: port 1(vlan0) entered disabled state [ 546.656419][ T6610] hsr_slave_0: left promiscuous mode [ 546.670438][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.686374][ T6610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.704271][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.715348][ T6610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.753643][ T6610] veth0_macvtap: left promiscuous mode [ 546.761194][ T6610] veth1_vlan: left promiscuous mode [ 546.767646][ T6610] veth0_vlan: left promiscuous mode [ 547.830854][ T6610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.885611][ T6610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.942109][ T6610] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 548.217883][ T6610] bond0 (unregistering): Released all slaves [ 548.272437][T14089] veth0_vlan: entered promiscuous mode [ 548.350038][T14089] veth1_vlan: entered promiscuous mode [ 548.493573][T14089] veth0_macvtap: entered promiscuous mode [ 548.580804][T14089] veth1_macvtap: entered promiscuous mode [ 548.816754][T14089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.956675][T14089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.036591][T14089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.149351][T14089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.267379][T14089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.415489][T14347] netlink: 'syz.2.2507': attribute type 10 has an invalid length. [ 549.684594][T14347] team0: Port device geneve1 added [ 549.848806][T14089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.920157][T14089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.996343][T14089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.021861][T14089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.068282][T14089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.192626][T14089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.255027][T14089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.299247][T14089] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.322441][T14089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.894049][T14336] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2504'. [ 550.910952][T14336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.363292][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.388900][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.495021][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.503179][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.532639][T14386] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2515'. [ 553.576990][T14386] openvswitch: netlink: Flow key attribute not present in set flow. [ 553.878740][T13621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 553.889309][T13621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 553.898178][T13621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 553.909622][T13621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 553.918622][T13621] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 553.926018][T13621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 554.631723][ T3473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.724585][ T3473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.809695][ T3473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.883529][ T3473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.957872][T14393] chnl_net:caif_netlink_parms(): no params data found [ 555.096740][T14393] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.111393][T14393] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.127776][T14393] bridge_slave_0: entered allmulticast mode [ 555.134582][T14393] bridge_slave_0: entered promiscuous mode [ 555.149133][ T3473] tipc: Left network mode [ 555.153792][T14393] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.162737][T14393] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.170182][T14393] bridge_slave_1: entered allmulticast mode [ 555.178787][T14393] bridge_slave_1: entered promiscuous mode [ 555.218890][T14393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.232061][T14393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.445857][T14393] team0: Port device team_slave_0 added [ 555.490139][T14393] team0: Port device team_slave_1 added [ 555.542097][T14393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.550376][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.578799][T14393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.639451][T14393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.658833][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.704491][T14393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.977687][T13621] Bluetooth: hci3: command tx timeout [ 557.104819][T14393] hsr_slave_0: entered promiscuous mode [ 557.115866][T14393] hsr_slave_1: entered promiscuous mode [ 557.701203][T14456] syzkaller0: entered promiscuous mode [ 557.711776][T14456] syzkaller0: entered allmulticast mode [ 558.057713][T13621] Bluetooth: hci3: command tx timeout [ 560.139227][T13621] Bluetooth: hci3: command tx timeout [ 562.216371][T13621] Bluetooth: hci3: command tx timeout [ 562.302114][T14522] IPv6: Can't replace route, no match found [ 562.784132][T14393] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 562.818160][T14393] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 562.999692][T14393] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 563.035377][T14393] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 563.080102][ T3473] hsr_slave_0: left promiscuous mode [ 563.090495][ T3473] hsr_slave_1: left promiscuous mode [ 563.110287][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.119805][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.129715][ T3473] hsr0: left allmulticast mode [ 563.134675][ T3473] bridge0: port 3(hsr0) entered disabled state [ 563.143936][ T3473] bridge_slave_1: left allmulticast mode [ 563.156076][ T3473] bridge_slave_1: left promiscuous mode [ 563.163487][ T3473] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.173093][ T3473] bridge_slave_0: left allmulticast mode [ 563.184746][ T3473] bridge_slave_0: left promiscuous mode [ 563.195861][ T3473] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.224840][ T3473] veth1_macvtap: left promiscuous mode [ 563.231443][ T3473] veth0_macvtap: left promiscuous mode [ 563.237293][ T3473] veth1_vlan: left promiscuous mode [ 564.337415][T14393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.391941][T14393] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.405912][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.414070][ T6610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.533944][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.541168][ T6610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.269789][T14538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.301287][T14539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.652596][T14566] netlink: 'syz.2.2542': attribute type 9 has an invalid length. [ 565.670386][T14566] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2542'. [ 565.901646][T14579] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2544'. [ 565.958972][T14393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.132024][T14393] veth0_vlan: entered promiscuous mode [ 566.170472][T14393] veth1_vlan: entered promiscuous mode [ 566.249410][T14393] veth0_macvtap: entered promiscuous mode [ 566.290678][T14393] veth1_macvtap: entered promiscuous mode [ 566.330285][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.348174][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.384934][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.403468][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.417803][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.432964][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.455775][T14393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.499096][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.531217][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.559718][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.586419][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.613633][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.649908][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.687033][T14393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.727506][T14393] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.752908][T14393] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.772516][T14393] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.793054][T14393] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.634903][T14626] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2551'. [ 569.718445][ T6602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.753915][ T6602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.360723][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.374100][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.454292][T14642] veth0_macvtap: left promiscuous mode [ 571.839437][T14654] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2559'. [ 572.300172][T14667] netlink: 'syz.0.2563': attribute type 10 has an invalid length. [ 572.355692][T14667] veth0_vlan: entered allmulticast mode [ 572.870470][T14667] veth0_vlan: left promiscuous mode [ 573.008710][T14667] veth0_vlan: entered promiscuous mode [ 573.145317][T14667] team0: Device veth0_vlan failed to register rx_handler [ 573.229502][T14667] syz.0.2563 (14667) used greatest stack depth: 17256 bytes left [ 573.278008][T14670] netlink: 'syz.0.2563': attribute type 4 has an invalid length. [ 573.858751][T14689] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2567'. [ 574.535280][T14656] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2560'. [ 574.549910][T14656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.821452][T14702] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2571'. [ 575.352151][T14706] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2573'. [ 575.426547][T14706] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2573'. [ 575.445736][T14706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.006198][T14768] netlink: 'syz.1.2589': attribute type 6 has an invalid length. [ 581.014358][T14768] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2589'. [ 581.953756][T14786] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.2597'. [ 583.082130][T14805] netlink: 'syz.3.2601': attribute type 3 has an invalid length. [ 583.222209][T14805] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2601'. [ 583.302417][T14808] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2603'. [ 587.780838][T14879] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2621'. [ 587.797349][T14883] bridge_slave_0: left allmulticast mode [ 587.803680][T14883] bridge_slave_0: left promiscuous mode [ 587.817217][T14883] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.825845][T14882] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 588.084717][T14885] syz.3.2623[14885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 588.084888][T14885] syz.3.2623[14885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 588.100214][T14887] netlink: 'syz.0.2624': attribute type 6 has an invalid length. [ 588.148089][T14887] netlink: 212820 bytes leftover after parsing attributes in process `syz.0.2624'. [ 588.498957][T14894] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2627'. [ 588.552020][T14894] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 588.577543][T14894] CPU: 1 PID: 14894 Comm: syz.1.2627 Not tainted syzkaller #0 [ 588.585167][T14894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.595285][T14894] Call Trace: [ 588.598639][T14894] [ 588.601628][T14894] dump_stack_lvl+0x18c/0x250 [ 588.606382][T14894] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.612659][T14894] ? show_regs_print_info+0x20/0x20 [ 588.617947][T14894] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.624213][T14894] sysfs_warn_dup+0x8e/0xa0 [ 588.628894][T14894] sysfs_do_create_link_sd+0xc0/0x110 [ 588.634370][T14894] device_add_class_symlinks+0x1cf/0x240 [ 588.640099][T14894] device_add+0x4f9/0xc40 [ 588.644519][T14894] wiphy_register+0x1d99/0x2ac0 [ 588.649530][T14894] ? cfg80211_event_work+0x40/0x40 [ 588.654744][T14894] ? minstrel_ht_alloc+0x88a/0x990 [ 588.660089][T14894] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 588.666254][T14894] ieee80211_register_hw+0x2dd8/0x3b30 [ 588.671863][T14894] ? ieee80211_register_hw+0xfb1/0x3b30 [ 588.677503][T14894] ? ieee80211_tasklet_handler+0x20/0x20 [ 588.683220][T14894] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 588.689239][T14894] ? __debug_object_init+0xec/0x450 [ 588.694541][T14894] ? __asan_memset+0x22/0x40 [ 588.699205][T14894] ? __hrtimer_init+0x189/0x270 [ 588.704117][T14894] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 588.709937][T14894] ? mac80211_hwsim_free+0x220/0x220 [ 588.715314][T14894] ? hwsim_new_radio_nl+0xd9d/0x1a70 [ 588.720676][T14894] hwsim_new_radio_nl+0xdad/0x1a70 [ 588.725889][T14894] ? mark_lock+0x94/0x320 [ 588.730312][T14894] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 588.736722][T14894] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.742962][T14894] ? lockdep_hardirqs_on+0x98/0x150 [ 588.748513][T14894] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.754765][T14894] genl_family_rcv_msg_doit+0x21a/0x310 [ 588.760415][T14894] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 588.766392][T14894] ? bpf_lsm_capable+0x9/0x10 [ 588.771129][T14894] ? security_capable+0x89/0xb0 [ 588.776055][T14894] genl_rcv_msg+0x611/0x7a0 [ 588.780629][T14894] ? genl_bind+0x360/0x360 [ 588.785139][T14894] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 588.791541][T14894] ? lockdep_hardirqs_on+0x98/0x150 [ 588.796810][T14894] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.803045][T14894] netlink_rcv_skb+0x235/0x4c0 [ 588.807872][T14894] ? genl_bind+0x360/0x360 [ 588.812353][T14894] ? netlink_ack+0x1160/0x1160 [ 588.817190][T14894] ? __lock_acquire+0x7d80/0x7d80 [ 588.822298][T14894] ? down_read+0x1ac/0x2e0 [ 588.826776][T14894] genl_rcv+0x28/0x40 [ 588.830834][T14894] netlink_unicast+0x7b1/0x930 [ 588.835678][T14894] netlink_sendmsg+0x8d0/0xbf0 [ 588.840513][T14894] ? netlink_getsockopt+0x590/0x590 [ 588.846041][T14894] ? apparmor_socket_sendmsg+0x8e/0x330 [ 588.851654][T14894] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 588.857009][T14894] ? security_socket_sendmsg+0x80/0xa0 [ 588.862534][T14894] ? netlink_getsockopt+0x590/0x590 [ 588.867808][T14894] ____sys_sendmsg+0x61b/0x980 [ 588.872684][T14894] ? __asan_memset+0x22/0x40 [ 588.877350][T14894] ? __sys_sendmsg_sock+0x30/0x30 [ 588.882433][T14894] ? __import_iovec+0x5f2/0x850 [ 588.887365][T14894] ? import_iovec+0x73/0xa0 [ 588.891937][T14894] ___sys_sendmsg+0x2a6/0x360 [ 588.896688][T14894] ? __sys_sendmsg+0x2b0/0x2b0 [ 588.901574][T14894] __se_sys_sendmsg+0x1d0/0x2c0 [ 588.906493][T14894] ? __x64_sys_sendmsg+0x80/0x80 [ 588.911522][T14894] ? syscall_enter_from_user_mode+0x2e/0x80 [ 588.917498][T14894] do_syscall_64+0x55/0xb0 [ 588.921979][T14894] ? clear_bhb_loop+0x40/0x90 [ 588.926725][T14894] ? clear_bhb_loop+0x40/0x90 [ 588.931477][T14894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.937439][T14894] RIP: 0033:0x7f8fb459e159 [ 588.941992][T14894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.961662][T14894] RSP: 002b:00007f8fb546f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.970148][T14894] RAX: ffffffffffffffda RBX: 00007f8fb4825fa0 RCX: 00007f8fb459e159 [ 588.978191][T14894] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 588.986235][T14894] RBP: 00007f8fb463506b R08: 0000000000000000 R09: 0000000000000000 [ 588.994270][T14894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.002351][T14894] R13: 00007f8fb4826038 R14: 00007f8fb4825fa0 R15: 00007ffd0d725f78 [ 589.010411][T14894] [ 591.472895][T14960] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.2646'. [ 591.509072][T14959] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.2646'. [ 591.614471][T14964] netlink: 'syz.2.2647': attribute type 10 has an invalid length. [ 592.878263][T14986] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2653'. [ 593.223449][T14985] netlink: 'syz.2.2653': attribute type 10 has an invalid length. [ 593.391057][T14985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.459825][T14985] team0: Port device bond0 added [ 594.029524][T14999] syzkaller0: entered promiscuous mode [ 594.063695][T14999] syzkaller0: entered allmulticast mode [ 596.233838][T14745] syz.3.2580 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 596.292422][T14745] CPU: 1 PID: 14745 Comm: syz.3.2580 Not tainted syzkaller #0 [ 596.299980][T14745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 596.310074][T14745] Call Trace: [ 596.313371][T14745] [ 596.316317][T14745] dump_stack_lvl+0x18c/0x250 [ 596.321025][T14745] ? show_regs_print_info+0x20/0x20 [ 596.326279][T14745] ? load_image+0x420/0x420 [ 596.330797][T14745] ? ___ratelimit+0x478/0x610 [ 596.335556][T14745] ? radix_tree_cpu_dead+0x160/0x160 [ 596.340875][T14745] dump_header+0xd8/0x820 [ 596.345270][T14745] oom_kill_process+0x390/0x580 [ 596.350159][T14745] out_of_memory+0xe0e/0x1200 [ 596.354861][T14745] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 596.360494][T14745] ? mutex_lock_nested+0x20/0x20 [ 596.365435][T14745] ? unregister_oom_notifier+0x20/0x20 [ 596.370904][T14745] mem_cgroup_out_of_memory+0x2c2/0x390 [ 596.376451][T14745] ? try_charge_memcg+0xc91/0x17c0 [ 596.381563][T14745] ? drain_local_stock+0x630/0x630 [ 596.386679][T14745] ? do_raw_spin_unlock+0x121/0x230 [ 596.391881][T14745] try_charge_memcg+0xca1/0x17c0 [ 596.396852][T14745] ? folio_flags+0x120/0x120 [ 596.401456][T14745] ? shmem_alloc_folio+0x1f4/0x2a0 [ 596.406606][T14745] ? percpu_ref_tryget+0x15/0x180 [ 596.411637][T14745] ? get_mem_cgroup_from_mm+0x38/0x290 [ 596.417100][T14745] charge_memcg+0x11b/0x3b0 [ 596.421603][T14745] ? __mem_cgroup_charge+0x80/0x80 [ 596.426712][T14745] ? get_mem_cgroup_from_mm+0x38/0x290 [ 596.432164][T14745] ? get_mem_cgroup_from_mm+0x38/0x290 [ 596.437623][T14745] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 596.443177][T14745] __mem_cgroup_charge+0x25/0x80 [ 596.448119][T14745] shmem_add_to_page_cache+0x8d3/0x1b80 [ 596.453785][T14745] ? xas_load+0x12b/0x140 [ 596.458152][T14745] ? shmem_alloc_folio+0x2a0/0x2a0 [ 596.463290][T14745] shmem_get_folio_gfp+0x1037/0x2b40 [ 596.468598][T14745] shmem_write_begin+0xf2/0x430 [ 596.473456][T14745] generic_perform_write+0x2fe/0x5c0 [ 596.478754][T14745] ? generic_file_direct_write+0x3e0/0x3e0 [ 596.484556][T14745] ? down_write+0x16e/0x200 [ 596.489060][T14745] ? file_update_time+0x98/0x1a0 [ 596.493996][T14745] shmem_file_write_iter+0xfb/0x120 [ 596.499200][T14745] __kernel_write_iter+0x29f/0x6d0 [ 596.504318][T14745] ? vfs_read+0x990/0x990 [ 596.508652][T14745] ? __asan_memset+0x22/0x40 [ 596.513251][T14745] ? iov_iter_bvec+0xd4/0x1b0 [ 596.517931][T14745] dump_user_range+0x418/0x840 [ 596.522966][T14745] ? dump_skip+0x40/0x40 [ 596.527676][T14745] ? dump_emit+0x78/0xe0 [ 596.531930][T14745] ? dump_emit+0xa6/0xe0 [ 596.536167][T14745] ? elf_core_dump+0x2dbb/0x37c0 [ 596.541105][T14745] elf_core_dump+0x320e/0x37c0 [ 596.545887][T14745] ? load_elf_binary+0x2850/0x2850 [ 596.551005][T14745] ? verify_lock_unused+0x140/0x140 [ 596.556208][T14745] ? perf_trace_lock_acquire+0x105/0x400 [ 596.561869][T14745] ? rcu_read_lock_any_held+0xb4/0x140 [ 596.567326][T14745] ? 0xffffffffff600000 [ 596.571486][T14745] do_coredump+0x1791/0x24a0 [ 596.576091][T14745] ? nfs_stat_to_errno+0x170/0x170 [ 596.581227][T14745] ? lock_chain_count+0x20/0x20 [ 596.586081][T14745] ? _raw_spin_unlock_irq+0x23/0x50 [ 596.591286][T14745] ? lockdep_hardirqs_on+0x98/0x150 [ 596.596497][T14745] get_signal+0x10da/0x1390 [ 596.601018][T14745] arch_do_signal_or_restart+0xc2/0x7b0 [ 596.606572][T14745] ? get_sigframe_size+0x20/0x20 [ 596.611515][T14745] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 596.617507][T14745] ? exit_to_user_mode_loop+0x3b/0x110 [ 596.622970][T14745] exit_to_user_mode_loop+0x70/0x110 [ 596.628260][T14745] exit_to_user_mode_prepare+0xee/0x180 [ 596.633809][T14745] irqentry_exit_to_user_mode+0x9/0x30 [ 596.639267][T14745] exc_general_protection+0x168/0x1f0 [ 596.644713][T14745] ? exc_page_fault+0x8c/0x100 [ 596.649506][T14745] asm_exc_general_protection+0x26/0x30 [ 596.655064][T14745] RIP: 0033:0x7fec7cb9e161 [ 596.659476][T14745] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 596.679080][T14745] RSP: 002b:0000200000000240 EFLAGS: 00010217 [ 596.685143][T14745] RAX: 0000000000000000 RBX: 00007fec7ce26090 RCX: 00007fec7cb9e159 [ 596.693106][T14745] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000008000000 [ 596.701076][T14745] RBP: 00007fec7cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 596.709039][T14745] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 596.717007][T14745] R13: 00007fec7ce26128 R14: 00007fec7ce26090 R15: 00007fffa1d75838 [ 596.724992][T14745] [ 596.756769][T14745] memory: usage 307200kB, limit 307200kB, failcnt 14250 [ 596.763835][T14745] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 596.786524][T14745] kmem: usage 3952kB, limit 9007199254740988kB, failcnt 0 [ 596.793730][T14745] Memory cgroup stats for /syz3: [ 596.815734][T14745] cache 309768192 [ 596.825100][T14745] rss 757760 [ 596.829192][T14745] rss_huge 0 [ 596.832554][T14745] shmem 309653504 [ 596.836776][T14745] mapped_file 114688 [ 596.840927][T14745] dirty 114688 [ 596.844453][T14745] writeback 0 [ 596.856285][T14745] workingset_refault_anon 0 [ 596.860892][T14745] workingset_refault_file 0 [ 596.865453][T14745] swap 127995904 [ 596.876330][T14745] pgpgin 310788 [ 596.879891][T14745] pgpgout 234976 [ 596.883473][T14745] pgfault 115061 [ 596.894134][T14745] pgmajfault 9 [ 596.901121][T14745] inactive_anon 179380224 [ 596.916331][T14745] active_anon 131031040 [ 596.920601][T14745] inactive_file 114688 [ 596.924712][T14745] active_file 0 [ 596.930407][T14745] unevictable 0 [ 596.937382][T14745] hierarchical_memory_limit 314572800 [ 596.942869][T14745] hierarchical_memsw_limit 9223372036854771712 [ 596.960714][T14745] total_cache 309768192 [ 596.964979][T14745] total_rss 757760 [ 596.975727][T14745] total_rss_huge 0 [ 596.983122][T14745] total_shmem 309653504 [ 596.990972][T14745] total_mapped_file 114688 [ 596.995525][T14745] total_dirty 114688 [ 597.001046][T14745] total_writeback 0 [ 597.004999][T14745] total_workingset_refault_anon 0 [ 597.010334][T14745] total_workingset_refault_file 0 [ 597.015410][T14745] total_swap 127995904 [ 597.023518][T14745] total_pgpgin 310788 [ 597.027733][T14745] total_pgpgout 234976 [ 597.031861][T14745] total_pgfault 115077 [ 597.035981][T14745] total_pgmajfault 9 [ 597.040689][T14745] total_inactive_anon 179380224 [ 597.045592][T14745] total_active_anon 131031040 [ 597.050380][T14745] total_inactive_file 114688 [ 597.055021][T14745] total_active_file 0 [ 597.059402][T14745] total_unevictable 0 [ 597.063425][T14745] anon_cost 0 [ 597.067641][T14745] file_cost 0 [ 597.070982][T14745] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2580,pid=14730,uid=0 [ 597.107331][T14745] Memory cgroup out of memory: Killed process 14730 (syz.3.2580) total-vm:98596kB, anon-rss:1256kB, file-rss:56320kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 597.391716][T14737] syz.3.2580 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 597.444505][T14737] CPU: 1 PID: 14737 Comm: syz.3.2580 Not tainted syzkaller #0 [ 597.452067][T14737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 597.462151][T14737] Call Trace: [ 597.465440][T14737] [ 597.468377][T14737] dump_stack_lvl+0x18c/0x250 [ 597.473073][T14737] ? show_regs_print_info+0x20/0x20 [ 597.478278][T14737] ? load_image+0x420/0x420 [ 597.482781][T14737] ? ___ratelimit+0x478/0x610 [ 597.487472][T14737] ? radix_tree_cpu_dead+0x160/0x160 [ 597.492829][T14737] dump_header+0xd8/0x820 [ 597.497218][T14737] oom_kill_process+0x390/0x580 [ 597.502117][T14737] out_of_memory+0xe0e/0x1200 [ 597.506859][T14737] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 597.512511][T14737] ? mutex_lock_nested+0x20/0x20 [ 597.517452][T14737] ? unregister_oom_notifier+0x20/0x20 [ 597.522921][T14737] mem_cgroup_out_of_memory+0x2c2/0x390 [ 597.528471][T14737] ? try_charge_memcg+0xc91/0x17c0 [ 597.533584][T14737] ? drain_local_stock+0x630/0x630 [ 597.538736][T14737] ? do_raw_spin_unlock+0x121/0x230 [ 597.543955][T14737] try_charge_memcg+0xca1/0x17c0 [ 597.548910][T14737] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 597.554755][T14737] ? folio_flags+0x120/0x120 [ 597.559378][T14737] ? shmem_alloc_folio+0x1f4/0x2a0 [ 597.564520][T14737] ? percpu_ref_tryget+0x15/0x180 [ 597.569544][T14737] ? get_mem_cgroup_from_mm+0x38/0x290 [ 597.575006][T14737] charge_memcg+0x11b/0x3b0 [ 597.579529][T14737] ? __mem_cgroup_charge+0x80/0x80 [ 597.584635][T14737] ? get_mem_cgroup_from_mm+0x38/0x290 [ 597.590091][T14737] ? get_mem_cgroup_from_mm+0x38/0x290 [ 597.595550][T14737] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 597.601099][T14737] __mem_cgroup_charge+0x25/0x80 [ 597.606036][T14737] shmem_add_to_page_cache+0x8d3/0x1b80 [ 597.611586][T14737] ? xas_load+0x12b/0x140 [ 597.615929][T14737] ? shmem_alloc_folio+0x2a0/0x2a0 [ 597.621075][T14737] shmem_get_folio_gfp+0x1037/0x2b40 [ 597.626382][T14737] shmem_write_begin+0xf2/0x430 [ 597.631254][T14737] generic_perform_write+0x2fe/0x5c0 [ 597.636566][T14737] ? generic_file_direct_write+0x3e0/0x3e0 [ 597.642374][T14737] ? down_write+0x16e/0x200 [ 597.646883][T14737] ? file_update_time+0x98/0x1a0 [ 597.651832][T14737] shmem_file_write_iter+0xfb/0x120 [ 597.657032][T14737] __kernel_write_iter+0x29f/0x6d0 [ 597.662152][T14737] ? vfs_read+0x990/0x990 [ 597.666484][T14737] ? __asan_memset+0x22/0x40 [ 597.671098][T14737] ? iov_iter_bvec+0xd4/0x1b0 [ 597.675810][T14737] dump_user_range+0x418/0x840 [ 597.680599][T14737] ? dump_skip+0x40/0x40 [ 597.684861][T14737] ? dump_emit+0x78/0xe0 [ 597.689127][T14737] ? dump_emit+0xa6/0xe0 [ 597.693392][T14737] ? elf_core_dump+0x2dbb/0x37c0 [ 597.698359][T14737] elf_core_dump+0x320e/0x37c0 [ 597.703164][T14737] ? load_elf_binary+0x2850/0x2850 [ 597.708289][T14737] ? verify_lock_unused+0x140/0x140 [ 597.713494][T14737] ? perf_trace_lock_acquire+0x105/0x400 [ 597.719154][T14737] ? rcu_read_lock_any_held+0xb4/0x140 [ 597.724634][T14737] ? 0xffffffffff600000 [ 597.728799][T14737] do_coredump+0x1791/0x24a0 [ 597.733404][T14737] ? nfs_stat_to_errno+0x170/0x170 [ 597.738531][T14737] ? lock_chain_count+0x20/0x20 [ 597.743391][T14737] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.748593][T14737] ? lockdep_hardirqs_on+0x98/0x150 [ 597.753795][T14737] get_signal+0x10da/0x1390 [ 597.758317][T14737] arch_do_signal_or_restart+0xc2/0x7b0 [ 597.763871][T14737] ? get_sigframe_size+0x20/0x20 [ 597.768812][T14737] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 597.774800][T14737] ? exit_to_user_mode_loop+0x3b/0x110 [ 597.780261][T14737] exit_to_user_mode_loop+0x70/0x110 [ 597.785551][T14737] exit_to_user_mode_prepare+0xee/0x180 [ 597.791106][T14737] irqentry_exit_to_user_mode+0x9/0x30 [ 597.796571][T14737] exc_general_protection+0x168/0x1f0 [ 597.801953][T14737] ? exc_page_fault+0x8c/0x100 [ 597.806714][T14737] asm_exc_general_protection+0x26/0x30 [ 597.812260][T14737] RIP: 0033:0x7fec7cb9e161 [ 597.816676][T14737] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 597.836281][T14737] RSP: 002b:0000200000000240 EFLAGS: 00010217 [ 597.842348][T14737] RAX: 0000000000000000 RBX: 00007fec7ce26090 RCX: 00007fec7cb9e159 [ 597.850361][T14737] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000008000000 [ 597.858333][T14737] RBP: 00007fec7cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 597.866301][T14737] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 597.874265][T14737] R13: 00007fec7ce26128 R14: 00007fec7ce26090 R15: 00007fffa1d75838 [ 597.882265][T14737] [ 598.160322][T14737] memory: usage 306784kB, limit 307200kB, failcnt 15083 [ 598.167549][T14737] memory+swap: usage 426584kB, limit 9007199254740988kB, failcnt 0 [ 598.200853][T14737] kmem: usage 3704kB, limit 9007199254740988kB, failcnt 0 [ 598.221446][T14737] Memory cgroup stats for /syz3: [ 598.221601][T14737] cache 308744192 [ 598.261823][T14737] rss 741376 [ 598.265097][T14737] rss_huge 0 [ 598.271870][T14737] shmem 308629504 [ 598.275585][T14737] mapped_file 114688 [ 598.316061][T14737] dirty 114688 [ 598.326703][T14737] writeback 0 [ 598.330033][T14737] workingset_refault_anon 0 [ 598.360763][T14737] workingset_refault_file 0 [ 598.400593][T14737] swap 119595008 [ 598.404218][T14737] pgpgin 311800 [ 598.426220][T14737] pgpgout 236242 [ 598.429860][T14737] pgfault 115061 [ 598.441339][T14737] pgmajfault 9 [ 598.453675][T14737] inactive_anon 298577920 [ 598.466178][T14737] active_anon 10715136 [ 598.470339][T14737] inactive_file 114688 [ 598.474443][T14737] active_file 0 [ 598.507714][T14737] unevictable 0 [ 598.511245][T14737] hierarchical_memory_limit 314572800 [ 598.547236][T14737] hierarchical_memsw_limit 9223372036854771712 [ 598.553471][T14737] total_cache 308744192 [ 598.598163][T14737] total_rss 741376 [ 598.601961][T14737] total_rss_huge 0 [ 598.605687][T14737] total_shmem 308629504 [ 598.629304][T14737] total_mapped_file 114688 [ 598.633796][T14737] total_dirty 114688 [ 598.659215][T14737] total_writeback 0 [ 598.663510][T14737] total_workingset_refault_anon 0 [ 598.690204][T14737] total_workingset_refault_file 0 [ 598.695312][T14737] total_swap 119595008 [ 598.699555][T14737] total_pgpgin 311800 [ 598.703788][T14737] total_pgpgout 236242 [ 598.736348][T14737] total_pgfault 115077 [ 598.740517][T14737] total_pgmajfault 9 [ 598.772515][T14737] total_inactive_anon 298577920 [ 598.790315][T14737] total_active_anon 10715136 [ 598.816190][T14737] total_inactive_file 114688 [ 598.820850][T14737] total_active_file 0 [ 598.824842][T14737] total_unevictable 0 [ 598.860317][T14737] anon_cost 0 [ 598.864784][T14737] file_cost 0 [ 598.908052][T14737] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2580,pid=14748,uid=0 [ 598.981197][T14737] Memory cgroup out of memory: Killed process 14748 (syz.3.2580) total-vm:98728kB, anon-rss:1256kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 600.405450][T14760] syz.3.2580 (14760) used greatest stack depth: 17192 bytes left [ 601.107263][ T30] oom_reaper: reaped process 14748 (syz.3.2580), now anon-rss:124kB, file-rss:53468kB, shmem-rss:0kB [ 601.783981][T14753] syz.3.2580 (14753) used greatest stack depth: 17064 bytes left [ 606.148973][T15059] netlink: 'syz.3.2673': attribute type 3 has an invalid length. [ 606.166564][T15059] netlink: 'syz.3.2673': attribute type 6 has an invalid length. [ 606.186464][T15059] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.2673'. [ 607.403898][T15106] netlink: 'syz.2.2688': attribute type 2 has an invalid length. [ 607.443409][T15111] IPv6: pim6reg1: Disabled Multicast RS [ 607.481118][T15106] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2688'. [ 608.053921][T13621] Bluetooth: hci1: Malformed LE Event: 0x0d [ 608.814982][T15149] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2702'. [ 608.837646][T15149] openvswitch: netlink: IP tunnel dst address not specified [ 610.481755][T15156] netlink: 'syz.0.2705': attribute type 2 has an invalid length. [ 610.523147][T15161] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2707'. [ 610.741981][T15161] team0: Port device team_slave_0 removed [ 610.769671][T15161] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 610.876277][T15164] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2705'. [ 611.783559][T15174] syzkaller0: entered promiscuous mode [ 611.794903][T15174] syzkaller0: entered allmulticast mode [ 611.882092][T15184] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2713'. [ 612.061756][T15187] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.2715'. [ 612.087791][T15187] openvswitch: netlink: IP tunnel dst address not specified [ 613.757088][T15192] netlink: 'syz.2.2716': attribute type 21 has an invalid length. [ 613.779664][T15192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2716'. [ 613.794720][T15192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2716'. [ 613.935277][T13621] Bluetooth: hci2: ISO packet for unknown connection handle 22 [ 613.965061][T15201] netlink: 'syz.0.2719': attribute type 29 has an invalid length. [ 613.987280][T15201] netlink: 'syz.0.2719': attribute type 29 has an invalid length. [ 614.053929][T15201] netlink: 'syz.0.2719': attribute type 29 has an invalid length. [ 614.071104][T15201] netlink: 'syz.0.2719': attribute type 29 has an invalid length. [ 614.081738][T15201] netlink: 'syz.0.2719': attribute type 29 has an invalid length. [ 614.177302][T15211] netlink: 'syz.3.2720': attribute type 2 has an invalid length. [ 614.424968][T15205] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2720'. [ 615.402747][T15230] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.2727'. [ 615.426419][T15230] openvswitch: netlink: IP tunnel dst address not specified [ 615.901380][T15251] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.2733'. [ 616.301000][T15263] netlink: 'syz.0.2738': attribute type 10 has an invalid length. [ 616.319656][T15263] syz_tun: entered promiscuous mode [ 616.377780][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 616.422873][T15263] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 616.547061][T15274] sit0: entered allmulticast mode [ 616.777552][T15263] netlink: 'syz.0.2738': attribute type 10 has an invalid length. [ 617.037807][T15263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.130234][T15263] team0: Port device bond0 added [ 617.145802][T15275] sit0: entered promiscuous mode [ 617.382706][T15286] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2746'. [ 617.488037][T15298] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2746'. [ 617.514414][T15286] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2746'. [ 618.705627][T15328] netlink: 'syz.3.2760': attribute type 29 has an invalid length. [ 619.176538][T15341] sctp: [Deprecated]: syz.0.2761 (pid 15341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 619.176538][T15341] Use struct sctp_sack_info instead [ 619.390634][T15352] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2765'. [ 619.405597][T15352] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 619.894390][T15366] validate_nla: 1 callbacks suppressed [ 619.894410][T15366] netlink: 'syz.1.2769': attribute type 9 has an invalid length. [ 619.918634][T15366] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2769'. [ 620.018545][T15370] C: renamed from team_slave_0 (while UP) [ 620.155368][T15370] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2770'. [ 620.761602][T15376] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2771'. [ 621.309454][T15412] netlink: 191644 bytes leftover after parsing attributes in process `syz.1.2779'. [ 621.329705][T15410] netlink: 'syz.1.2779': attribute type 27 has an invalid length. [ 621.374478][T15410] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2779'. [ 621.544971][T15424] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2783'. [ 622.012976][T15441] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 622.232769][T15449] sock: sock_set_timeout: `syz.0.2790' (pid 15449) tries to set negative timeout [ 622.288977][T15451] netlink: 'syz.2.2791': attribute type 9 has an invalid length. [ 622.475502][T15453] __nla_validate_parse: 2 callbacks suppressed [ 622.475527][T15453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2792'. [ 622.805380][T15459] FAULT_INJECTION: forcing a failure. [ 622.805380][T15459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.819646][T15459] CPU: 1 PID: 15459 Comm: syz.1.2793 Not tainted syzkaller #0 [ 622.827177][T15459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 622.837542][T15459] Call Trace: [ 622.840841][T15459] [ 622.843804][T15459] dump_stack_lvl+0x18c/0x250 [ 622.848658][T15459] ? show_regs_print_info+0x20/0x20 [ 622.853934][T15459] ? load_image+0x420/0x420 [ 622.858526][T15459] ? __might_fault+0xaa/0x120 [ 622.863263][T15459] ? __lock_acquire+0x7d80/0x7d80 [ 622.868378][T15459] should_fail_ex+0x394/0x4c0 [ 622.873115][T15459] _copy_from_user+0x2f/0xe0 [ 622.877782][T15459] vlan_ioctl_handler+0xbe/0x630 [ 622.882899][T15459] ? sock_ioctl+0x632/0x7e0 [ 622.887473][T15459] ? net_generic+0x240/0x240 [ 622.892124][T15459] ? net_generic+0x240/0x240 [ 622.896764][T15459] sock_ioctl+0x652/0x7e0 [ 622.901149][T15459] ? sock_poll+0x3e0/0x3e0 [ 622.905637][T15459] ? bpf_lsm_file_ioctl+0x9/0x10 [ 622.910625][T15459] ? security_file_ioctl+0x80/0xa0 [ 622.915796][T15459] ? sock_poll+0x3e0/0x3e0 [ 622.920275][T15459] __se_sys_ioctl+0xfd/0x170 [ 622.924951][T15459] do_syscall_64+0x55/0xb0 [ 622.929437][T15459] ? clear_bhb_loop+0x40/0x90 [ 622.934173][T15459] ? clear_bhb_loop+0x40/0x90 [ 622.938925][T15459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.944895][T15459] RIP: 0033:0x7f8fb459e159 [ 622.949367][T15459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.969079][T15459] RSP: 002b:00007f8fb546f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.977584][T15459] RAX: ffffffffffffffda RBX: 00007f8fb4825fa0 RCX: 00007f8fb459e159 [ 622.985628][T15459] RDX: 0000200000000080 RSI: 0000000000008983 RDI: 0000000000000006 [ 622.993747][T15459] RBP: 00007f8fb546f090 R08: 0000000000000000 R09: 0000000000000000 [ 623.001812][T15459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.009855][T15459] R13: 00007f8fb4826038 R14: 00007f8fb4825fa0 R15: 00007ffd0d725f78 [ 623.017914][T15459] [ 623.042065][T15462] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2794'. [ 623.320942][T15464] netlink: 'syz.2.2802': attribute type 9 has an invalid length. [ 623.346833][T15464] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2802'. [ 624.399374][T15483] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2803'. [ 624.460222][T15486] FAULT_INJECTION: forcing a failure. [ 624.460222][T15486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.503679][T15488] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2804'. [ 624.507226][T15486] CPU: 0 PID: 15486 Comm: syz.3.2805 Not tainted syzkaller #0 [ 624.520804][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 624.530976][T15486] Call Trace: [ 624.534319][T15486] [ 624.537573][T15486] dump_stack_lvl+0x18c/0x250 [ 624.542385][T15486] ? show_regs_print_info+0x20/0x20 [ 624.547681][T15486] ? load_image+0x420/0x420 [ 624.552261][T15486] ? __lock_acquire+0x7d80/0x7d80 [ 624.557376][T15486] ? snprintf+0xe9/0x140 [ 624.561739][T15486] should_fail_ex+0x394/0x4c0 [ 624.566531][T15486] _copy_to_user+0x2f/0xa0 [ 624.571061][T15486] simple_read_from_buffer+0xe7/0x150 [ 624.576544][T15486] proc_fail_nth_read+0x1e8/0x260 [ 624.581653][T15486] ? proc_fault_inject_write+0x360/0x360 [ 624.587372][T15486] ? fsnotify_perm+0x271/0x5e0 [ 624.592217][T15486] ? proc_fault_inject_write+0x360/0x360 [ 624.597938][T15486] vfs_read+0x298/0x990 [ 624.602214][T15486] ? kernel_read+0x1e0/0x1e0 [ 624.606949][T15486] ? __fget_files+0x28/0x460 [ 624.611616][T15486] ? __fget_files+0x3fc/0x460 [ 624.616463][T15486] ? __fdget_pos+0x2a3/0x330 [ 624.621118][T15486] ? ksys_read+0x74/0x260 [ 624.625514][T15486] ksys_read+0x151/0x260 [ 624.629841][T15486] ? vfs_write+0x9a0/0x9a0 [ 624.634335][T15486] ? lockdep_hardirqs_on+0x98/0x150 [ 624.639607][T15486] do_syscall_64+0x55/0xb0 [ 624.644090][T15486] ? clear_bhb_loop+0x40/0x90 [ 624.648832][T15486] ? clear_bhb_loop+0x40/0x90 [ 624.653596][T15486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.659576][T15486] RIP: 0033:0x7fec7cb5e98e [ 624.664044][T15486] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 624.683696][T15486] RSP: 002b:00007fec7d9e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 624.692139][T15486] RAX: ffffffffffffffda RBX: 00007fec7d9e36c0 RCX: 00007fec7cb5e98e [ 624.700154][T15486] RDX: 000000000000000f RSI: 00007fec7d9e30a0 RDI: 0000000000000006 [ 624.708158][T15486] RBP: 00007fec7d9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 624.716164][T15486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.724181][T15486] R13: 00007fec7ce26038 R14: 00007fec7ce25fa0 R15: 00007fffa1d75838 [ 624.732229][T15486] [ 624.759080][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.776232][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.996978][T15499] netlink: 'syz.3.2809': attribute type 10 has an invalid length. [ 625.009394][T15499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2809'. [ 625.039475][T15499] batman_adv: batadv0: Adding interface: virt_wifi0 [ 625.056243][T15499] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.096571][T15499] batman_adv: batadv0: Interface activated: virt_wifi0 [ 625.280520][T15508] netlink: 'syz.1.2811': attribute type 13 has an invalid length. [ 625.321586][T15508] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2811'. [ 625.358247][T15511] netlink: 'syz.1.2811': attribute type 2 has an invalid length. [ 625.389515][T15511] netlink: 'syz.1.2811': attribute type 1 has an invalid length. [ 625.423754][T15511] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2811'. [ 625.457369][T15508] erspan0: refused to change device tx_queue_len [ 625.497281][T15508] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 625.734863][T15521] C: renamed from team_slave_0 (while UP) [ 625.838968][T15521] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2815'. [ 625.879204][T15523] netlink: 'syz.0.2817': attribute type 7 has an invalid length. [ 625.918564][T15529] netlink: 'syz.1.2816': attribute type 2 has an invalid length. [ 625.942585][T15529] netlink: 'syz.1.2816': attribute type 1 has an invalid length. [ 625.951051][T15529] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2816'. [ 627.478821][T15548] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2822'. [ 627.759073][T15557] Dead loop on virtual device ip6_vti0, fix it urgently! [ 628.334658][T15574] syzkaller0: entered promiscuous mode [ 628.359834][T15574] syzkaller0: entered allmulticast mode [ 632.254197][T15622] syzkaller0: entered promiscuous mode [ 632.278996][T15622] syzkaller0: entered allmulticast mode [ 633.290576][T15627] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 636.422707][T15664] syzkaller0: entered promiscuous mode [ 636.429466][T15664] syzkaller0: entered allmulticast mode [ 636.864164][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 639.713453][T15703] syzkaller0: entered promiscuous mode [ 639.720946][T15703] syzkaller0: entered allmulticast mode [ 642.735944][T15722] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.743404][T15722] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.751391][T15722] bridge0: entered allmulticast mode [ 642.771050][T15725] bridge_slave_1: left allmulticast mode [ 642.778622][T15725] bridge_slave_1: left promiscuous mode [ 642.784354][T15725] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.800799][T15725] bridge_slave_0: left allmulticast mode [ 642.806894][T15725] bridge_slave_0: left promiscuous mode [ 642.812680][T15725] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.865237][T15794] bridge_slave_0: entered promiscuous mode [ 648.344143][T15818] wg2: entered promiscuous mode [ 648.356203][T15818] wg2: entered allmulticast mode [ 648.585552][T15827] syzkaller0: entered promiscuous mode [ 648.597379][T15827] syzkaller0: entered allmulticast mode [ 653.574861][T15882] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 657.362641][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 660.560098][T15974] syzkaller0: entered promiscuous mode [ 660.566623][T15974] syzkaller0: entered allmulticast mode [ 663.709879][T16013] syzkaller0: entered promiscuous mode [ 663.716250][T16013] syzkaller0: entered allmulticast mode [ 668.764690][T16069] syzkaller0: entered promiscuous mode [ 668.786214][T16069] syzkaller0: entered allmulticast mode [ 672.644255][T16128] syzkaller0: entered promiscuous mode [ 672.664262][T16128] syzkaller0: entered allmulticast mode [ 676.414725][T16157] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 676.461123][T16157] syzkaller0: entered promiscuous mode [ 676.467641][T16157] syzkaller0: entered allmulticast mode [ 676.523571][T16162] syzkaller0: entered promiscuous mode [ 676.529670][T16162] syzkaller0: entered allmulticast mode [ 677.822821][T13621] Bluetooth: hci3: command 0x0406 tx timeout [ 682.623063][T16195] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 682.635546][T13474] cgroup: fork rejected by pids controller in /syz1 [ 682.725916][T16195] syzkaller0: entered promiscuous mode [ 682.746373][T16195] syzkaller0: entered allmulticast mode [ 685.981819][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.988288][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.641582][T13621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 686.652920][T13621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 686.666677][T13621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 686.677548][T13621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 686.691992][T13621] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 686.706866][T13621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 687.144122][T16277] tap0: tun_chr_ioctl cmd 1074025680 [ 687.185770][T16251] chnl_net:caif_netlink_parms(): no params data found [ 687.408430][T16251] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.415857][T16251] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.423405][T16251] bridge_slave_0: entered allmulticast mode [ 687.431955][T16251] bridge_slave_0: entered promiscuous mode [ 687.447532][T16251] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.454822][T16251] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.462287][T16251] bridge_slave_1: entered allmulticast mode [ 687.469803][T16251] bridge_slave_1: entered promiscuous mode [ 687.542765][T16251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.569539][T16251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.640775][T16251] team0: Port device team_slave_0 added [ 687.651163][T16251] team0: Port device team_slave_1 added [ 687.709633][T16251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.727215][T16251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.776210][T16251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.798868][T16251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.805861][T16251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.896645][T16251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.165340][T16251] hsr_slave_0: entered promiscuous mode [ 688.224831][T16251] hsr_slave_1: entered promiscuous mode [ 688.252182][T16251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 688.286166][T16251] Cannot create hsr debugfs directory [ 688.776563][T13621] Bluetooth: hci2: command tx timeout [ 688.785010][T16327] sit0: entered allmulticast mode [ 688.820328][T16332] sit0: entered promiscuous mode [ 688.969056][T13621] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 688.969119][T13621] Bluetooth: hci1: unexpected event for opcode 0x7369 [ 689.040461][T16251] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.062894][T13621] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 689.070663][T13621] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 689.182205][T16251] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.322349][T16251] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.492343][T16251] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.774028][T16251] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 689.794521][T16251] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 689.815284][T16251] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 689.839110][T16251] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 689.979161][T13621] Bluetooth: hci3: ISO packet for unknown connection handle 255 [ 690.043721][T16251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.094427][T16251] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.164117][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.171378][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.247605][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.254808][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.408787][T16251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 690.690868][T16251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.807114][T16251] veth0_vlan: entered promiscuous mode [ 690.833264][T16251] veth1_vlan: entered promiscuous mode [ 690.856730][T13621] Bluetooth: hci2: command tx timeout [ 690.905682][T16251] veth0_macvtap: entered promiscuous mode [ 690.964939][T16251] veth1_macvtap: entered promiscuous mode [ 691.030672][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.059640][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.086705][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.130629][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.161078][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.180056][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.201175][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.215322][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.236021][T16251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.271834][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.287968][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.302021][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.319636][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.330709][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.350816][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.375709][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.416219][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.435793][T16251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.472904][T16251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.526463][T16251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.540962][T16251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.551584][T16251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.733669][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.781963][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.829656][T13621] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 691.872604][ T6622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.882814][ T6622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.804932][T13621] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 692.828685][T16435] sit0: left promiscuous mode [ 692.876056][T16436] sit0: entered promiscuous mode [ 692.936460][T13621] Bluetooth: hci2: command tx timeout [ 694.614337][T16491] sit0: entered allmulticast mode [ 694.638566][T16495] sit0: entered promiscuous mode [ 694.916371][T16505] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.016922][T13621] Bluetooth: hci2: command tx timeout [ 695.410295][T13621] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 695.418890][T13621] Bluetooth: hci1: Invalid connection link type handle 0x0000 [ 699.986934][T13621] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 703.471672][T16590] syzkaller0: entered promiscuous mode [ 703.477767][T16590] syzkaller0: entered allmulticast mode [ 707.302461][T13621] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 707.693367][T13621] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 710.676530][ T5782] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 711.364601][T16684] syzkaller0: entered promiscuous mode [ 711.375180][T16684] syzkaller0: entered allmulticast mode [ 712.178080][T13621] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 715.639862][ T5782] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 716.496962][T13621] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 716.504638][T13621] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 716.677234][T16756] syzkaller0: entered promiscuous mode [ 716.688720][T16756] syzkaller0: entered allmulticast mode [ 723.165238][T13621] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 723.174849][T13621] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 723.521581][T16808] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 723.551856][T16808] mac80211_hwsim hwsim31 wlan1: left allmulticast mode [ 725.203870][T13621] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 725.211724][T13621] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 728.811906][T13621] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 729.104192][T13621] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 729.126552][T13621] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 729.475672][ T6622] hsr_slave_0: left promiscuous mode [ 729.491475][ T6622] hsr_slave_1: left promiscuous mode [ 729.537524][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.551027][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.569509][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.580538][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.593326][ T6622] bridge_slave_1: left allmulticast mode [ 729.603301][ T6622] bridge_slave_1: left promiscuous mode [ 729.611939][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.645129][ T6622] bridge_slave_0: left allmulticast mode [ 729.655300][ T6622] bridge_slave_0: left promiscuous mode [ 729.675032][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.690881][T13621] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 729.700488][T13621] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 729.744310][ T6622] veth1_macvtap: left promiscuous mode [ 729.750140][ T6622] veth1_vlan: left promiscuous mode [ 729.755490][ T6622] veth0_vlan: left promiscuous mode [ 731.971447][ T6622] team0 (unregistering): Port device team_slave_1 removed [ 732.281664][ T6622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.509665][ T6622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.952425][T16889] ------------[ cut here ]------------ [ 732.958480][T16889] WARNING: CPU: 0 PID: 16889 at kernel/events/core.c:6808 perf_pending_task+0x357/0x480 [ 732.968654][T16889] Modules linked in: [ 732.972580][T16889] CPU: 0 PID: 16889 Comm: syz.3.3346 Not tainted syzkaller #0 [ 732.980424][T16889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 732.990920][T16889] RIP: 0010:perf_pending_task+0x357/0x480 [ 732.996981][T16889] Code: e8 8e c7 d5 ff 84 db 75 10 e8 f5 c4 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e5 c4 d5 ff e8 c0 d6 4e ff eb e9 e8 d9 c4 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 733.017491][T16889] RSP: 0018:ffffc9000ceff9c8 EFLAGS: 00010293 [ 733.023612][T16889] RAX: ffffffff81b1c677 RBX: ffff88803d07d3a0 RCX: ffff88802e5cbc00 [ 733.032028][T16889] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 733.040445][T16889] RBP: ffff88803d07d160 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 733.048770][T16889] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: ffff88802e5cbc00 [ 733.057139][T16889] R13: ffff888030bde930 R14: 0000000000000000 R15: 1ffff11007a0fa2c [ 733.065263][T16889] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 733.074276][T16889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 733.080920][T16889] CR2: 000055556a6cb4e8 CR3: 000000006951f000 CR4: 00000000003506f0 [ 733.088952][T16889] DR0: 0000200000000300 DR1: 0000000000000b6e DR2: 0000200000000300 [ 733.097019][T16889] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 733.104994][T16889] Call Trace: [ 733.108743][T16889] [ 733.111698][T16889] task_work_run+0x1d4/0x260 [ 733.116418][T16889] ? task_work_cancel+0x220/0x220 [ 733.121490][T16889] do_exit+0x986/0x2530 [ 733.125691][T16889] ? put_task_struct+0xc0/0xc0 [ 733.130574][T16889] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 733.136632][T16889] ? get_signal+0x100e/0x1390 [ 733.141353][T16889] ? lock_chain_count+0x20/0x20 [ 733.146350][T16889] ? _raw_spin_lock_irq+0xbb/0xf0 [ 733.151410][T16889] do_group_exit+0x22d/0x2f0 [ 733.156032][T16889] ? lockdep_hardirqs_on+0x98/0x150 [ 733.161328][T16889] get_signal+0x12a6/0x1390 [ 733.165850][T16889] arch_do_signal_or_restart+0xc2/0x7b0 [ 733.171589][T16889] ? get_sigframe_size+0x20/0x20 [ 733.176621][T16889] ? exit_to_user_mode_loop+0x3b/0x110 [ 733.182119][T16889] exit_to_user_mode_loop+0x70/0x110 [ 733.187513][T16889] exit_to_user_mode_prepare+0xee/0x180 [ 733.193086][T16889] syscall_exit_to_user_mode+0x1a/0x50 [ 733.198634][T16889] do_syscall_64+0x61/0xb0 [ 733.203097][T16889] ? clear_bhb_loop+0x40/0x90 [ 733.207899][T16889] ? clear_bhb_loop+0x40/0x90 [ 733.213016][T16889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.219423][T16889] RIP: 0033:0x7fec7cbbd6d0 [ 733.223871][T16889] Code: Unable to access opcode bytes at 0x7fec7cbbd6a6. [ 733.230982][T16889] RSP: 002b:00007fec7d9e2a78 EFLAGS: 00000246 [ 733.237159][T16889] RAX: 0000000000000000 RBX: 00007fec7ce25fa0 RCX: 00007fec7cb9e159 [ 733.245149][T16889] RDX: 00007fec7d9e2a80 RSI: 00007fec7d9e2bb0 RDI: 0000000000000021 [ 733.253190][T16889] RBP: 00007fec7cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 733.261270][T16889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.269313][T16889] R13: 00007fec7ce26038 R14: 00007fec7ce25fa0 R15: 00007fffa1d75838 [ 733.277358][T16889] [ 733.280377][T16889] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 733.287654][T16889] CPU: 0 PID: 16889 Comm: syz.3.3346 Not tainted syzkaller #0 [ 733.295102][T16889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 733.305154][T16889] Call Trace: [ 733.308427][T16889] [ 733.311348][T16889] dump_stack_lvl+0x18c/0x250 [ 733.316034][T16889] ? show_regs_print_info+0x20/0x20 [ 733.321232][T16889] ? load_image+0x420/0x420 [ 733.325733][T16889] panic+0x2ca/0x720 [ 733.329620][T16889] ? bpf_jit_dump+0xd0/0xd0 [ 733.334120][T16889] __warn+0x2e0/0x470 [ 733.338140][T16889] ? perf_pending_task+0x357/0x480 [ 733.343271][T16889] ? perf_pending_task+0x357/0x480 [ 733.348386][T16889] report_bug+0x2be/0x4f0 [ 733.352810][T16889] ? perf_pending_task+0x357/0x480 [ 733.357945][T16889] ? perf_pending_task+0x357/0x480 [ 733.363061][T16889] ? perf_pending_task+0x359/0x480 [ 733.368177][T16889] handle_bug+0xcf/0x120 [ 733.372426][T16889] exc_invalid_op+0x1a/0x50 [ 733.376933][T16889] asm_exc_invalid_op+0x1a/0x20 [ 733.381787][T16889] RIP: 0010:perf_pending_task+0x357/0x480 [ 733.387517][T16889] Code: e8 8e c7 d5 ff 84 db 75 10 e8 f5 c4 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e5 c4 d5 ff e8 c0 d6 4e ff eb e9 e8 d9 c4 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 733.407228][T16889] RSP: 0018:ffffc9000ceff9c8 EFLAGS: 00010293 [ 733.413294][T16889] RAX: ffffffff81b1c677 RBX: ffff88803d07d3a0 RCX: ffff88802e5cbc00 [ 733.421267][T16889] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 733.429268][T16889] RBP: ffff88803d07d160 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 733.437253][T16889] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: ffff88802e5cbc00 [ 733.445220][T16889] R13: ffff888030bde930 R14: 0000000000000000 R15: 1ffff11007a0fa2c [ 733.453195][T16889] ? perf_pending_task+0x357/0x480 [ 733.458320][T16889] ? perf_pending_task+0x357/0x480 [ 733.463433][T16889] task_work_run+0x1d4/0x260 [ 733.468026][T16889] ? task_work_cancel+0x220/0x220 [ 733.473055][T16889] do_exit+0x986/0x2530 [ 733.477218][T16889] ? put_task_struct+0xc0/0xc0 [ 733.481984][T16889] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 733.487966][T16889] ? get_signal+0x100e/0x1390 [ 733.492842][T16889] ? lock_chain_count+0x20/0x20 [ 733.497742][T16889] ? _raw_spin_lock_irq+0xbb/0xf0 [ 733.502782][T16889] do_group_exit+0x22d/0x2f0 [ 733.507385][T16889] ? lockdep_hardirqs_on+0x98/0x150 [ 733.512602][T16889] get_signal+0x12a6/0x1390 [ 733.517127][T16889] arch_do_signal_or_restart+0xc2/0x7b0 [ 733.522695][T16889] ? get_sigframe_size+0x20/0x20 [ 733.527660][T16889] ? exit_to_user_mode_loop+0x3b/0x110 [ 733.533123][T16889] exit_to_user_mode_loop+0x70/0x110 [ 733.538428][T16889] exit_to_user_mode_prepare+0xee/0x180 [ 733.544009][T16889] syscall_exit_to_user_mode+0x1a/0x50 [ 733.549477][T16889] do_syscall_64+0x61/0xb0 [ 733.553909][T16889] ? clear_bhb_loop+0x40/0x90 [ 733.558590][T16889] ? clear_bhb_loop+0x40/0x90 [ 733.563300][T16889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.569212][T16889] RIP: 0033:0x7fec7cbbd6d0 [ 733.573625][T16889] Code: Unable to access opcode bytes at 0x7fec7cbbd6a6. [ 733.580636][T16889] RSP: 002b:00007fec7d9e2a78 EFLAGS: 00000246 [ 733.586704][T16889] RAX: 0000000000000000 RBX: 00007fec7ce25fa0 RCX: 00007fec7cb9e159 [ 733.594679][T16889] RDX: 00007fec7d9e2a80 RSI: 00007fec7d9e2bb0 RDI: 0000000000000021 [ 733.602684][T16889] RBP: 00007fec7cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 733.610681][T16889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.618661][T16889] R13: 00007fec7ce26038 R14: 00007fec7ce25fa0 R15: 00007fffa1d75838 [ 733.626646][T16889] [ 733.629965][T16889] Kernel Offset: disabled [ 733.634288][T16889] Rebooting in 86400 seconds..