last executing test programs: 9.329710491s ago: executing program 1 (id=4794): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001500)}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x4, 0x108, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000e1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.683444279s ago: executing program 1 (id=4796): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='\"', 0xffc0}], 0x1}, 0x40004044) 8.622388509s ago: executing program 1 (id=4798): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50606, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="03000004040000000400100000000000000000004b59a79d1700984b5d98db3708d6503982386b5fdbb3387847df78acd6e9e5e3f4ead80cc1af3a1bcbc942c1989a264a12997b12d59df13198c245d8ec2ad2deedc6e377012172fccd6d140e631a601f", @ANYRES32, @ANYBLOB="ffffff7f000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) 5.472652345s ago: executing program 1 (id=4803): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x6, 0x4, 0x4, 0x3, 0x0, 0x1, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) openat$cgroup_devices(r4, &(0x7f0000002940)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r6 = socket$kcm(0xa, 0x3, 0x73) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002900)={&(0x7f0000001740)="56d79677c027eff3c954edc81abd7827b41b432e2318bb45f251a1de6db74d86085c394c28b1f6e8ae3fdb1b619f705f3671ab9c1a95582225bd05dc997f85dcd906c849a16b50d5c57c2de21f7d918335fafe96187aacb7b93bfeb59a46c292", &(0x7f00000017c0)=""/124, &(0x7f0000001840)="15a8a19de0baab7453e3c05c14eb0ffdc567a3fd262aa258c2f0372d7b4178727280a56a0406e3274ae0a1ec12a61408dd56ebfe39a9157f783ed8a0d990a6513d9181bcd4e010769107efa170b2bbfe690add807faaf8582f7d4305f50452a769b002d339478adcc5f219a4c8e6f78c2ea07a6f73b2f544bf7ab284b22d4fce8f9f108e056409064ce9ca05188d18e89240539ffcac81900ee5d4c91dc416b8c1b775b550decbfaed", &(0x7f0000001900)="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", 0x1, r1}, 0x38) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x25, 0x29, 0x2}}, @ip_tos_u8={{0xffff0000, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001140)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', r3, r7, 0x2, 0x2, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001440)={r4, 0x58, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001500)={0x1, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r1, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)=r5}, 0x20) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001600)={r2, 0x2, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x6, 0x1a, &(0x7f0000001240)=@raw=[@ringbuf_query, @generic={0xc, 0x9, 0x1, 0xf2d0, 0x49}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, @alu={0x4, 0x1, 0x2, 0x4, 0x4, 0x30}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4981}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff9f0b}}], &(0x7f0000001340)='syzkaller\x00', 0xffff, 0x18, &(0x7f0000001380)=""/24, 0x40f00, 0x1c, '\x00', r9, @xdp, r4, 0x8, &(0x7f0000001480)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000014c0)={0x0, 0xe, 0xfffffffc, 0x6}, 0x10, r10, r8, 0x0, &(0x7f0000001640)=[r11, r12], 0x0, 0x10, 0x56}, 0x94) r13 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) 5.174539885s ago: executing program 1 (id=4806): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0x5}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000180)='syzkaller\x00', 0x80000000, 0x1d, &(0x7f00000001c0)=""/29, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xe, 0x2, 0x8f}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xffffffffffffff9d, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x84, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) close(r0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0xfffffffffffffd4e, 0x0}, 0x10) r5 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x31, &(0x7f0000000640)=r8, 0x4) close(r9) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000700)={r4}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) 5.046821407s ago: executing program 1 (id=4808): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0xd, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x380000000000000, 0x39f7155e}, 0x0, 0x2, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x8000000, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, r1, 0x3) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="250a00000100bc224a9400000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="0500"/25]) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x80, 0x0}, 0x20000010) socket$kcm(0x2b, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x900, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5a", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x16766f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x6}, 0x8008, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000f7030000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000bb0000000000000000000000000020000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12060000000400"/20, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.933890859s ago: executing program 0 (id=4818): socket$kcm(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001500000020007357ccdc1700000000000100000d020000000400000001000000030000000000000a030000dfff00"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x35a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x500, 0x2}, 0x1075, 0x6, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x1c0000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="0000000500004ae8f89d2bd17195608466f6374e3b9609cd0b305e6fddadb21b2962e0e1919d61b4e16a96369ef0e06a9725daa80b1adc56dd215e10d63d9bcbd17c86ae5250e2282ca84a1362deec50459c14c7e08c57cc611a7a05a54f1eaf494968109e6d23ce4776c33a508778584ac109e5", @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x872b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="068d0be900f5ff3020", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000020000000000000001000000850000001300000085000000a000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8010, 0x80, 0x53a1bd76, 0x0, 0x800009, 0xa, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x3b, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) 2.933447909s ago: executing program 2 (id=4819): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffff}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 2.733717573s ago: executing program 2 (id=4821): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0xd, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x380000000000000, 0x39f7155e}, 0x0, 0x2, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x8000000, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, r1, 0x3) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="250a00000100bc224a9400000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="0500"/25]) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x80, 0x0}, 0x20000010) socket$kcm(0x2b, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x900, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0xb, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a2939", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x16766f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x6}, 0x8008, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000f7030000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000bb0000000000000000000000000020000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12060000000400"/20, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.682411561s ago: executing program 3 (id=4822): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x6000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0x0}, 0x90) 2.508983341s ago: executing program 3 (id=4824): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0xd, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x380000000000000, 0x39f7155e}, 0x0, 0x2, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x8000000, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, r1, 0x3) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="250a00000100bc224a9400000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="0500"/25]) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x80, 0x0}, 0x20000010) socket$kcm(0x2b, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x900, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5a", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x16766f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x6}, 0x8008, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000f7030000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000bb0000000000000000000000000020000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12060000000400"/20, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.507460361s ago: executing program 0 (id=4825): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x3}, 0x106581, 0x4, 0x2, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe03020e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 2.250594424s ago: executing program 0 (id=4826): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x53, 0x0, 0x0, 0x6, 0x1, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000, 0x8}, {0x1000000a, 0x7, 0xf, 0x8}], 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="61202a3a2a20f26d001d1c4027dc6dc0141db4206c5a12f691261bc26b2a27e6f06917a71e1f1c15bf0492c6894572519e5502ad"], 0x9) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000000)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r9) ioctl$TUNGETVNETLE(r9, 0x8953, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 1.355583393s ago: executing program 0 (id=4827): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='\r\x00'], 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x400}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x101, 0xeca2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x1, 0x0, &(0x7f0000000300)="ef6a80a33a20a014ebfd674ce443d1d9813a1bd4126175eeab5816e35704abcb401e494a0b376f05d5713615c392817c81c9b0fc0204b72bbbad70fc4b2b9472727498b39f435da4434544bf7282d0f85deba9010d8aae218fa2c1201f065b10024af20d269c97c5892350cba43ce0be0835b97cc5ff679f7cd77ec883f30701fb00bb473b882e2c7b87050386d3d5a9f18d0bc75b65037085de559875b9e4167e0f53e6cc79771f3c76a6ffe988e57777edaa2770ccd657c0dab1ee75fc29951d008cb285ad07849cccac78dbfa63c4cf3e4d67872b", 0x0, 0x9, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x7f) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x12, 0x0, 0x0) 1.354965703s ago: executing program 2 (id=4828): perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001a80)="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", 0x2ff}], 0x4, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x0, 0xb, "3a047e2aae56e4b9ea"}]}}}], 0x48}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r2, 0x400454de, 0x0) socket$kcm(0x29, 0x4, 0x0) 1.354295633s ago: executing program 3 (id=4829): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x4, 0x0, @loopback}, 0x10, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0xa, 0x16, 0x6, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x61, 0x0, 0x0, 0xa00}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x2, 0x73) (async) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x4, 0x0, @loopback}, 0x10, 0x0}, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0xa, 0x16, 0x6, 0x7f}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x61, 0x0, 0x0, 0xa00}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) (async) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xb) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) 1.100819535s ago: executing program 3 (id=4830): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="03000004040000000400100000000000000000004b59a79d1700984b5d98db3708d6503982386b5fdbb3387847df78acd6e9e5e3f4ead80cc1af3a1bcbc942c1989a264a12997b12d59df13198c245d8ec2ad2deedc6e377012172fccd6d140e631a601f", @ANYRES32, @ANYBLOB="ffffff7f000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) 966.496268ms ago: executing program 0 (id=4831): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1a, &(0x7f0000000940), 0x4) recvmsg$kcm(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000003940)=""/4092, 0xffc}, {&(0x7f0000001940)=""/19, 0x13}, {&(0x7f0000001a00)=""/206, 0xce}, {&(0x7f0000001b00)=""/37, 0x25}], 0x4}, 0x2) 749.495144ms ago: executing program 3 (id=4832): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @alu={0x7, 0x0, 0xc, 0x0, 0x1, 0x4, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000200)=[{0x2, 0x5, 0xc, 0xc}, {0x2, 0x4, 0x0, 0x3}, {0x4, 0x1, 0x0, 0xb}, {0x0, 0x1, 0xe, 0xb}], 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000240)="b92cd7093189d38ff69f532186ddf9c05187c23ce02f9bc5cb3ee8a013d2d95265dfc056c8f3e949c848f457b28119ed3f56ec46c741", 0x0, 0x80, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x1ff, 0x200}, 0x11c044, 0xcdd, 0x43a1bd76, 0x4, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) sendmsg$inet(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f00000002c0)=r6}, 0x20) sendmsg$inet(r8, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x40000002) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) 647.049312ms ago: executing program 2 (id=4833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x12000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x64, 0x0, 0x69, 0x11, 0xb9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 536.01872ms ago: executing program 2 (id=4834): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000cb300000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x2, 0x3, 0x84) write$cgroup_subtree(r1, 0x0, 0x101d0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x2160) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000002000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 411.689991ms ago: executing program 3 (id=4835): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0xd, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x380000000000000, 0x39f7155e}, 0x0, 0x2, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x8000000, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, r1, 0x3) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="250a00000100bc224a9400000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="0500"/25]) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x80, 0x0}, 0x20000010) socket$kcm(0x2b, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x900, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5a", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x16766f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x6}, 0x8008, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000f7030000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000bb0000000000000000000000000020000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12060000000400"/20, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.639689ms ago: executing program 0 (id=4836): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x53, 0x0, 0x0, 0x6, 0x1, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000, 0x8}, {0x1000000a, 0x7, 0xf, 0x8}], 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="61202a3a2a20f26d001d1c4027dc6dc0141db4206c5a12f691261bc26b2a27e6f06917a71e1f1c15bf0492c6894572519e5502ad"], 0x9) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000000)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r9) ioctl$TUNGETVNETLE(r9, 0x8953, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 0s ago: executing program 2 (id=4837): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8906, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x54e}, 0x80, 0xf452, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var, @func={0x0, 0x0, 0x0, 0xc, 0x5}, @volatile, @volatile]}}, 0x0, 0x4e}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r5 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) kernel console output (not intermixed with test programs): 19975] team0: Device ipvlan1 failed to register rx_handler [ 988.821862][T19982] netlink: 'syz.2.3914': attribute type 10 has an invalid length. [ 989.052357][T19997] netlink: 'syz.1.3922': attribute type 3 has an invalid length. [ 989.063273][T19997] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3922'. [ 989.473027][T20006] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3927'. [ 989.641517][T20008] netlink: 'syz.1.3926': attribute type 10 has an invalid length. [ 989.669691][T20008] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3926'. [ 990.198657][T20020] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3930'. [ 990.398563][T20028] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3934'. [ 990.741953][T20034] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3937'. [ 990.992123][T20030] hsr0: entered promiscuous mode [ 991.008391][T20030] bridge0: port 3(hsr0) entered blocking state [ 991.025856][T20030] bridge0: port 3(hsr0) entered disabled state [ 991.039689][T20030] hsr0: entered allmulticast mode [ 991.059952][T20030] hsr_slave_0: entered allmulticast mode [ 991.092675][T20030] hsr_slave_1: entered allmulticast mode [ 991.145858][T20030] bridge0: port 3(hsr0) entered blocking state [ 991.152590][T20030] bridge0: port 3(hsr0) entered forwarding state [ 991.270874][T20043] FAULT_INJECTION: forcing a failure. [ 991.270874][T20043] name failslab, interval 1, probability 0, space 0, times 0 [ 991.293054][T20043] CPU: 0 PID: 20043 Comm: syz.1.3940 Not tainted syzkaller #0 [ 991.300996][T20043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 991.311269][T20043] Call Trace: [ 991.314666][T20043] [ 991.317651][T20043] dump_stack_lvl+0x18c/0x250 [ 991.322459][T20043] ? sctp_sendmsg+0x1575/0x28c0 [ 991.327393][T20043] ? ___sys_sendmsg+0x2a6/0x360 [ 991.332332][T20043] ? show_regs_print_info+0x20/0x20 [ 991.337707][T20043] ? load_image+0x420/0x420 [ 991.342507][T20043] should_fail_ex+0x39d/0x4d0 [ 991.347768][T20043] should_failslab+0x9/0x20 [ 991.352363][T20043] slab_pre_alloc_hook+0x59/0x310 [ 991.357842][T20043] ? sctp_add_bind_addr+0x8c/0x360 [ 991.363027][T20043] __kmem_cache_alloc_node+0x53/0x250 [ 991.368679][T20043] ? sctp_add_bind_addr+0x8c/0x360 [ 991.373898][T20043] kmalloc_trace+0x2a/0xe0 [ 991.378503][T20043] sctp_add_bind_addr+0x8c/0x360 [ 991.383649][T20043] sctp_copy_local_addr_list+0x315/0x4f0 [ 991.389375][T20043] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 991.395172][T20043] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 991.401407][T20043] ? sctp_v4_is_any+0x35/0x60 [ 991.406203][T20043] ? sctp_copy_one_addr+0x8c/0x350 [ 991.411408][T20043] sctp_bind_addr_copy+0xb3/0x3c0 [ 991.416518][T20043] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 991.423240][T20043] sctp_connect_new_asoc+0x2f9/0x6a0 [ 991.428997][T20043] ? __sctp_connect+0xd80/0xd80 [ 991.433924][T20043] ? __local_bh_enable_ip+0x13a/0x1c0 [ 991.439367][T20043] ? _local_bh_enable+0xa0/0xa0 [ 991.444258][T20043] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 991.450112][T20043] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 991.456111][T20043] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 991.461710][T20043] ? security_sctp_bind_connect+0x89/0xb0 [ 991.467477][T20043] sctp_sendmsg+0x1575/0x28c0 [ 991.472205][T20043] ? sctp_getsockopt+0xb60/0xb60 [ 991.477178][T20043] ? aa_sk_perm+0x83c/0x970 [ 991.481847][T20043] ? aa_af_perm+0x330/0x330 [ 991.486443][T20043] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 991.493184][T20043] ? sock_rps_record_flow+0x19/0x3f0 [ 991.498617][T20043] ? inet_sendmsg+0x7c/0x2f0 [ 991.503609][T20043] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 991.509145][T20043] ? security_socket_sendmsg+0x80/0xa0 [ 991.514658][T20043] ? inet_send_prepare+0x260/0x260 [ 991.519849][T20043] ____sys_sendmsg+0x5ba/0x960 [ 991.524771][T20043] ? __lock_acquire+0x7d40/0x7d40 [ 991.529877][T20043] ? __asan_memset+0x22/0x40 [ 991.534534][T20043] ? __sys_sendmsg_sock+0x30/0x30 [ 991.539619][T20043] ? __import_iovec+0x5f2/0x850 [ 991.544635][T20043] ? import_iovec+0x73/0xa0 [ 991.549207][T20043] ___sys_sendmsg+0x2a6/0x360 [ 991.554038][T20043] ? get_pid_task+0x20/0x1e0 [ 991.558808][T20043] ? __sys_sendmsg+0x2a0/0x2a0 [ 991.563977][T20043] ? __lock_acquire+0x7d40/0x7d40 [ 991.569911][T20043] __se_sys_sendmsg+0x1c2/0x2b0 [ 991.575005][T20043] ? __x64_sys_sendmsg+0x80/0x80 [ 991.580203][T20043] ? lockdep_hardirqs_on+0x98/0x150 [ 991.585523][T20043] do_syscall_64+0x55/0xa0 [ 991.590170][T20043] ? clear_bhb_loop+0x40/0x90 [ 991.595298][T20043] ? clear_bhb_loop+0x40/0x90 [ 991.600295][T20043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 991.606578][T20043] RIP: 0033:0x7fe155f9c819 [ 991.611036][T20043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.631208][T20043] RSP: 002b:00007fe1541f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 991.639779][T20043] RAX: ffffffffffffffda RBX: 00007fe156215fa0 RCX: 00007fe155f9c819 [ 991.647796][T20043] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 991.655858][T20043] RBP: 00007fe1541f6090 R08: 0000000000000000 R09: 0000000000000000 [ 991.664035][T20043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 991.672036][T20043] R13: 00007fe156216038 R14: 00007fe156215fa0 R15: 00007ffeec1a7e78 [ 991.680066][T20043] [ 991.841515][T20049] validate_nla: 3 callbacks suppressed [ 991.841535][T20049] netlink: 'syz.3.3944': attribute type 3 has an invalid length. [ 992.337602][T20052] netlink: 'syz.2.3943': attribute type 10 has an invalid length. [ 992.926799][T20066] __nla_validate_parse: 3 callbacks suppressed [ 992.926845][T20066] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3947'. [ 993.056215][T20070] netlink: 'syz.3.3950': attribute type 10 has an invalid length. [ 993.072330][T20070] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3950'. [ 993.213478][T20080] netlink: 'syz.2.3953': attribute type 10 has an invalid length. [ 993.254266][T20080] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3953'. [ 993.300332][T20083] netlink: 'syz.3.3954': attribute type 3 has an invalid length. [ 993.310553][T20083] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3954'. [ 993.586445][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.594541][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.790086][T20095] netlink: 'syz.0.3966': attribute type 3 has an invalid length. [ 993.825812][T20095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3966'. [ 993.878192][T20089] netlink: 'syz.1.3957': attribute type 10 has an invalid length. [ 993.908221][T20089] team0: Device ipvlan1 failed to register rx_handler [ 994.255691][T20105] netlink: 'syz.2.3962': attribute type 10 has an invalid length. [ 994.283187][T20105] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3962'. [ 994.385985][T20107] netlink: 'syz.0.3963': attribute type 8 has an invalid length. [ 994.410691][T20107] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3963'. [ 995.593545][T20127] netlink: 'syz.2.3967': attribute type 10 has an invalid length. [ 995.819466][T20140] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3972'. [ 996.550435][T20148] team0: Device ipvlan1 failed to register rx_handler [ 996.708970][T20160] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3980'. [ 996.732119][T20160] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3980'. [ 996.912461][T20163] validate_nla: 2 callbacks suppressed [ 996.912483][T20163] netlink: 'syz.2.3981': attribute type 21 has an invalid length. [ 997.171017][T20172] netlink: 'syz.0.3985': attribute type 3 has an invalid length. [ 997.331361][T20178] netlink: 'syz.2.3988': attribute type 29 has an invalid length. [ 997.357939][T20178] netlink: 'syz.2.3988': attribute type 29 has an invalid length. [ 997.366503][T20178] netlink: 'syz.2.3988': attribute type 29 has an invalid length. [ 997.391949][T20178] netlink: 'syz.2.3988': attribute type 29 has an invalid length. [ 997.401125][T20178] netlink: 'syz.2.3988': attribute type 29 has an invalid length. [ 998.151015][T20190] netlink: 'syz.1.3992': attribute type 10 has an invalid length. [ 998.234832][T20190] team0: Device ipvlan1 failed to register rx_handler [ 998.713734][T20187] netlink: 'syz.2.3991': attribute type 10 has an invalid length. [ 999.427316][T20216] __nla_validate_parse: 3 callbacks suppressed [ 999.427338][T20216] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4000'. [ 999.463328][T20216] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4000'. [ 999.485211][T20217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4000'. [ 999.709729][T20224] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4003'. [ 999.830783][T20223] netlink: 'syz.0.4002': attribute type 10 has an invalid length. [ 999.882514][T20223] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4002'. [ 1000.144326][T20226] team0: Device ipvlan1 failed to register rx_handler [ 1000.420366][T20236] veth0_macvtap: left promiscuous mode [ 1000.603962][T20243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4009'. [ 1001.448722][T20258] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4013'. [ 1001.609480][T20263] FAULT_INJECTION: forcing a failure. [ 1001.609480][T20263] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.647159][T20263] CPU: 1 PID: 20263 Comm: syz.0.4015 Not tainted syzkaller #0 [ 1001.654882][T20263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1001.665135][T20263] Call Trace: [ 1001.668491][T20263] [ 1001.671497][T20263] dump_stack_lvl+0x18c/0x250 [ 1001.676310][T20263] ? show_regs_print_info+0x20/0x20 [ 1001.681616][T20263] ? load_image+0x420/0x420 [ 1001.686228][T20263] ? __might_sleep+0xe0/0xe0 [ 1001.690924][T20263] ? __lock_acquire+0x7d40/0x7d40 [ 1001.696070][T20263] should_fail_ex+0x39d/0x4d0 [ 1001.701108][T20263] should_failslab+0x9/0x20 [ 1001.705795][T20263] slab_pre_alloc_hook+0x59/0x310 [ 1001.711016][T20263] ? __get_vm_area_node+0x125/0x370 [ 1001.716939][T20263] __kmem_cache_alloc_node+0x53/0x250 [ 1001.722428][T20263] ? __get_vm_area_node+0x125/0x370 [ 1001.728077][T20263] kmalloc_node_trace+0x26/0xe0 [ 1001.733044][T20263] __get_vm_area_node+0x125/0x370 [ 1001.738211][T20263] __vmalloc_node_range+0x36e/0x1330 [ 1001.743813][T20263] ? netlink_sendmsg+0x602/0xbf0 [ 1001.748855][T20263] ? netlink_insert+0x109f/0x13a0 [ 1001.754218][T20263] ? netlink_data_ready+0x10/0x10 [ 1001.759404][T20263] ? free_vm_area+0x50/0x50 [ 1001.764307][T20263] ? netlink_sendmsg+0x602/0xbf0 [ 1001.769533][T20263] vmalloc+0x79/0x90 [ 1001.773566][T20263] ? netlink_sendmsg+0x602/0xbf0 [ 1001.778980][T20263] netlink_sendmsg+0x602/0xbf0 [ 1001.783854][T20263] ? perf_trace_lock+0x304/0x3b0 [ 1001.789028][T20263] ? netlink_getsockopt+0x590/0x590 [ 1001.794350][T20263] ? aa_sock_msg_perm+0x94/0x150 [ 1001.799390][T20263] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1001.804776][T20263] ? security_socket_sendmsg+0x80/0xa0 [ 1001.810491][T20263] ? netlink_getsockopt+0x590/0x590 [ 1001.815806][T20263] ____sys_sendmsg+0x5ba/0x960 [ 1001.820694][T20263] ? __asan_memset+0x22/0x40 [ 1001.825740][T20263] ? __sys_sendmsg_sock+0x30/0x30 [ 1001.830853][T20263] ? __import_iovec+0x5f2/0x850 [ 1001.836021][T20263] ? import_iovec+0x73/0xa0 [ 1001.840723][T20263] ___sys_sendmsg+0x2a6/0x360 [ 1001.846134][T20263] ? __sys_sendmsg+0x2a0/0x2a0 [ 1001.851094][T20263] ? __lock_acquire+0x7d40/0x7d40 [ 1001.856531][T20263] __se_sys_sendmsg+0x1c2/0x2b0 [ 1001.861941][T20263] ? __x64_sys_sendmsg+0x80/0x80 [ 1001.867136][T20263] ? lockdep_hardirqs_on+0x98/0x150 [ 1001.872800][T20263] do_syscall_64+0x55/0xa0 [ 1001.877296][T20263] ? clear_bhb_loop+0x40/0x90 [ 1001.882216][T20263] ? clear_bhb_loop+0x40/0x90 [ 1001.887081][T20263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.893133][T20263] RIP: 0033:0x7f6e3479c819 [ 1001.897959][T20263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.918773][T20263] RSP: 002b:00007f6e3569d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.927399][T20263] RAX: ffffffffffffffda RBX: 00007f6e34a15fa0 RCX: 00007f6e3479c819 [ 1001.935729][T20263] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1001.943805][T20263] RBP: 00007f6e3569d090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.952249][T20263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.960388][T20263] R13: 00007f6e34a16038 R14: 00007f6e34a15fa0 R15: 00007ffd0966df28 [ 1001.968962][T20263] [ 1002.122178][T20263] syz.0.4015: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1002.167265][T20263] CPU: 1 PID: 20263 Comm: syz.0.4015 Not tainted syzkaller #0 [ 1002.174899][T20263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1002.185195][T20263] Call Trace: [ 1002.188667][T20263] [ 1002.191809][T20263] dump_stack_lvl+0x18c/0x250 [ 1002.196665][T20263] ? show_regs_print_info+0x20/0x20 [ 1002.202026][T20263] ? load_image+0x420/0x420 [ 1002.206754][T20263] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1002.213430][T20263] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1002.220111][T20263] warn_alloc+0x246/0x340 [ 1002.224678][T20263] ? __get_vm_area_node+0x125/0x370 [ 1002.230170][T20263] ? zone_watermark_ok_safe+0x230/0x230 [ 1002.235933][T20263] ? rcu_is_watching+0x15/0xb0 [ 1002.241113][T20263] ? __get_vm_area_node+0x356/0x370 [ 1002.246620][T20263] __vmalloc_node_range+0x393/0x1330 [ 1002.252316][T20263] ? netlink_insert+0x109f/0x13a0 [ 1002.258305][T20263] ? netlink_data_ready+0x10/0x10 [ 1002.263604][T20263] ? free_vm_area+0x50/0x50 [ 1002.268500][T20263] ? netlink_sendmsg+0x602/0xbf0 [ 1002.274016][T20263] vmalloc+0x79/0x90 [ 1002.278059][T20263] ? netlink_sendmsg+0x602/0xbf0 [ 1002.283433][T20263] netlink_sendmsg+0x602/0xbf0 [ 1002.289081][T20263] ? perf_trace_lock+0x304/0x3b0 [ 1002.294502][T20263] ? netlink_getsockopt+0x590/0x590 [ 1002.300011][T20263] ? aa_sock_msg_perm+0x94/0x150 [ 1002.305232][T20263] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1002.310694][T20263] ? security_socket_sendmsg+0x80/0xa0 [ 1002.316313][T20263] ? netlink_getsockopt+0x590/0x590 [ 1002.321667][T20263] ____sys_sendmsg+0x5ba/0x960 [ 1002.327169][T20263] ? __asan_memset+0x22/0x40 [ 1002.332790][T20263] ? __sys_sendmsg_sock+0x30/0x30 [ 1002.338903][T20263] ? __import_iovec+0x5f2/0x850 [ 1002.344123][T20263] ? import_iovec+0x73/0xa0 [ 1002.348854][T20263] ___sys_sendmsg+0x2a6/0x360 [ 1002.353677][T20263] ? __sys_sendmsg+0x2a0/0x2a0 [ 1002.358892][T20263] ? __lock_acquire+0x7d40/0x7d40 [ 1002.364650][T20263] __se_sys_sendmsg+0x1c2/0x2b0 [ 1002.369994][T20263] ? __x64_sys_sendmsg+0x80/0x80 [ 1002.375462][T20263] ? lockdep_hardirqs_on+0x98/0x150 [ 1002.381122][T20263] do_syscall_64+0x55/0xa0 [ 1002.385643][T20263] ? clear_bhb_loop+0x40/0x90 [ 1002.391237][T20263] ? clear_bhb_loop+0x40/0x90 [ 1002.396337][T20263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1002.402904][T20263] RIP: 0033:0x7f6e3479c819 [ 1002.407516][T20263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.427948][T20263] RSP: 002b:00007f6e3569d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.437127][T20263] RAX: ffffffffffffffda RBX: 00007f6e34a15fa0 RCX: 00007f6e3479c819 [ 1002.445581][T20263] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1002.453772][T20263] RBP: 00007f6e3569d090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.462399][T20263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.470458][T20263] R13: 00007f6e34a16038 R14: 00007f6e34a15fa0 R15: 00007ffd0966df28 [ 1002.478701][T20263] [ 1002.662511][T20263] Mem-Info: [ 1002.666329][T20263] active_anon:16947 inactive_anon:0 isolated_anon:0 [ 1002.666329][T20263] active_file:18884 inactive_file:40297 isolated_file:0 [ 1002.666329][T20263] unevictable:768 dirty:496 writeback:0 [ 1002.666329][T20263] slab_reclaimable:10676 slab_unreclaimable:94956 [ 1002.666329][T20263] mapped:24807 shmem:12141 pagetables:535 [ 1002.666329][T20263] sec_pagetables:0 bounce:0 [ 1002.666329][T20263] kernel_misc_reclaimable:0 [ 1002.666329][T20263] free:1327280 free_pcp:12322 free_cma:0 [ 1002.802045][T20263] Node 0 active_anon:65988kB inactive_anon:0kB active_file:75536kB inactive_file:160988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99228kB dirty:1984kB writeback:0kB shmem:45428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10368kB pagetables:2040kB sec_pagetables:0kB all_unreclaimable? no [ 1002.922035][T20263] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1003.022033][T20263] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1003.082053][T20263] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1003.087941][T20263] Node 0 DMA32 free:1409972kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:61552kB inactive_anon:0kB active_file:75536kB inactive_file:160160kB unevictable:1536kB writepending:1984kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:40488kB local_pcp:21340kB free_cma:0kB [ 1003.181975][T20263] lowmem_reserve[]: 0 0 0 0 0 [ 1003.197201][T20263] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1003.260084][T20263] lowmem_reserve[]: 0 0 0 0 0 [ 1003.300810][T20263] Node 1 Normal free:3892056kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20972kB local_pcp:9768kB free_cma:0kB [ 1003.354666][T20263] lowmem_reserve[]: 0 0 0 0 0 [ 1003.359799][T20263] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1003.432449][T20263] Node 0 DMA32: 2319*4kB (UM) 1886*8kB (UME) 1619*16kB (UME) 280*32kB (UME) 798*64kB (UME) 464*128kB (UME) 172*256kB (UME) 41*512kB (UM) 8*1024kB (UME) 5*2048kB (UM) 284*4096kB (UM) = 1416412kB [ 1003.465394][T20263] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1003.489939][T20263] Node 1 Normal: 224*4kB (UME) 65*8kB (UME) 43*16kB (UME) 71*32kB (UME) 21*64kB (UME) 4*128kB (UE) 1*256kB (E) 1*512kB (M) 0*1024kB 1*2048kB (E) 948*4096kB (UM) = 3892056kB [ 1003.532062][T20263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1003.574038][T20263] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1003.600228][T20263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1003.626729][T20263] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1003.646556][T20263] 66083 total pagecache pages [ 1003.651333][T20263] 0 pages in swap cache [ 1003.672866][T20263] Free swap = 124996kB [ 1003.677131][T20263] Total swap = 124996kB [ 1003.678659][T20268] validate_nla: 3 callbacks suppressed [ 1003.678705][T20268] netlink: 'syz.3.4017': attribute type 10 has an invalid length. [ 1003.681408][T20263] 2097051 pages RAM [ 1003.681419][T20263] 0 pages HighMem/MovableOnly [ 1003.681428][T20263] 416927 pages reserved [ 1003.681437][T20263] 0 pages cma reserved [ 1003.846241][T20268] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1003.857070][T20277] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4020'. [ 1004.098881][T20287] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4023'. [ 1005.045227][T20304] netlink: 'syz.1.4029': attribute type 10 has an invalid length. [ 1005.067515][T20304] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4029'. [ 1005.461570][T20321] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4038'. [ 1005.762198][T20316] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.4036'. [ 1005.944506][T20326] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4039'. [ 1006.103262][T20317] netlink: 'syz.1.4035': attribute type 10 has an invalid length. [ 1006.188491][T20317] team0: Device ipvlan1 failed to register rx_handler [ 1006.554627][T20334] netlink: 'syz.2.4041': attribute type 10 has an invalid length. [ 1006.586352][T20334] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4041'. [ 1006.908182][T20340] netlink: 'syz.3.4044': attribute type 10 has an invalid length. [ 1006.932027][T20340] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4044'. [ 1007.058459][T20342] netlink: 'syz.1.4043': attribute type 10 has an invalid length. [ 1007.114580][T20342] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4043'. [ 1007.453844][T20350] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4047'. [ 1007.944943][T20355] netlink: 'syz.3.4049': attribute type 10 has an invalid length. [ 1007.972357][T20355] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4049'. [ 1008.289766][T20362] netlink: 'syz.0.4051': attribute type 10 has an invalid length. [ 1008.331402][T20362] team0: Device ipvlan1 failed to register rx_handler [ 1008.678770][T20368] netlink: 'syz.2.4053': attribute type 10 has an invalid length. [ 1008.862275][T20379] netlink: 'syz.0.4055': attribute type 10 has an invalid length. [ 1008.870937][T20379] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4055'. [ 1009.064898][T20387] netlink: 'syz.1.4056': attribute type 10 has an invalid length. [ 1009.135426][T20387] veth0_macvtap: left promiscuous mode [ 1009.523815][T20384] wg2: left promiscuous mode [ 1009.528560][T20384] wg2: left allmulticast mode [ 1010.688048][T20413] syzkaller0: entered promiscuous mode [ 1010.697582][T20413] syzkaller0: entered allmulticast mode [ 1010.711489][T20415] netlink: 'syz.1.4063': attribute type 10 has an invalid length. [ 1010.731295][T20415] team0: Device ipvlan1 failed to register rx_handler [ 1011.186883][T20424] netlink: 'syz.2.4065': attribute type 10 has an invalid length. [ 1011.213400][T20424] __nla_validate_parse: 1 callbacks suppressed [ 1011.213440][T20424] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4065'. [ 1011.303814][T20429] netlink: 'syz.0.4067': attribute type 10 has an invalid length. [ 1011.333749][T20429] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4067'. [ 1011.607926][T20427] netlink: 'syz.1.4066': attribute type 10 has an invalid length. [ 1011.670476][T20427] team0: Device ipvlan1 failed to register rx_handler [ 1012.737300][T20448] netlink: 'syz.0.4075': attribute type 10 has an invalid length. [ 1012.769476][T20448] team0: Device ipvlan1 failed to register rx_handler [ 1013.355574][T20462] netlink: 'syz.0.4079': attribute type 10 has an invalid length. [ 1013.460183][T20462] team0: Device ipvlan1 failed to register rx_handler [ 1013.563889][T20474] netlink: 'syz.2.4082': attribute type 4 has an invalid length. [ 1013.578933][T20474] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4082'. [ 1013.748353][T20474] .`: renamed from bond0 (while UP) [ 1014.357635][T20475] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4082'. [ 1014.817430][T20493] netlink: 'syz.2.4088': attribute type 10 has an invalid length. [ 1014.844962][T20492] netlink: 'syz.3.4087': attribute type 10 has an invalid length. [ 1014.881976][T20492] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4087'. [ 1014.945240][T20499] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.4090'. [ 1014.995138][T20497] netlink: 'syz.1.4089': attribute type 21 has an invalid length. [ 1015.022669][T20499] netlink: 'syz.0.4090': attribute type 21 has an invalid length. [ 1015.030694][T20499] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4090'. [ 1015.804292][T20521] FAULT_INJECTION: forcing a failure. [ 1015.804292][T20521] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.907956][T20521] CPU: 0 PID: 20521 Comm: syz.1.4099 Not tainted syzkaller #0 [ 1015.915631][T20521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1015.925927][T20521] Call Trace: [ 1015.929263][T20521] [ 1015.932252][T20521] dump_stack_lvl+0x18c/0x250 [ 1015.937096][T20521] ? show_regs_print_info+0x20/0x20 [ 1015.942372][T20521] ? load_image+0x420/0x420 [ 1015.946950][T20521] ? __might_sleep+0xe0/0xe0 [ 1015.951621][T20521] ? __lock_acquire+0x7d40/0x7d40 [ 1015.956821][T20521] should_fail_ex+0x39d/0x4d0 [ 1015.961582][T20521] should_failslab+0x9/0x20 [ 1015.966155][T20521] slab_pre_alloc_hook+0x59/0x310 [ 1015.971259][T20521] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1015.977051][T20521] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1015.982932][T20521] __kmem_cache_alloc_node+0x53/0x250 [ 1015.988396][T20521] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1015.994303][T20521] __kmalloc+0xa4/0x230 [ 1015.998536][T20521] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1016.005217][T20521] tomoyo_path_number_perm+0x248/0x620 [ 1016.010759][T20521] ? tomoyo_path_number_perm+0x217/0x620 [ 1016.016848][T20521] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1016.022377][T20521] ? ksys_write+0x1c4/0x260 [ 1016.027067][T20521] ? __fget_files+0x28/0x4b0 [ 1016.031897][T20521] ? __fget_files+0x28/0x4b0 [ 1016.036542][T20521] security_file_ioctl+0x70/0xa0 [ 1016.041622][T20521] __se_sys_ioctl+0x48/0x170 [ 1016.046254][T20521] do_syscall_64+0x55/0xa0 [ 1016.050788][T20521] ? clear_bhb_loop+0x40/0x90 [ 1016.055707][T20521] ? clear_bhb_loop+0x40/0x90 [ 1016.060810][T20521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1016.066753][T20521] RIP: 0033:0x7fe155f9c819 [ 1016.071237][T20521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.091340][T20521] RSP: 002b:00007fe1541f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1016.099893][T20521] RAX: ffffffffffffffda RBX: 00007fe156215fa0 RCX: 00007fe155f9c819 [ 1016.108004][T20521] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000003 [ 1016.116109][T20521] RBP: 00007fe1541f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.124251][T20521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.132311][T20521] R13: 00007fe156216038 R14: 00007fe156215fa0 R15: 00007ffeec1a7e78 [ 1016.140469][T20521] [ 1016.184036][T20521] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1016.355776][T20525] netlink: 'syz.0.4100': attribute type 10 has an invalid length. [ 1016.417153][T20525] team0: Device ipvlan1 failed to register rx_handler [ 1016.782918][T20533] bridge0: port 3(hsr0) entered disabled state [ 1017.053112][T20534] netlink: 'syz.2.4101': attribute type 10 has an invalid length. [ 1017.062872][T20534] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4101'. [ 1017.088657][T20534] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1017.096654][T20534] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.134213][T20534] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1017.435812][T20549] netlink: 'syz.2.4107': attribute type 10 has an invalid length. [ 1017.447697][T20549] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1017.461693][T20541] netlink: 'syz.3.4105': attribute type 10 has an invalid length. [ 1017.484718][T20541] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1017.692415][T20557] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4109'. [ 1017.950849][T20560] netlink: 'syz.0.4110': attribute type 10 has an invalid length. [ 1017.979836][T20560] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4110'. [ 1018.070923][T20562] netlink: 'syz.3.4111': attribute type 10 has an invalid length. [ 1018.085048][T20562] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1018.930216][T20577] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4115'. [ 1019.351506][T20585] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4118'. [ 1019.476396][T20582] team0: Device ipvlan1 failed to register rx_handler [ 1019.710872][T20591] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4122'. [ 1019.928378][T20591] wlan1: mtu less than device minimum [ 1019.943548][T20591] team0: Device wlan1 failed to change mtu [ 1020.188180][T20595] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4122'. [ 1020.219806][T20598] validate_nla: 5 callbacks suppressed [ 1020.219827][T20598] netlink: 'syz.2.4125': attribute type 21 has an invalid length. [ 1020.314251][T20591] syz.0.4122 (20591) used greatest stack depth: 15560 bytes left [ 1020.560264][T20612] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4128'. [ 1020.619738][T20614] netlink: 'syz.3.4129': attribute type 3 has an invalid length. [ 1020.635097][T20614] netlink: 'syz.3.4129': attribute type 1 has an invalid length. [ 1020.644504][T20614] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.4129'. [ 1021.470474][T20628] netlink: 'syz.1.4135': attribute type 10 has an invalid length. [ 1021.517367][T20639] netlink: 'syz.3.4136': attribute type 10 has an invalid length. [ 1021.656636][T20639] bridge0: port 3(team0) entered disabled state [ 1021.722513][T20639] team0: left allmulticast mode [ 1021.727483][T20639] C: left allmulticast mode [ 1021.750069][T20639] team_slave_1: left allmulticast mode [ 1021.768956][T20639] team0: left promiscuous mode [ 1021.779371][T20639] C: left promiscuous mode [ 1021.786956][T20639] team_slave_1: left promiscuous mode [ 1021.799356][T20639] bridge0: port 3(team0) entered disabled state [ 1021.814805][T20639] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.827982][T20639] bond0: (slave team0): Enslaving as an active interface with an up link [ 1021.838187][T20624] netlink: 'syz.2.4133': attribute type 10 has an invalid length. [ 1022.145365][T20657] FAULT_INJECTION: forcing a failure. [ 1022.145365][T20657] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.203129][T20657] CPU: 0 PID: 20657 Comm: syz.3.4144 Not tainted syzkaller #0 [ 1022.210707][T20657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1022.220919][T20657] Call Trace: [ 1022.224259][T20657] [ 1022.227255][T20657] dump_stack_lvl+0x18c/0x250 [ 1022.232192][T20657] ? show_regs_print_info+0x20/0x20 [ 1022.237731][T20657] ? load_image+0x420/0x420 [ 1022.242440][T20657] ? __lock_acquire+0x7d40/0x7d40 [ 1022.247761][T20657] ? __asan_memset+0x22/0x40 [ 1022.252419][T20657] should_fail_ex+0x39d/0x4d0 [ 1022.257170][T20657] should_failslab+0x9/0x20 [ 1022.261746][T20657] slab_pre_alloc_hook+0x59/0x310 [ 1022.266859][T20657] kmem_cache_alloc+0x5a/0x2d0 [ 1022.271712][T20657] ? security_inode_alloc+0x34/0x110 [ 1022.277083][T20657] security_inode_alloc+0x34/0x110 [ 1022.282368][T20657] inode_init_always+0x8fc/0xc90 [ 1022.287460][T20657] new_inode_pseudo+0x95/0x1d0 [ 1022.292439][T20657] __sock_create+0x12d/0x940 [ 1022.297435][T20657] ? __might_fault+0xaa/0x120 [ 1022.302224][T20657] ? __might_fault+0xc6/0x120 [ 1022.307185][T20657] __sys_socketpair+0x1c1/0x550 [ 1022.312117][T20657] __x64_sys_socketpair+0x9b/0xb0 [ 1022.317229][T20657] do_syscall_64+0x55/0xa0 [ 1022.321982][T20657] ? clear_bhb_loop+0x40/0x90 [ 1022.326727][T20657] ? clear_bhb_loop+0x40/0x90 [ 1022.331488][T20657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1022.337643][T20657] RIP: 0033:0x7f6ce9d9c819 [ 1022.342192][T20657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.361857][T20657] RSP: 002b:00007f6ceac7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1022.370597][T20657] RAX: ffffffffffffffda RBX: 00007f6cea016090 RCX: 00007f6ce9d9c819 [ 1022.378620][T20657] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001d [ 1022.386675][T20657] RBP: 00007f6ceac7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.394705][T20657] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1022.402738][T20657] R13: 00007f6cea016128 R14: 00007f6cea016090 R15: 00007fffce197218 [ 1022.410791][T20657] [ 1022.472305][T20657] socket: no more sockets [ 1022.869302][T20672] __nla_validate_parse: 3 callbacks suppressed [ 1022.869323][T20672] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4150'. [ 1022.929711][T20664] netlink: 'syz.0.4147': attribute type 10 has an invalid length. [ 1022.968919][T20664] team0: Device ipvlan1 failed to register rx_handler [ 1023.036346][T20669] netlink: 'syz.2.4149': attribute type 10 has an invalid length. [ 1023.060622][T20669] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4149'. [ 1023.998715][T20699] netlink: 'syz.1.4160': attribute type 10 has an invalid length. [ 1024.007735][T20699] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4160'. [ 1024.027841][T20701] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4161'. [ 1024.217191][T20707] tun0: tun_chr_ioctl cmd 1074025677 [ 1024.248648][T20707] tun0: linktype set to 776 [ 1024.361212][T20707] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4164'. [ 1024.373531][T20709] netlink: 'syz.1.4163': attribute type 10 has an invalid length. [ 1024.382229][T20709] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4163'. [ 1024.410228][T20707] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1024.541491][T20706] delete_channel: no stack [ 1024.586304][T20705] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1024.969984][T20723] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4168'. [ 1025.318609][T20731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4171'. [ 1025.355566][T20731] validate_nla: 1 callbacks suppressed [ 1025.355587][T20731] netlink: 'syz.0.4171': attribute type 10 has an invalid length. [ 1025.536344][T20739] netlink: 'syz.3.4172': attribute type 10 has an invalid length. [ 1025.555935][T20721] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4168'. [ 1025.572597][T20739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1025.578260][T20740] netlink: 'syz.1.4173': attribute type 10 has an invalid length. [ 1025.673084][T20721] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1025.712065][T20721] CPU: 1 PID: 20721 Comm: syz.2.4168 Not tainted syzkaller #0 [ 1025.719910][T20721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1025.730126][T20721] Call Trace: [ 1025.733556][T20721] [ 1025.736567][T20721] dump_stack_lvl+0x18c/0x250 [ 1025.741349][T20721] ? show_regs_print_info+0x20/0x20 [ 1025.746636][T20721] ? load_image+0x420/0x420 [ 1025.751239][T20721] sysfs_warn_dup+0x8e/0xa0 [ 1025.755812][T20721] sysfs_do_create_link_sd+0xc0/0x110 [ 1025.761337][T20721] device_add_class_symlinks+0x1cf/0x240 [ 1025.767096][T20721] device_add+0x507/0xc20 [ 1025.771820][T20721] wiphy_register+0x1dad/0x2ae0 [ 1025.777313][T20721] ? cfg80211_event_work+0x40/0x40 [ 1025.782783][T20721] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1025.789830][T20721] ieee80211_register_hw+0x3464/0x4250 [ 1025.795597][T20721] ? ieee80211_tasklet_handler+0x20/0x20 [ 1025.802804][T20721] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1025.809771][T20721] ? __debug_object_init+0xec/0x450 [ 1025.816069][T20721] ? __asan_memset+0x22/0x40 [ 1025.820847][T20721] ? __hrtimer_init+0x186/0x270 [ 1025.826586][T20721] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1025.833050][T20721] ? mac80211_hwsim_free+0x220/0x220 [ 1025.839506][T20721] ? rcu_is_watching+0x15/0xb0 [ 1025.845702][T20721] ? kstrndup+0xbd/0x140 [ 1025.851427][T20721] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1025.858270][T20721] ? __nla_validate+0x50/0x50 [ 1025.863487][T20721] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1025.870635][T20721] ? __nla_parse+0x40/0x50 [ 1025.875741][T20721] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1025.882850][T20721] genl_family_rcv_msg_doit+0x211/0x310 [ 1025.888827][T20721] ? end_current_label_crit_section+0x170/0x170 [ 1025.895224][T20721] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1025.901257][T20721] ? bpf_lsm_capable+0x9/0x10 [ 1025.905992][T20721] ? security_capable+0x89/0xb0 [ 1025.910909][T20721] genl_rcv_msg+0x619/0x7a0 [ 1025.915531][T20721] ? genl_bind+0x360/0x360 [ 1025.920175][T20721] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1025.926941][T20721] netlink_rcv_skb+0x241/0x4d0 [ 1025.932124][T20721] ? genl_bind+0x360/0x360 [ 1025.936586][T20721] ? netlink_ack+0x1180/0x1180 [ 1025.941414][T20721] ? __lock_acquire+0x7d40/0x7d40 [ 1025.946502][T20721] ? down_read+0x1ac/0x2e0 [ 1025.950975][T20721] genl_rcv+0x28/0x40 [ 1025.955000][T20721] netlink_unicast+0x751/0x8d0 [ 1025.959915][T20721] netlink_sendmsg+0x8d0/0xbf0 [ 1025.964830][T20721] ? lockdep_hardirqs_on+0x98/0x150 [ 1025.970220][T20721] ? netlink_getsockopt+0x590/0x590 [ 1025.975479][T20721] ? aa_sock_msg_perm+0x94/0x150 [ 1025.980465][T20721] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1025.985789][T20721] ? security_socket_sendmsg+0x80/0xa0 [ 1025.991293][T20721] ? netlink_getsockopt+0x590/0x590 [ 1025.996547][T20721] ____sys_sendmsg+0x5ba/0x960 [ 1026.001371][T20721] ? __asan_memset+0x22/0x40 [ 1026.006019][T20721] ? __sys_sendmsg_sock+0x30/0x30 [ 1026.011179][T20721] ? __import_iovec+0x5f2/0x850 [ 1026.016121][T20721] ? import_iovec+0x73/0xa0 [ 1026.020762][T20721] ___sys_sendmsg+0x2a6/0x360 [ 1026.025931][T20721] ? __sys_sendmsg+0x2a0/0x2a0 [ 1026.030774][T20721] ? trace_call_bpf+0xc3/0x6c0 [ 1026.035775][T20721] ? trace_call_bpf+0xc3/0x6c0 [ 1026.040596][T20721] ? trace_call_bpf+0xc3/0x6c0 [ 1026.045633][T20721] __se_sys_sendmsg+0x1c2/0x2b0 [ 1026.050898][T20721] ? __x64_sys_sendmsg+0x80/0x80 [ 1026.057231][T20721] ? lockdep_hardirqs_on+0x98/0x150 [ 1026.062584][T20721] do_syscall_64+0x55/0xa0 [ 1026.067262][T20721] ? clear_bhb_loop+0x40/0x90 [ 1026.072387][T20721] ? clear_bhb_loop+0x40/0x90 [ 1026.078042][T20721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1026.085058][T20721] RIP: 0033:0x7f4e0bb9c819 [ 1026.089632][T20721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.110695][T20721] RSP: 002b:00007f4e0cab0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.119617][T20721] RAX: ffffffffffffffda RBX: 00007f4e0be15fa0 RCX: 00007f4e0bb9c819 [ 1026.127724][T20721] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1026.135759][T20721] RBP: 00007f4e0bc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1026.144314][T20721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1026.152341][T20721] R13: 00007f4e0be16038 R14: 00007f4e0be15fa0 R15: 00007ffc8fd76b78 [ 1026.160649][T20721] [ 1026.484906][T20752] FAULT_INJECTION: forcing a failure. [ 1026.484906][T20752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.500033][T20748] netlink: 'syz.0.4176': attribute type 10 has an invalid length. [ 1026.515067][T20752] CPU: 0 PID: 20752 Comm: syz.2.4177 Not tainted syzkaller #0 [ 1026.525679][T20752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1026.536157][T20752] Call Trace: [ 1026.539496][T20752] [ 1026.542501][T20752] dump_stack_lvl+0x18c/0x250 [ 1026.547325][T20752] ? show_regs_print_info+0x20/0x20 [ 1026.552844][T20752] ? load_image+0x420/0x420 [ 1026.559005][T20752] ? __lock_acquire+0x7d40/0x7d40 [ 1026.564228][T20752] ? snprintf+0xe9/0x140 [ 1026.569139][T20752] should_fail_ex+0x39d/0x4d0 [ 1026.574481][T20752] _copy_to_user+0x2f/0xa0 [ 1026.579268][T20752] simple_read_from_buffer+0xe7/0x150 [ 1026.584810][T20752] proc_fail_nth_read+0x1e8/0x260 [ 1026.590366][T20752] ? proc_fault_inject_write+0x360/0x360 [ 1026.596110][T20752] ? fsnotify_perm+0x271/0x5e0 [ 1026.601409][T20752] ? proc_fault_inject_write+0x360/0x360 [ 1026.607330][T20752] vfs_read+0x28b/0x970 [ 1026.611760][T20752] ? kernel_read+0x1e0/0x1e0 [ 1026.616710][T20752] ? __fget_files+0x28/0x4b0 [ 1026.621533][T20752] ? __fget_files+0x28/0x4b0 [ 1026.626277][T20752] ? __fget_files+0x43d/0x4b0 [ 1026.631091][T20752] ? __fdget_pos+0x2a3/0x330 [ 1026.635894][T20752] ? ksys_read+0x75/0x260 [ 1026.640381][T20752] ksys_read+0x150/0x260 [ 1026.644757][T20752] ? vfs_write+0x990/0x990 [ 1026.649215][T20752] ? lockdep_hardirqs_on+0x98/0x150 [ 1026.654524][T20752] do_syscall_64+0x55/0xa0 [ 1026.658984][T20752] ? clear_bhb_loop+0x40/0x90 [ 1026.663699][T20752] ? clear_bhb_loop+0x40/0x90 [ 1026.668562][T20752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1026.674760][T20752] RIP: 0033:0x7f4e0bb5d04e [ 1026.679264][T20752] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1026.700540][T20752] RSP: 002b:00007f4e0caaffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1026.709299][T20752] RAX: ffffffffffffffda RBX: 00007f4e0cab06c0 RCX: 00007f4e0bb5d04e [ 1026.717360][T20752] RDX: 000000000000000f RSI: 00007f4e0cab00a0 RDI: 0000000000000003 [ 1026.725468][T20752] RBP: 00007f4e0cab0090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.733949][T20752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1026.742072][T20752] R13: 00007f4e0be16038 R14: 00007f4e0be15fa0 R15: 00007ffc8fd76b78 [ 1026.750123][T20752] [ 1026.892039][T20754] netlink: 'syz.3.4178': attribute type 21 has an invalid length. [ 1026.901459][T20754] IPv6: NLM_F_CREATE should be specified when creating new route [ 1027.339278][T20756] netlink: 'syz.1.4179': attribute type 10 has an invalid length. [ 1027.454728][T20756] team0: Device ipvlan1 failed to register rx_handler [ 1027.715748][T20773] FAULT_INJECTION: forcing a failure. [ 1027.715748][T20773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1027.741768][T20773] CPU: 0 PID: 20773 Comm: syz.1.4184 Not tainted syzkaller #0 [ 1027.750313][T20773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1027.761944][T20773] Call Trace: [ 1027.765301][T20773] [ 1027.768403][T20773] dump_stack_lvl+0x18c/0x250 [ 1027.773356][T20773] ? show_regs_print_info+0x20/0x20 [ 1027.778821][T20773] ? load_image+0x420/0x420 [ 1027.784188][T20773] ? __might_fault+0xaa/0x120 [ 1027.788921][T20773] ? __lock_acquire+0x7d40/0x7d40 [ 1027.794209][T20773] should_fail_ex+0x39d/0x4d0 [ 1027.800321][T20773] _copy_from_user+0x2f/0xe0 [ 1027.806123][T20773] __sys_bpf+0x23e/0x890 [ 1027.810593][T20773] ? bpf_link_show_fdinfo+0x390/0x390 [ 1027.816368][T20773] ? lock_chain_count+0x20/0x20 [ 1027.821569][T20773] __x64_sys_bpf+0x7c/0x90 [ 1027.826144][T20773] do_syscall_64+0x55/0xa0 [ 1027.830633][T20773] ? clear_bhb_loop+0x40/0x90 [ 1027.835659][T20773] ? clear_bhb_loop+0x40/0x90 [ 1027.840515][T20773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1027.846893][T20773] RIP: 0033:0x7fe155f9c819 [ 1027.851934][T20773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.872183][T20773] RSP: 002b:00007fe1541f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1027.880686][T20773] RAX: ffffffffffffffda RBX: 00007fe156215fa0 RCX: 00007fe155f9c819 [ 1027.889054][T20773] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 1027.897646][T20773] RBP: 00007fe1541f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.906341][T20773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.914581][T20773] R13: 00007fe156216038 R14: 00007fe156215fa0 R15: 00007ffeec1a7e78 [ 1027.922898][T20773] [ 1027.940713][T20774] __nla_validate_parse: 2 callbacks suppressed [ 1027.940740][T20774] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4182'. [ 1027.983943][T20774] bridge_slave_1: default FDB implementation only supports local addresses [ 1028.339007][T20784] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4185'. [ 1028.494204][T20794] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4191'. [ 1028.610500][T20797] netlink: 'syz.1.4190': attribute type 33 has an invalid length. [ 1028.630833][T20797] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4190'. [ 1029.558147][T20820] netlink: 'syz.3.4199': attribute type 10 has an invalid length. [ 1029.568596][T20820] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4199'. [ 1030.759018][T20836] can: request_module (can-proto-0) failed. [ 1031.837550][T20853] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4208'. [ 1032.188327][T20865] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4212'. [ 1032.551174][T20869] netlink: 'syz.2.4215': attribute type 10 has an invalid length. [ 1032.583210][T20869] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4215'. [ 1032.790054][T20873] netlink: 'syz.3.4216': attribute type 10 has an invalid length. [ 1032.821746][T20873] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4216'. [ 1032.979889][T20879] netlink: 'syz.2.4218': attribute type 33 has an invalid length. [ 1033.012156][T20879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4218'. [ 1033.446638][T20882] syzkaller0: entered promiscuous mode [ 1033.526828][T20882] syzkaller0: entered allmulticast mode [ 1033.566817][T20894] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4220'. [ 1036.380029][T20897] netlink: 'syz.2.4223': attribute type 10 has an invalid length. [ 1036.838162][T20892] netlink: 'syz.2.4223': attribute type 21 has an invalid length. [ 1036.862390][T20892] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4223'. [ 1036.897011][T20905] netlink: 'syz.0.4224': attribute type 10 has an invalid length. [ 1036.922248][T20905] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4224'. [ 1036.944220][T20901] netlink: 'syz.1.4222': attribute type 21 has an invalid length. [ 1041.214908][T20934] netlink: 'syz.1.4235': attribute type 46 has an invalid length. [ 1041.223703][T20934] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4235'. [ 1041.452318][T14444] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 1041.576084][T20944] FAULT_INJECTION: forcing a failure. [ 1041.576084][T20944] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.599170][T20944] CPU: 1 PID: 20944 Comm: syz.3.4240 Not tainted syzkaller #0 [ 1041.608229][T20944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1041.619680][T20944] Call Trace: [ 1041.623218][T20944] [ 1041.626544][T20944] dump_stack_lvl+0x18c/0x250 [ 1041.631333][T20944] ? show_regs_print_info+0x20/0x20 [ 1041.636656][T20944] ? load_image+0x420/0x420 [ 1041.641342][T20944] ? verify_lock_unused+0x140/0x140 [ 1041.646902][T20944] ? perf_trace_lock+0xfc/0x3b0 [ 1041.651865][T20944] should_fail_ex+0x39d/0x4d0 [ 1041.656811][T20944] should_failslab+0x9/0x20 [ 1041.661391][T20944] slab_pre_alloc_hook+0x59/0x310 [ 1041.666489][T20944] kmem_cache_alloc+0x5a/0x2d0 [ 1041.671340][T20944] ? skb_clone+0x1eb/0x370 [ 1041.675822][T20944] skb_clone+0x1eb/0x370 [ 1041.680128][T20944] __netlink_deliver_tap+0x41c/0x830 [ 1041.685513][T20944] ? netlink_deliver_tap+0x2e/0x1b0 [ 1041.691615][T20944] netlink_deliver_tap+0x19c/0x1b0 [ 1041.696991][T20944] netlink_unicast+0x72c/0x8d0 [ 1041.702007][T20944] netlink_sendmsg+0x8d0/0xbf0 [ 1041.707138][T20944] ? netlink_getsockopt+0x590/0x590 [ 1041.712420][T20944] ? aa_sock_msg_perm+0x94/0x150 [ 1041.717691][T20944] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1041.723025][T20944] ? security_socket_sendmsg+0x80/0xa0 [ 1041.728788][T20944] ? netlink_getsockopt+0x590/0x590 [ 1041.734590][T20944] ____sys_sendmsg+0x5ba/0x960 [ 1041.739413][T20944] ? __asan_memset+0x22/0x40 [ 1041.744063][T20944] ? __sys_sendmsg_sock+0x30/0x30 [ 1041.749132][T20944] ? __import_iovec+0x5f2/0x850 [ 1041.754296][T20944] ? import_iovec+0x73/0xa0 [ 1041.758859][T20944] ___sys_sendmsg+0x2a6/0x360 [ 1041.763698][T20944] ? __sys_sendmsg+0x2a0/0x2a0 [ 1041.768546][T20944] ? trace_call_bpf+0xc3/0x6c0 [ 1041.773601][T20944] __se_sys_sendmsg+0x1c2/0x2b0 [ 1041.778900][T20944] ? __x64_sys_sendmsg+0x80/0x80 [ 1041.784467][T20944] ? lockdep_hardirqs_on+0x98/0x150 [ 1041.789965][T20944] do_syscall_64+0x55/0xa0 [ 1041.794569][T20944] ? clear_bhb_loop+0x40/0x90 [ 1041.799951][T20944] ? clear_bhb_loop+0x40/0x90 [ 1041.804909][T20944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1041.811251][T20944] RIP: 0033:0x7f6ce9d9c819 [ 1041.815731][T20944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.836713][T20944] RSP: 002b:00007f6ceaca0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1041.845379][T20944] RAX: ffffffffffffffda RBX: 00007f6cea015fa0 RCX: 00007f6ce9d9c819 [ 1041.853679][T20944] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1041.861707][T20944] RBP: 00007f6ceaca0090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.869739][T20944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.877956][T20944] R13: 00007f6cea016038 R14: 00007f6cea015fa0 R15: 00007fffce197218 [ 1041.886219][T20944] [ 1041.909766][T20944] netlink: 'syz.3.4240': attribute type 46 has an invalid length. [ 1041.938323][T20944] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4240'. [ 1043.333713][T20962] netlink: 'syz.2.4238': attribute type 10 has an invalid length. [ 1043.404186][T20962] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4238'. [ 1043.709211][T20976] netlink: 'syz.0.4250': attribute type 2 has an invalid length. [ 1043.866605][T20976] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.4250'. [ 1044.319348][T20987] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4252'. [ 1046.060422][T21011] netlink: 'syz.3.4262': attribute type 10 has an invalid length. [ 1046.084671][T21011] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4262'. [ 1046.141089][T21017] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4263'. [ 1046.367798][T21024] netlink: 'syz.3.4265': attribute type 10 has an invalid length. [ 1046.376628][T21024] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4265'. [ 1048.069111][T21048] netlink: 'syz.3.4274': attribute type 10 has an invalid length. [ 1048.108671][T21048] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4274'. [ 1048.584279][T21061] netlink: 'syz.2.4277': attribute type 10 has an invalid length. [ 1048.606988][T21061] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4277'. [ 1048.821410][T21068] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4279'. [ 1049.482482][T21090] FAULT_INJECTION: forcing a failure. [ 1049.482482][T21090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1049.512069][T21090] CPU: 0 PID: 21090 Comm: syz.2.4285 Not tainted syzkaller #0 [ 1049.519780][T21090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1049.530015][T21090] Call Trace: [ 1049.533344][T21090] [ 1049.536320][T21090] dump_stack_lvl+0x18c/0x250 [ 1049.541081][T21090] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1049.547460][T21090] ? show_regs_print_info+0x20/0x20 [ 1049.552744][T21090] ? load_image+0x420/0x420 [ 1049.557362][T21090] should_fail_ex+0x39d/0x4d0 [ 1049.562289][T21090] _copy_from_user+0x2f/0xe0 [ 1049.566988][T21090] __sys_bpf+0x23e/0x890 [ 1049.571301][T21090] ? bpf_link_show_fdinfo+0x390/0x390 [ 1049.576769][T21090] ? lock_chain_count+0x20/0x20 [ 1049.581695][T21090] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1049.587749][T21090] __x64_sys_bpf+0x7c/0x90 [ 1049.592942][T21090] do_syscall_64+0x55/0xa0 [ 1049.597805][T21090] ? clear_bhb_loop+0x40/0x90 [ 1049.602635][T21090] ? clear_bhb_loop+0x40/0x90 [ 1049.607457][T21090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1049.613433][T21090] RIP: 0033:0x7f4e0bb9c819 [ 1049.617991][T21090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.637839][T21090] RSP: 002b:00007f4e0cab0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1049.646321][T21090] RAX: ffffffffffffffda RBX: 00007f4e0be15fa0 RCX: 00007f4e0bb9c819 [ 1049.654370][T21090] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1049.662442][T21090] RBP: 00007f4e0cab0090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.670580][T21090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.678609][T21090] R13: 00007f4e0be16038 R14: 00007f4e0be15fa0 R15: 00007ffc8fd76b78 [ 1049.686764][T21090] [ 1049.974442][T21095] netlink: 'syz.0.4286': attribute type 10 has an invalid length. [ 1049.988629][T21095] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4286'. [ 1050.745987][T21103] netlink: 'syz.0.4289': attribute type 10 has an invalid length. [ 1050.772563][T21103] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4289'. [ 1051.511693][T21111] FAULT_INJECTION: forcing a failure. [ 1051.511693][T21111] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.615072][T21111] CPU: 0 PID: 21111 Comm: syz.3.4292 Not tainted syzkaller #0 [ 1051.622652][T21111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1051.632861][T21111] Call Trace: [ 1051.636190][T21111] [ 1051.639164][T21111] dump_stack_lvl+0x18c/0x250 [ 1051.643918][T21111] ? show_regs_print_info+0x20/0x20 [ 1051.649212][T21111] ? load_image+0x420/0x420 [ 1051.653771][T21111] ? __might_sleep+0xe0/0xe0 [ 1051.658418][T21111] ? __lock_acquire+0x7d40/0x7d40 [ 1051.663504][T21111] should_fail_ex+0x39d/0x4d0 [ 1051.668254][T21111] should_failslab+0x9/0x20 [ 1051.672828][T21111] slab_pre_alloc_hook+0x59/0x310 [ 1051.677929][T21111] ? call_usermodehelper_setup+0x8e/0x260 [ 1051.683800][T21111] __kmem_cache_alloc_node+0x53/0x250 [ 1051.689284][T21111] ? call_usermodehelper_setup+0x8e/0x260 [ 1051.695752][T21111] kmalloc_trace+0x2a/0xe0 [ 1051.700244][T21111] call_usermodehelper_setup+0x8e/0x260 [ 1051.705855][T21111] ? __request_module+0x600/0x600 [ 1051.710958][T21111] __request_module+0x3bb/0x600 [ 1051.715967][T21111] ? module_enforce_rwx_sections+0x150/0x150 [ 1051.722010][T21111] ? module_enforce_rwx_sections+0x150/0x150 [ 1051.728132][T21111] ? apparmor_capable+0x137/0x1a0 [ 1051.733247][T21111] ? dev_load+0x21/0x1f0 [ 1051.737563][T21111] dev_ioctl+0x837/0x1140 [ 1051.741968][T21111] sock_ioctl+0x74c/0x7e0 [ 1051.746359][T21111] ? sock_poll+0x3e0/0x3e0 [ 1051.750849][T21111] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1051.755843][T21111] ? security_file_ioctl+0x80/0xa0 [ 1051.761110][T21111] ? sock_poll+0x3e0/0x3e0 [ 1051.765582][T21111] __se_sys_ioctl+0xfd/0x170 [ 1051.770542][T21111] do_syscall_64+0x55/0xa0 [ 1051.775018][T21111] ? clear_bhb_loop+0x40/0x90 [ 1051.779841][T21111] ? clear_bhb_loop+0x40/0x90 [ 1051.784594][T21111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1051.790576][T21111] RIP: 0033:0x7f6ce9d9c819 [ 1051.795054][T21111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.815067][T21111] RSP: 002b:00007f6ceaca0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1051.823631][T21111] RAX: ffffffffffffffda RBX: 00007f6cea015fa0 RCX: 00007f6ce9d9c819 [ 1051.831816][T21111] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 1051.839861][T21111] RBP: 00007f6ceaca0090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.847990][T21111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.856095][T21111] R13: 00007f6cea016038 R14: 00007f6cea015fa0 R15: 00007fffce197218 [ 1051.864130][T21111] [ 1052.602263][T21127] netlink: 'syz.0.4297': attribute type 10 has an invalid length. [ 1052.632222][T21127] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4297'. [ 1052.665697][T21128] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4296'. [ 1053.733834][T21144] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.4303'. [ 1054.185111][T21149] FAULT_INJECTION: forcing a failure. [ 1054.185111][T21149] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.197981][T21149] CPU: 1 PID: 21149 Comm: syz.0.4304 Not tainted syzkaller #0 [ 1054.205607][T21149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1054.215991][T21149] Call Trace: [ 1054.219320][T21149] [ 1054.222332][T21149] dump_stack_lvl+0x18c/0x250 [ 1054.227122][T21149] ? show_regs_print_info+0x20/0x20 [ 1054.232492][T21149] ? load_image+0x420/0x420 [ 1054.237095][T21149] ? netdev_core_pick_tx+0x340/0x340 [ 1054.242462][T21149] should_fail_ex+0x39d/0x4d0 [ 1054.247331][T21149] should_failslab+0x9/0x20 [ 1054.251911][T21149] slab_pre_alloc_hook+0x59/0x310 [ 1054.257075][T21149] kmem_cache_alloc+0x5a/0x2d0 [ 1054.262240][T21149] ? skb_clone+0x1eb/0x370 [ 1054.266719][T21149] skb_clone+0x1eb/0x370 [ 1054.271020][T21149] bpf_clone_redirect+0x167/0x4a0 [ 1054.276129][T21149] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 1054.281667][T21149] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1054.287733][T21149] ? preempt_schedule+0xc0/0xd0 [ 1054.292723][T21149] ? perf_trace_preemptirq_template+0xac/0x330 [ 1054.299606][T21149] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1054.305850][T21149] ? lockdep_softirqs_on+0x580/0x580 [ 1054.311724][T21149] ? lock_chain_count+0x20/0x20 [ 1054.316742][T21149] ? __local_bh_disable_ip+0x108/0x1a0 [ 1054.322501][T21149] ? __cant_sleep+0x220/0x220 [ 1054.327498][T21149] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1054.333353][T21149] ? _local_bh_enable+0xa0/0xa0 [ 1054.338550][T21149] ? bpf_test_timer_continue+0x135/0x380 [ 1054.344369][T21149] ? bpf_test_run+0x174/0x870 [ 1054.349378][T21149] bpf_test_run+0x2df/0x870 [ 1054.353963][T21149] ? bpf_test_run+0x174/0x870 [ 1054.358710][T21149] ? convert___skb_to_skb+0x590/0x590 [ 1054.364146][T21149] ? eth_get_headlen+0x210/0x210 [ 1054.369292][T21149] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 1054.374910][T21149] ? convert___skb_to_skb+0x3d/0x590 [ 1054.380349][T21149] bpf_prog_test_run_skb+0xad2/0x12b0 [ 1054.385803][T21149] ? cpu_online+0x60/0x60 [ 1054.390216][T21149] bpf_prog_test_run+0x321/0x390 [ 1054.395408][T21149] __sys_bpf+0x49d/0x890 [ 1054.399726][T21149] ? bpf_link_show_fdinfo+0x390/0x390 [ 1054.405276][T21149] ? lock_chain_count+0x20/0x20 [ 1054.410205][T21149] __x64_sys_bpf+0x7c/0x90 [ 1054.414682][T21149] do_syscall_64+0x55/0xa0 [ 1054.419203][T21149] ? clear_bhb_loop+0x40/0x90 [ 1054.423984][T21149] ? clear_bhb_loop+0x40/0x90 [ 1054.428749][T21149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.434710][T21149] RIP: 0033:0x7f6e3479c819 [ 1054.439272][T21149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.459319][T21149] RSP: 002b:00007f6e3569d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1054.467820][T21149] RAX: ffffffffffffffda RBX: 00007f6e34a15fa0 RCX: 00007f6e3479c819 [ 1054.476116][T21149] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1054.484180][T21149] RBP: 00007f6e3569d090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.492577][T21149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1054.500796][T21149] R13: 00007f6e34a16038 R14: 00007f6e34a15fa0 R15: 00007ffd0966df28 [ 1054.508894][T21149] [ 1054.550172][T21151] netlink: 'syz.2.4306': attribute type 29 has an invalid length. [ 1054.598173][T21151] netlink: 'syz.2.4306': attribute type 29 has an invalid length. [ 1054.620097][T21151] netlink: 'syz.2.4306': attribute type 29 has an invalid length. [ 1054.673923][T21154] netlink: 'syz.2.4306': attribute type 29 has an invalid length. [ 1054.707713][T21151] netlink: 'syz.2.4306': attribute type 29 has an invalid length. [ 1054.849114][T21153] netlink: 'syz.1.4305': attribute type 10 has an invalid length. [ 1054.873111][T21153] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4305'. [ 1054.926191][T21156] netlink: 'syz.0.4307': attribute type 10 has an invalid length. [ 1054.935613][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.942276][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.956801][T21156] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4307'. [ 1055.485504][T21173] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4310'. [ 1056.419258][T21189] netlink: 'syz.3.4318': attribute type 10 has an invalid length. [ 1056.444264][T21189] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4318'. [ 1056.619903][T21195] netlink: 'syz.1.4319': attribute type 10 has an invalid length. [ 1056.661386][T21195] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4319'. [ 1059.081721][T21198] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4320'. [ 1059.280806][T21213] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4324'. [ 1059.713249][T21218] FAULT_INJECTION: forcing a failure. [ 1059.713249][T21218] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.829268][T21218] CPU: 0 PID: 21218 Comm: syz.0.4325 Not tainted syzkaller #0 [ 1059.837286][T21218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1059.847421][T21218] Call Trace: [ 1059.850762][T21218] [ 1059.853749][T21218] dump_stack_lvl+0x18c/0x250 [ 1059.858509][T21218] ? show_regs_print_info+0x20/0x20 [ 1059.863773][T21218] ? load_image+0x420/0x420 [ 1059.868343][T21218] ? __might_sleep+0xe0/0xe0 [ 1059.872994][T21218] ? __lock_acquire+0x7d40/0x7d40 [ 1059.878085][T21218] should_fail_ex+0x39d/0x4d0 [ 1059.882846][T21218] should_failslab+0x9/0x20 [ 1059.887509][T21218] slab_pre_alloc_hook+0x59/0x310 [ 1059.892630][T21218] ? __lock_acquire+0x7d40/0x7d40 [ 1059.897723][T21218] kmem_cache_alloc+0x5a/0x2d0 [ 1059.902619][T21218] ? security_file_alloc+0x34/0x120 [ 1059.907904][T21218] security_file_alloc+0x34/0x120 [ 1059.913032][T21218] init_file+0x94/0x1f0 [ 1059.917273][T21218] alloc_empty_file+0xb7/0x1d0 [ 1059.922112][T21218] path_openat+0x113/0x3230 [ 1059.926696][T21218] ? __kasan_slab_alloc+0x6c/0x80 [ 1059.931876][T21218] ? do_sys_openat2+0xda/0x1d0 [ 1059.936713][T21218] ? __x64_sys_openat+0x139/0x160 [ 1059.941830][T21218] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.947969][T21218] ? verify_lock_unused+0x140/0x140 [ 1059.953228][T21218] ? do_filp_open+0x430/0x430 [ 1059.957968][T21218] ? __virt_addr_valid+0x18c/0x540 [ 1059.963329][T21218] do_filp_open+0x1f5/0x430 [ 1059.967895][T21218] ? vfs_tmpfile+0x490/0x490 [ 1059.972645][T21218] ? _raw_spin_unlock+0x28/0x40 [ 1059.977658][T21218] ? alloc_fd+0x58f/0x630 [ 1059.982242][T21218] do_sys_openat2+0x134/0x1d0 [ 1059.987039][T21218] ? perf_trace_preemptirq_template+0x269/0x330 [ 1059.993434][T21218] ? do_sys_open+0xe0/0xe0 [ 1059.997922][T21218] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1060.003970][T21218] ? lock_chain_count+0x20/0x20 [ 1060.008895][T21218] __x64_sys_openat+0x139/0x160 [ 1060.013819][T21218] do_syscall_64+0x55/0xa0 [ 1060.018294][T21218] ? clear_bhb_loop+0x40/0x90 [ 1060.023234][T21218] ? clear_bhb_loop+0x40/0x90 [ 1060.027979][T21218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.033937][T21218] RIP: 0033:0x7f6e3479c819 [ 1060.038580][T21218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.058430][T21218] RSP: 002b:00007f6e3569d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1060.067027][T21218] RAX: ffffffffffffffda RBX: 00007f6e34a15fa0 RCX: 00007f6e3479c819 [ 1060.075063][T21218] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1060.083553][T21218] RBP: 00007f6e3569d090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.091583][T21218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.099750][T21218] R13: 00007f6e34a16038 R14: 00007f6e34a15fa0 R15: 00007ffd0966df28 [ 1060.108003][T21218] [ 1060.183055][T21214] delete_channel: no stack [ 1060.452420][T21232] netlink: 'syz.0.4331': attribute type 10 has an invalid length. [ 1060.471192][T21232] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4331'. [ 1060.660818][T21235] netlink: 'syz.3.4333': attribute type 10 has an invalid length. [ 1060.693269][T21235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.716508][T21235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.490718][T21249] FAULT_INJECTION: forcing a failure. [ 1061.490718][T21249] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.507562][T21249] CPU: 1 PID: 21249 Comm: syz.2.4336 Not tainted syzkaller #0 [ 1061.515111][T21249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1061.525472][T21249] Call Trace: [ 1061.528824][T21249] [ 1061.531808][T21249] dump_stack_lvl+0x18c/0x250 [ 1061.536572][T21249] ? show_regs_print_info+0x20/0x20 [ 1061.542373][T21249] ? load_image+0x420/0x420 [ 1061.547021][T21249] ? perf_trace_lock_acquire+0x104/0x410 [ 1061.552717][T21249] ? verify_lock_unused+0x140/0x140 [ 1061.558279][T21249] should_fail_ex+0x39d/0x4d0 [ 1061.563146][T21249] should_failslab+0x9/0x20 [ 1061.567707][T21249] slab_pre_alloc_hook+0x59/0x310 [ 1061.572792][T21249] kmem_cache_alloc+0x5a/0x2d0 [ 1061.577596][T21249] ? skb_clone+0x1eb/0x370 [ 1061.582164][T21249] skb_clone+0x1eb/0x370 [ 1061.586500][T21249] __netlink_deliver_tap+0x41c/0x830 [ 1061.591873][T21249] ? netlink_deliver_tap+0x2e/0x1b0 [ 1061.597531][T21249] netlink_deliver_tap+0x19c/0x1b0 [ 1061.602733][T21249] netlink_unicast+0x72c/0x8d0 [ 1061.607849][T21249] netlink_sendmsg+0x8d0/0xbf0 [ 1061.612759][T21249] ? netlink_getsockopt+0x590/0x590 [ 1061.618006][T21249] ? aa_sock_msg_perm+0x94/0x150 [ 1061.623098][T21249] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1061.628461][T21249] ? security_socket_sendmsg+0x80/0xa0 [ 1061.633974][T21249] ? netlink_getsockopt+0x590/0x590 [ 1061.639258][T21249] ____sys_sendmsg+0x5ba/0x960 [ 1061.644108][T21249] ? __asan_memset+0x22/0x40 [ 1061.648883][T21249] ? __sys_sendmsg_sock+0x30/0x30 [ 1061.654325][T21249] ? __import_iovec+0x5f2/0x850 [ 1061.659348][T21249] ? import_iovec+0x73/0xa0 [ 1061.663996][T21249] ___sys_sendmsg+0x2a6/0x360 [ 1061.668809][T21249] ? __sys_sendmsg+0x2a0/0x2a0 [ 1061.673660][T21249] __se_sys_sendmsg+0x1c2/0x2b0 [ 1061.679015][T21249] ? __x64_sys_sendmsg+0x80/0x80 [ 1061.684041][T21249] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1061.690070][T21249] do_syscall_64+0x55/0xa0 [ 1061.694621][T21249] ? clear_bhb_loop+0x40/0x90 [ 1061.699335][T21249] ? clear_bhb_loop+0x40/0x90 [ 1061.704064][T21249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1061.710175][T21249] RIP: 0033:0x7f4e0bb9c819 [ 1061.714632][T21249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.734889][T21249] RSP: 002b:00007f4e0cab0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1061.743380][T21249] RAX: ffffffffffffffda RBX: 00007f4e0be15fa0 RCX: 00007f4e0bb9c819 [ 1061.751784][T21249] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1061.760104][T21249] RBP: 00007f4e0cab0090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.768331][T21249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.776466][T21249] R13: 00007f4e0be16038 R14: 00007f4e0be15fa0 R15: 00007ffc8fd76b78 [ 1061.784677][T21249] [ 1061.800307][T21249] netlink: 'syz.2.4336': attribute type 10 has an invalid length. [ 1061.831611][T21249] bridge0: port 3(hsr0) entered disabled state [ 1061.842586][T21249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.854629][T21249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.030971][T21249] .`: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1062.167393][T21249] bridge0: port 3(hsr0) entered blocking state [ 1062.175625][T21249] bridge0: port 3(hsr0) entered forwarding state [ 1062.184650][T21249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.200207][T21249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.212033][T21249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.220085][T21249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.234411][T21249] .`: (slave bridge0): Enslaving as an active interface with an up link [ 1062.585904][T21266] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4339'. [ 1062.626419][T21268] netlink: 'syz.1.4342': attribute type 10 has an invalid length. [ 1062.656717][T21268] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4342'. [ 1063.257437][T21280] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4348'. [ 1063.540651][T21275] netlink: 'syz.1.4345': attribute type 10 has an invalid length. [ 1063.574955][T21275] team0: Device ipvlan1 failed to register rx_handler [ 1063.791289][T21288] netlink: 'syz.0.4349': attribute type 10 has an invalid length. [ 1063.804709][T21288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.813980][T21288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.989741][T21288] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1064.009580][T21288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.019157][T21288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.030559][T21288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.038934][T21288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.138509][T21288] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1064.335868][T21299] netlink: 'syz.1.4354': attribute type 10 has an invalid length. [ 1064.348004][T21299] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4354'. [ 1065.463003][T21313] netlink: 'syz.0.4360': attribute type 10 has an invalid length. [ 1065.500685][T21313] team0: Device ipvlan1 failed to register rx_handler [ 1065.697769][T21323] netlink: 'syz.1.4363': attribute type 1 has an invalid length. [ 1065.717439][T21323] netlink: 'syz.1.4363': attribute type 3 has an invalid length. [ 1065.745869][T21323] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4363'. [ 1066.015133][T21326] netlink: 'syz.2.4364': attribute type 10 has an invalid length. [ 1066.056303][T21326] bridge0: port 3(hsr0) entered disabled state [ 1066.066490][T21326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.078091][T21326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.228907][T21328] netlink: 'syz.3.4365': attribute type 10 has an invalid length. [ 1066.273459][T21328] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4365'. [ 1066.335006][T21334] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4367'. [ 1066.861224][T21352] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4372'. [ 1067.024131][T21339] netlink: 'syz.2.4369': attribute type 10 has an invalid length. [ 1067.040449][T21341] FAULT_INJECTION: forcing a failure. [ 1067.040449][T21341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.060529][T21341] CPU: 0 PID: 21341 Comm: syz.3.4370 Not tainted syzkaller #0 [ 1067.068135][T21341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1067.078352][T21341] Call Trace: [ 1067.081709][T21341] [ 1067.084714][T21341] dump_stack_lvl+0x18c/0x250 [ 1067.089466][T21341] ? show_regs_print_info+0x20/0x20 [ 1067.094737][T21341] ? load_image+0x420/0x420 [ 1067.099481][T21341] ? __might_fault+0xaa/0x120 [ 1067.104220][T21341] ? __lock_acquire+0x7d40/0x7d40 [ 1067.109303][T21341] should_fail_ex+0x39d/0x4d0 [ 1067.114050][T21341] _copy_from_user+0x2f/0xe0 [ 1067.118790][T21341] ___sys_sendmsg+0x1c7/0x360 [ 1067.123535][T21341] ? get_pid_task+0x20/0x1e0 [ 1067.128274][T21341] ? __sys_sendmsg+0x2a0/0x2a0 [ 1067.133108][T21341] ? __lock_acquire+0x7d40/0x7d40 [ 1067.138232][T21341] __se_sys_sendmsg+0x1c2/0x2b0 [ 1067.143133][T21341] ? __x64_sys_sendmsg+0x80/0x80 [ 1067.148133][T21341] ? lockdep_hardirqs_on+0x98/0x150 [ 1067.153407][T21341] do_syscall_64+0x55/0xa0 [ 1067.157882][T21341] ? clear_bhb_loop+0x40/0x90 [ 1067.162723][T21341] ? clear_bhb_loop+0x40/0x90 [ 1067.167725][T21341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1067.174223][T21341] RIP: 0033:0x7f6ce9d9c819 [ 1067.179075][T21341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.199470][T21341] RSP: 002b:00007f6ceaca0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1067.208057][T21341] RAX: ffffffffffffffda RBX: 00007f6cea015fa0 RCX: 00007f6ce9d9c819 [ 1067.216097][T21341] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1067.224125][T21341] RBP: 00007f6ceaca0090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.232153][T21341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.240274][T21341] R13: 00007f6cea016038 R14: 00007f6cea015fa0 R15: 00007fffce197218 [ 1067.248521][T21341] [ 1067.595320][T21362] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4375'. [ 1067.641086][T21362] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 1067.688338][T21360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1067.742952][T21362] netlink: 'syz.2.4375': attribute type 3 has an invalid length. [ 1067.762048][T21362] netlink: 'syz.2.4375': attribute type 1 has an invalid length. [ 1067.769872][T21362] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.4375'. [ 1067.808025][T21366] netlink: 'syz.0.4377': attribute type 10 has an invalid length. [ 1067.854239][T21366] team0: Device ipvlan1 failed to register rx_handler [ 1067.988850][T21368] netlink: 'syz.1.4378': attribute type 10 has an invalid length. [ 1068.020568][T21368] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4378'. [ 1069.449181][T21400] team0: Device ipvlan1 failed to register rx_handler [ 1069.525910][T21402] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4389'. [ 1069.612758][T21404] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4390'. [ 1069.656485][T21404] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1070.266494][T21426] team0: Device ipvlan1 failed to register rx_handler [ 1070.535971][T21432] validate_nla: 3 callbacks suppressed [ 1070.535994][T21432] netlink: 'syz.2.4402': attribute type 10 has an invalid length. [ 1070.563663][T21432] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4402'. [ 1070.650466][T21435] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4404'. [ 1070.892462][T21439] netlink: 'syz.0.4406': attribute type 3 has an invalid length. [ 1070.901985][T21439] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4406'. [ 1072.264709][T21459] netlink: 'syz.2.4414': attribute type 10 has an invalid length. [ 1072.281752][T21459] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4414'. [ 1072.368473][T21461] netlink: 'syz.0.4415': attribute type 10 has an invalid length. [ 1072.392037][T21461] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4415'. [ 1072.592846][T21467] netlink: 'syz.2.4418': attribute type 10 has an invalid length. [ 1072.626452][T21467] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4418'. [ 1072.855030][T21475] netlink: 135856 bytes leftover after parsing attributes in process `syz.0.4419'. [ 1072.941725][T21475] netlink: 8442 bytes leftover after parsing attributes in process `syz.0.4419'. [ 1073.662324][T21493] netlink: 'syz.3.4426': attribute type 10 has an invalid length. [ 1073.895892][T21501] FAULT_INJECTION: forcing a failure. [ 1073.895892][T21501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1073.932038][T21501] CPU: 1 PID: 21501 Comm: syz.1.4429 Not tainted syzkaller #0 [ 1073.939609][T21501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1073.949723][T21501] Call Trace: [ 1073.953057][T21501] [ 1073.956036][T21501] dump_stack_lvl+0x18c/0x250 [ 1073.960818][T21501] ? show_regs_print_info+0x20/0x20 [ 1073.966275][T21501] ? load_image+0x420/0x420 [ 1073.970974][T21501] ? __might_fault+0xaa/0x120 [ 1073.975757][T21501] ? __lock_acquire+0x7d40/0x7d40 [ 1073.980849][T21501] ? batadv_get_drvinfo+0x4c/0x70 [ 1073.986090][T21501] should_fail_ex+0x39d/0x4d0 [ 1073.990871][T21501] _copy_to_user+0x2f/0xa0 [ 1073.995435][T21501] dev_ethtool+0x16f8/0x18d0 [ 1074.000113][T21501] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1074.006440][T21501] ? __lock_acquire+0x7d40/0x7d40 [ 1074.011538][T21501] ? __might_fault+0xaa/0x120 [ 1074.016434][T21501] ? full_name_hash+0x92/0xe0 [ 1074.021197][T21501] ? dev_load+0x21/0x1f0 [ 1074.025596][T21501] dev_ioctl+0x392/0x1140 [ 1074.029987][T21501] sock_do_ioctl+0x239/0x310 [ 1074.034680][T21501] ? sock_show_fdinfo+0xb0/0xb0 [ 1074.039753][T21501] sock_ioctl+0x5ba/0x7e0 [ 1074.044251][T21501] ? sock_poll+0x3e0/0x3e0 [ 1074.048752][T21501] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1074.053740][T21501] ? security_file_ioctl+0x80/0xa0 [ 1074.058892][T21501] ? sock_poll+0x3e0/0x3e0 [ 1074.063400][T21501] __se_sys_ioctl+0xfd/0x170 [ 1074.068036][T21501] do_syscall_64+0x55/0xa0 [ 1074.072481][T21501] ? clear_bhb_loop+0x40/0x90 [ 1074.077287][T21501] ? clear_bhb_loop+0x40/0x90 [ 1074.082144][T21501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1074.088199][T21501] RIP: 0033:0x7fe155f9c819 [ 1074.093461][T21501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.113848][T21501] RSP: 002b:00007fe1541f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1074.122675][T21501] RAX: ffffffffffffffda RBX: 00007fe156215fa0 RCX: 00007fe155f9c819 [ 1074.130784][T21501] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 1074.138970][T21501] RBP: 00007fe1541f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.147064][T21501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.155943][T21501] R13: 00007fe156216038 R14: 00007fe156215fa0 R15: 00007ffeec1a7e78 [ 1074.164314][T21501] [ 1074.490101][T21510] netlink: 'syz.3.4432': attribute type 10 has an invalid length. [ 1074.991344][T21518] netlink: 'syz.0.4435': attribute type 10 has an invalid length. [ 1075.007523][T21518] __nla_validate_parse: 3 callbacks suppressed [ 1075.007565][T21518] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4435'. [ 1075.012610][T21515] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.4433'. [ 1075.037209][T21515] netlink: 8442 bytes leftover after parsing attributes in process `syz.2.4433'. [ 1075.210999][T21521] netlink: 'syz.3.4436': attribute type 10 has an invalid length. [ 1077.027830][T21544] netlink: 'syz.0.4442': attribute type 10 has an invalid length. [ 1077.082197][T21544] netlink: 183836 bytes leftover after parsing attributes in process `syz.0.4442'. [ 1077.286615][T21550] netlink: 'syz.1.4443': attribute type 10 has an invalid length. [ 1077.295618][T21550] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4443'. [ 1077.543367][T21552] netlink: 'syz.0.4445': attribute type 10 has an invalid length. [ 1077.572708][T21552] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4445'. [ 1077.785815][T21564] netlink: 'syz.1.4450': attribute type 26 has an invalid length. [ 1077.812478][T21564] netlink: 62827 bytes leftover after parsing attributes in process `syz.1.4450'. [ 1078.150249][T21572] netlink: 'syz.1.4453': attribute type 1 has an invalid length. [ 1078.160092][T21572] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.4453'. [ 1078.222561][T21572] netlink: 'syz.1.4453': attribute type 29 has an invalid length. [ 1078.241537][T21572] netlink: 'syz.1.4453': attribute type 29 has an invalid length. [ 1078.265671][T21573] netlink: 'syz.1.4453': attribute type 29 has an invalid length. [ 1078.296274][T21572] netlink: 'syz.1.4453': attribute type 29 has an invalid length. [ 1078.468186][T21579] netlink: 'syz.0.4454': attribute type 10 has an invalid length. [ 1078.805416][T21585] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4457'. [ 1078.890416][T21588] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4458'. [ 1080.734730][T21617] __nla_validate_parse: 1 callbacks suppressed [ 1080.734751][T21617] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4467'. [ 1080.757531][T21617] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1080.859139][T21607] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.4462'. [ 1080.916985][T21607] netlink: 8442 bytes leftover after parsing attributes in process `syz.1.4462'. [ 1081.323903][T21624] FAULT_INJECTION: forcing a failure. [ 1081.323903][T21624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1081.351182][T21624] CPU: 0 PID: 21624 Comm: syz.3.4470 Not tainted syzkaller #0 [ 1081.359285][T21624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1081.369854][T21624] Call Trace: [ 1081.373187][T21624] [ 1081.376171][T21624] dump_stack_lvl+0x18c/0x250 [ 1081.381037][T21624] ? show_regs_print_info+0x20/0x20 [ 1081.387139][T21624] ? load_image+0x420/0x420 [ 1081.392081][T21624] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1081.398626][T21624] should_fail_ex+0x39d/0x4d0 [ 1081.403499][T21624] _copy_to_user+0x2f/0xa0 [ 1081.408272][T21624] simple_read_from_buffer+0xe7/0x150 [ 1081.413774][T21624] proc_fail_nth_read+0x1e8/0x260 [ 1081.418893][T21624] ? proc_fault_inject_write+0x360/0x360 [ 1081.424627][T21624] ? fsnotify_perm+0x271/0x5e0 [ 1081.429506][T21624] ? proc_fault_inject_write+0x360/0x360 [ 1081.435201][T21624] vfs_read+0x28b/0x970 [ 1081.439411][T21624] ? kernel_read+0x1e0/0x1e0 [ 1081.444053][T21624] ? __fget_files+0x28/0x4b0 [ 1081.448681][T21624] ? __fget_files+0x28/0x4b0 [ 1081.453340][T21624] ? __fget_files+0x43d/0x4b0 [ 1081.458209][T21624] ? __fdget_pos+0x2a3/0x330 [ 1081.462837][T21624] ? ksys_read+0x75/0x260 [ 1081.467217][T21624] ksys_read+0x150/0x260 [ 1081.471499][T21624] ? vfs_write+0x990/0x990 [ 1081.476043][T21624] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1081.481977][T21624] do_syscall_64+0x55/0xa0 [ 1081.486470][T21624] ? clear_bhb_loop+0x40/0x90 [ 1081.491392][T21624] ? clear_bhb_loop+0x40/0x90 [ 1081.496653][T21624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1081.503661][T21624] RIP: 0033:0x7f6ce9d5d04e [ 1081.508505][T21624] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1081.530658][T21624] RSP: 002b:00007f6ceac9ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1081.539961][T21624] RAX: ffffffffffffffda RBX: 00007f6ceaca06c0 RCX: 00007f6ce9d5d04e [ 1081.548862][T21624] RDX: 000000000000000f RSI: 00007f6ceaca00a0 RDI: 000000000000000b [ 1081.557160][T21624] RBP: 00007f6ceaca0090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.565379][T21624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.573787][T21624] R13: 00007f6cea016038 R14: 00007f6cea015fa0 R15: 00007fffce197218 [ 1081.582019][T21624] [ 1081.834381][T21632] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4472'. [ 1082.066926][T21642] validate_nla: 7 callbacks suppressed [ 1082.066953][T21642] netlink: 'syz.0.4477': attribute type 10 has an invalid length. [ 1082.087300][T21642] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4477'. [ 1082.114054][T21642] ipvlan1: entered promiscuous mode [ 1082.120020][T21642] ipvlan1: entered allmulticast mode [ 1082.125966][T21642] veth0_vlan: entered allmulticast mode [ 1082.143019][T21642] bridge0: port 4(ipvlan1) entered blocking state [ 1082.162364][T21642] bridge0: port 4(ipvlan1) entered disabled state [ 1082.183959][T21642] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1082.220000][T21643] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4475'. [ 1082.297864][T21642] netlink: 17023 bytes leftover after parsing attributes in process `syz.0.4477'. [ 1082.345056][T21650] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4479'. [ 1082.371971][T21651] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.4479'. [ 1082.395836][T21653] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4480'. [ 1083.190730][T21657] netlink: 'syz.2.4482': attribute type 10 has an invalid length. [ 1083.753774][T21668] netlink: 'syz.2.4485': attribute type 10 has an invalid length. [ 1086.095228][T21704] __nla_validate_parse: 2 callbacks suppressed [ 1086.095254][T21704] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4496'. [ 1086.215890][T21704] bond0: (slave bond_slave_0): Releasing backup interface [ 1086.360617][T21704] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1087.009304][T21718] netlink: 'syz.1.4499': attribute type 10 has an invalid length. [ 1087.022002][T21718] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4499'. [ 1087.498897][T21727] netlink: 'syz.0.4500': attribute type 1 has an invalid length. [ 1087.543258][T21727] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.4500'. [ 1087.572534][T21730] FAULT_INJECTION: forcing a failure. [ 1087.572534][T21730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.575235][T21724] netlink: 'syz.0.4500': attribute type 29 has an invalid length. [ 1087.610229][T21724] netlink: 'syz.0.4500': attribute type 29 has an invalid length. [ 1087.647136][T21730] CPU: 0 PID: 21730 Comm: syz.1.4502 Not tainted syzkaller #0 [ 1087.654732][T21730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1087.665349][T21730] Call Trace: [ 1087.668724][T21730] [ 1087.672060][T21730] dump_stack_lvl+0x18c/0x250 [ 1087.676834][T21730] ? show_regs_print_info+0x20/0x20 [ 1087.682335][T21730] ? load_image+0x420/0x420 [ 1087.687011][T21730] ? __lock_acquire+0x7d40/0x7d40 [ 1087.692105][T21730] ? snprintf+0xe9/0x140 [ 1087.696608][T21730] should_fail_ex+0x39d/0x4d0 [ 1087.701378][T21730] _copy_to_user+0x2f/0xa0 [ 1087.705959][T21730] simple_read_from_buffer+0xe7/0x150 [ 1087.711488][T21730] proc_fail_nth_read+0x1e8/0x260 [ 1087.716668][T21730] ? proc_fault_inject_write+0x360/0x360 [ 1087.722868][T21730] ? fsnotify_perm+0x271/0x5e0 [ 1087.727787][T21730] ? proc_fault_inject_write+0x360/0x360 [ 1087.733650][T21730] vfs_read+0x28b/0x970 [ 1087.738255][T21730] ? kernel_read+0x1e0/0x1e0 [ 1087.743156][T21730] ? __fget_files+0x28/0x4b0 [ 1087.748299][T21730] ? __fget_files+0x28/0x4b0 [ 1087.753392][T21730] ? __fget_files+0x43d/0x4b0 [ 1087.759126][T21730] ? __fdget_pos+0x2a3/0x330 [ 1087.763974][T21730] ? ksys_read+0x75/0x260 [ 1087.769158][T21730] ksys_read+0x150/0x260 [ 1087.773618][T21730] ? vfs_write+0x990/0x990 [ 1087.778433][T21730] ? lockdep_hardirqs_on+0x98/0x150 [ 1087.783948][T21730] do_syscall_64+0x55/0xa0 [ 1087.788580][T21730] ? clear_bhb_loop+0x40/0x90 [ 1087.793575][T21730] ? clear_bhb_loop+0x40/0x90 [ 1087.798909][T21730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1087.805037][T21730] RIP: 0033:0x7fe155f5d04e [ 1087.810377][T21730] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1087.830425][T21730] RSP: 002b:00007fe1541f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1087.839959][T21730] RAX: ffffffffffffffda RBX: 00007fe1541f66c0 RCX: 00007fe155f5d04e [ 1087.848158][T21730] RDX: 000000000000000f RSI: 00007fe1541f60a0 RDI: 0000000000000004 [ 1087.856177][T21730] RBP: 00007fe1541f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.864455][T21730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.872578][T21730] R13: 00007fe156216038 R14: 00007fe156215fa0 R15: 00007ffeec1a7e78 [ 1087.880824][T21730] [ 1088.094404][T21727] netlink: 'syz.0.4500': attribute type 29 has an invalid length. [ 1088.152492][T21724] netlink: 'syz.0.4500': attribute type 29 has an invalid length. [ 1088.420080][T21738] netlink: 'syz.3.4504': attribute type 4 has an invalid length. [ 1088.460783][T21738] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4504'. [ 1088.959690][T21749] netlink: 'syz.1.4515': attribute type 1 has an invalid length. [ 1089.025664][T21749] netlink: 'syz.1.4515': attribute type 3 has an invalid length. [ 1089.122054][T21749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4515'. [ 1089.577680][T21758] netlink: 'syz.1.4509': attribute type 10 has an invalid length. [ 1089.612115][T21758] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4509'. [ 1089.823253][T21765] FAULT_INJECTION: forcing a failure. [ 1089.823253][T21765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1089.857789][T21765] CPU: 0 PID: 21765 Comm: syz.3.4511 Not tainted syzkaller #0 [ 1089.865397][T21765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1089.875597][T21765] Call Trace: [ 1089.878936][T21765] [ 1089.881924][T21765] dump_stack_lvl+0x18c/0x250 [ 1089.886685][T21765] ? show_regs_print_info+0x20/0x20 [ 1089.892066][T21765] ? load_image+0x420/0x420 [ 1089.896733][T21765] ? __might_fault+0xaa/0x120 [ 1089.901493][T21765] ? __lock_acquire+0x7d40/0x7d40 [ 1089.906598][T21765] should_fail_ex+0x39d/0x4d0 [ 1089.911354][T21765] _copy_from_user+0x2f/0xe0 [ 1089.916014][T21765] __sys_bpf+0x23e/0x890 [ 1089.920317][T21765] ? bpf_link_show_fdinfo+0x390/0x390 [ 1089.925771][T21765] ? lock_chain_count+0x20/0x20 [ 1089.930691][T21765] __x64_sys_bpf+0x7c/0x90 [ 1089.935170][T21765] do_syscall_64+0x55/0xa0 [ 1089.939925][T21765] ? clear_bhb_loop+0x40/0x90 [ 1089.944749][T21765] ? clear_bhb_loop+0x40/0x90 [ 1089.949474][T21765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1089.955532][T21765] RIP: 0033:0x7f6ce9d9c819 [ 1089.960111][T21765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.979790][T21765] RSP: 002b:00007f6ceac7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1089.988292][T21765] RAX: ffffffffffffffda RBX: 00007f6cea016090 RCX: 00007f6ce9d9c819 [ 1089.996311][T21765] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1090.004320][T21765] RBP: 00007f6ceac7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.012413][T21765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.020430][T21765] R13: 00007f6cea016128 R14: 00007f6cea016090 R15: 00007fffce197218 [ 1090.028547][T21765] [ 1090.101448][T21766] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1090.128655][T21767] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 1090.151381][T21766] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1091.374663][T21773] netlink: 'syz.1.4513': attribute type 10 has an invalid length. [ 1091.430680][T21773] team0: Device ipvlan1 failed to register rx_handler [ 1092.198820][T21794] team0: Device ipvlan1 failed to register rx_handler [ 1092.251223][T21793] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4522'. [ 1092.364231][T21801] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4523'. [ 1092.711848][T21806] validate_nla: 3 callbacks suppressed [ 1092.711869][T21806] netlink: 'syz.3.4524': attribute type 10 has an invalid length. [ 1092.752079][T21806] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4524'. [ 1093.803690][T21829] netlink: 'syz.1.4535': attribute type 10 has an invalid length. [ 1093.846714][T21829] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4535'. [ 1094.178280][T21832] delete_channel: no stack [ 1094.394185][T21838] netlink: 'syz.3.4537': attribute type 10 has an invalid length. [ 1094.420703][T21838] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4537'. [ 1094.989541][T21849] syzkaller0: entered promiscuous mode [ 1095.019688][T21849] syzkaller0: entered allmulticast mode [ 1095.075351][T21839] netlink: 'syz.1.4536': attribute type 10 has an invalid length. [ 1095.129324][T21839] team0: Device ipvlan1 failed to register rx_handler [ 1101.094539][T21859] netlink: 'syz.2.4540': attribute type 10 has an invalid length. [ 1101.102758][T21859] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4540'. [ 1101.695079][T21876] netlink: 'syz.2.4547': attribute type 10 has an invalid length. [ 1101.722659][T21876] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4547'. [ 1101.743891][T21878] netlink: 'syz.1.4550': attribute type 10 has an invalid length. [ 1101.753395][T21878] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4550'. [ 1102.249520][T21884] netlink: 'syz.3.4551': attribute type 10 has an invalid length. [ 1102.258609][T21884] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1102.858387][T21904] netlink: 'syz.0.4555': attribute type 10 has an invalid length. [ 1102.887239][T21904] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4555'. [ 1103.111567][T21910] netlink: 'syz.1.4559': attribute type 10 has an invalid length. [ 1103.152184][T21910] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4559'. [ 1103.177859][T21914] netlink: 'syz.3.4560': attribute type 10 has an invalid length. [ 1103.194801][T21914] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4560'. [ 1104.407878][T21931] netlink: 'syz.2.4566': attribute type 29 has an invalid length. [ 1104.826851][T21935] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4568'. [ 1107.216637][T21931] netlink: 'syz.2.4566': attribute type 29 has an invalid length. [ 1107.416442][T21944] netlink: 'syz.3.4570': attribute type 10 has an invalid length. [ 1107.443624][T21944] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4570'. [ 1107.742798][T21949] netlink: 'syz.0.4571': attribute type 10 has an invalid length. [ 1107.759577][T21949] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4571'. [ 1108.188078][T21958] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4572'. [ 1108.247600][T21958] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 1108.285704][T21955] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1108.541283][T21962] netlink: 'syz.2.4574': attribute type 10 has an invalid length. [ 1108.572092][T21962] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4574'. [ 1109.297609][T21979] netlink: 'syz.2.4582': attribute type 10 has an invalid length. [ 1109.324619][T21979] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4582'. [ 1109.402897][T21981] netlink: 'syz.3.4581': attribute type 10 has an invalid length. [ 1109.411297][T21981] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1109.606501][T21983] netlink: 'syz.0.4583': attribute type 10 has an invalid length. [ 1109.619952][T21983] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4583'. [ 1111.506062][T22004] netlink: 'syz.0.4590': attribute type 10 has an invalid length. [ 1111.516750][T22004] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4590'. [ 1111.703600][T22010] netlink: 'syz.1.4593': attribute type 10 has an invalid length. [ 1111.727054][T22010] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4593'. [ 1111.792662][T22016] netlink: 'syz.0.4595': attribute type 29 has an invalid length. [ 1112.153816][T22008] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4592'. [ 1112.889994][T22039] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4601'. [ 1112.943518][T22039] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.4601'. [ 1112.982276][T22039] netlink: zone id is out of range [ 1112.987599][T22039] netlink: zone id is out of range [ 1113.012000][T22039] netlink: zone id is out of range [ 1113.017367][T22039] netlink: zone id is out of range [ 1113.033570][T22039] netlink: zone id is out of range [ 1113.038880][T22039] netlink: zone id is out of range [ 1113.060665][T22039] netlink: zone id is out of range [ 1113.082051][T22039] netlink: zone id is out of range [ 1113.203684][T22048] validate_nla: 5 callbacks suppressed [ 1113.203725][T22048] netlink: 'syz.1.4605': attribute type 10 has an invalid length. [ 1113.242059][T22048] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4605'. [ 1113.486818][T22063] netlink: 'syz.1.4610': attribute type 10 has an invalid length. [ 1113.503027][T22063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.568744][T22063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.650887][T22063] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1113.869423][T22079] netlink: 'syz.2.4615': attribute type 10 has an invalid length. [ 1114.227051][T22091] netlink: 'syz.2.4619': attribute type 10 has an invalid length. [ 1114.258224][T22091] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4619'. [ 1115.684107][T22120] syzkaller0: entered promiscuous mode [ 1115.689889][T22120] syzkaller0: entered allmulticast mode [ 1115.697864][T22124] netlink: 'syz.3.4631': attribute type 10 has an invalid length. [ 1115.707019][T22124] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4631'. [ 1116.356109][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.362782][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.846960][T22132] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4633'. [ 1119.139060][T22154] netlink: 'syz.1.4638': attribute type 21 has an invalid length. [ 1119.156353][T22154] netlink: 'syz.1.4638': attribute type 4 has an invalid length. [ 1119.168044][T22154] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4638'. [ 1119.327743][T22160] netlink: 'syz.2.4641': attribute type 10 has an invalid length. [ 1119.348131][T22160] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4641'. [ 1120.542413][T22193] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4646'. [ 1121.098625][T22192] netlink: 'syz.1.4644': attribute type 10 has an invalid length. [ 1121.129822][T22192] team0: Device ipvlan1 failed to register rx_handler [ 1121.218727][T22208] netlink: 'syz.0.4651': attribute type 10 has an invalid length. [ 1121.232743][T22208] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4651'. [ 1121.458227][T22214] netlink: 'syz.2.4654': attribute type 10 has an invalid length. [ 1121.466441][T22214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4654'. [ 1121.895812][T22226] netlink: 'syz.1.4659': attribute type 10 has an invalid length. [ 1121.916491][T22226] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4659'. [ 1122.041242][T22232] netlink: 'syz.2.4662': attribute type 29 has an invalid length. [ 1122.066365][T22232] netlink: 'syz.2.4662': attribute type 29 has an invalid length. [ 1122.084774][T22232] netlink: 'syz.2.4662': attribute type 29 has an invalid length. [ 1122.180723][T22237] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4663'. [ 1122.216093][T22236] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4664'. [ 1123.309172][T22259] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4673'. [ 1123.963034][T22276] __nla_validate_parse: 2 callbacks suppressed [ 1123.988918][T22276] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4680'. [ 1124.140281][T22279] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4681'. [ 1124.976805][T22299] validate_nla: 7 callbacks suppressed [ 1124.976827][T22299] netlink: 'syz.0.4683': attribute type 10 has an invalid length. [ 1125.031461][T22299] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1125.131180][T22301] netlink: 'syz.2.4687': attribute type 10 has an invalid length. [ 1125.149320][T22301] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4687'. [ 1125.504886][T22309] netlink: 'syz.0.4691': attribute type 10 has an invalid length. [ 1125.532094][T22309] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4691'. [ 1125.564583][T22308] netlink: 'syz.3.4692': attribute type 10 has an invalid length. [ 1125.582161][T22308] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4692'. [ 1125.885085][T22317] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4695'. [ 1126.214740][T22320] syzkaller0: entered promiscuous mode [ 1126.238560][T22320] syzkaller0: entered allmulticast mode [ 1126.249032][ T79] syzkaller0: tun_net_xmit 48 [ 1129.669572][T22333] netlink: 'syz.0.4699': attribute type 10 has an invalid length. [ 1129.677814][T22333] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4699'. [ 1129.708291][T22341] netlink: 'syz.3.4703': attribute type 10 has an invalid length. [ 1129.724702][T22341] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4703'. [ 1129.876518][T22350] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4705'. [ 1129.893913][T22351] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4713'. [ 1129.916486][T22346] netlink: 'syz.0.4704': attribute type 10 has an invalid length. [ 1129.933115][T22346] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4704'. [ 1130.045484][T22352] netlink: 'syz.3.4706': attribute type 10 has an invalid length. [ 1130.054545][T22352] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4706'. [ 1130.066491][T22352] bridge0: port 3(ipvlan1) entered blocking state [ 1130.079528][T22352] bridge0: port 3(ipvlan1) entered disabled state [ 1130.087112][T22353] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4713'. [ 1130.101663][T22352] net_ratelimit: 1 callbacks suppressed [ 1130.101687][T22352] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1130.395976][T22358] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4708'. [ 1130.530490][T22365] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4710'. [ 1130.658366][T22368] hsr0: left allmulticast mode [ 1130.668147][T22368] hsr_slave_0: left allmulticast mode [ 1130.678282][T22368] hsr_slave_1: left allmulticast mode [ 1130.696839][T22368] hsr0: left promiscuous mode [ 1130.707666][T22368] bridge0: port 3(hsr0) entered disabled state [ 1130.747806][T22368] bridge_slave_1: left allmulticast mode [ 1130.757907][T22368] bridge_slave_1: left promiscuous mode [ 1130.769734][T22368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.125335][T22368] bridge_slave_0: left allmulticast mode [ 1131.151047][T22368] bridge_slave_0: left promiscuous mode [ 1131.176001][T22368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.339495][T22368] bond0: (slave bridge0): Releasing backup interface [ 1131.357845][T22368] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 1131.598851][T22370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4711'. [ 1131.620853][T22376] netlink: 'syz.1.4712': attribute type 10 has an invalid length. [ 1131.923185][T22387] pim6reg1: entered promiscuous mode [ 1131.941912][T22387] pim6reg1: entered allmulticast mode [ 1133.195173][T22400] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1133.212148][T22400] CPU: 1 PID: 22400 Comm: syz.2.4723 Not tainted syzkaller #0 [ 1133.219896][T22400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1133.230648][T22400] Call Trace: [ 1133.234814][T22400] [ 1133.237990][T22400] dump_stack_lvl+0x18c/0x250 [ 1133.242782][T22400] ? show_regs_print_info+0x20/0x20 [ 1133.248245][T22400] ? load_image+0x420/0x420 [ 1133.253147][T22400] sysfs_warn_dup+0x8e/0xa0 [ 1133.258492][T22400] sysfs_do_create_link_sd+0xc0/0x110 [ 1133.264739][T22400] device_add_class_symlinks+0x1cf/0x240 [ 1133.270726][T22400] device_add+0x507/0xc20 [ 1133.275175][T22400] wiphy_register+0x1dad/0x2ae0 [ 1133.280454][T22400] ? cfg80211_event_work+0x40/0x40 [ 1133.285646][T22400] ? minstrel_ht_alloc+0x88a/0x990 [ 1133.290931][T22400] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1133.297158][T22400] ieee80211_register_hw+0x3464/0x4250 [ 1133.302888][T22400] ? ieee80211_tasklet_handler+0x20/0x20 [ 1133.308612][T22400] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1133.314755][T22400] ? __debug_object_init+0xec/0x450 [ 1133.320101][T22400] ? __asan_memset+0x22/0x40 [ 1133.324843][T22400] ? __hrtimer_init+0x186/0x270 [ 1133.329791][T22400] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1133.335799][T22400] ? mac80211_hwsim_free+0x220/0x220 [ 1133.341150][T22400] ? rcu_is_watching+0x15/0xb0 [ 1133.346072][T22400] ? kstrndup+0xbd/0x140 [ 1133.350563][T22400] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1133.355790][T22400] ? __nla_validate+0x50/0x50 [ 1133.360551][T22400] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1133.367520][T22400] ? __nla_parse+0x40/0x50 [ 1133.372020][T22400] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1133.378500][T22400] genl_family_rcv_msg_doit+0x211/0x310 [ 1133.384530][T22400] ? end_current_label_crit_section+0x170/0x170 [ 1133.390929][T22400] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1133.397117][T22400] ? bpf_lsm_capable+0x9/0x10 [ 1133.401946][T22400] ? security_capable+0x89/0xb0 [ 1133.406877][T22400] genl_rcv_msg+0x619/0x7a0 [ 1133.411523][T22400] ? genl_bind+0x360/0x360 [ 1133.416012][T22400] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1133.422680][T22400] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1133.429560][T22400] ? ref_tracker_free+0x690/0x840 [ 1133.434897][T22400] netlink_rcv_skb+0x241/0x4d0 [ 1133.439877][T22400] ? genl_bind+0x360/0x360 [ 1133.444835][T22400] ? netlink_ack+0x1180/0x1180 [ 1133.449870][T22400] ? __lock_acquire+0x7d40/0x7d40 [ 1133.455208][T22400] ? down_read+0x1ac/0x2e0 [ 1133.460370][T22400] genl_rcv+0x28/0x40 [ 1133.465141][T22400] netlink_unicast+0x751/0x8d0 [ 1133.472237][T22400] netlink_sendmsg+0x8d0/0xbf0 [ 1133.478391][T22400] ? netlink_getsockopt+0x590/0x590 [ 1133.484082][T22400] ? aa_sock_msg_perm+0x94/0x150 [ 1133.489948][T22400] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1133.495958][T22400] ? security_socket_sendmsg+0x80/0xa0 [ 1133.502419][T22400] ? netlink_getsockopt+0x590/0x590 [ 1133.508749][T22400] ____sys_sendmsg+0x5ba/0x960 [ 1133.514136][T22400] ? __asan_memset+0x22/0x40 [ 1133.518842][T22400] ? __sys_sendmsg_sock+0x30/0x30 [ 1133.524130][T22400] ? __import_iovec+0x5f2/0x850 [ 1133.529322][T22400] ? import_iovec+0x73/0xa0 [ 1133.533988][T22400] ___sys_sendmsg+0x2a6/0x360 [ 1133.538804][T22400] ? __sys_sendmsg+0x2a0/0x2a0 [ 1133.543663][T22400] ? debug_mutex_init+0x38/0x70 [ 1133.548729][T22400] __se_sys_sendmsg+0x1c2/0x2b0 [ 1133.553740][T22400] ? __x64_sys_sendmsg+0x80/0x80 [ 1133.558875][T22400] ? lockdep_hardirqs_on+0x98/0x150 [ 1133.564294][T22400] do_syscall_64+0x55/0xa0 [ 1133.568796][T22400] ? clear_bhb_loop+0x40/0x90 [ 1133.573549][T22400] ? clear_bhb_loop+0x40/0x90 [ 1133.578377][T22400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.584550][T22400] RIP: 0033:0x7f4e0bb9c819 [ 1133.589213][T22400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.609455][T22400] RSP: 002b:00007f4e0cab0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.618023][T22400] RAX: ffffffffffffffda RBX: 00007f4e0be15fa0 RCX: 00007f4e0bb9c819 [ 1133.626302][T22400] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1133.634608][T22400] RBP: 00007f4e0bc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1133.642998][T22400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1133.651199][T22400] R13: 00007f4e0be16038 R14: 00007f4e0be15fa0 R15: 00007ffc8fd76b78 [ 1133.659261][T22400] [ 1133.986771][T22415] netlink: 'syz.0.4726': attribute type 10 has an invalid length. [ 1134.253693][T22421] netlink: 'syz.2.4729': attribute type 10 has an invalid length. [ 1134.361014][T22430] netlink: 'syz.0.4732': attribute type 10 has an invalid length. [ 1134.389154][T22430] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1134.605409][T22432] netlink: 'syz.1.4734': attribute type 39 has an invalid length. [ 1135.161790][T22437] __nla_validate_parse: 6 callbacks suppressed [ 1135.161820][T22437] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4735'. [ 1135.223162][T22436] bridge_slave_1: left allmulticast mode [ 1135.249508][T22436] bridge_slave_1: left promiscuous mode [ 1135.286357][T22436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.498845][T22436] bridge_slave_0: left promiscuous mode [ 1135.507459][T22436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.604150][T22436] bond0: (slave bridge0): Releasing backup interface [ 1135.785315][T22441] netlink: 'syz.0.4737': attribute type 3 has an invalid length. [ 1135.794869][T22441] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4737'. [ 1135.811399][T22439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4736'. [ 1136.104531][T22447] netlink: 'syz.2.4738': attribute type 10 has an invalid length. [ 1136.222819][T22458] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4742'. [ 1136.509396][T22463] netlink: 'syz.0.4744': attribute type 10 has an invalid length. [ 1136.526527][T22463] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4744'. [ 1136.633267][T22474] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4746'. [ 1137.079918][T22480] hsr0: left allmulticast mode [ 1137.092090][T22480] hsr_slave_0: left allmulticast mode [ 1137.102228][T22480] hsr_slave_1: left allmulticast mode [ 1137.141413][T22480] bridge0: port 3(hsr0) entered disabled state [ 1137.180281][T22480] bridge_slave_1: left allmulticast mode [ 1137.192305][T22480] bridge_slave_1: left promiscuous mode [ 1137.199121][T22480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.220064][T22480] bridge_slave_0: left allmulticast mode [ 1137.231070][T22480] bridge_slave_0: left promiscuous mode [ 1137.246426][T22480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.687150][T22480] .`: (slave bridge0): Releasing backup interface [ 1137.706106][T22480] .`: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 1137.812238][T22479] netlink: 'syz.0.4757': attribute type 10 has an invalid length. [ 1137.822051][T22479] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4757'. [ 1137.860122][T22481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4749'. [ 1138.596062][T22497] netlink: 'syz.0.4754': attribute type 10 has an invalid length. [ 1138.609466][T22497] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1138.781836][T22515] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4760'. [ 1139.122657][T22523] netlink: 'syz.0.4763': attribute type 10 has an invalid length. [ 1139.131400][T22523] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4763'. [ 1139.480764][T22533] netlink: 'syz.1.4767': attribute type 10 has an invalid length. [ 1139.586240][T22538] FAULT_INJECTION: forcing a failure. [ 1139.586240][T22538] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.600758][T22538] CPU: 1 PID: 22538 Comm: syz.3.4766 Not tainted syzkaller #0 [ 1139.608551][T22538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1139.618848][T22538] Call Trace: [ 1139.622288][T22538] [ 1139.625287][T22538] dump_stack_lvl+0x18c/0x250 [ 1139.630172][T22538] ? show_regs_print_info+0x20/0x20 [ 1139.636159][T22538] ? load_image+0x420/0x420 [ 1139.640761][T22538] ? __might_sleep+0xe0/0xe0 [ 1139.645553][T22538] ? __lock_acquire+0x7d40/0x7d40 [ 1139.650754][T22538] should_fail_ex+0x39d/0x4d0 [ 1139.655525][T22538] should_failslab+0x9/0x20 [ 1139.660112][T22538] slab_pre_alloc_hook+0x59/0x310 [ 1139.665403][T22538] ? sock_kmalloc+0x96/0xf0 [ 1139.670003][T22538] ? sock_kmalloc+0x96/0xf0 [ 1139.674760][T22538] __kmem_cache_alloc_node+0x53/0x250 [ 1139.680311][T22538] ? sock_kmalloc+0x96/0xf0 [ 1139.684928][T22538] __kmalloc+0xa4/0x230 [ 1139.689336][T22538] sock_kmalloc+0x96/0xf0 [ 1139.693742][T22538] ____sys_sendmsg+0x1be/0x960 [ 1139.698697][T22538] ? __asan_memset+0x22/0x40 [ 1139.703670][T22538] ? __sys_sendmsg_sock+0x30/0x30 [ 1139.709119][T22538] ? __import_iovec+0x5f2/0x850 [ 1139.714651][T22538] ? import_iovec+0x73/0xa0 [ 1139.719526][T22538] ___sys_sendmsg+0x2a6/0x360 [ 1139.724540][T22538] ? __sys_sendmsg+0x2a0/0x2a0 [ 1139.730034][T22538] ? trace_call_bpf+0xc3/0x6c0 [ 1139.735032][T22538] __se_sys_sendmsg+0x1c2/0x2b0 [ 1139.740809][T22538] ? __x64_sys_sendmsg+0x80/0x80 [ 1139.746023][T22538] ? lockdep_hardirqs_on+0x98/0x150 [ 1139.752271][T22538] do_syscall_64+0x55/0xa0 [ 1139.757952][T22538] ? clear_bhb_loop+0x40/0x90 [ 1139.763557][T22538] ? clear_bhb_loop+0x40/0x90 [ 1139.769409][T22538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.775750][T22538] RIP: 0033:0x7f6ce9d9c819 [ 1139.780707][T22538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.802577][T22538] RSP: 002b:00007f6ceac5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1139.811235][T22538] RAX: ffffffffffffffda RBX: 00007f6cea016180 RCX: 00007f6ce9d9c819 [ 1139.819325][T22538] RDX: 0000000000004801 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1139.827371][T22538] RBP: 00007f6ceac5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.835485][T22538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.843496][T22538] R13: 00007f6cea016218 R14: 00007f6cea016180 R15: 00007fffce197218 [ 1139.852392][T22538] [ 1140.557985][T22550] netlink: 'syz.1.4773': attribute type 10 has an invalid length. [ 1140.567230][T22550] __nla_validate_parse: 2 callbacks suppressed [ 1140.567265][T22550] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4773'. [ 1140.845531][T22555] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4774'. [ 1141.113393][T22552] netlink: 'syz.3.4772': attribute type 10 has an invalid length. [ 1141.199057][T22552] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1141.945991][T22584] netlink: 'syz.2.4784': attribute type 10 has an invalid length. [ 1141.996787][T22584] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4784'. [ 1142.658563][T22594] netlink: 'syz.0.4787': attribute type 10 has an invalid length. [ 1142.707559][T22594] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1142.799943][T22600] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.4788'. [ 1143.931800][T22605] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4789'. [ 1144.447709][T22619] FAULT_INJECTION: forcing a failure. [ 1144.447709][T22619] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.484724][T22619] CPU: 0 PID: 22619 Comm: syz.2.4795 Not tainted syzkaller #0 [ 1144.492662][T22619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1144.502802][T22619] Call Trace: [ 1144.506136][T22619] [ 1144.509134][T22619] dump_stack_lvl+0x18c/0x250 [ 1144.514032][T22619] ? sctp_sendmsg+0x1575/0x28c0 [ 1144.518974][T22619] ? ___sys_sendmsg+0x2a6/0x360 [ 1144.523899][T22619] ? show_regs_print_info+0x20/0x20 [ 1144.529193][T22619] ? load_image+0x420/0x420 [ 1144.533799][T22619] should_fail_ex+0x39d/0x4d0 [ 1144.538577][T22619] should_failslab+0x9/0x20 [ 1144.543291][T22619] slab_pre_alloc_hook+0x59/0x310 [ 1144.548478][T22619] ? sctp_add_bind_addr+0x8c/0x360 [ 1144.553828][T22619] __kmem_cache_alloc_node+0x53/0x250 [ 1144.559318][T22619] ? sctp_add_bind_addr+0x8c/0x360 [ 1144.564785][T22619] kmalloc_trace+0x2a/0xe0 [ 1144.569606][T22619] sctp_add_bind_addr+0x8c/0x360 [ 1144.575251][T22619] sctp_copy_local_addr_list+0x315/0x4f0 [ 1144.581339][T22619] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1144.587155][T22619] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1144.593584][T22619] ? sctp_v4_is_any+0x35/0x60 [ 1144.598500][T22619] ? sctp_copy_one_addr+0x8c/0x350 [ 1144.603705][T22619] sctp_bind_addr_copy+0xb3/0x3c0 [ 1144.609022][T22619] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1144.615586][T22619] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1144.621181][T22619] ? __sctp_connect+0xd80/0xd80 [ 1144.626162][T22619] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1144.631663][T22619] ? _local_bh_enable+0xa0/0xa0 [ 1144.636659][T22619] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1144.642685][T22619] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1144.648793][T22619] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1144.654471][T22619] ? security_sctp_bind_connect+0x89/0xb0 [ 1144.660238][T22619] sctp_sendmsg+0x1575/0x28c0 [ 1144.665112][T22619] ? sctp_getsockopt+0xb60/0xb60 [ 1144.670104][T22619] ? aa_sk_perm+0x83c/0x970 [ 1144.674685][T22619] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 1144.680836][T22619] ? aa_af_perm+0x330/0x330 [ 1144.685538][T22619] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1144.692397][T22619] ? sock_rps_record_flow+0x19/0x3f0 [ 1144.697775][T22619] ? inet_sendmsg+0x7c/0x2f0 [ 1144.702505][T22619] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1144.707885][T22619] ? security_socket_sendmsg+0x80/0xa0 [ 1144.713507][T22619] ? inet_send_prepare+0x260/0x260 [ 1144.718862][T22619] ____sys_sendmsg+0x5ba/0x960 [ 1144.723774][T22619] ? __lock_acquire+0x7d40/0x7d40 [ 1144.728854][T22619] ? __asan_memset+0x22/0x40 [ 1144.733586][T22619] ? __sys_sendmsg_sock+0x30/0x30 [ 1144.738656][T22619] ? __import_iovec+0x5f2/0x850 [ 1144.744137][T22619] ? import_iovec+0x73/0xa0 [ 1144.748863][T22619] ___sys_sendmsg+0x2a6/0x360 [ 1144.753612][T22619] ? __sys_sendmsg+0x2a0/0x2a0 [ 1144.758432][T22619] ? trace_call_bpf+0xc3/0x6c0 [ 1144.763351][T22619] __se_sys_sendmsg+0x1c2/0x2b0 [ 1144.769174][T22619] ? __x64_sys_sendmsg+0x80/0x80 [ 1144.774288][T22619] ? lockdep_hardirqs_on+0x98/0x150 [ 1144.779800][T22619] do_syscall_64+0x55/0xa0 [ 1144.784813][T22619] ? clear_bhb_loop+0x40/0x90 [ 1144.789896][T22619] ? clear_bhb_loop+0x40/0x90 [ 1144.795403][T22619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1144.801968][T22619] RIP: 0033:0x7f4e0bb9c819 [ 1144.806634][T22619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.826793][T22619] RSP: 002b:00007f4e0cab0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1144.835455][T22619] RAX: ffffffffffffffda RBX: 00007f4e0be15fa0 RCX: 00007f4e0bb9c819 [ 1144.843682][T22619] RDX: 0000000040004044 RSI: 0000200000000140 RDI: 0000000000000003 [ 1144.851716][T22619] RBP: 00007f4e0cab0090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.859747][T22619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1144.867786][T22619] R13: 00007f4e0be16038 R14: 00007f4e0be15fa0 R15: 00007ffc8fd76b78 [ 1144.876055][T22619] [ 1148.939346][T22662] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4808'. [ 1149.183556][T22670] netlink: 'syz.0.4810': attribute type 10 has an invalid length. [ 1149.231091][T22670] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4810'. [ 1149.615180][T22661] netlink: 'syz.2.4809': attribute type 10 has an invalid length. [ 1149.925475][T22687] netlink: 'syz.0.4815': attribute type 29 has an invalid length. [ 1150.244699][T22693] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.4817'. [ 1150.677187][T22697] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1150.688689][T22697] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1150.699629][T22697] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1150.748161][T22697] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1150.760564][T22697] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1150.770987][T22697] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1150.889279][T15105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.093318][T15105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.195390][T22713] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4821'. [ 1151.255315][T15105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.349135][T22718] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4824'. [ 1151.389276][T15105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.672941][T22696] chnl_net:caif_netlink_parms(): no params data found [ 1152.182455][T22722] netlink: 'syz.0.4826': attribute type 10 has an invalid length. [ 1152.191168][T22722] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1152.217753][T22696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.229861][T22696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.272179][T22696] bridge_slave_0: entered allmulticast mode [ 1152.280859][T22696] bridge_slave_0: entered promiscuous mode [ 1152.292718][T22696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.299935][T22696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.307512][T22696] bridge_slave_1: entered allmulticast mode [ 1152.315436][T22696] bridge_slave_1: entered promiscuous mode [ 1152.808152][T22696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.830714][T22696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.842821][T22697] Bluetooth: hci2: command tx timeout [ 1153.013572][T22696] team0: Port device team_slave_0 added [ 1153.126268][T22696] team0: Port device team_slave_1 added [ 1153.339117][T22696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.367657][T22696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.415389][T22696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.434928][T22767] netlink: 'syz.2.4834': attribute type 10 has an invalid length. [ 1153.445536][T22767] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4834'. [ 1153.470494][T22770] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4835'. [ 1153.500696][T22696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.519677][T22696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.552616][T22696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.747810][T22696] hsr_slave_0: entered promiscuous mode [ 1153.763593][T22696] hsr_slave_1: entered promiscuous mode [ 1153.779694][T22696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1153.839269][T22696] Cannot create hsr debugfs directory [ 1153.945645][T15105] [ 1153.948110][T15105] ====================================================== [ 1153.955215][T15105] WARNING: possible circular locking dependency detected [ 1153.962310][T15105] syzkaller #0 Not tainted [ 1153.966779][T15105] ------------------------------------------------------ [ 1153.974023][T15105] kworker/u4:18/15105 is trying to acquire lock: [ 1153.980496][T15105] ffff888026490d00 (team->team_lock_key#6){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 1153.990449][T15105] [ 1153.990449][T15105] but task is already holding lock: [ 1153.998677][T15105] ffff8880256d8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1154.009218][T15105] [ 1154.009218][T15105] which lock already depends on the new lock. [ 1154.009218][T15105] [ 1154.020032][T15105] [ 1154.020032][T15105] the existing dependency chain (in reverse order) is: [ 1154.029118][T15105] [ 1154.029118][T15105] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1154.037199][T15105] __mutex_lock+0x136/0xcc0 [ 1154.042369][T15105] ieee80211_open+0x144/0x200 [ 1154.047887][T15105] __dev_open+0x2cb/0x430 [ 1154.052897][T15105] dev_open+0xab/0x190 [ 1154.057834][T15105] team_add_slave+0x75f/0x29a0 [ 1154.063184][T15105] do_setlink+0xdfe/0x4130 [ 1154.068371][T15105] rtnl_newlink+0x17da/0x20a0 [ 1154.073666][T15105] rtnetlink_rcv_msg+0x869/0xfa0 [ 1154.079363][T15105] netlink_rcv_skb+0x241/0x4d0 [ 1154.085176][T15105] netlink_unicast+0x751/0x8d0 [ 1154.090687][T15105] netlink_sendmsg+0x8d0/0xbf0 [ 1154.096143][T15105] ____sys_sendmsg+0x5ba/0x960 [ 1154.101503][T15105] ___sys_sendmsg+0x2a6/0x360 [ 1154.106771][T15105] __se_sys_sendmsg+0x1c2/0x2b0 [ 1154.112263][T15105] do_syscall_64+0x55/0xa0 [ 1154.117632][T15105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1154.124336][T15105] [ 1154.124336][T15105] -> #0 (team->team_lock_key#6){+.+.}-{3:3}: [ 1154.133385][T15105] __lock_acquire+0x2df1/0x7d40 [ 1154.138907][T15105] lock_acquire+0x19e/0x420 [ 1154.144165][T15105] __mutex_lock+0x136/0xcc0 [ 1154.149341][T15105] team_del_slave+0x32/0x1c0 [ 1154.155025][T15105] team_device_event+0x28d/0xa20 [ 1154.160781][T15105] notifier_call_chain+0x197/0x380 [ 1154.166866][T15105] unregister_netdevice_many_notify+0x100d/0x1900 [ 1154.174042][T15105] unregister_netdevice_queue+0x32c/0x370 [ 1154.180477][T15105] _cfg80211_unregister_wdev+0x16b/0x580 [ 1154.187862][T15105] ieee80211_remove_interfaces+0x49e/0x690 [ 1154.194390][T15105] ieee80211_unregister_hw+0x5d/0x2a0 [ 1154.200359][T15105] mac80211_hwsim_del_radio+0x289/0x480 [ 1154.206475][T15105] hwsim_exit_net+0x58d/0x650 [ 1154.211830][T15105] cleanup_net+0x70a/0xbb0 [ 1154.216830][T15105] process_scheduled_works+0xa5d/0x15d0 [ 1154.223083][T15105] worker_thread+0xa55/0xfc0 [ 1154.228451][T15105] kthread+0x2fa/0x390 [ 1154.233412][T15105] ret_from_fork+0x48/0x80 [ 1154.238590][T15105] ret_from_fork_asm+0x11/0x20 [ 1154.244005][T15105] [ 1154.244005][T15105] other info that might help us debug this: [ 1154.244005][T15105] [ 1154.254564][T15105] Possible unsafe locking scenario: [ 1154.254564][T15105] [ 1154.262504][T15105] CPU0 CPU1 [ 1154.268436][T15105] ---- ---- [ 1154.274113][T15105] lock(&rdev->wiphy.mtx); [ 1154.278956][T15105] lock(team->team_lock_key#6); [ 1154.286669][T15105] lock(&rdev->wiphy.mtx); [ 1154.295111][T15105] lock(team->team_lock_key#6); [ 1154.300296][T15105] [ 1154.300296][T15105] *** DEADLOCK *** [ 1154.300296][T15105] [ 1154.308591][T15105] 5 locks held by kworker/u4:18/15105: [ 1154.314108][T15105] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1154.325201][T15105] #1: ffffc90003b4fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1154.336613][T15105] #2: ffffffff8e3b5710 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1154.346269][T15105] #3: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1154.356725][T15105] #4: ffff8880256d8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1154.367588][T15105] [ 1154.367588][T15105] stack backtrace: [ 1154.373510][T15105] CPU: 1 PID: 15105 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 1154.381690][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1154.391961][T15105] Workqueue: netns cleanup_net [ 1154.396866][T15105] Call Trace: [ 1154.400274][T15105] [ 1154.403241][T15105] dump_stack_lvl+0x18c/0x250 [ 1154.407960][T15105] ? load_image+0x420/0x420 [ 1154.412503][T15105] ? show_regs_print_info+0x20/0x20 [ 1154.417837][T15105] ? print_circular_bug+0x12b/0x1a0 [ 1154.423082][T15105] check_noncircular+0x2fc/0x400 [ 1154.428152][T15105] ? print_deadlock_bug+0x5d0/0x5d0 [ 1154.433491][T15105] ? lockdep_lock+0xf5/0x230 [ 1154.438351][T15105] ? perf_trace_lock_acquire+0x104/0x410 [ 1154.444054][T15105] ? _find_first_zero_bit+0xd3/0x100 [ 1154.449395][T15105] __lock_acquire+0x2df1/0x7d40 [ 1154.454397][T15105] ? verify_lock_unused+0x140/0x140 [ 1154.459640][T15105] ? perf_trace_lock_acquire+0x104/0x410 [ 1154.465316][T15105] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1154.472159][T15105] ? perf_trace_lock_acquire+0x104/0x410 [ 1154.477938][T15105] lock_acquire+0x19e/0x420 [ 1154.482591][T15105] ? team_del_slave+0x32/0x1c0 [ 1154.487544][T15105] ? __might_sleep+0xe0/0xe0 [ 1154.492328][T15105] ? read_lock_is_recursive+0x20/0x20 [ 1154.497955][T15105] __mutex_lock+0x136/0xcc0 [ 1154.502515][T15105] ? team_del_slave+0x32/0x1c0 [ 1154.507488][T15105] ? __lock_acquire+0x7d40/0x7d40 [ 1154.512948][T15105] ? rcu_is_watching+0x15/0xb0 [ 1154.517777][T15105] ? trace_contention_end+0x39/0xe0 [ 1154.523490][T15105] ? __mutex_lock+0x315/0xcc0 [ 1154.528311][T15105] ? team_del_slave+0x32/0x1c0 [ 1154.533205][T15105] ? mutex_lock_nested+0x20/0x20 [ 1154.538208][T15105] ? bond_netdev_event+0xeb/0xf20 [ 1154.543509][T15105] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1154.549381][T15105] team_del_slave+0x32/0x1c0 [ 1154.554009][T15105] team_device_event+0x28d/0xa20 [ 1154.559073][T15105] notifier_call_chain+0x197/0x380 [ 1154.564418][T15105] unregister_netdevice_many_notify+0x100d/0x1900 [ 1154.570990][T15105] ? lock_chain_count+0x20/0x20 [ 1154.576319][T15105] ? unregister_netdevice_many+0x20/0x20 [ 1154.582519][T15105] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1154.589211][T15105] ? __lock_acquire+0x7d40/0x7d40 [ 1154.594407][T15105] unregister_netdevice_queue+0x32c/0x370 [ 1154.600349][T15105] ? list_netdevice+0x730/0x730 [ 1154.605230][T15105] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1154.611117][T15105] _cfg80211_unregister_wdev+0x16b/0x580 [ 1154.616912][T15105] ieee80211_remove_interfaces+0x49e/0x690 [ 1154.622855][T15105] ? ieee80211_do_stop+0x1e20/0x1e20 [ 1154.628310][T15105] ? rcu_is_watching+0x15/0xb0 [ 1154.633270][T15105] ieee80211_unregister_hw+0x5d/0x2a0 [ 1154.638868][T15105] mac80211_hwsim_del_radio+0x289/0x480 [ 1154.644465][T15105] ? rhashtable_remove_fast+0xc00/0xc00 [ 1154.650158][T15105] hwsim_exit_net+0x58d/0x650 [ 1154.655063][T15105] ? hwsim_init_net+0x90/0x90 [ 1154.659782][T15105] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1154.665742][T15105] cleanup_net+0x70a/0xbb0 [ 1154.670237][T15105] ? ops_free_list+0x3b0/0x3b0 [ 1154.675319][T15105] ? _raw_spin_unlock_irq+0x23/0x50 [ 1154.680582][T15105] ? process_scheduled_works+0x96f/0x15d0 [ 1154.686648][T15105] ? process_scheduled_works+0x96f/0x15d0 [ 1154.693076][T15105] process_scheduled_works+0xa5d/0x15d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1154.699231][T15105] ? worker_attach_to_pool+0x380/0x380 [ 1154.704736][T15105] ? assign_work+0x3d2/0x5d0 [ 1154.709599][T15105] worker_thread+0xa55/0xfc0 [ 1154.714349][T15105] kthread+0x2fa/0x390 [ 1154.718562][T15105] ? pr_cont_work+0x560/0x560 [ 1154.723521][T15105] ? kthread_blkcg+0xd0/0xd0 [ 1154.728179][T15105] ret_from_fork+0x48/0x80 [ 1154.732659][T15105] ? kthread_blkcg+0xd0/0xd0 [ 1154.737314][T15105] ret_from_fork_asm+0x11/0x20 [ 1154.742313][T15105] [ 1154.800122][T15105] team0: Port device wlan1 removed [ 1154.914980][T22697] Bluetooth: hci2: command tx timeout [ 1156.717456][T15105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1156.733795][T15105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1156.758890][T15105] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1156.773913][T15105] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1156.795484][T15105] bridge0: port 3(team0) entered disabled state [ 1156.809693][T15105] bridge_slave_1: left allmulticast mode [ 1156.818025][T15105] bridge_slave_1: left promiscuous mode [ 1156.824620][T15105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.841025][T15105] bridge_slave_0: left allmulticast mode [ 1156.847167][T15105] bridge_slave_0: left promiscuous mode [ 1156.856021][T15105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.875294][T15105] veth1_vlan: left promiscuous mode [ 1156.881255][T15105] veth0_vlan: left promiscuous mode [ 1157.244012][T15105] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1157.282208][T15105] team_slave_1 (unregistering): left promiscuous mode [ 1157.289216][T15105] team_slave_1 (unregistering): left allmulticast mode [ 1157.298774][T15105] team0 (unregistering): Port device team_slave_1 removed [ 1157.337673][T15105] team_slave_0 (unregistering): left promiscuous mode [ 1157.344778][T15105] team_slave_0 (unregistering): left allmulticast mode [ 1157.356448][T15105] team0 (unregistering): Port device team_slave_0 removed [ 1157.395895][T15105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.638974][T15105] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1157.648025][T15105] bond0 (unregistering): Released all slaves [ 1159.632738][T15105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.673112][T15105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.740428][T15105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.779406][T15105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.875796][T15105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.922843][T15105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.989550][T15105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.048401][T15105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.896367][T15105] team0: Port device wlan1 removed [ 1162.049611][T15105] hsr_slave_0: left promiscuous mode [ 1162.057536][T15105] hsr_slave_1: left promiscuous mode [ 1162.081291][T15105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1162.089822][T15105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.100025][T15105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1162.108292][T15105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.118159][T15105] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1162.129275][T15105] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1162.146922][T15105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1162.157485][T15105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.166545][T15105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1162.177526][T15105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.188235][T15105] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1162.198399][T15105] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1162.207972][T15105] hsr_slave_0: left promiscuous mode [ 1162.214556][T15105] hsr_slave_1: left promiscuous mode [ 1162.220728][T15105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.228699][T15105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.236990][T15105] bridge_slave_1: left allmulticast mode [ 1162.243026][T15105] bridge_slave_1: left promiscuous mode [ 1162.248934][T15105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.258670][T15105] bridge_slave_0: left allmulticast mode [ 1162.264646][T15105] bridge_slave_0: left promiscuous mode [ 1162.270589][T15105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.284938][T15105] veth1_macvtap: left promiscuous mode [ 1162.291057][T15105] veth0_macvtap: left promiscuous mode [ 1162.297056][T15105] veth1_vlan: left promiscuous mode [ 1162.302709][T15105] veth0_vlan: left promiscuous mode [ 1162.689476][T15105] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.892139][T15105] .` (unregistering): Released all slaves [ 1163.139094][T15105] team0 (unregistering): Port device team_slave_1 removed [ 1163.183678][T15105] team0 (unregistering): Port device C removed [ 1163.214206][T15105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.375675][T15105] bond0 (unregistering): (slave team0): Releasing backup interface [ 1163.398491][T15105] bond0 (unregistering): Released all slaves [ 1163.498773][T15105] team0 (unregistering): Port device team_slave_1 removed [ 1163.536877][T15105] team0 (unregistering): Port device team_slave_0 removed [ 1163.570654][T15105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.606689][T15105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.683022][T15105] bond0 (unregistering): Released all slaves