last executing test programs: 7.268083342s ago: executing program 1 (id=4238): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x7, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.159705965s ago: executing program 0 (id=4240): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000002c80)={&(0x7f0000000b00), 0x6e, 0x0}, 0x100) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 7.003446939s ago: executing program 1 (id=4244): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000001080)='syzkaller\x00'}, 0x83) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r2], 0x20) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) 6.57610912s ago: executing program 1 (id=4247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r1, &(0x7f00000000c0)=0x7, 0x12) 4.768904626s ago: executing program 1 (id=4249): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 4.768322846s ago: executing program 2 (id=4250): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r2, 0x0, 0x7}, 0x38) 3.84074099s ago: executing program 0 (id=4253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.734673163s ago: executing program 2 (id=4255): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0x4, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 3.644312046s ago: executing program 2 (id=4256): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r3) 3.530285659s ago: executing program 0 (id=4257): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.47265515s ago: executing program 3 (id=4258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.325371884s ago: executing program 2 (id=4259): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$ENABLE_STATS(0x20, &(0x7f0000000040)={0x2}, 0x75) 2.508035625s ago: executing program 0 (id=4260): r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x420}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74"], &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff, 0x826a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 2.492535425s ago: executing program 1 (id=4261): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000004000000040000000c"], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.122077335s ago: executing program 3 (id=4262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.709461305s ago: executing program 3 (id=4263): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) write$cgroup_devices(r3, 0x0, 0xfffffeff) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_int(r3, &(0x7f0000000300)=0x6, 0x12) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x100) 1.655740827s ago: executing program 0 (id=4264): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r2, 0x0, 0x7}, 0x38) 1.655411767s ago: executing program 1 (id=4265): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x44b}, 0x38) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80"], 0xffdd) 820.864739ms ago: executing program 0 (id=4266): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4eaa00000000000071105100000000009500000000000000a145bd105cb2a1584c4c23f2d31e0c518b74df0aca8641bc781d44d92b739c3e5c006e887ff2df72ac1c6566076a17f713cb4c908a1becaf8c1ae8a87185676f5470e9c5e14ac79d65406402236f5d95678eb161a0020ca4dd431f68c59e0f6b115e77"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x37) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r4, &(0x7f0000000d40), 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c860000005e254e69de0592d920000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b000000000000000000000000007f"], 0xffffffffffffffc7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd04}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x11, 0x4, 0x0, 0x0, 0x0, 0x64, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x100020, 0x1, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.251891][T12901] RSP: 002b:00007f819ea72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.260301][T12901] RAX: ffffffffffffffda RBX: 00007f819de25fa0 RCX: 00007f819db9e0d9 [ 488.268266][T12901] RDX: 0000000000040880 RSI: 0000200000000140 RDI: 0000000000000007 [ 488.276230][T12901] RBP: 00007f819ea72090 R08: 0000000000000000 R09: 0000000000000000 [ 488.284224][T12901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 488.292191][T12901] R13: 00007f819de26038 R14: 00007f819de25fa0 R15: 00007ffc29a02518 [ 488.300176][T12901] [ 488.390227][T12904] netlink: 'syz.1.2436': attribute type 29 has an invalid length. [ 488.399254][T12904] netlink: 'syz.1.2436': attribute type 29 has an invalid length. [ 488.721306][T12911] sock: sock_timestamping_bind_phc: sock not bind to device [ 488.820399][T12904] syzkaller0: entered promiscuous mode [ 488.826467][T12904] syzkaller0: entered allmulticast mode [ 488.944220][T12911] netlink: 'syz.3.2439': attribute type 10 has an invalid length. [ 489.032561][T12911] team0 (unregistering): Port device team_slave_0 removed [ 489.065958][T12911] team0 (unregistering): Port device team_slave_1 removed [ 489.367545][T12918] netlink: 'syz.3.2441': attribute type 2 has an invalid length. [ 489.377918][T12918] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2441'. [ 490.912290][T12920] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2442'. [ 490.922260][T12920] netlink: 4548 bytes leftover after parsing attributes in process `syz.3.2442'. [ 491.237124][T12931] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2450'. [ 492.115059][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 492.134519][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 492.143041][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 492.156757][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 492.173035][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 492.189991][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 492.347811][T12951] syzkaller0: entered promiscuous mode [ 492.353546][T12951] syzkaller0: entered allmulticast mode [ 492.368162][ T49] syzkaller0: tun_net_xmit 48 [ 493.286423][ T3525] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.252589][ T5775] Bluetooth: hci3: command tx timeout [ 494.897031][ T3525] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.002605][ T3525] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.029227][T12965] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2461'. [ 495.146519][ T3525] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.339937][T12968] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2462'. [ 495.421298][T12968] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2462'. [ 495.493623][T12968] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2462'. [ 495.505278][T12972] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2462'. [ 495.551579][T12948] chnl_net:caif_netlink_parms(): no params data found [ 495.741234][T12983] netlink: 'syz.3.2465': attribute type 2 has an invalid length. [ 495.759573][T12983] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2465'. [ 495.913567][T12984] sit0: entered promiscuous mode [ 496.326063][T12948] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.335401][ T5775] Bluetooth: hci3: command tx timeout [ 496.353089][T12948] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.371609][T12948] bridge_slave_0: entered allmulticast mode [ 496.379101][T12948] bridge_slave_0: entered promiscuous mode [ 496.458370][T12948] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.469150][T12948] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.480746][T12948] bridge_slave_1: entered allmulticast mode [ 496.494915][T12948] bridge_slave_1: entered promiscuous mode [ 496.546822][T12948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.559312][T12948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.611822][T12948] team0: Port device team_slave_0 added [ 496.645265][T12948] team0: Port device team_slave_1 added [ 496.676441][T12948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.683508][T12948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.709641][T12948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.723064][T12948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.730680][T12948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.757561][T12948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.814320][T12948] hsr_slave_0: entered promiscuous mode [ 496.822491][T12948] hsr_slave_1: entered promiscuous mode [ 496.829099][T12948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.843950][T12948] Cannot create hsr debugfs directory [ 497.371818][T13032] netlink: 'syz.1.2479': attribute type 2 has an invalid length. [ 497.383998][T13034] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2472'. [ 497.393487][T13032] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2479'. [ 497.622489][T13037] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2474'. [ 497.715811][T13037] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2474'. [ 497.744834][T13043] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2474'. [ 497.768426][T13045] sock: sock_timestamping_bind_phc: sock not bind to device [ 497.781046][T13047] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2474'. [ 497.865714][T13045] netlink: 'syz.2.2475': attribute type 10 has an invalid length. [ 498.108877][T13045] team0 (unregistering): Port device team_slave_0 removed [ 498.211380][T13045] team0 (unregistering): Port device team_slave_1 removed [ 498.409953][ T5775] Bluetooth: hci3: command tx timeout [ 498.471556][T12948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 498.559860][T12948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 498.658972][T12948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 498.748051][T12948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 498.942791][T13076] netlink: 'syz.1.2484': attribute type 29 has an invalid length. [ 498.991692][T13076] netlink: 'syz.1.2484': attribute type 29 has an invalid length. [ 499.105119][T13084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2486'. [ 499.147058][T13084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2486'. [ 499.165577][T13088] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2486'. [ 499.656905][T13076] syzkaller0: entered promiscuous mode [ 499.668364][T13076] syzkaller0: entered allmulticast mode [ 499.739711][T13084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2486'. [ 499.896006][T12948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.921226][T13109] netlink: 'syz.2.2488': attribute type 2 has an invalid length. [ 500.007656][T13111] netlink: 'syz.3.2489': attribute type 3 has an invalid length. [ 500.492944][ T5775] Bluetooth: hci3: command tx timeout [ 500.934736][T13118] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 501.372073][T13124] netlink: 'syz.2.2493': attribute type 9 has an invalid length. [ 501.613680][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.625085][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.264951][T12948] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.360067][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.367527][ T7948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.412122][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.419344][ T7948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.640424][ T3525] bond0: (slave wlan1): Releasing backup interface [ 502.700792][ T3525] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 502.708940][ T3525] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode [ 502.979722][T13156] netlink: 'syz.1.2502': attribute type 2 has an invalid length. [ 502.998690][T13156] __nla_validate_parse: 4 callbacks suppressed [ 502.998704][T13156] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2502'. [ 503.018184][T12948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.045881][T13151] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2501'. [ 503.356896][ T3525] hsr_slave_0: left promiscuous mode [ 503.390919][ T3525] hsr_slave_1: left promiscuous mode [ 503.402592][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.413914][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.426130][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.432981][T13167] netlink: 'syz.2.2504': attribute type 29 has an invalid length. [ 503.436980][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.461640][ T3525] veth1_macvtap: left promiscuous mode [ 503.467222][ T3525] veth0_macvtap: left promiscuous mode [ 503.473830][ T3525] veth1_vlan: left promiscuous mode [ 503.479168][ T3525] veth0_vlan: left promiscuous mode [ 504.146967][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 504.323520][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.340753][ T3525] bond_slave_1 (unregistering): left promiscuous mode [ 504.347588][ T3525] bond_slave_1 (unregistering): left allmulticast mode [ 504.440521][ T3525] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 504.450597][ T3525] bridge_slave_1 (unregistering): left promiscuous mode [ 504.457596][ T3525] bridge_slave_1 (unregistering): left allmulticast mode [ 504.728825][ T3525] team0 (unregistering): Port device bond0 removed [ 504.764570][ T3525] bond0 (unregistering): Released all slaves [ 504.803645][T13157] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2501'. [ 504.831865][T13167] netlink: 'syz.2.2504': attribute type 29 has an invalid length. [ 504.967432][T13169] syzkaller0: entered promiscuous mode [ 504.977660][T13169] syzkaller0: entered allmulticast mode [ 505.075915][T13181] netlink: 'syz.1.2507': attribute type 10 has an invalid length. [ 505.104051][T13181] bond0: left promiscuous mode [ 505.108945][T13181] bond_slave_0: left promiscuous mode [ 505.115773][T13181] bond_slave_1: left promiscuous mode [ 505.129735][T13181] bridge0: left promiscuous mode [ 505.135047][T13181] bridge_slave_1: left promiscuous mode [ 505.145152][T13181] bond0: left allmulticast mode [ 505.155141][T13181] bond_slave_0: left allmulticast mode [ 505.160760][T13181] bond_slave_1: left allmulticast mode [ 505.166581][T13181] bridge0: left allmulticast mode [ 505.173201][T13181] bridge_slave_1: left allmulticast mode [ 505.546772][T13202] netlink: 'syz.1.2513': attribute type 2 has an invalid length. [ 505.560735][T13202] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2513'. [ 506.496982][T13211] netlink: 'syz.3.2517': attribute type 29 has an invalid length. [ 507.127801][T13211] netlink: 'syz.3.2517': attribute type 29 has an invalid length. [ 507.153859][T13212] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2516'. [ 507.173097][T13215] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2516'. [ 507.298524][T13214] syzkaller0: entered promiscuous mode [ 507.325867][T13214] syzkaller0: entered allmulticast mode [ 507.407793][T13224] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2518'. [ 507.546537][T13230] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.2520'. [ 509.084427][T13241] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 509.094751][T13242] netlink: 'syz.2.2523': attribute type 27 has an invalid length. [ 509.103336][T13242] netlink: 'syz.2.2523': attribute type 25 has an invalid length. [ 509.181741][T12948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.271203][T12948] veth0_vlan: entered promiscuous mode [ 509.323547][T12948] veth1_vlan: entered promiscuous mode [ 509.328114][T13247] netlink: 'syz.3.2524': attribute type 2 has an invalid length. [ 509.352922][T13247] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2524'. [ 509.388633][T12948] veth0_macvtap: entered promiscuous mode [ 509.423173][T12948] veth1_macvtap: entered promiscuous mode [ 509.468113][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.482410][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.492627][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.503507][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.513511][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.524094][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.535563][T12948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.550586][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.563224][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.573320][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.584056][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.593999][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.604497][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.615968][T12948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.627592][T12948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.636889][T12948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.646188][T12948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.655055][T12948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.723438][T11523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.735583][T11523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.762939][T11523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.771973][T11523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.098656][T13261] netlink: 'syz.0.2526': attribute type 29 has an invalid length. [ 510.110379][T13259] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2527'. [ 510.472984][T13261] netlink: 'syz.0.2526': attribute type 29 has an invalid length. [ 510.547212][T13263] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2527'. [ 510.569613][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 510.578756][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 510.596376][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 510.614926][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 510.617750][T11513] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.635393][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 510.643146][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.703113][T13264] syzkaller0: entered promiscuous mode [ 510.708647][T13264] syzkaller0: entered allmulticast mode [ 510.767187][T11513] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.927825][T11513] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.954239][T13288] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2533'. [ 510.987510][T13288] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 511.164999][T13290] netlink: 'syz.3.2535': attribute type 10 has an invalid length. [ 511.181449][T13290] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2535'. [ 511.509032][T13293] netlink: 'syz.2.2536': attribute type 3 has an invalid length. [ 511.517446][T13293] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2536'. [ 511.944500][T13296] netlink: 'syz.3.2537': attribute type 9 has an invalid length. [ 511.969607][T13296] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2537'. [ 512.729769][ T5777] Bluetooth: hci0: command tx timeout [ 513.154287][T11513] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.353353][T13300] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.2539'. [ 513.389224][T13303] netlink: 'syz.2.2538': attribute type 2 has an invalid length. [ 513.405981][T13303] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2538'. [ 513.588633][T13305] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2540'. [ 513.647987][T13277] chnl_net:caif_netlink_parms(): no params data found [ 514.232215][T13277] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.268265][T13277] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.299876][T13277] bridge_slave_0: entered allmulticast mode [ 514.307195][T13277] bridge_slave_0: entered promiscuous mode [ 514.418888][T13277] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.437045][T13277] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.447271][T13277] bridge_slave_1: entered allmulticast mode [ 514.466265][T13346] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2549'. [ 514.475850][T13277] bridge_slave_1: entered promiscuous mode [ 514.498975][T13343] netlink: 'syz.2.2548': attribute type 10 has an invalid length. [ 514.809595][ T5777] Bluetooth: hci0: command tx timeout [ 515.027171][T13277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.065751][T13277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.259279][T13277] team0: Port device team_slave_0 added [ 515.276131][T13277] team0: Port device team_slave_1 added [ 515.280224][T13367] netlink: 'syz.3.2556': attribute type 2 has an invalid length. [ 515.309175][T13367] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2556'. [ 515.369195][T13277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.378983][T13277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.407692][T13277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.443107][T13372] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2558'. [ 515.466432][T13277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.473896][T13277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.501426][T13277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.605160][T13277] hsr_slave_0: entered promiscuous mode [ 515.630780][T13277] hsr_slave_1: entered promiscuous mode [ 515.646830][T13277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.656816][T13277] Cannot create hsr debugfs directory [ 515.674940][T13378] netlink: 'syz.0.2560': attribute type 2 has an invalid length. [ 515.692264][T13378] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2560'. [ 515.827496][T13381] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2561'. [ 515.855154][T13381] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 516.198464][T13393] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2562'. [ 516.432401][T13402] FAULT_INJECTION: forcing a failure. [ 516.432401][T13402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.447197][T13402] CPU: 0 PID: 13402 Comm: syz.3.2565 Not tainted syzkaller #0 [ 516.454714][T13402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.464793][T13402] Call Trace: [ 516.468071][T13402] [ 516.471001][T13402] dump_stack_lvl+0x18c/0x250 [ 516.475683][T13402] ? show_regs_print_info+0x20/0x20 [ 516.480877][T13402] ? load_image+0x420/0x420 [ 516.485389][T13402] ? __might_fault+0xaa/0x120 [ 516.490064][T13402] ? __lock_acquire+0x7d80/0x7d80 [ 516.495086][T13402] should_fail_ex+0x394/0x4c0 [ 516.499771][T13402] _copy_from_user+0x2f/0xe0 [ 516.504361][T13402] kstrtouint_from_user+0xde/0x170 [ 516.509474][T13402] ? kstrtol_from_user+0x190/0x190 [ 516.514635][T13402] proc_fail_nth_write+0x8f/0x250 [ 516.519689][T13402] ? proc_fail_nth_read+0x260/0x260 [ 516.524890][T13402] ? proc_fail_nth_read+0x260/0x260 [ 516.530086][T13402] vfs_write+0x299/0x9a0 [ 516.534333][T13402] ? file_end_write+0x250/0x250 [ 516.539181][T13402] ? __fget_files+0x28/0x460 [ 516.543798][T13402] ? __fget_files+0x3fc/0x460 [ 516.548485][T13402] ? __fdget_pos+0x2a3/0x330 [ 516.553074][T13402] ? ksys_write+0x74/0x260 [ 516.557491][T13402] ksys_write+0x151/0x260 [ 516.561838][T13402] ? __ia32_sys_read+0x90/0x90 [ 516.566601][T13402] ? lockdep_hardirqs_on+0x98/0x150 [ 516.571804][T13402] do_syscall_64+0x55/0xb0 [ 516.576217][T13402] ? clear_bhb_loop+0x40/0x90 [ 516.580888][T13402] ? clear_bhb_loop+0x40/0x90 [ 516.585559][T13402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.591443][T13402] RIP: 0033:0x7f819db5e90e [ 516.595852][T13402] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 516.615458][T13402] RSP: 002b:00007f819ea71fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.623866][T13402] RAX: ffffffffffffffda RBX: 00007f819ea726c0 RCX: 00007f819db5e90e [ 516.631833][T13402] RDX: 0000000000000001 RSI: 00007f819ea720a0 RDI: 0000000000000008 [ 516.639797][T13402] RBP: 00007f819ea72090 R08: 0000000000000000 R09: 0000000000000000 [ 516.647763][T13402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.655725][T13402] R13: 00007f819de26038 R14: 00007f819de25fa0 R15: 00007ffc29a02518 [ 516.663722][T13402] [ 516.902995][ T5777] Bluetooth: hci0: command tx timeout [ 516.923926][T13412] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2568'. [ 517.196035][T13277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 517.217178][T13277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 517.407734][T13417] syzkaller0: entered promiscuous mode [ 517.435880][T13417] syzkaller0: entered allmulticast mode [ 517.449103][T13277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 517.502393][T13277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 518.976862][ T5777] Bluetooth: hci0: command tx timeout [ 520.701491][T13452] netlink: 'syz.3.2573': attribute type 2 has an invalid length. [ 520.710190][T13452] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2573'. [ 520.760758][T13455] netlink: 'syz.0.2571': attribute type 2 has an invalid length. [ 520.786966][T13455] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2571'. [ 520.876265][T13277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.980906][T13277] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.029180][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.036455][ T7948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.056664][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.063927][ T7948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.643607][T13482] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2577'. [ 521.673874][T11513] hsr_slave_0: left promiscuous mode [ 521.696462][T11513] hsr_slave_1: left promiscuous mode [ 521.707554][T11513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.728313][T11513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.772658][T11513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.785367][T11513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.846829][T11513] veth1_macvtap: left promiscuous mode [ 521.876072][T11513] veth0_macvtap: left promiscuous mode [ 521.887683][T11513] veth1_vlan: left promiscuous mode [ 521.904122][T11513] veth0_vlan: left promiscuous mode [ 522.272225][T13504] netlink: 'syz.3.2585': attribute type 2 has an invalid length. [ 522.281236][T13504] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2585'. [ 522.646683][T11513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.688461][T11513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.734515][T11513] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 522.951596][T11513] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 522.962105][T11513] bond0 (unregistering): Released all slaves [ 523.051377][T13277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.186358][T13510] netlink: 465 bytes leftover after parsing attributes in process `syz.2.2586'. [ 523.256576][T13277] veth0_vlan: entered promiscuous mode [ 523.334339][T13277] veth1_vlan: entered promiscuous mode [ 523.436533][T13277] veth0_macvtap: entered promiscuous mode [ 523.458322][T13277] veth1_macvtap: entered promiscuous mode [ 523.473873][T13516] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2590'. [ 523.532977][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.553278][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.563598][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.575326][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.586042][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.597511][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.645015][T13277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.691787][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.719717][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.739502][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.757134][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.772449][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.789072][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.789135][T13525] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2593'. [ 523.801451][T13277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.832218][T13277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.842546][T13277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.851651][T13277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.860615][T13277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.027835][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.043108][T13530] netlink: 'syz.0.2596': attribute type 2 has an invalid length. [ 524.050313][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.051174][T13530] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2596'. [ 524.151917][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.191755][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.457206][T13544] bond0: entered promiscuous mode [ 524.462528][T13544] bond_slave_0: entered promiscuous mode [ 524.468510][T13544] bond_slave_1: entered promiscuous mode [ 524.489841][T13544] bridge_slave_1: entered promiscuous mode [ 524.496702][T13544] bond0: entered allmulticast mode [ 524.507100][T13544] bond_slave_0: entered allmulticast mode [ 524.528723][T13544] bond_slave_1: entered allmulticast mode [ 524.538643][T13544] bridge_slave_1: entered allmulticast mode [ 524.547023][T13544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.658988][T13551] netlink: 'syz.1.2604': attribute type 29 has an invalid length. [ 524.700439][T13551] netlink: 'syz.1.2604': attribute type 29 has an invalid length. [ 524.718337][T13555] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2605'. [ 525.226273][T13554] syzkaller0: entered promiscuous mode [ 525.231975][T13554] syzkaller0: entered allmulticast mode [ 525.241793][T13560] netlink: 'syz.2.2606': attribute type 10 has an invalid length. [ 527.348176][T13589] netlink: 'syz.2.2616': attribute type 2 has an invalid length. [ 527.373808][T13589] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2616'. [ 527.417709][T13591] netlink: 'syz.3.2615': attribute type 2 has an invalid length. [ 527.426849][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2618'. [ 527.439547][T13591] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2615'. [ 527.486645][T13596] netlink: 'syz.1.2617': attribute type 25 has an invalid length. [ 527.515111][T13596] netlink: 'syz.1.2617': attribute type 28 has an invalid length. [ 527.736708][T13615] bond0: entered promiscuous mode [ 527.742037][T13615] bond_slave_0: entered promiscuous mode [ 527.748234][T13615] bond_slave_1: entered promiscuous mode [ 527.755694][T13615] bond0: entered allmulticast mode [ 527.761398][T13615] bond_slave_0: entered allmulticast mode [ 527.767331][T13615] bond_slave_1: entered allmulticast mode [ 528.870500][T13653] netlink: 'syz.3.2638': attribute type 2 has an invalid length. [ 528.878407][T13653] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2638'. [ 529.075016][T13660] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2640'. [ 529.488890][T13669] netlink: 'syz.0.2644': attribute type 1 has an invalid length. [ 529.544908][T13669] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2644'. [ 529.992009][T13691] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2649'. [ 530.074287][T13691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 530.137136][T13696] netlink: 'syz.3.2653': attribute type 10 has an invalid length. [ 530.145319][T13696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2653'. [ 530.589726][T13711] netlink: 'syz.2.2659': attribute type 2 has an invalid length. [ 530.606379][T13712] bond0: entered promiscuous mode [ 530.611867][T13712] bond_slave_0: entered promiscuous mode [ 530.617869][T13712] bond_slave_1: entered promiscuous mode [ 530.623795][T13711] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2659'. [ 530.633780][T13712] bond0: entered allmulticast mode [ 530.694518][T13712] bond_slave_0: entered allmulticast mode [ 530.706531][T13712] bond_slave_1: entered allmulticast mode [ 531.006634][T13724] netlink: 'syz.3.2664': attribute type 10 has an invalid length. [ 531.529225][T13737] netlink: 'syz.1.2670': attribute type 29 has an invalid length. [ 532.380440][T13737] syzkaller0: entered promiscuous mode [ 532.387323][T13737] syzkaller0: entered allmulticast mode [ 532.446684][T13763] validate_nla: 1 callbacks suppressed [ 532.446699][T13763] netlink: 'syz.2.2679': attribute type 2 has an invalid length. [ 532.460327][T13763] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2679'. [ 534.533692][T13778] syzkaller0: entered promiscuous mode [ 534.539260][T13778] syzkaller0: entered allmulticast mode [ 534.871485][T13802] netlink: 'syz.0.2691': attribute type 2 has an invalid length. [ 534.883765][T13802] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2691'. [ 536.590221][T13811] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 536.597357][T13811] mac80211_hwsim hwsim56 wlan0: entered allmulticast mode [ 536.825298][T13826] netlink: 'syz.0.2701': attribute type 10 has an invalid length. [ 536.836606][T13823] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 537.025819][T13826] team0 (unregistering): Port device team_slave_0 removed [ 537.063470][T13826] team0 (unregistering): Port device team_slave_1 removed [ 537.110477][T13835] netlink: 'syz.3.2703': attribute type 2 has an invalid length. [ 537.141482][T13835] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2703'. [ 538.075199][T13858] netlink: 'syz.0.2711': attribute type 10 has an invalid length. [ 538.126323][T13858] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.165490][T13858] bridge_slave_1: left allmulticast mode [ 538.173601][T13858] bridge_slave_1: left promiscuous mode [ 538.187014][T13858] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.217135][T13858] bridge_slave_1: entered promiscuous mode [ 538.224606][T13858] bridge_slave_1: entered allmulticast mode [ 538.235861][T13858] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 538.641369][T13877] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2718'. [ 538.712411][T13880] netlink: 'syz.2.2720': attribute type 2 has an invalid length. [ 538.723985][T13880] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2720'. [ 539.089819][T13899] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 539.119303][T13899] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 539.368509][T13909] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2729'. [ 539.516577][T13913] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2731'. [ 539.952698][T13933] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2739'. [ 539.969581][T13933] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 540.183287][T13943] netlink: 'syz.0.2742': attribute type 2 has an invalid length. [ 540.191345][T13943] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2742'. [ 540.253817][T13938] netlink: 'syz.2.2741': attribute type 29 has an invalid length. [ 540.301595][T13938] netlink: 'syz.2.2741': attribute type 29 has an invalid length. [ 540.311516][T13948] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2744'. [ 540.853635][T13938] syzkaller0: entered promiscuous mode [ 540.859383][T13938] syzkaller0: entered allmulticast mode [ 541.147481][T13967] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2750'. [ 541.157287][T13967] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 543.304414][ T5777] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 544.671212][T13975] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.2753'. [ 544.938055][T13984] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2757'. [ 545.370213][ T5775] Bluetooth: hci4: command tx timeout [ 545.468334][T13990] netlink: 'syz.0.2758': attribute type 2 has an invalid length. [ 545.482933][T13990] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2758'. [ 545.788577][T14005] netlink: 'syz.2.2763': attribute type 10 has an invalid length. [ 545.803879][T14005] geneve0: entered promiscuous mode [ 545.833066][T14005] geneve0: entered allmulticast mode [ 545.845696][T14005] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 546.570382][T14015] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2767'. [ 546.814115][T14019] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2768'. [ 546.932506][T14025] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2771'. [ 546.968459][T14023] netlink: 'syz.2.2771': attribute type 28 has an invalid length. [ 546.984714][T14029] netlink: 'syz.1.2773': attribute type 10 has an invalid length. [ 546.995797][T14023] netlink: 'syz.2.2771': attribute type 29 has an invalid length. [ 547.005260][T14029] geneve0: entered promiscuous mode [ 547.039798][T14023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2771'. [ 547.042526][T14029] geneve0: entered allmulticast mode [ 547.070275][T14029] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 547.091881][T14035] netlink: 'syz.0.2776': attribute type 2 has an invalid length. [ 547.110464][T14035] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2776'. [ 547.113683][T14032] netlink: 'syz.3.2775': attribute type 21 has an invalid length. [ 547.298684][T14040] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2777'. [ 547.321929][T14041] netlink: 'syz.1.2778': attribute type 10 has an invalid length. [ 547.343166][T14041] bond0: left promiscuous mode [ 547.367732][T14041] bond_slave_0: left promiscuous mode [ 547.378324][T14041] bond_slave_1: left promiscuous mode [ 547.397916][T14041] bond0: left allmulticast mode [ 547.403539][T14044] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2779'. [ 547.423661][T14041] bond_slave_0: left allmulticast mode [ 547.434910][T14041] bond_slave_1: left allmulticast mode [ 547.448413][T14041] geneve0: left allmulticast mode [ 547.546728][T14041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.568426][T14041] team0: Port device bond0 added [ 548.019228][T14061] netlink: 'syz.3.2787': attribute type 10 has an invalid length. [ 548.047305][T14061] geneve0: entered promiscuous mode [ 548.100576][T14061] geneve0: entered allmulticast mode [ 548.106494][T14061] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 548.194231][T14064] netlink: 'syz.1.2785': attribute type 9 has an invalid length. [ 548.497892][T14069] syzkaller0: entered promiscuous mode [ 548.503618][T14069] syzkaller0: entered allmulticast mode [ 550.358546][T14079] Ÿë: port 1(gretap0) entered blocking state [ 550.365335][T14079] Ÿë: port 1(gretap0) entered disabled state [ 550.372250][T14079] gretap0: entered allmulticast mode [ 550.378871][T14079] gretap0: entered promiscuous mode [ 550.527200][T14088] bond0: entered promiscuous mode [ 550.546569][T14088] bond_slave_0: entered promiscuous mode [ 550.566044][T14088] bond_slave_1: entered promiscuous mode [ 550.589917][T14088] bond0: entered allmulticast mode [ 550.612627][T14088] bond_slave_0: entered allmulticast mode [ 550.629622][T14088] bond_slave_1: entered allmulticast mode [ 550.673443][T14088] geneve0: entered allmulticast mode [ 550.867151][T14103] __nla_validate_parse: 3 callbacks suppressed [ 550.867169][T14103] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2801'. [ 550.936260][T14106] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2800'. [ 552.574285][T14104] validate_nla: 2 callbacks suppressed [ 552.574300][T14104] netlink: 'syz.1.2803': attribute type 10 has an invalid length. [ 552.601613][T14104] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.617782][T14104] bridge_slave_1: left allmulticast mode [ 552.623634][T14104] bridge_slave_1: left promiscuous mode [ 552.630041][T14104] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.655747][T14104] bridge_slave_1: entered promiscuous mode [ 552.673120][T14104] bridge_slave_1: entered allmulticast mode [ 552.682930][T14104] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 552.686928][T14113] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2805'. [ 552.702048][T14113] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 552.757952][T14113] netlink: 'syz.2.2805': attribute type 3 has an invalid length. [ 552.773795][T14113] netlink: 'syz.2.2805': attribute type 1 has an invalid length. [ 552.795091][T14113] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2805'. [ 553.092345][T14136] netlink: 'syz.1.2813': attribute type 2 has an invalid length. [ 553.119762][T14136] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2813'. [ 553.157628][T14140] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2816'. [ 553.267806][T14130] syzkaller0: entered promiscuous mode [ 553.294165][T14130] syzkaller0: entered allmulticast mode [ 553.312410][T14143] netlink: 'syz.3.2817': attribute type 10 has an invalid length. [ 553.324100][T14143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2817'. [ 554.135333][T14150] netlink: 'syz.1.2819': attribute type 25 has an invalid length. [ 554.159716][T14150] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2819'. [ 555.837863][T14149] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2819'. [ 555.859323][T14150] netlink: 'syz.1.2819': attribute type 21 has an invalid length. [ 555.874882][T14150] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2819'. [ 555.885241][T14158] netlink: 'syz.0.2822': attribute type 10 has an invalid length. [ 555.950981][T14158] bond0: left promiscuous mode [ 555.969630][T14158] bond_slave_0: left promiscuous mode [ 555.972760][T14164] netlink: 'syz.2.2824': attribute type 2 has an invalid length. [ 555.975382][T14158] bond_slave_1: left promiscuous mode [ 555.993977][T14158] bridge_slave_1: left promiscuous mode [ 556.000231][T14158] bond0: left allmulticast mode [ 556.005272][T14158] bond_slave_0: left allmulticast mode [ 556.009595][T14164] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2824'. [ 556.016007][T14158] bond_slave_1: left allmulticast mode [ 556.048931][T14158] bridge_slave_1: left allmulticast mode [ 556.212058][T14170] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2826'. [ 556.254888][T14174] netlink: 'syz.0.2828': attribute type 3 has an invalid length. [ 556.281194][T14174] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2828'. [ 556.840347][T14182] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2830'. [ 556.933760][T14184] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2831'. [ 557.666740][T14193] validate_nla: 3 callbacks suppressed [ 557.666757][T14193] netlink: 'syz.0.2833': attribute type 2 has an invalid length. [ 557.682349][T14193] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2833'. [ 557.884169][T14202] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2837'. [ 557.909401][T14203] netlink: 'syz.3.2836': attribute type 3 has an invalid length. [ 557.918365][T14203] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2836'. [ 558.063508][T14208] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2838'. [ 558.108378][T14205] netlink: 'syz.2.2838': attribute type 27 has an invalid length. [ 558.195640][T14210] netlink: 'syz.2.2840': attribute type 2 has an invalid length. [ 558.680933][T14224] netlink: 'syz.0.2846': attribute type 21 has an invalid length. [ 559.399012][T14236] netlink: 'syz.1.2851': attribute type 10 has an invalid length. [ 559.680479][T14242] netlink: 'syz.0.2853': attribute type 21 has an invalid length. [ 559.691076][T14242] IPv6: NLM_F_CREATE should be specified when creating new route [ 559.730262][T14242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.738592][T14242] IPv6: NLM_F_CREATE should be set when creating new route [ 559.746456][T14242] IPv6: NLM_F_CREATE should be set when creating new route [ 559.754284][T14242] IPv6: NLM_F_CREATE should be set when creating new route [ 559.842932][T14250] netlink: 'syz.2.2857': attribute type 2 has an invalid length. [ 560.013274][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 560.073087][T14257] netlink: 'syz.1.2859': attribute type 21 has an invalid length. [ 560.934346][T14272] netlink: 'syz.0.2866': attribute type 10 has an invalid length. [ 560.944942][T14272] __nla_validate_parse: 7 callbacks suppressed [ 560.945110][T14272] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2866'. [ 560.993759][T14275] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2863'. [ 561.013752][T14275] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2863'. [ 561.035777][T14270] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2863'. [ 561.328264][T14284] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2871'. [ 561.902389][T14291] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2872'. [ 562.100982][T14293] bond0: left promiscuous mode [ 562.113521][T14293] bond_slave_0: left promiscuous mode [ 562.133478][T14293] bond_slave_1: left promiscuous mode [ 562.187603][T14293] bridge_slave_1: left promiscuous mode [ 562.205781][T14293] bond0: left allmulticast mode [ 562.213828][T14293] bond_slave_0: left allmulticast mode [ 562.223566][T14293] bond_slave_1: left allmulticast mode [ 562.229245][T14293] bridge_slave_1: left allmulticast mode [ 562.238648][T14293] geneve0: left allmulticast mode [ 562.663591][T14308] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2876'. [ 562.795710][T14310] validate_nla: 5 callbacks suppressed [ 562.795753][T14310] netlink: 'syz.2.2878': attribute type 3 has an invalid length. [ 562.826504][T14310] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2878'. [ 562.997156][T14317] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2880'. [ 563.053977][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.062811][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.401488][T14332] netlink: 'syz.3.2888': attribute type 2 has an invalid length. [ 563.423621][T14330] netlink: 'syz.1.2886': attribute type 10 has an invalid length. [ 563.445819][T14332] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2888'. [ 567.023113][T14359] netlink: 'syz.1.2894': attribute type 29 has an invalid length. [ 567.051248][T14359] netlink: 'syz.1.2894': attribute type 29 has an invalid length. [ 567.153250][T14365] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2897'. [ 567.420453][T14369] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2898'. [ 567.706185][T14359] syzkaller0: entered promiscuous mode [ 567.712146][T14359] syzkaller0: entered allmulticast mode [ 567.927058][T14380] netlink: 'syz.2.2901': attribute type 2 has an invalid length. [ 567.950390][T14380] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2901'. [ 568.993590][T14404] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2909'. [ 570.238973][T14399] netlink: 'syz.3.2907': attribute type 10 has an invalid length. [ 570.247257][T14399] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2907'. [ 570.431677][T14408] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2911'. [ 570.561352][T14413] netlink: 'syz.3.2912': attribute type 3 has an invalid length. [ 570.580519][T14413] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2912'. [ 570.717667][T14420] sock: sock_timestamping_bind_phc: sock not bind to device [ 570.744811][T14419] netlink: 'syz.2.2916': attribute type 2 has an invalid length. [ 570.754441][T14419] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2916'. [ 570.781102][T14417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2915'. [ 570.798321][T14424] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2918'. [ 570.860937][T14417] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.009515][T14417] bridge_slave_0 (unregistering): left allmulticast mode [ 571.022124][T14417] bridge_slave_0 (unregistering): left promiscuous mode [ 571.030516][T14417] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.558808][T14430] netlink: 'syz.1.2920': attribute type 10 has an invalid length. [ 572.393152][T14453] netlink: 'syz.1.2927': attribute type 2 has an invalid length. [ 572.395377][T14455] __nla_validate_parse: 1 callbacks suppressed [ 572.395393][T14455] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2928'. [ 572.402363][T14453] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2927'. [ 572.715340][T14460] netlink: 'syz.0.2930': attribute type 2 has an invalid length. [ 572.739294][T14460] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2930'. [ 573.180695][T14475] bond0: entered promiscuous mode [ 573.186873][T14475] bond_slave_0: entered promiscuous mode [ 573.192900][T14475] bond_slave_1: entered promiscuous mode [ 573.199214][T14475] bridge_slave_1: entered promiscuous mode [ 573.210134][T14475] bond0: entered allmulticast mode [ 573.216313][T14475] bond_slave_0: entered allmulticast mode [ 573.226297][T14475] bond_slave_1: entered allmulticast mode [ 573.234598][T14475] bridge_slave_1: entered allmulticast mode [ 573.244235][T14475] geneve0: entered allmulticast mode [ 573.256787][T14475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.266026][T14476] netlink: 'syz.2.2933': attribute type 2 has an invalid length. [ 573.275871][T14477] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2933'. [ 573.427789][T14473] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2934'. [ 573.446853][T14480] netlink: 'syz.2.2933': attribute type 27 has an invalid length. [ 573.659201][T14484] FAULT_INJECTION: forcing a failure. [ 573.659201][T14484] name failslab, interval 1, probability 0, space 0, times 0 [ 573.678245][T14484] CPU: 0 PID: 14484 Comm: syz.1.2937 Not tainted syzkaller #0 [ 573.685781][T14484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 573.696648][T14484] Call Trace: [ 573.699944][T14484] [ 573.702888][T14484] dump_stack_lvl+0x18c/0x250 [ 573.707691][T14484] ? show_regs_print_info+0x20/0x20 [ 573.712923][T14484] ? load_image+0x420/0x420 [ 573.717469][T14484] ? __might_sleep+0xe0/0xe0 [ 573.722102][T14484] ? __lock_acquire+0x7d80/0x7d80 [ 573.727287][T14484] should_fail_ex+0x394/0x4c0 [ 573.732095][T14484] should_failslab+0x9/0x20 [ 573.736824][T14484] slab_pre_alloc_hook+0x59/0x300 [ 573.741982][T14484] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 573.744567][T14488] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2938'. [ 573.747826][T14484] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 573.747881][T14484] __kmem_cache_alloc_node+0x53/0x250 [ 573.747910][T14484] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 573.747931][T14484] __kmalloc+0xa7/0x240 [ 573.747958][T14484] tomoyo_realpath_from_path+0xe6/0x5c0 [ 573.747983][T14484] ? tomoyo_domain+0xd6/0x120 [ 573.748021][T14484] tomoyo_path_number_perm+0x248/0x5e0 [ 573.748043][T14484] ? tomoyo_path_number_perm+0x217/0x5e0 [ 573.800958][T14484] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 573.806458][T14484] ? ksys_write+0x1d2/0x260 [ 573.811150][T14484] ? __fget_files+0x28/0x460 [ 573.815806][T14484] security_file_ioctl+0x70/0xa0 [ 573.821023][T14484] __se_sys_ioctl+0x48/0x170 [ 573.825634][T14484] do_syscall_64+0x55/0xb0 [ 573.830053][T14484] ? clear_bhb_loop+0x40/0x90 [ 573.834728][T14484] ? clear_bhb_loop+0x40/0x90 [ 573.839401][T14484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 573.845309][T14484] RIP: 0033:0x7f6378d9e0d9 [ 573.849754][T14484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.869359][T14484] RSP: 002b:00007f6379cfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.877772][T14484] RAX: ffffffffffffffda RBX: 00007f6379025fa0 RCX: 00007f6378d9e0d9 [ 573.885738][T14484] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000007 [ 573.893700][T14484] RBP: 00007f6379cfc090 R08: 0000000000000000 R09: 0000000000000000 [ 573.901666][T14484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.909632][T14484] R13: 00007f6379026038 R14: 00007f6379025fa0 R15: 00007ffeb5902b08 [ 573.917610][T14484] [ 573.922715][T14484] ERROR: Out of memory at tomoyo_realpath_from_path. [ 574.070842][T14492] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2947'. [ 574.921952][T14513] sock: sock_timestamping_bind_phc: sock not bind to device [ 574.937439][T14513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2949'. [ 575.046389][T14513] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.226718][T14513] bridge_slave_0 (unregistering): left allmulticast mode [ 575.250571][T14513] bridge_slave_0 (unregistering): left promiscuous mode [ 575.258616][T14513] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.292067][T14522] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2951'. [ 575.302112][T14522] openvswitch: netlink: IP tunnel dst address not specified [ 575.839328][T14541] netlink: 'syz.2.2957': attribute type 2 has an invalid length. [ 575.865353][T14541] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2957'. [ 576.180796][T14550] netlink: 'syz.1.2961': attribute type 10 has an invalid length. [ 576.225976][T14550] bond0: left promiscuous mode [ 576.247943][T14550] bond_slave_0: left promiscuous mode [ 576.286456][T14550] bond_slave_1: left promiscuous mode [ 576.306777][T14550] bridge_slave_1: left promiscuous mode [ 576.319219][T14550] bond0: left allmulticast mode [ 576.329260][T14550] bond_slave_0: left allmulticast mode [ 576.352766][T14550] bond_slave_1: left allmulticast mode [ 576.392090][T14550] geneve0: left allmulticast mode [ 576.422216][T14550] bridge_slave_1: left allmulticast mode [ 576.543850][T14556] netlink: 'syz.3.2963': attribute type 29 has an invalid length. [ 576.833039][T14556] netlink: 'syz.3.2963': attribute type 29 has an invalid length. [ 577.055961][T14560] syzkaller0: entered promiscuous mode [ 577.086846][T14560] syzkaller0: entered allmulticast mode [ 577.112934][T14570] netlink: 'syz.0.2972': attribute type 2 has an invalid length. [ 577.220597][T14571] sock: sock_timestamping_bind_phc: sock not bind to device [ 577.344768][T14571] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.494198][T14571] bridge_slave_0 (unregistering): left allmulticast mode [ 577.509582][T14571] bridge_slave_0 (unregistering): left promiscuous mode [ 577.535304][T14571] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.327270][T14586] netlink: 'syz.1.2968': attribute type 3 has an invalid length. [ 578.338809][T14586] __nla_validate_parse: 2 callbacks suppressed [ 578.338843][T14586] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2968'. [ 580.166582][T14576] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2966'. [ 580.370090][T14602] Ÿë: port 1(gretap0) entered blocking state [ 580.390374][T14602] Ÿë: port 1(gretap0) entered disabled state [ 580.396813][T14602] gretap0: entered allmulticast mode [ 580.427933][T14602] gretap0: entered promiscuous mode [ 580.462319][T14610] netlink: 'syz.3.2978': attribute type 2 has an invalid length. [ 580.476948][T14610] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2978'. [ 580.714406][T14619] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2982'. [ 580.737011][T14620] netlink: 'syz.1.2981': attribute type 6 has an invalid length. [ 580.796997][T14620] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2981'. [ 581.372525][T14651] netlink: 'syz.3.2994': attribute type 10 has an invalid length. [ 581.552961][T14651] mac80211_hwsim hwsim57 wlan1: entered promiscuous mode [ 581.568981][T14651] mac80211_hwsim hwsim57 wlan1: entered allmulticast mode [ 581.598527][T14651] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 582.040906][T14675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.712447][T14695] netlink: 'syz.0.3013': attribute type 19 has an invalid length. [ 582.750249][T14695] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.3013'. [ 583.095881][T14703] netlink: 'syz.0.3016': attribute type 2 has an invalid length. [ 583.110200][T14703] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3016'. [ 583.200265][T14706] syzkaller0: entered promiscuous mode [ 583.205823][T14706] syzkaller0: entered allmulticast mode [ 583.317160][T14711] bond0: entered promiscuous mode [ 583.325645][T14711] bond_slave_0: entered promiscuous mode [ 583.339333][T14711] bond_slave_1: entered promiscuous mode [ 583.351898][T14711] bridge_slave_1: entered promiscuous mode [ 583.365078][T14711] bond0: entered allmulticast mode [ 583.373823][T14711] bond_slave_0: entered allmulticast mode [ 583.382813][T14711] bond_slave_1: entered allmulticast mode [ 583.409620][T14711] geneve0: entered allmulticast mode [ 583.430481][T14711] bridge_slave_1: entered allmulticast mode [ 583.444265][T14711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.725213][T14724] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3025'. [ 585.353873][T14732] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3029'. [ 585.427624][T14738] FAULT_INJECTION: forcing a failure. [ 585.427624][T14738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.441979][T14738] CPU: 1 PID: 14738 Comm: syz.2.3030 Not tainted syzkaller #0 [ 585.449493][T14738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.459846][T14738] Call Trace: [ 585.463158][T14738] [ 585.466479][T14738] dump_stack_lvl+0x18c/0x250 [ 585.471193][T14738] ? show_regs_print_info+0x20/0x20 [ 585.476603][T14738] ? load_image+0x420/0x420 [ 585.481226][T14738] ? __might_fault+0xaa/0x120 [ 585.485926][T14738] ? __lock_acquire+0x7d80/0x7d80 [ 585.490976][T14738] ? unix_ioctl+0x259/0x6b0 [ 585.495525][T14738] should_fail_ex+0x394/0x4c0 [ 585.500217][T14738] _copy_from_user+0x2f/0xe0 [ 585.504825][T14738] sock_do_ioctl+0x190/0x310 [ 585.509424][T14738] ? sock_show_fdinfo+0xb0/0xb0 [ 585.514285][T14738] sock_ioctl+0x5be/0x7e0 [ 585.518609][T14738] ? sock_poll+0x3e0/0x3e0 [ 585.523049][T14738] ? bpf_lsm_file_ioctl+0x9/0x10 [ 585.527999][T14738] ? security_file_ioctl+0x80/0xa0 [ 585.533111][T14738] ? sock_poll+0x3e0/0x3e0 [ 585.537523][T14738] __se_sys_ioctl+0xfd/0x170 [ 585.542113][T14738] do_syscall_64+0x55/0xb0 [ 585.546611][T14738] ? clear_bhb_loop+0x40/0x90 [ 585.551284][T14738] ? clear_bhb_loop+0x40/0x90 [ 585.555956][T14738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.561843][T14738] RIP: 0033:0x7f066e79e0d9 [ 585.566259][T14738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.585878][T14738] RSP: 002b:00007f066f661028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.594289][T14738] RAX: ffffffffffffffda RBX: 00007f066ea25fa0 RCX: 00007f066e79e0d9 [ 585.602272][T14738] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000007 [ 585.610242][T14738] RBP: 00007f066f661090 R08: 0000000000000000 R09: 0000000000000000 [ 585.618224][T14738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.626192][T14738] R13: 00007f066ea26038 R14: 00007f066ea25fa0 R15: 00007fffec6405c8 [ 585.634170][T14738] [ 585.703796][T14743] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3031'. [ 585.945404][T14759] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3038'. [ 586.441501][T14786] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3050'. [ 586.826787][T14799] netlink: 'syz.2.3055': attribute type 2 has an invalid length. [ 586.836272][T14799] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3055'. [ 587.265295][T14818] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3062'. [ 587.353860][T14810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3059'. [ 587.749051][T14837] netlink: 'syz.2.3070': attribute type 10 has an invalid length. [ 587.798294][T14842] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3072'. [ 588.622035][T14857] netlink: 'syz.3.3079': attribute type 2 has an invalid length. [ 588.630326][T14857] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3079'. [ 588.851850][T14865] netlink: 'syz.1.3081': attribute type 19 has an invalid length. [ 588.862200][T14865] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.3081'. [ 589.010260][T14866] netlink: 'syz.0.3080': attribute type 9 has an invalid length. [ 589.013239][T14868] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3082'. [ 589.018069][T14866] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3080'. [ 589.116295][T14870] syzkaller0: entered promiscuous mode [ 589.122083][T14870] syzkaller0: entered allmulticast mode [ 589.714853][T14877] netlink: 'syz.3.3085': attribute type 3 has an invalid length. [ 589.746211][T14877] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3085'. [ 590.427403][T14886] delete_channel: no stack [ 591.374498][T14879] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3086'. [ 591.463741][T14888] FAULT_INJECTION: forcing a failure. [ 591.463741][T14888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.477320][T14888] CPU: 0 PID: 14888 Comm: syz.3.3088 Not tainted syzkaller #0 [ 591.484806][T14888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 591.494880][T14888] Call Trace: [ 591.498173][T14888] [ 591.501138][T14888] dump_stack_lvl+0x18c/0x250 [ 591.505818][T14888] ? show_regs_print_info+0x20/0x20 [ 591.511014][T14888] ? load_image+0x420/0x420 [ 591.515524][T14888] ? __lock_acquire+0x7d80/0x7d80 [ 591.520651][T14888] ? snprintf+0xe9/0x140 [ 591.525884][T14888] should_fail_ex+0x394/0x4c0 [ 591.530666][T14888] _copy_to_user+0x2f/0xa0 [ 591.535093][T14888] simple_read_from_buffer+0xe7/0x150 [ 591.540463][T14888] proc_fail_nth_read+0x1e8/0x260 [ 591.545489][T14888] ? proc_fault_inject_write+0x360/0x360 [ 591.551129][T14888] ? fsnotify_perm+0x271/0x5e0 [ 591.555985][T14888] ? proc_fault_inject_write+0x360/0x360 [ 591.561625][T14888] vfs_read+0x298/0x990 [ 591.565787][T14888] ? kernel_read+0x1e0/0x1e0 [ 591.570375][T14888] ? __fget_files+0x28/0x460 [ 591.575063][T14888] ? __fget_files+0x3fc/0x460 [ 591.579748][T14888] ? __fdget_pos+0x2a3/0x330 [ 591.584333][T14888] ? ksys_read+0x74/0x260 [ 591.588674][T14888] ksys_read+0x151/0x260 [ 591.592923][T14888] ? vfs_write+0x9a0/0x9a0 [ 591.597338][T14888] ? lockdep_hardirqs_on+0x98/0x150 [ 591.602538][T14888] do_syscall_64+0x55/0xb0 [ 591.606945][T14888] ? clear_bhb_loop+0x40/0x90 [ 591.611616][T14888] ? clear_bhb_loop+0x40/0x90 [ 591.616290][T14888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.622185][T14888] RIP: 0033:0x7f819db5e90e [ 591.626595][T14888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 591.646281][T14888] RSP: 002b:00007f819ea71fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 591.654690][T14888] RAX: ffffffffffffffda RBX: 00007f819ea726c0 RCX: 00007f819db5e90e [ 591.662676][T14888] RDX: 000000000000000f RSI: 00007f819ea720a0 RDI: 0000000000000008 [ 591.670653][T14888] RBP: 00007f819ea72090 R08: 0000000000000000 R09: 0000000000000000 [ 591.678712][T14888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.686677][T14888] R13: 00007f819de26038 R14: 00007f819de25fa0 R15: 00007ffc29a02518 [ 591.694665][T14888] [ 591.781070][T14893] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3090'. [ 591.924337][T14901] netlink: 'syz.3.3095': attribute type 2 has an invalid length. [ 591.932595][T14901] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3095'. [ 591.949164][T14899] netlink: 'syz.2.3093': attribute type 39 has an invalid length. [ 592.091647][T14906] netlink: 'syz.2.3093': attribute type 10 has an invalid length. [ 592.777879][T14944] netlink: 'syz.0.3109': attribute type 29 has an invalid length. [ 592.810401][T14944] netlink: 'syz.0.3109': attribute type 29 has an invalid length. [ 593.036166][T14951] syzkaller0: entered promiscuous mode [ 593.059121][T14951] syzkaller0: entered allmulticast mode [ 593.095877][T14950] netlink: 'syz.2.3110': attribute type 10 has an invalid length. [ 593.576144][T14977] netlink: 'syz.3.3119': attribute type 2 has an invalid length. [ 593.588306][T14977] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3119'. [ 595.236343][T14969] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.3117'. [ 595.484788][T15002] netlink: 'syz.0.3128': attribute type 2 has an invalid length. [ 595.495230][T15002] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3128'. [ 595.672778][T15006] netlink: 'syz.2.3129': attribute type 10 has an invalid length. [ 595.692408][T15006] bond0: left promiscuous mode [ 595.697552][T15006] bond_slave_0: left promiscuous mode [ 595.714183][T15006] bond_slave_1: left promiscuous mode [ 595.727398][T15006] bridge_slave_1: left promiscuous mode [ 595.737018][T15006] bond0: left allmulticast mode [ 595.749218][T15006] bond_slave_0: left allmulticast mode [ 595.756079][T15006] bond_slave_1: left allmulticast mode [ 595.774308][T15006] bridge_slave_1: left allmulticast mode [ 595.782556][T15006] geneve0: left allmulticast mode [ 595.852118][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 596.793843][T15036] netlink: 'syz.2.3141': attribute type 2 has an invalid length. [ 596.892247][T15025] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3135'. [ 596.910182][T15036] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3141'. [ 597.112422][T15040] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3140'. [ 597.373293][T15053] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3145'. [ 597.402140][T15055] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3144'. [ 597.695037][T15071] validate_nla: 1 callbacks suppressed [ 597.695053][T15071] netlink: 'syz.0.3159': attribute type 2 has an invalid length. [ 597.709901][T15071] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3159'. [ 598.464435][T15104] netlink: 'syz.2.3164': attribute type 21 has an invalid length. [ 598.481283][T15104] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3164'. [ 598.726446][T15106] netlink: 'syz.1.3163': attribute type 10 has an invalid length. [ 600.209923][T15136] netlink: 'syz.3.3174': attribute type 2 has an invalid length. [ 600.225960][T15136] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3174'. [ 600.449398][T15140] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3175'. [ 601.391691][T15153] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3176'. [ 601.600627][T15153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.133044][T15167] netlink: 'syz.1.3181': attribute type 10 has an invalid length. [ 603.205057][T15167] bond0: left promiscuous mode [ 603.210972][T15167] bond_slave_0: left promiscuous mode [ 603.218002][T15167] bond_slave_1: left promiscuous mode [ 603.230524][T15167] bridge_slave_1: left promiscuous mode [ 603.236384][T15167] bond0: left allmulticast mode [ 603.253369][T15167] bond_slave_0: left allmulticast mode [ 603.258933][T15167] bond_slave_1: left allmulticast mode [ 603.280847][T15167] geneve0: left allmulticast mode [ 603.329843][T15167] bridge_slave_1: left allmulticast mode [ 604.282666][T15178] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3185'. [ 604.359901][T15178] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 604.379555][T15178] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 604.712155][T15182] netlink: 'syz.2.3186': attribute type 2 has an invalid length. [ 604.749784][T15182] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3186'. [ 604.844076][T15186] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3187'. [ 605.415708][T15193] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3190'. [ 607.278218][T15211] netlink: 'syz.3.3196': attribute type 3 has an invalid length. [ 607.309775][T15211] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3196'. [ 607.750231][T15213] netlink: 'syz.0.3197': attribute type 10 has an invalid length. [ 609.278122][T15241] netlink: 'syz.2.3204': attribute type 2 has an invalid length. [ 609.316583][T15241] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3204'. [ 611.394880][T15271] netlink: 'syz.3.3215': attribute type 21 has an invalid length. [ 611.432502][T15271] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3215'. [ 611.691647][T15281] netlink: 'syz.0.3219': attribute type 2 has an invalid length. [ 611.716363][T15281] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3219'. [ 611.831935][T15283] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3220'. [ 612.091024][T15294] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3224'. [ 612.893338][T15307] syzkaller0: entered promiscuous mode [ 612.899401][T15307] syzkaller0: entered allmulticast mode [ 613.103638][T15319] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3232'. [ 613.206608][T15317] netlink: 'syz.0.3231': attribute type 3 has an invalid length. [ 613.215945][T15317] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3231'. [ 613.344277][T15329] netlink: 'syz.2.3235': attribute type 2 has an invalid length. [ 613.352655][T15329] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3235'. [ 614.303139][T15333] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3236'. [ 615.249953][T15354] netlink: 'syz.3.3244': attribute type 2 has an invalid length. [ 615.283860][T15354] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3244'. [ 615.316672][T15358] bond0: entered promiscuous mode [ 615.329909][T15358] bond_slave_0: entered promiscuous mode [ 615.344542][T15358] bond_slave_1: entered promiscuous mode [ 615.354324][T15358] bridge_slave_1: entered promiscuous mode [ 615.360585][T15358] bond0: entered allmulticast mode [ 615.369585][T15358] bond_slave_0: entered allmulticast mode [ 615.375493][T15358] bond_slave_1: entered allmulticast mode [ 615.382880][T15358] geneve0: entered allmulticast mode [ 615.388423][T15358] bridge_slave_1: entered allmulticast mode [ 615.405521][T15358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.420076][T15360] netlink: 'syz.1.3245': attribute type 1 has an invalid length. [ 615.569121][T15366] netlink: 'syz.1.3248': attribute type 29 has an invalid length. [ 615.589025][T15366] netlink: 'syz.1.3248': attribute type 29 has an invalid length. [ 615.786795][T15369] syzkaller0: entered promiscuous mode [ 615.796993][T15369] syzkaller0: entered allmulticast mode [ 616.329565][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 617.428656][T15394] netlink: 'syz.2.3259': attribute type 2 has an invalid length. [ 617.449224][T15394] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3259'. [ 619.100817][T15420] netlink: 'syz.3.3268': attribute type 2 has an invalid length. [ 619.130578][T15420] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3268'. [ 619.392861][T15424] syzkaller0: entered promiscuous mode [ 619.405686][T15424] syzkaller0: entered allmulticast mode [ 619.607810][T15428] netlink: 'syz.1.3269': attribute type 3 has an invalid length. [ 619.630113][T15428] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3269'. [ 621.770657][T15443] netlink: 'syz.2.3274': attribute type 10 has an invalid length. [ 622.308006][T15460] netlink: 'syz.0.3279': attribute type 2 has an invalid length. [ 622.342057][T15460] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3279'. [ 622.704092][T15475] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3284'. [ 623.277356][T15485] netlink: 'syz.3.3289': attribute type 9 has an invalid length. [ 623.295316][T15485] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3289'. [ 623.381529][T15492] syz.0.3290: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 623.422687][T15492] CPU: 0 PID: 15492 Comm: syz.0.3290 Not tainted syzkaller #0 [ 623.430256][T15492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 623.440469][T15492] Call Trace: [ 623.443776][T15492] [ 623.446724][T15492] dump_stack_lvl+0x18c/0x250 [ 623.451477][T15492] ? show_regs_print_info+0x20/0x20 [ 623.456707][T15492] ? load_image+0x420/0x420 [ 623.461251][T15492] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 623.467706][T15492] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 623.474268][T15492] warn_alloc+0x246/0x340 [ 623.478612][T15492] ? stack_trace_save+0xaa/0x100 [ 623.483556][T15492] ? zone_watermark_ok_safe+0x230/0x230 [ 623.489106][T15492] ? kasan_set_track+0x5f/0x70 [ 623.493954][T15492] ? kasan_set_track+0x4e/0x70 [ 623.498710][T15492] ? __kasan_kmalloc+0x8f/0xa0 [ 623.503487][T15492] ? xsk_init_queue+0xad/0x100 [ 623.508361][T15492] ? xsk_setsockopt+0x4c9/0x750 [ 623.513222][T15492] ? do_sock_setsockopt+0x175/0x1a0 [ 623.518458][T15492] ? __x64_sys_setsockopt+0x182/0x200 [ 623.523837][T15492] __vmalloc_node_range+0x129/0x1320 [ 623.529246][T15492] ? free_vm_area+0x50/0x50 [ 623.533773][T15492] vmalloc_user+0x74/0x80 [ 623.538131][T15492] ? xskq_create+0xbf/0x170 [ 623.542711][T15492] xskq_create+0xbf/0x170 [ 623.547153][T15492] xsk_init_queue+0xad/0x100 [ 623.551770][T15492] xsk_setsockopt+0x4c9/0x750 [ 623.556459][T15492] ? xsk_poll+0x670/0x670 [ 623.560829][T15492] ? __fget_files+0x28/0x460 [ 623.565425][T15492] ? aa_sock_opt_perm+0x74/0x100 [ 623.570367][T15492] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 623.575932][T15492] ? security_socket_setsockopt+0x7e/0xa0 [ 623.581649][T15492] ? xsk_poll+0x670/0x670 [ 623.586075][T15492] do_sock_setsockopt+0x175/0x1a0 [ 623.591563][T15492] ? __fdget+0x180/0x210 [ 623.595810][T15492] __x64_sys_setsockopt+0x182/0x200 [ 623.601010][T15492] do_syscall_64+0x55/0xb0 [ 623.605447][T15492] ? clear_bhb_loop+0x40/0x90 [ 623.610143][T15492] ? clear_bhb_loop+0x40/0x90 [ 623.614905][T15492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.620801][T15492] RIP: 0033:0x7f89dbb9e0d9 [ 623.625222][T15492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.645088][T15492] RSP: 002b:00007f89dc9c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 623.653504][T15492] RAX: ffffffffffffffda RBX: 00007f89dbe26090 RCX: 00007f89dbb9e0d9 [ 623.661472][T15492] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 623.669443][T15492] RBP: 00007f89dbc35024 R08: 0000000000000004 R09: 0000000000000000 [ 623.677498][T15492] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 623.685465][T15492] R13: 00007f89dbe26128 R14: 00007f89dbe26090 R15: 00007ffc7f7b5c08 [ 623.693446][T15492] [ 623.723630][T15492] Mem-Info: [ 623.726837][T15492] active_anon:6754 inactive_anon:0 isolated_anon:0 [ 623.726837][T15492] active_file:18534 inactive_file:40174 isolated_file:0 [ 623.726837][T15492] unevictable:768 dirty:138 writeback:0 [ 623.726837][T15492] slab_reclaimable:10617 slab_unreclaimable:93556 [ 623.726837][T15492] mapped:25620 shmem:2611 pagetables:533 [ 623.726837][T15492] sec_pagetables:0 bounce:0 [ 623.726837][T15492] kernel_misc_reclaimable:0 [ 623.726837][T15492] free:1343121 free_pcp:7667 free_cma:0 [ 623.784359][T15492] Node 0 active_anon:27816kB inactive_anon:0kB active_file:74136kB inactive_file:160492kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103380kB dirty:552kB writeback:0kB shmem:9908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12108kB pagetables:2132kB sec_pagetables:0kB all_unreclaimable? no [ 623.873825][T15492] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 623.949647][T15492] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 624.027832][T15492] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 624.047800][T15492] Node 0 DMA32 free:1444528kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:30944kB inactive_anon:0kB active_file:74136kB inactive_file:159668kB unevictable:1536kB writepending:556kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:21260kB local_pcp:12016kB free_cma:0kB [ 624.080745][T15492] lowmem_reserve[]: 0 0 0 0 0 [ 624.085558][T15492] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 624.123705][T15492] lowmem_reserve[]: 0 0 0 0 0 [ 624.139352][T15492] Node 1 Normal free:3909572kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8768kB local_pcp:6528kB free_cma:0kB [ 624.214303][T15492] lowmem_reserve[]: 0 0 0 0 0 [ 624.229669][T15492] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 624.259890][T15492] Node 0 DMA32: 884*4kB (U) 485*8kB (UE) 266*16kB (UME) 594*32kB (UME) 420*64kB (UME) 694*128kB (UME) 381*256kB (UM) 190*512kB (UME) 67*1024kB (UM) 14*2048kB (UM) 245*4096kB (UM) = 1442008kB [ 624.307613][T15492] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 624.339844][T15492] Node 1 Normal: 261*4kB (UME) 56*8kB (UME) 47*16kB (UME) 170*32kB (UME) 53*64kB (UE) 11*128kB (UME) 1*256kB (U) 1*512kB (M) 1*1024kB (U) 0*2048kB 951*4096kB (M) = 3909572kB [ 624.374424][T15492] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 624.384678][T15492] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 624.405084][T15492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 624.433411][T15492] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 624.453227][T15492] 63793 total pagecache pages [ 624.458011][T15492] 0 pages in swap cache [ 624.481240][T15492] Free swap = 124996kB [ 624.485471][T15492] Total swap = 124996kB [ 624.499616][T15492] 2097051 pages RAM [ 624.503486][T15492] 0 pages HighMem/MovableOnly [ 624.508934][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.515925][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.527588][T15492] 416958 pages reserved [ 624.528132][T15522] netlink: 'syz.3.3298': attribute type 2 has an invalid length. [ 624.532767][T15492] 0 pages cma reserved [ 624.569691][T15522] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3298'. [ 625.934676][T15573] netlink: 'syz.0.3315': attribute type 2 has an invalid length. [ 625.968686][T15570] netlink: 'syz.3.3314': attribute type 3 has an invalid length. [ 625.993638][T15573] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3315'. [ 626.009719][T15570] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3314'. [ 626.229271][T15585] syzkaller0: entered promiscuous mode [ 626.234875][T15585] syzkaller0: entered allmulticast mode [ 626.377709][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3318'. [ 629.129793][T15615] netlink: 'syz.0.3327': attribute type 10 has an invalid length. [ 629.227749][T15624] netlink: 'syz.2.3330': attribute type 2 has an invalid length. [ 629.249200][T15624] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3330'. [ 629.908702][T15650] netlink: 'syz.1.3341': attribute type 29 has an invalid length. [ 629.932172][T15650] netlink: 'syz.1.3341': attribute type 29 has an invalid length. [ 630.076403][T15654] syzkaller0: entered promiscuous mode [ 630.119914][T15654] syzkaller0: entered allmulticast mode [ 630.230418][ T5777] Bluetooth: hci3: ISO packet for unknown connection handle 62 [ 630.286067][T15656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3344'. [ 630.703324][T15677] netlink: 'syz.0.3354': attribute type 2 has an invalid length. [ 630.712130][T15677] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3354'. [ 632.569934][T15694] syzkaller0: entered promiscuous mode [ 632.575468][T15694] syzkaller0: entered allmulticast mode [ 632.830762][T15708] netlink: 'syz.2.3363': attribute type 2 has an invalid length. [ 632.838577][T15708] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3363'. [ 633.742282][T15716] netlink: 'syz.1.3373': attribute type 2 has an invalid length. [ 633.750376][T15716] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3373'. [ 635.303572][T15742] netlink: 'syz.3.3375': attribute type 2 has an invalid length. [ 635.311802][T15742] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3375'. [ 635.335410][T15740] netlink: 'syz.1.3376': attribute type 3 has an invalid length. [ 635.379814][T15740] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3376'. [ 635.900076][T15763] sctp: [Deprecated]: syz.2.3383 (pid 15763) Use of int in maxseg socket option. [ 635.900076][T15763] Use struct sctp_assoc_value instead [ 636.280489][T15776] netlink: 'syz.0.3388': attribute type 10 has an invalid length. [ 636.809844][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 637.043968][T15800] netlink: 'syz.2.3399': attribute type 2 has an invalid length. [ 637.104852][T15800] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3399'. [ 637.411648][T15806] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3401'. [ 637.736581][T15814] netlink: 'syz.1.3404': attribute type 29 has an invalid length. [ 637.753709][T15814] netlink: 'syz.1.3404': attribute type 29 has an invalid length. [ 638.182017][T15817] syzkaller0: entered promiscuous mode [ 638.202676][T15817] syzkaller0: entered allmulticast mode [ 638.214172][T15825] netlink: 'syz.2.3406': attribute type 10 has an invalid length. [ 638.422280][T15830] netlink: 'syz.3.3407': attribute type 9 has an invalid length. [ 638.430827][T15830] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3407'. [ 638.994099][T15847] netlink: set zone limit has 8 unknown bytes [ 639.167478][T15849] netlink: 'syz.2.3414': attribute type 2 has an invalid length. [ 639.175575][T15849] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3414'. [ 640.575186][T15844] netlink: 'syz.0.3412': attribute type 49 has an invalid length. [ 640.768811][T15855] netlink: 'syz.0.3416': attribute type 3 has an invalid length. [ 640.777063][T15855] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3416'. [ 641.353247][T15883] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3427'. [ 641.970650][T15910] netlink: 'syz.3.3439': attribute type 21 has an invalid length. [ 642.004440][T15910] pim6reg1: entered promiscuous mode [ 642.024810][T15910] pim6reg1: entered allmulticast mode [ 642.880184][T15945] netlink: 'syz.3.3454': attribute type 10 has an invalid length. [ 642.916945][T15948] sit0: entered allmulticast mode [ 642.975336][T15948] sit0: entered promiscuous mode [ 643.570645][T15977] netlink: 'syz.3.3465': attribute type 29 has an invalid length. [ 643.592064][T15977] netlink: 'syz.3.3465': attribute type 29 has an invalid length. [ 643.889196][T15977] syzkaller0: entered promiscuous mode [ 643.903977][T15977] syzkaller0: entered allmulticast mode [ 646.477192][T16023] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3481'. [ 647.711235][T16078] syzkaller0: entered promiscuous mode [ 647.716909][T16078] syzkaller0: entered allmulticast mode [ 647.777413][T16080] netlink: 'syz.3.3503': attribute type 10 has an invalid length. [ 648.372212][T16096] netlink: 'syz.2.3508': attribute type 3 has an invalid length. [ 648.389877][T16096] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3508'. [ 648.575138][T16103] netlink: 'syz.3.3509': attribute type 2 has an invalid length. [ 648.586485][T16103] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3509'. [ 648.835345][T16109] syzkaller0: entered promiscuous mode [ 648.848501][T16109] syzkaller0: entered allmulticast mode [ 649.064552][T16116] netlink: 'syz.1.3515': attribute type 9 has an invalid length. [ 649.072503][T16116] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3515'. [ 650.824494][T16124] netlink: 'syz.0.3519': attribute type 2 has an invalid length. [ 650.833698][T16125] netlink: 'syz.0.3519': attribute type 2 has an invalid length. [ 651.009336][T16140] netlink: 'syz.2.3525': attribute type 29 has an invalid length. [ 651.020043][T16138] ÿÿÿÿ: port 1(macsec0) entered blocking state [ 651.036424][T16138] ÿÿÿÿ: port 1(macsec0) entered disabled state [ 651.044318][T16138] macsec0: entered allmulticast mode [ 651.049980][T16138] veth1_macvtap: entered allmulticast mode [ 651.057401][T16138] macsec0: entered promiscuous mode [ 651.120605][T16150] netlink: 'syz.1.3528': attribute type 2 has an invalid length. [ 651.130090][T16150] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3528'. [ 651.174582][T16140] netlink: 'syz.2.3525': attribute type 29 has an invalid length. [ 651.573368][T16140] syzkaller0: entered promiscuous mode [ 651.580007][T16140] syzkaller0: entered allmulticast mode [ 651.609003][T16157] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3529'. [ 652.823894][T16195] netlink: 'syz.3.3544': attribute type 2 has an invalid length. [ 652.837151][T16195] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3544'. [ 654.747357][T16215] bond0: entered promiscuous mode [ 654.759641][T16215] bond_slave_0: entered promiscuous mode [ 654.765715][T16219] netlink: 'syz.2.3553': attribute type 2 has an invalid length. [ 654.776185][T16215] bond_slave_1: entered promiscuous mode [ 654.785692][T16215] bridge_slave_1: entered promiscuous mode [ 654.793244][T16215] bond0: entered allmulticast mode [ 654.798728][T16219] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3553'. [ 654.809713][T16215] bond_slave_0: entered allmulticast mode [ 654.815731][T16215] bond_slave_1: entered allmulticast mode [ 654.826028][T16215] bridge_slave_1: entered allmulticast mode [ 654.851737][T16215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.887936][T16237] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3557'. [ 656.201186][T16244] syzkaller0: entered promiscuous mode [ 656.206752][T16244] syzkaller0: entered allmulticast mode [ 656.241910][T16247] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3562'. [ 656.296311][T16256] netlink: 'syz.2.3564': attribute type 2 has an invalid length. [ 656.330674][T16256] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3564'. [ 656.521864][T16248] netlink: 'syz.1.3561': attribute type 9 has an invalid length. [ 656.530803][T16248] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3561'. [ 658.306601][T16268] netlink: 'syz.3.3568': attribute type 10 has an invalid length. [ 658.324019][T16278] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 658.330247][T16278] dvmrp1: linktype set to 8 [ 658.477989][T16281] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3571'. [ 658.788412][T16290] netlink: 'syz.1.3576': attribute type 3 has an invalid length. [ 658.796526][T16295] netlink: 'syz.2.3577': attribute type 2 has an invalid length. [ 658.819110][T16290] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3576'. [ 658.842110][T16295] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3577'. [ 658.893122][T16297] netlink: 'syz.0.3578': attribute type 29 has an invalid length. [ 658.945371][T16297] netlink: 'syz.0.3578': attribute type 29 has an invalid length. [ 659.154857][T16297] syzkaller0: entered promiscuous mode [ 659.160967][T16297] syzkaller0: entered allmulticast mode [ 660.033284][T16324] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3586'. [ 661.311150][T16336] netlink: 'syz.2.3590': attribute type 2 has an invalid length. [ 661.319200][T16336] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3590'. [ 661.659330][T16342] netlink: 'syz.0.3592': attribute type 10 has an invalid length. [ 661.681895][T16342] bond0: left promiscuous mode [ 661.691778][T16342] bond_slave_0: left promiscuous mode [ 661.698410][T16342] bond_slave_1: left promiscuous mode [ 661.710613][T16342] bridge_slave_1: left promiscuous mode [ 661.719644][T16342] bond0: left allmulticast mode [ 661.725020][T16342] bond_slave_0: left allmulticast mode [ 661.738054][T16342] bond_slave_1: left allmulticast mode [ 661.748580][T16342] bridge_slave_1: left allmulticast mode [ 662.171103][T16361] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3600'. [ 662.347131][T16365] netlink: 'syz.2.3602': attribute type 3 has an invalid length. [ 662.367330][T16365] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3602'. [ 662.627525][T16388] netlink: 'syz.2.3610': attribute type 2 has an invalid length. [ 662.637432][T16388] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3610'. [ 662.847585][T16402] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3614'. [ 663.016480][T16407] netlink: 'syz.1.3618': attribute type 9 has an invalid length. [ 663.027493][T16407] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.3618'. [ 663.071640][T16407] hsr0: entered promiscuous mode [ 663.104109][T16407] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 663.128090][T16407] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 663.139943][T16407] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 663.155280][T16407] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 663.496986][T16422] netlink: del zone limit has 8 unknown bytes [ 663.567951][T16426] __nla_validate_parse: 2 callbacks suppressed [ 663.567969][T16426] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3626'. [ 664.242812][T16453] FAULT_INJECTION: forcing a failure. [ 664.242812][T16453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.277886][T16453] CPU: 0 PID: 16453 Comm: syz.2.3637 Not tainted syzkaller #0 [ 664.285413][T16453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 664.295469][T16453] Call Trace: [ 664.298746][T16453] [ 664.301683][T16453] dump_stack_lvl+0x18c/0x250 [ 664.306359][T16453] ? show_regs_print_info+0x20/0x20 [ 664.311555][T16453] ? load_image+0x420/0x420 [ 664.316061][T16453] ? __might_fault+0xaa/0x120 [ 664.320741][T16453] ? __lock_acquire+0x7d80/0x7d80 [ 664.325767][T16453] should_fail_ex+0x394/0x4c0 [ 664.330445][T16453] _copy_from_user+0x2f/0xe0 [ 664.335035][T16453] __sys_bpf+0x23e/0x890 [ 664.339272][T16453] ? bpf_link_show_fdinfo+0x390/0x390 [ 664.344656][T16453] ? lock_chain_count+0x20/0x20 [ 664.349515][T16453] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 664.355496][T16453] __x64_sys_bpf+0x7c/0x90 [ 664.359940][T16453] do_syscall_64+0x55/0xb0 [ 664.364366][T16453] ? clear_bhb_loop+0x40/0x90 [ 664.369035][T16453] ? clear_bhb_loop+0x40/0x90 [ 664.373756][T16453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 664.379750][T16453] RIP: 0033:0x7f066e79e0d9 [ 664.384162][T16453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.403851][T16453] RSP: 002b:00007f066f661028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 664.412262][T16453] RAX: ffffffffffffffda RBX: 00007f066ea25fa0 RCX: 00007f066e79e0d9 [ 664.420226][T16453] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 664.428211][T16453] RBP: 00007f066f661090 R08: 0000000000000000 R09: 0000000000000000 [ 664.436194][T16453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.444165][T16453] R13: 00007f066ea26038 R14: 00007f066ea25fa0 R15: 00007fffec6405c8 [ 664.452152][T16453] [ 664.888125][T16476] validate_nla: 2 callbacks suppressed [ 664.888150][T16476] netlink: 'syz.1.3644': attribute type 29 has an invalid length. [ 664.903120][T16476] netlink: 'syz.1.3644': attribute type 29 has an invalid length. [ 664.914839][T16476] netlink: 'syz.1.3644': attribute type 29 has an invalid length. [ 664.924944][T16476] netlink: 'syz.1.3644': attribute type 29 has an invalid length. [ 664.939177][T16476] netlink: 'syz.1.3644': attribute type 10 has an invalid length. [ 664.949510][T16476] netlink: 'syz.1.3644': attribute type 29 has an invalid length. [ 664.987285][T16476] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3644'. [ 665.235986][T16486] syzkaller0: entered promiscuous mode [ 665.244054][T16486] syzkaller0: entered allmulticast mode [ 665.984904][T16506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3655'. [ 668.154110][T16495] bond0: entered promiscuous mode [ 668.159286][T16495] bond_slave_0: entered promiscuous mode [ 668.165307][T16495] bond_slave_1: entered promiscuous mode [ 668.171754][T16495] bridge_slave_1: entered promiscuous mode [ 668.177886][T16495] bond0: entered allmulticast mode [ 668.183104][T16495] bond_slave_0: entered allmulticast mode [ 668.188843][T16495] bond_slave_1: entered allmulticast mode [ 668.194981][T16495] bridge_slave_1: entered allmulticast mode [ 668.200970][T16495] geneve0: entered allmulticast mode [ 668.207387][T16495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.214901][T16510] netlink: 'syz.0.3656': attribute type 10 has an invalid length. [ 668.498900][T16530] netlink: 'syz.1.3660': attribute type 1 has an invalid length. [ 668.629291][T16539] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3664'. [ 668.744388][T16544] netlink: 'syz.2.3666': attribute type 2 has an invalid length. [ 668.800620][T16544] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3666'. [ 669.763711][T16575] netlink: 'syz.1.3677': attribute type 30 has an invalid length. [ 669.924007][T16576] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3679'. [ 670.118332][T16597] validate_nla: 1 callbacks suppressed [ 670.118349][T16597] netlink: 'syz.3.3685': attribute type 21 has an invalid length. [ 670.154886][T16602] netlink: 'syz.0.3686': attribute type 29 has an invalid length. [ 670.164120][T16597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3685'. [ 670.177557][T16602] netlink: 'syz.0.3686': attribute type 29 has an invalid length. [ 670.312846][T16604] syzkaller0: entered promiscuous mode [ 670.327225][T16604] syzkaller0: entered allmulticast mode [ 675.139701][T16633] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3696'. [ 676.093502][T16621] netlink: 'syz.2.3694': attribute type 21 has an invalid length. [ 676.102806][T16621] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3694'. [ 676.112418][T16621] netlink: 'syz.2.3694': attribute type 5 has an invalid length. [ 676.124582][T16621] netlink: 'syz.2.3694': attribute type 6 has an invalid length. [ 676.132834][T16621] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3694'. [ 676.169604][T16627] netlink: 'syz.1.3695': attribute type 9 has an invalid length. [ 676.199895][T16627] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3695'. [ 676.390782][T16643] netlink: 'syz.2.3699': attribute type 1 has an invalid length. [ 676.586047][T16649] netlink: 'syz.2.3703': attribute type 2 has an invalid length. [ 676.603061][T16649] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3703'. [ 676.729287][T16653] netlink: 'syz.0.3705': attribute type 21 has an invalid length. [ 676.738052][T16653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 676.745467][T16653] IPv6: NLM_F_CREATE should be set when creating new route [ 676.752956][T16653] IPv6: NLM_F_CREATE should be set when creating new route [ 676.760523][T16653] IPv6: NLM_F_CREATE should be set when creating new route [ 676.818595][T16657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.050404][T16668] netlink: 'syz.3.3711': attribute type 10 has an invalid length. [ 677.075298][T16668] bond0: left promiscuous mode [ 677.080756][T16668] bond_slave_0: left promiscuous mode [ 677.090493][T16668] bond_slave_1: left promiscuous mode [ 677.096958][T16668] bridge_slave_1: left promiscuous mode [ 677.107989][T16668] mac80211_hwsim hwsim57 wlan1: left promiscuous mode [ 677.116940][T16668] bond0: left allmulticast mode [ 677.134490][T16668] bond_slave_0: left allmulticast mode [ 677.141734][T16668] bond_slave_1: left allmulticast mode [ 677.147632][T16668] bridge_slave_1: left allmulticast mode [ 677.155004][T16668] geneve0: left allmulticast mode [ 677.160981][T16668] mac80211_hwsim hwsim57 wlan1: left allmulticast mode [ 677.328029][T16665] pim6reg1: entered promiscuous mode [ 677.333896][T16665] pim6reg1: entered allmulticast mode [ 677.448416][T16680] bond0: entered promiscuous mode [ 677.463933][T16680] bond_slave_0: entered promiscuous mode [ 677.484005][T16680] bond_slave_1: entered promiscuous mode [ 677.500374][T16680] bridge_slave_1: entered promiscuous mode [ 677.514057][T16680] bond0: entered allmulticast mode [ 677.519236][T16680] bond_slave_0: entered allmulticast mode [ 677.570790][T16680] bond_slave_1: entered allmulticast mode [ 677.576686][T16680] bridge_slave_1: entered allmulticast mode [ 677.591732][T16680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.731252][T16683] netlink: 'syz.2.3716': attribute type 21 has an invalid length. [ 677.776256][T16683] IPv6: NLM_F_CREATE should be specified when creating new route [ 677.799959][T16683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 677.807471][T16683] IPv6: NLM_F_CREATE should be set when creating new route [ 677.815322][T16683] IPv6: NLM_F_CREATE should be set when creating new route [ 677.822838][T16683] IPv6: NLM_F_CREATE should be set when creating new route [ 677.867304][T16688] netlink: 'syz.3.3718': attribute type 46 has an invalid length. [ 677.877485][T16693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.897088][T16688] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3718'. [ 681.031207][T16706] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3725'. [ 681.290636][T16720] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3740'. [ 681.363769][T16717] netlink: 'syz.3.3730': attribute type 21 has an invalid length. [ 681.374083][T16717] IPv6: NLM_F_CREATE should be specified when creating new route [ 681.395834][T16717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 681.403399][T16717] IPv6: NLM_F_CREATE should be set when creating new route [ 681.411036][T16717] IPv6: NLM_F_CREATE should be set when creating new route [ 681.418598][T16717] IPv6: NLM_F_CREATE should be set when creating new route [ 681.496138][T16726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.497321][T16724] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3742'. [ 681.595607][T16728] netlink: 'syz.3.3733': attribute type 2 has an invalid length. [ 681.617577][T16728] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3733'. [ 681.753260][T16733] netlink: 'syz.0.3736': attribute type 2 has an invalid length. [ 681.762267][T16733] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3736'. [ 682.417774][T16759] netlink: 'syz.2.3744': attribute type 9 has an invalid length. [ 682.427069][T16759] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3744'. [ 682.484502][T16761] netlink: 'syz.3.3745': attribute type 2 has an invalid length. [ 682.492557][T16761] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3745'. [ 683.241517][T16767] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3755'. [ 683.255994][T16768] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3755'. [ 683.274199][T16770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.312462][T16767] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3755'. [ 683.335128][T16767] hsr_slave_0: left promiscuous mode [ 683.387214][T16767] hsr_slave_1: left promiscuous mode [ 683.599604][T16777] netlink: 'syz.2.3749': attribute type 2 has an invalid length. [ 683.821743][T16789] netlink: 'syz.0.3753': attribute type 2 has an invalid length. [ 683.966814][T16796] netlink: 'syz.1.3758': attribute type 2 has an invalid length. [ 684.134502][T16802] netlink: 'syz.3.3761': attribute type 3 has an invalid length. [ 684.700015][T16810] netlink: 'syz.0.3763': attribute type 2 has an invalid length. [ 685.029106][T16825] delete_channel: no stack [ 685.954268][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.960722][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.074100][T16865] syzkaller0: entered promiscuous mode [ 686.080653][T16865] syzkaller0: entered allmulticast mode [ 688.025693][T16873] __nla_validate_parse: 15 callbacks suppressed [ 688.025708][T16873] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3786'. [ 688.187066][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3792'. [ 688.237273][T16897] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3793'. [ 688.320462][T16899] validate_nla: 7 callbacks suppressed [ 688.320479][T16899] netlink: 'syz.0.3795': attribute type 2 has an invalid length. [ 688.334245][T16899] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3795'. [ 688.774078][T16922] sctp: [Deprecated]: syz.3.3803 (pid 16922) Use of int in maxseg socket option. [ 688.774078][T16922] Use struct sctp_assoc_value instead [ 689.015373][T16928] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3805'. [ 689.035874][T16929] netlink: 'syz.1.3806': attribute type 2 has an invalid length. [ 689.057985][T16929] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3806'. [ 689.326182][T16941] netlink: 'syz.3.3811': attribute type 10 has an invalid length. [ 689.900598][T16957] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3817'. [ 689.951431][T16955] netlink: 'syz.2.3816': attribute type 39 has an invalid length. [ 689.981541][T16961] netlink: 'syz.0.3818': attribute type 2 has an invalid length. [ 689.989326][T16961] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3818'. [ 690.482909][T16977] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3823'. [ 690.714523][T16981] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3825'. [ 690.871247][T16983] netlink: 'syz.2.3824': attribute type 9 has an invalid length. [ 691.034847][T16988] netlink: 'syz.0.3827': attribute type 10 has an invalid length. [ 691.043235][T16988] hsr0: entered promiscuous mode [ 691.049716][T16988] bridge0: port 1(hsr0) entered blocking state [ 691.056858][T16988] bridge0: port 1(hsr0) entered disabled state [ 691.065186][T16988] hsr0: entered allmulticast mode [ 691.071043][T16988] hsr_slave_0: entered allmulticast mode [ 691.076904][T16988] hsr_slave_1: entered allmulticast mode [ 691.108080][T16988] bridge0: port 1(hsr0) entered blocking state [ 691.114928][T16988] bridge0: port 1(hsr0) entered forwarding state [ 691.498034][T17004] netlink: 'syz.1.3835': attribute type 2 has an invalid length. [ 692.137668][T17023] netlink: 'syz.2.3842': attribute type 3 has an invalid length. [ 692.551658][T17038] netlink: 'syz.2.3848': attribute type 6 has an invalid length. [ 693.101914][T17027] delete_channel: no stack [ 693.184668][T17059] __nla_validate_parse: 5 callbacks suppressed [ 693.184685][T17059] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3855'. [ 693.264065][T17057] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3854'. [ 693.300838][T17056] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3854'. [ 693.345907][T17056] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 693.531100][T17069] validate_nla: 2 callbacks suppressed [ 693.531117][T17069] netlink: 'syz.3.3859': attribute type 4 has an invalid length. [ 693.766006][T17081] netlink: 'syz.1.3864': attribute type 6 has an invalid length. [ 693.777073][T17081] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3864'. [ 693.844826][T17083] netlink: 'syz.0.3865': attribute type 10 has an invalid length. [ 693.913512][T17083] bond0: left promiscuous mode [ 693.932713][T17083] bond_slave_0: left promiscuous mode [ 693.951962][T17083] bond_slave_1: left promiscuous mode [ 693.975539][T17083] bridge_slave_1: left promiscuous mode [ 693.991552][T17083] bond0: left allmulticast mode [ 694.015229][T17083] bond_slave_0: left allmulticast mode [ 694.072250][T17083] bond_slave_1: left allmulticast mode [ 694.078026][T17083] bridge_slave_1: left allmulticast mode [ 694.423246][T17099] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3870'. [ 694.709209][T17116] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3874'. [ 694.817859][T17121] netlink: 'syz.2.3877': attribute type 2 has an invalid length. [ 694.833487][T17121] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3877'. [ 694.925098][T17124] netlink: 'syz.3.3879': attribute type 6 has an invalid length. [ 694.940456][T17124] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3879'. [ 695.039287][T17130] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3883'. [ 695.458045][T17137] netlink: 'syz.1.3882': attribute type 9 has an invalid length. [ 695.493086][T17137] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3882'. [ 695.799351][T17136] netlink: 'syz.0.3884': attribute type 9 has an invalid length. [ 696.148430][T17159] netlink: 'syz.1.3890': attribute type 3 has an invalid length. [ 696.455239][T17167] netlink: 'syz.3.3895': attribute type 2 has an invalid length. [ 696.461825][T17170] netlink: 'syz.0.3897': attribute type 2 has an invalid length. [ 697.167821][T17185] syzkaller0: entered promiscuous mode [ 697.173555][T17185] syzkaller0: entered allmulticast mode [ 697.265682][T17186] syzkaller0: entered promiscuous mode [ 697.272986][T17186] syzkaller0: entered allmulticast mode [ 699.148872][T17199] validate_nla: 2 callbacks suppressed [ 699.148890][T17199] netlink: 'syz.0.3905': attribute type 10 has an invalid length. [ 699.546740][T17210] netlink: 'syz.3.3906': attribute type 9 has an invalid length. [ 699.554737][T17210] __nla_validate_parse: 6 callbacks suppressed [ 699.554750][T17210] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3906'. [ 701.205588][T17218] netlink: 'syz.3.3911': attribute type 2 has an invalid length. [ 701.238480][T17218] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3911'. [ 701.338187][T17224] netlink: 'syz.1.3913': attribute type 2 has an invalid length. [ 701.346282][T17224] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3913'. [ 701.475417][T17231] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3914'. [ 701.886680][T17249] syzkaller0: entered promiscuous mode [ 701.894143][T17249] syzkaller0: entered allmulticast mode [ 702.245731][T17262] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3927'. [ 704.239747][T17278] netlink: 'syz.2.3933': attribute type 19 has an invalid length. [ 704.247710][T17278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3933'. [ 704.300822][T17281] netlink: 'syz.1.3934': attribute type 2 has an invalid length. [ 704.325371][T17281] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3934'. [ 704.421117][T17283] netlink: 'syz.3.3935': attribute type 10 has an invalid length. [ 704.455882][T17285] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3936'. [ 705.455259][T17297] netlink: 'syz.2.3947': attribute type 2 has an invalid length. [ 705.463818][T17297] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3947'. [ 705.707538][T17307] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3942'. [ 706.243761][T17322] netlink: 'syz.1.3948': attribute type 12 has an invalid length. [ 706.252256][T17322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3948'. [ 706.311241][T17323] netlink: 'syz.0.3949': attribute type 10 has an invalid length. [ 706.438747][T17330] netlink: 'syz.1.3948': attribute type 10 has an invalid length. [ 706.459663][T17330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3948'. [ 706.548099][T17338] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3953'. [ 706.629201][T17339] netlink: 'syz.3.3954': attribute type 3 has an invalid length. [ 706.637562][T17339] netlink: 'syz.3.3954': attribute type 1 has an invalid length. [ 706.646467][T17339] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.3954'. [ 706.788525][T17344] netlink: 'syz.2.3956': attribute type 3 has an invalid length. [ 706.803665][T17344] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3956'. [ 706.836749][T17347] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3957'. [ 706.901848][T17353] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3959'. [ 707.244840][T17367] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3964'. [ 707.961191][T17369] syzkaller0: entered promiscuous mode [ 707.968439][T17369] syzkaller0: entered allmulticast mode [ 710.414512][T17429] validate_nla: 6 callbacks suppressed [ 710.414547][T17429] netlink: 'syz.1.3988': attribute type 10 has an invalid length. [ 710.451317][T17429] bond0: left promiscuous mode [ 710.456324][T17429] bond_slave_0: left promiscuous mode [ 710.468432][T17429] bond_slave_1: left promiscuous mode [ 710.481046][T17429] bridge_slave_1: left promiscuous mode [ 710.498012][T17429] bond0: left allmulticast mode [ 710.504213][T17429] bond_slave_0: left allmulticast mode [ 710.532746][T17429] bond_slave_1: left allmulticast mode [ 710.551444][T17429] geneve0: left allmulticast mode [ 710.557487][T17429] bridge_slave_1: left allmulticast mode [ 710.838680][T17446] netlink: 'syz.2.3994': attribute type 29 has an invalid length. [ 710.902633][T17446] netlink: 'syz.2.3994': attribute type 29 has an invalid length. [ 711.517549][T17446] syzkaller0: entered promiscuous mode [ 711.525923][T17446] syzkaller0: entered allmulticast mode [ 711.569526][T17459] __nla_validate_parse: 3 callbacks suppressed [ 711.569550][T17459] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3998'. [ 711.599669][T17465] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.4000'. [ 711.808144][T17475] netlink: 'syz.1.4002': attribute type 29 has an invalid length. [ 711.824292][T17475] netlink: 'syz.1.4002': attribute type 29 has an invalid length. [ 713.634354][T17480] syzkaller0: entered promiscuous mode [ 713.640129][T17480] syzkaller0: entered allmulticast mode [ 713.978904][T17511] netlink: 'syz.2.4012': attribute type 27 has an invalid length. [ 713.999238][T17511] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4012'. [ 714.080023][T17515] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4014'. [ 714.576570][T17527] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4017'. [ 714.597673][T17529] netlink: 'syz.2.4018': attribute type 2 has an invalid length. [ 714.615534][T17529] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4018'. [ 719.975557][T17588] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4036'. [ 720.483345][T17607] netlink: 'syz.1.4045': attribute type 3 has an invalid length. [ 720.519661][T17607] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4045'. [ 720.667061][T17611] netlink: 'syz.2.4044': attribute type 9 has an invalid length. [ 720.718780][T17611] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4044'. [ 720.988730][T17624] netlink: 'syz.1.4052': attribute type 2 has an invalid length. [ 720.997086][T17624] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4052'. [ 721.170980][T17633] netlink: 'syz.3.4056': attribute type 2 has an invalid length. [ 721.192274][T17633] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4056'. [ 722.372150][T17658] netlink: 'syz.1.4064': attribute type 19 has an invalid length. [ 722.406734][T17658] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4064'. [ 722.456960][T17662] netlink: 763 bytes leftover after parsing attributes in process `syz.0.4063'. [ 722.924450][T17680] netlink: 'syz.3.4073': attribute type 21 has an invalid length. [ 722.946511][T17680] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4073'. [ 722.958988][T17680] netlink: 'syz.3.4073': attribute type 4 has an invalid length. [ 723.514356][T17697] netlink: 'syz.2.4081': attribute type 10 has an invalid length. [ 723.551868][T17691] netlink: 'syz.0.4078': attribute type 3 has an invalid length. [ 723.575458][T17702] netlink: 'syz.3.4080': attribute type 9 has an invalid length. [ 723.594215][T17702] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4080'. [ 723.612449][T17691] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4078'. [ 724.434816][T17697] bond0: left promiscuous mode [ 724.449922][T17697] bond_slave_0: left promiscuous mode [ 724.481315][T17697] bond_slave_1: left promiscuous mode [ 724.503757][T17697] bridge_slave_1: left promiscuous mode [ 724.523542][T17697] bond0: left allmulticast mode [ 724.528970][T17697] bond_slave_0: left allmulticast mode [ 724.556184][T17697] bond_slave_1: left allmulticast mode [ 724.567447][T17697] bridge_slave_1: left allmulticast mode [ 724.582084][T17697] geneve0: left allmulticast mode [ 725.293426][T17735] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4090'. [ 725.699459][T17746] validate_nla: 1 callbacks suppressed [ 725.699476][T17746] netlink: 'syz.3.4092': attribute type 3 has an invalid length. [ 725.736692][T17746] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4092'. [ 726.007986][T17751] netlink: 'syz.1.4093': attribute type 3 has an invalid length. [ 726.029544][T17751] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4093'. [ 726.153547][T17735] caif0: entered promiscuous mode [ 726.158637][T17735] caif0: entered allmulticast mode [ 726.165576][T17735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 726.692540][T17773] netlink: 'syz.0.4102': attribute type 11 has an invalid length. [ 726.711403][T17773] netlink: 212832 bytes leftover after parsing attributes in process `syz.0.4102'. [ 726.927737][T17784] netlink: 'syz.0.4106': attribute type 2 has an invalid length. [ 726.946637][T17784] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4106'. [ 726.964746][T17783] netlink: 'syz.1.4105': attribute type 10 has an invalid length. [ 727.002170][T17788] netlink: 'syz.3.4108': attribute type 9 has an invalid length. [ 727.024463][T17788] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4108'. [ 727.188723][T17789] netlink: 'syz.3.4108': attribute type 9 has an invalid length. [ 727.203078][T17793] netlink: 'syz.2.4109': attribute type 2 has an invalid length. [ 727.207802][T17789] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4108'. [ 727.224241][T17793] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4109'. [ 727.783981][T17810] netlink: 'syz.3.4114': attribute type 2 has an invalid length. [ 727.798565][T17810] netlink: 'syz.3.4114': attribute type 4 has an invalid length. [ 727.819758][T17810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4114'. [ 728.084410][T17824] netlink: 'syz.1.4120': attribute type 2 has an invalid length. [ 728.095203][T17824] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4120'. [ 730.846533][T17881] validate_nla: 3 callbacks suppressed [ 730.846554][T17881] netlink: 'syz.1.4142': attribute type 29 has an invalid length. [ 730.962813][T17881] netlink: 'syz.1.4142': attribute type 29 has an invalid length. [ 731.766542][T17890] netlink: 'syz.1.4145': attribute type 29 has an invalid length. [ 731.833126][T17890] netlink: 'syz.1.4145': attribute type 29 has an invalid length. [ 732.469050][T17891] syzkaller0: entered promiscuous mode [ 732.478183][T17891] syzkaller0: entered allmulticast mode [ 732.919088][T17920] netlink: 'syz.0.4152': attribute type 3 has an invalid length. [ 732.939592][T17920] __nla_validate_parse: 4 callbacks suppressed [ 732.939620][T17920] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4152'. [ 735.204143][T17945] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4165'. [ 736.069331][T17921] netlink: 'syz.3.4154': attribute type 10 has an invalid length. [ 736.077487][T17921] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4154'. [ 736.104391][T17921] caif0: entered promiscuous mode [ 736.109996][T17921] caif0: entered allmulticast mode [ 736.115143][T17921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 736.565843][T17969] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4176'. [ 737.005556][T17982] netlink: 'syz.1.4178': attribute type 10 has an invalid length. [ 737.029594][T17982] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4178'. [ 737.433688][T17990] netlink: 'syz.2.4182': attribute type 9 has an invalid length. [ 737.441823][T17990] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4182'. [ 737.803303][T17982] caif0: entered promiscuous mode [ 737.809629][T17982] caif0: entered allmulticast mode [ 737.816272][T17982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 738.133773][T18005] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4186'. [ 738.141765][T18000] netlink: 'syz.1.4184': attribute type 10 has an invalid length. [ 738.241496][T18008] -1: renamed from syzkaller0 [ 738.290225][T18012] netlink: 'syz.0.4188': attribute type 5 has an invalid length. [ 738.402958][T18016] netlink: 'syz.3.4189': attribute type 29 has an invalid length. [ 738.440814][T18015] netlink: 'syz.3.4189': attribute type 29 has an invalid length. [ 738.464127][T18016] netlink: 'syz.3.4189': attribute type 29 has an invalid length. [ 738.486508][T18015] netlink: 'syz.3.4189': attribute type 29 has an invalid length. [ 738.517589][T18018] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.4190'. [ 738.547324][T18015] netlink: 'syz.3.4189': attribute type 10 has an invalid length. [ 738.557902][T18018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4190'. [ 738.571927][T18015] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4189'. [ 738.691552][T18025] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4192'. [ 739.089354][T18036] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4197'. [ 739.558655][T18041] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4199'. [ 740.244395][T18047] syzkaller0: entered promiscuous mode [ 740.254767][T18047] syzkaller0: entered allmulticast mode [ 740.364214][T18076] syzkaller0: entered promiscuous mode [ 740.385128][T18076] syzkaller0: entered allmulticast mode [ 744.367185][T18116] syz.1.4223[18116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 744.367417][T18116] syz.1.4223[18116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 744.534083][T18118] veth1_macvtap: left allmulticast mode [ 744.563472][T18118] veth1_macvtap: left promiscuous mode [ 747.016777][T18177] syzkaller0: entered promiscuous mode [ 747.111662][T18177] syzkaller0: entered allmulticast mode [ 747.970010][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.976378][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.625879][T18228] syzkaller0: entered promiscuous mode [ 751.637371][T18228] syzkaller0: entered allmulticast mode [ 753.217266][T18249] [ 753.220039][T18249] ============================= [ 753.224932][T18249] WARNING: suspicious RCU usage [ 753.229980][T18249] syzkaller #0 Not tainted [ 753.234404][T18249] ----------------------------- [ 753.239261][T18249] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 753.247819][T18249] [ 753.247819][T18249] other info that might help us debug this: [ 753.247819][T18249] [ 753.258372][T18249] [ 753.258372][T18249] rcu_scheduler_active = 2, debug_locks = 1 [ 753.266522][T18249] 1 lock held by syz.3.4270/18249: [ 753.271832][T18249] #0: ffffffff8d131f80 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 753.282332][T18249] [ 753.282332][T18249] stack backtrace: [ 753.288241][T18249] CPU: 0 PID: 18249 Comm: syz.3.4270 Not tainted syzkaller #0 [ 753.295719][T18249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 753.305794][T18249] Call Trace: [ 753.309089][T18249] [ 753.312034][T18249] dump_stack_lvl+0x18c/0x250 [ 753.316744][T18249] ? show_regs_print_info+0x20/0x20 [ 753.321967][T18249] ? load_image+0x420/0x420 [ 753.326518][T18249] lockdep_rcu_suspicious+0x1e1/0x300 [ 753.331930][T18249] get_callchain_entry+0x2a9/0x3c0 [ 753.337072][T18249] get_perf_callchain+0xc6/0x510 [ 753.342040][T18249] ? put_callchain_entry+0xb0/0xb0 [ 753.347188][T18249] __bpf_get_stack+0x2e4/0x540 [ 753.351988][T18249] ? stack_map_get_build_id_offset+0x720/0x720 [ 753.358174][T18249] ? __cant_sleep+0x220/0x220 [ 753.362880][T18249] ? bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 753.368542][T18249] bpf_get_stack_raw_tp+0x1a4/0x210 [ 753.373774][T18249] bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 753.379260][T18249] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 753.384655][T18249] bpf_prog_test_run_syscall+0x320/0x4b0 [ 753.390309][T18249] ? sock_gen_cookie+0x60/0x60 [ 753.395124][T18249] ? sock_gen_cookie+0x60/0x60 [ 753.399925][T18249] bpf_prog_test_run+0x31f/0x390 [ 753.404913][T18249] __sys_bpf+0x49d/0x890 [ 753.409179][T18249] ? bpf_link_show_fdinfo+0x390/0x390 [ 753.414578][T18249] ? lock_chain_count+0x20/0x20 [ 753.419563][T18249] __x64_sys_bpf+0x7c/0x90 [ 753.424097][T18249] do_syscall_64+0x55/0xb0 [ 753.428548][T18249] ? clear_bhb_loop+0x40/0x90 [ 753.433257][T18249] ? clear_bhb_loop+0x40/0x90 [ 753.437985][T18249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 753.444338][T18249] RIP: 0033:0x7f819db9e0d9 [ 753.448840][T18249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.468450][T18249] RSP: 002b:00007f819ea72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 753.476871][T18249] RAX: ffffffffffffffda RBX: 00007f819de25fa0 RCX: 00007f819db9e0d9 [ 753.484874][T18249] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 753.492897][T18249] RBP: 00007f819dc35024 R08: 0000000000000000 R09: 0000000000000000 [ 753.500901][T18249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.508907][T18249] R13: 00007f819de26038 R14: 00007f819de25fa0 R15: 00007ffc29a02518 [ 753.516903][T18249] [ 754.857972][T18236] lo: entered allmulticast mode [ 754.867244][T18241] lo: entered promiscuous mode [ 754.873304][T18241] lo: left allmulticast mode