last executing test programs: 9.363210923s ago: executing program 0 (id=3115): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180)="af83857089ac6640dec50234d3608b95", &(0x7f0000000000)=""/6, 0x2}, 0x20) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x2e, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x7, 0xb, 0x9, 0xffffffffffffffff, 0x1}, @map_fd={0x18, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x10001, 0x94, &(0x7f0000000a00)=""/148, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x2, 0x2, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], &(0x7f0000000b40)=[{0x5, 0x3, 0xf, 0x1}], 0x10, 0x652}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0x20000000004, 0x6) write$cgroup_int(r6, &(0x7f0000000100)=0x1, 0x12) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x97}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1e, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0xd9e, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @sk_lookup=0x24, r2, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x0, 0x7fffffff, 0xf}, 0x10, r3, r4, 0x7, &(0x7f0000000c40)=[r0, r0, r0, r0, r0, r0, r0, r7], &(0x7f0000000c80)=[{0x5, 0x4, 0xe, 0x8}, {0x1, 0x2, 0xe, 0x9}, {0x0, 0x1, 0x3, 0x7}, {0x1, 0x1, 0x1, 0x9}, {0x5, 0x3, 0xd, 0xa}, {0x0, 0x1, 0xa, 0x2}, {0x1, 0x5, 0x10, 0xb}], 0x10, 0x6}, 0x94) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x502, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x7f, 0x0}, 0x8) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="090000000800000008000000900000", @ANYRES32], 0x48) write$cgroup_devices(r11, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0308004d8c71ef288563"], 0xffdd) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r1, r9, 0x10, 0x2020, 0x0, @void, @void, @value=r10}, 0x20) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e1208001d0040001101a8002e000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) 7.662272669s ago: executing program 3 (id=3120): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0xffeb}], 0x2}, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="2e0000000000000000000000f947cee698b101c135dcdb60"], 0x20) 7.464687805s ago: executing program 1 (id=3121): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0002f9e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0xfc, 0x0, &(0x7f0000000400)="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"}, 0x50) 6.603047843s ago: executing program 1 (id=3123): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0002f9e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x104, 0x0, &(0x7f0000000400)="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"}, 0x50) 5.714632342s ago: executing program 1 (id=3125): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) socket$kcm(0x10, 0x2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000400)='FREEZING\x00', 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.090732673s ago: executing program 2 (id=3126): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000180)="af83857089ac6640dec50234d3608b95", &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xab, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x7, 0xb, 0x40, 0x4}, @generic={0x3, 0x7, 0x6, 0xfffd, 0x3}]}, 0x0, 0x10001, 0x94, &(0x7f0000000a00)=""/148, 0x41000, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x2, 0x2, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x10, 0x652}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x97}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x22, 0x3, 0x0) r5 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0x3}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) close(r4) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x22c72, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1e, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0xd9e, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x7fffffff, 0xf}, 0x10, r0, r1, 0x7, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000c80)=[{0x3, 0x4, 0xe, 0x8}, {0x1, 0x2, 0xe, 0x9}, {0x0, 0x1, 0x3, 0x7}, {0x1, 0x1, 0x1, 0x9}, {0x5, 0x3, 0xd, 0xa}, {0x0, 0x1, 0xa, 0x2}, {0x1, 0x5, 0x10, 0xb}], 0x10, 0x6}, 0x94) 1.84020692s ago: executing program 3 (id=3127): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000002700)=ANY=[], 0xffdd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x300, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f0002f9e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 1.8249458s ago: executing program 1 (id=3128): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4064, 0xfe0}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000780)=""/175, 0xaf}], 0x4}, 0x10100) 1.710852694s ago: executing program 0 (id=3129): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1a5c0bf06ff69310, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.709557234s ago: executing program 2 (id=3130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1808000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000004000400b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10001, 0x2b7, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040)) close(r2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[], 0xfefb) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x3}, 0x8) r8 = openat$cgroup_type(r3, &(0x7f00000002c0), 0x2, 0x0) close(r8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r9, r5, 0x0, r2}, 0x10) 1.53090423s ago: executing program 3 (id=3131): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="d80000001a0081044e81f782db4cb904021d0800fe007c05e81156a10a0015000200142603600e12080010007a010401a8001600200002400400077c035c0400a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7eef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e101ce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9412dd09206da6f7d", 0xd2}], 0x1}, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0), 0x161) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x8000}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="eca300"/12, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0xf9, 0x3, 0x0, 0x0, 0x0, 0x80000000000062af, 0x62f02, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x110, 0xfffffffffffffff0, 0x4b2, 0x5, 0x1002, 0x5, 0x88cc, 0x0, 0x0, 0x0, 0x8000000000000001}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x8000) r8 = openat$cgroup_ro(r4, &(0x7f0000000e80)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x16, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='GPL\x00', 0x2d, 0x24, &(0x7f0000000e40)=""/36, 0x41000, 0x25, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0)={0x5, 0x5, 0x7, 0xe1c}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001040)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f0000001080)=[{0x0, 0x5, 0x4, 0x6}, {0x2, 0x4, 0x9, 0xa}, {0x5, 0x3, 0x9, 0xb}], 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) 1.475846932s ago: executing program 0 (id=3132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000019000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.342749126s ago: executing program 0 (id=3133): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c7388641f9c0e0a"], 0xfe33) 1.317022287s ago: executing program 2 (id=3134): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1a5c0bf06ff69310, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.237113659s ago: executing program 0 (id=3135): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.173631242s ago: executing program 3 (id=3136): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0xffeb}], 0x2}, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="2e0000000000000000000000f947cee698b101c135dcdb60"], 0x20) 1.172838762s ago: executing program 2 (id=3137): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) socket$kcm(0x10, 0x2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000400)='FREEZING\x00', 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 826.654443ms ago: executing program 1 (id=3138): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000180)="af83857089ac6640dec50234d3608b95", &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xab, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x7, 0xb, 0x40, 0x4}, @generic={0x3, 0x7, 0x6, 0xfffd, 0x3}]}, 0x0, 0x10001, 0x94, &(0x7f0000000a00)=""/148, 0x41000, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x2, 0x2, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x10, 0x652}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x97}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x22, 0x3, 0x0) r5 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0x3}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) close(r4) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x22c72, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1e, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0xd9e, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x7fffffff, 0xf}, 0x10, r0, r1, 0x7, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000c80)=[{0x3, 0x4, 0xe, 0x8}, {0x1, 0x2, 0xe, 0x9}, {0x0, 0x1, 0x3, 0x7}, {0x1, 0x1, 0x1, 0x9}, {0x5, 0x3, 0xd, 0xa}, {0x0, 0x1, 0xa, 0x2}, {0x1, 0x5, 0x10, 0xb}], 0x10, 0x6}, 0x94) 765.144595ms ago: executing program 3 (id=3139): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000002700)=ANY=[], 0xffdd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x300, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f0002f9e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 693.355967ms ago: executing program 2 (id=3140): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000003, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0xa000000, 0x215, 0x0, &(0x7f0000000640)="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", &(0x7f0000000440)}, 0x50) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xf, 0x2, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x73, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000000000000000000000800100730109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x94) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000805310000000583babc54de724c496fb4fedccbbb2f11028e3efd1326e6f8d3d2f1bd00682e544d369dd3c5167a6da59f406a89ea235db127f6995f0ec", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x202b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1ad76, 0x7, 0x9, 0x20000006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/30], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xc}], 0x10}, 0xfc00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (fail_nth: 6) 26.747599ms ago: executing program 2 (id=3141): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1a5c0bf06ff69310, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 25.555319ms ago: executing program 0 (id=3149): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000180)="af83857089ac6640dec50234d3608b95", &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xab, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x7, 0xb, 0x40, 0x4}, @generic={0x3, 0x7, 0x6, 0xfffd, 0x3}]}, 0x0, 0x10001, 0x94, &(0x7f0000000a00)=""/148, 0x41000, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x2, 0x2, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x10, 0x652}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x97}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x22, 0x3, 0x0) r5 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0x3}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) close(r4) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x22c72, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1e, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0xd9e, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x7fffffff, 0xf}, 0x10, r0, r1, 0x7, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000c80)=[{0x3, 0x4, 0xe, 0x8}, {0x1, 0x2, 0xe, 0x9}, {0x0, 0x1, 0x3, 0x7}, {0x1, 0x1, 0x1, 0x9}, {0x5, 0x3, 0xd, 0xa}, {0x0, 0x1, 0xa, 0x2}, {0x1, 0x5, 0x10, 0xb}], 0x10, 0x6}, 0x94) 24.700048ms ago: executing program 1 (id=3142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1c, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffff4}]}, 0x0, 0x4}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYRES16=r2]) 0s ago: executing program 3 (id=3143): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x4) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x5, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000"], 0x0, 0x4d}, 0x28) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x7, 0x0, 0xc, 0x100, 0xffffffffffffffff, 0x10000, '\x00', 0x0, r1, 0x0, 0x3, 0x2, 0x8}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000dc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000e00)=[0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f0000000e80)=[{}, {}], 0x10, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000f40)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000011c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001140), &(0x7f0000001180)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{0x1, 0xffffffffffffffff}, &(0x7f0000001200), &(0x7f0000001240)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x11, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf}, [@alu={0x4, 0x0, 0x0, 0xa, 0x2, 0xc, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x401}, @alu={0x4, 0x0, 0x4, 0x5, 0x2, 0xfffffffffffffffc, 0x1}]}, &(0x7f0000000d40)='GPL\x00', 0x81, 0x24, &(0x7f0000000d80)=""/36, 0x41100, 0xd, '\x00', r5, 0x0, r2, 0x8, &(0x7f00000010c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001100)={0x2, 0x80000001, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000012c0)=[r6, r7], &(0x7f0000001300)=[{0x2, 0x4, 0xf}, {0x1, 0x5, 0x3, 0x3}, {0x0, 0x5, 0x7, 0x6}], 0x10, 0xfffffffd}, 0x94) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socketpair(0x25, 0x5, 0x1, &(0x7f0000000000)) socket$kcm(0x10, 0x3, 0x10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) (fail_nth: 2) kernel console output (not intermixed with test programs): type 10 has an invalid length. [ 411.521725][T10444] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.528886][T10444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.059705][T12166] FAULT_INJECTION: forcing a failure. [ 412.059705][T12166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.106965][T12166] CPU: 1 PID: 12166 Comm: syz.3.2379 Not tainted syzkaller #0 [ 412.114468][T12166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.124536][T12166] Call Trace: [ 412.127823][T12166] [ 412.130771][T12166] dump_stack_lvl+0x18c/0x250 [ 412.135474][T12166] ? show_regs_print_info+0x20/0x20 [ 412.140687][T12166] ? load_image+0x420/0x420 [ 412.145205][T12166] ? __might_fault+0xaa/0x120 [ 412.149895][T12166] ? __lock_acquire+0x7d40/0x7d40 [ 412.154937][T12166] should_fail_ex+0x39d/0x4d0 [ 412.159640][T12166] _copy_from_user+0x2f/0xe0 [ 412.164247][T12166] ___sys_recvmsg+0x176/0x590 [ 412.168945][T12166] ? __sys_recvmsg+0x2a0/0x2a0 [ 412.173728][T12166] ? ksys_write+0x1c4/0x260 [ 412.178260][T12166] ? __fget_files+0x43d/0x4b0 [ 412.182974][T12166] __x64_sys_recvmsg+0x20c/0x2e0 [ 412.187933][T12166] ? ___sys_recvmsg+0x590/0x590 [ 412.192814][T12166] ? lockdep_hardirqs_on+0x98/0x150 [ 412.198039][T12166] do_syscall_64+0x55/0xb0 [ 412.202473][T12166] ? clear_bhb_loop+0x40/0x90 [ 412.207162][T12166] ? clear_bhb_loop+0x40/0x90 [ 412.211849][T12166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.217763][T12166] RIP: 0033:0x7f32d399ce59 [ 412.222191][T12166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.241808][T12166] RSP: 002b:00007f32d491d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 412.250236][T12166] RAX: ffffffffffffffda RBX: 00007f32d3c15fa0 RCX: 00007f32d399ce59 [ 412.258220][T12166] RDX: 0000000000010001 RSI: 0000200000000840 RDI: 0000000000000007 [ 412.266205][T12166] RBP: 00007f32d491d090 R08: 0000000000000000 R09: 0000000000000000 [ 412.274188][T12166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.282172][T12166] R13: 00007f32d3c16038 R14: 00007f32d3c15fa0 R15: 00007ffe6acfc768 [ 412.290174][T12166] [ 412.469426][T12064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.644827][T12064] veth0_vlan: entered promiscuous mode [ 412.675200][T12064] veth1_vlan: entered promiscuous mode [ 412.732932][T12180] netlink: 'syz.0.2389': attribute type 19 has an invalid length. [ 412.744395][T12180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2389'. [ 412.826908][T12064] veth0_macvtap: entered promiscuous mode [ 412.840325][T12064] veth1_macvtap: entered promiscuous mode [ 412.884635][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.912254][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.932106][ T5775] Bluetooth: hci4: command tx timeout [ 412.939524][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.956516][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.969764][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.980632][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.990952][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.006094][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.019276][T12064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.053780][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.073118][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.093401][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.112311][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.140958][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.172723][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.173438][T12194] FAULT_INJECTION: forcing a failure. [ 413.173438][T12194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.192095][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.212110][T12194] CPU: 1 PID: 12194 Comm: syz.0.2387 Not tainted syzkaller #0 [ 413.219592][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.229644][T12194] Call Trace: [ 413.232923][T12194] [ 413.235846][T12194] dump_stack_lvl+0x18c/0x250 [ 413.240527][T12194] ? show_regs_print_info+0x20/0x20 [ 413.245724][T12194] ? load_image+0x420/0x420 [ 413.250231][T12194] ? __might_fault+0xaa/0x120 [ 413.254904][T12194] ? __lock_acquire+0x7d40/0x7d40 [ 413.259927][T12194] should_fail_ex+0x39d/0x4d0 [ 413.264608][T12194] _copy_from_user+0x2f/0xe0 [ 413.269207][T12194] __sys_bpf+0x23e/0x890 [ 413.273450][T12194] ? bpf_link_show_fdinfo+0x390/0x390 [ 413.278823][T12194] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 413.284985][T12194] __x64_sys_bpf+0x7c/0x90 [ 413.289398][T12194] do_syscall_64+0x55/0xb0 [ 413.293809][T12194] ? clear_bhb_loop+0x40/0x90 [ 413.298475][T12194] ? clear_bhb_loop+0x40/0x90 [ 413.303146][T12194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.309038][T12194] RIP: 0033:0x7fee7d39ce59 [ 413.313459][T12194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.333067][T12194] RSP: 002b:00007fee7e318028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.341477][T12194] RAX: ffffffffffffffda RBX: 00007fee7d615fa0 RCX: 00007fee7d39ce59 [ 413.349444][T12194] RDX: 0000000000000050 RSI: 0000200000000480 RDI: 0000000000000000 [ 413.357410][T12194] RBP: 00007fee7e318090 R08: 0000000000000000 R09: 0000000000000000 [ 413.365382][T12194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.373346][T12194] R13: 00007fee7d616038 R14: 00007fee7d615fa0 R15: 00007fff8b8b4768 [ 413.381321][T12194] [ 413.392297][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.423991][T12064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.433668][T12191] netlink: 'syz.3.2385': attribute type 10 has an invalid length. [ 413.465846][T12196] netlink: 'syz.2.2388': attribute type 10 has an invalid length. [ 413.482527][T12064] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.491320][T12064] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.514445][T12064] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.524942][T12064] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.721034][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.748681][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.784080][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.791927][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.936724][T12204] netlink: 'syz.3.2391': attribute type 21 has an invalid length. [ 413.976610][T12204] netlink: 'syz.3.2391': attribute type 22 has an invalid length. [ 414.019877][T12204] netlink: 'syz.3.2391': attribute type 13 has an invalid length. [ 414.116426][T12204] netlink: 6188 bytes leftover after parsing attributes in process `syz.3.2391'. [ 415.012988][ T5775] Bluetooth: hci4: command tx timeout [ 415.033239][T12219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2396'. [ 415.054022][T12219] netlink: 'syz.1.2396': attribute type 12 has an invalid length. [ 415.116278][T12219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2396'. [ 416.009950][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 416.019168][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 416.032561][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 416.059810][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 416.079120][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 416.089431][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 416.161418][T12228] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 416.560495][T12233] netlink: 'syz.1.2398': attribute type 10 has an invalid length. [ 416.580348][T12233] syz_tun: entered promiscuous mode [ 416.661219][T12233] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 416.726766][T12235] netlink: 'syz.2.2399': attribute type 10 has an invalid length. [ 416.956938][T12225] chnl_net:caif_netlink_parms(): no params data found [ 417.017208][T12250] netlink: 'syz.2.2404': attribute type 11 has an invalid length. [ 417.032739][T12250] netlink: 162080 bytes leftover after parsing attributes in process `syz.2.2404'. [ 417.139792][T12256] netlink: 'syz.1.2405': attribute type 29 has an invalid length. [ 417.638639][T12256] netlink: 'syz.1.2405': attribute type 29 has an invalid length. [ 417.730792][T12225] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.738405][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.746940][T12225] bridge_slave_0: entered allmulticast mode [ 417.754648][T12225] bridge_slave_0: entered promiscuous mode [ 417.762703][T12270] netlink: 'syz.2.2407': attribute type 39 has an invalid length. [ 417.838370][T12262] netlink: 'syz.1.2405': attribute type 29 has an invalid length. [ 417.855362][T12264] netlink: 'syz.1.2405': attribute type 29 has an invalid length. [ 417.875474][T12256] IPv6: Can't replace route, no match found [ 417.889430][T12225] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.910233][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.927543][T12225] bridge_slave_1: entered allmulticast mode [ 417.936186][T12225] bridge_slave_1: entered promiscuous mode [ 417.949754][T12266] netlink: 'syz.1.2405': attribute type 29 has an invalid length. [ 418.001357][T12267] netlink: 'syz.1.2405': attribute type 29 has an invalid length. [ 418.060757][T12225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.103688][T12225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.141511][ T5782] Bluetooth: hci3: command tx timeout [ 418.196537][T12225] team0: Port device team_slave_0 added [ 418.207693][T12225] team0: Port device team_slave_1 added [ 418.260256][T12225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.269234][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.324506][T12225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.341511][T12225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.348942][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.377043][T12225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.480936][T12225] hsr_slave_0: entered promiscuous mode [ 418.516472][T12225] hsr_slave_1: entered promiscuous mode [ 418.545200][T12225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.572263][T12225] Cannot create hsr debugfs directory [ 419.049016][T12292] FAULT_INJECTION: forcing a failure. [ 419.049016][T12292] name failslab, interval 1, probability 0, space 0, times 0 [ 419.077845][T12292] CPU: 1 PID: 12292 Comm: syz.3.2417 Not tainted syzkaller #0 [ 419.085345][T12292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 419.095413][T12292] Call Trace: [ 419.098704][T12292] [ 419.101648][T12292] dump_stack_lvl+0x18c/0x250 [ 419.106352][T12292] ? sctp_sendmsg+0x15d2/0x2910 [ 419.111217][T12292] ? ___sys_sendmsg+0x2a6/0x360 [ 419.116084][T12292] ? show_regs_print_info+0x20/0x20 [ 419.121297][T12292] ? load_image+0x420/0x420 [ 419.125838][T12292] should_fail_ex+0x39d/0x4d0 [ 419.130540][T12292] should_failslab+0x9/0x20 [ 419.135080][T12292] slab_pre_alloc_hook+0x59/0x310 [ 419.140134][T12292] ? sctp_add_bind_addr+0x8c/0x360 [ 419.145269][T12292] __kmem_cache_alloc_node+0x53/0x250 [ 419.150670][T12292] ? sctp_add_bind_addr+0x8c/0x360 [ 419.155798][T12292] kmalloc_trace+0x2a/0xe0 [ 419.160243][T12292] sctp_add_bind_addr+0x8c/0x360 [ 419.165210][T12292] sctp_copy_local_addr_list+0x315/0x4f0 [ 419.170862][T12292] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 419.176598][T12292] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 419.182704][T12292] ? sctp_v4_is_any+0x35/0x60 [ 419.187403][T12292] ? sctp_copy_one_addr+0x8c/0x350 [ 419.192537][T12292] sctp_bind_addr_copy+0xb3/0x3c0 [ 419.197578][T12292] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 419.203932][T12292] sctp_connect_new_asoc+0x2f9/0x6a0 [ 419.209241][T12292] ? __sctp_connect+0xd80/0xd80 [ 419.214104][T12292] ? __local_bh_enable_ip+0x13a/0x1c0 [ 419.219488][T12292] ? _local_bh_enable+0xa0/0xa0 [ 419.224349][T12292] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 419.230175][T12292] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 419.235998][T12292] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 419.241563][T12292] ? security_sctp_bind_connect+0x89/0xb0 [ 419.247309][T12292] sctp_sendmsg+0x15d2/0x2910 [ 419.252062][T12292] ? sctp_getsockopt+0xb60/0xb60 [ 419.257049][T12292] ? aa_sk_perm+0x83c/0x970 [ 419.261577][T12292] ? aa_af_perm+0x330/0x330 [ 419.266091][T12292] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 419.272546][T12292] ? sock_rps_record_flow+0x19/0x3f0 [ 419.277855][T12292] ? inet_sendmsg+0x7c/0x2f0 [ 419.282459][T12292] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 419.287765][T12292] ? security_socket_sendmsg+0x80/0xa0 [ 419.293238][T12292] ? inet_send_prepare+0x260/0x260 [ 419.298365][T12292] ____sys_sendmsg+0x5ba/0x960 [ 419.303138][T12292] ? __lock_acquire+0x7d40/0x7d40 [ 419.308183][T12292] ? __asan_memset+0x22/0x40 [ 419.312788][T12292] ? __sys_sendmsg_sock+0x30/0x30 [ 419.317816][T12292] ? __import_iovec+0x5f2/0x850 [ 419.322696][T12292] ? import_iovec+0x73/0xa0 [ 419.327206][T12292] ___sys_sendmsg+0x2a6/0x360 [ 419.331905][T12292] ? __sys_sendmsg+0x2a0/0x2a0 [ 419.336733][T12292] __se_sys_sendmsg+0x1c2/0x2b0 [ 419.341599][T12292] ? __x64_sys_sendmsg+0x80/0x80 [ 419.346567][T12292] ? syscall_enter_from_user_mode+0x2e/0x80 [ 419.352481][T12292] do_syscall_64+0x55/0xb0 [ 419.356904][T12292] ? clear_bhb_loop+0x40/0x90 [ 419.361621][T12292] ? clear_bhb_loop+0x40/0x90 [ 419.366306][T12292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.372207][T12292] RIP: 0033:0x7f32d399ce59 [ 419.376632][T12292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.396255][T12292] RSP: 002b:00007f32d491d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.404679][T12292] RAX: ffffffffffffffda RBX: 00007f32d3c15fa0 RCX: 00007f32d399ce59 [ 419.412655][T12292] RDX: 00000000000080d1 RSI: 00002000000000c0 RDI: 0000000000000005 [ 419.420632][T12292] RBP: 00007f32d491d090 R08: 0000000000000000 R09: 0000000000000000 [ 419.428610][T12292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.436588][T12292] R13: 00007f32d3c16038 R14: 00007f32d3c15fa0 R15: 00007ffe6acfc768 [ 419.444592][T12292] [ 419.550832][T12225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.648848][T12294] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2418'. [ 419.694796][T12225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.800467][T12225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.936069][T12225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.950878][T12303] netlink: 'syz.1.2422': attribute type 11 has an invalid length. [ 419.961944][T12303] netlink: 162080 bytes leftover after parsing attributes in process `syz.1.2422'. [ 420.138450][T12225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 420.173481][T12225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 420.210988][T12225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 420.217856][ T5782] Bluetooth: hci3: command tx timeout [ 420.243797][T12225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 420.347303][T12313] validate_nla: 3 callbacks suppressed [ 420.347318][T12313] netlink: 'syz.3.2425': attribute type 29 has an invalid length. [ 420.377909][T12225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.386158][T12313] netlink: 'syz.3.2425': attribute type 29 has an invalid length. [ 420.410543][T12315] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2426'. [ 420.415779][T12318] netlink: 'syz.3.2425': attribute type 29 has an invalid length. [ 420.444443][T12225] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.454923][T12313] netlink: 'syz.3.2425': attribute type 29 has an invalid length. [ 420.465919][T12313] netlink: 'syz.3.2425': attribute type 29 has an invalid length. [ 420.494105][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.501334][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.535653][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.542854][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.600218][T12313] IPv6: Can't replace route, no match found [ 420.634340][T12313] netlink: 'syz.3.2425': attribute type 29 has an invalid length. [ 420.853168][T12225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.915274][T12225] veth0_vlan: entered promiscuous mode [ 420.938944][T12225] veth1_vlan: entered promiscuous mode [ 421.002901][T12225] veth0_macvtap: entered promiscuous mode [ 421.010287][T12331] netlink: 'syz.2.2430': attribute type 10 has an invalid length. [ 421.025324][T12225] veth1_macvtap: entered promiscuous mode [ 421.058829][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.070303][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.080680][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.095840][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.105717][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.119787][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.129799][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.144002][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.156048][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.166687][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.178255][T12225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.194259][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.204907][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.215177][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.225867][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.236317][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.247284][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.257653][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.268817][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.278794][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.293891][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.305490][T12225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.322368][T12225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.331480][T12225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.344038][T12225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.352853][T12225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.562159][T10464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.570022][T10464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.620278][T12344] netlink: 'syz.3.2437': attribute type 21 has an invalid length. [ 421.649701][T12344] netlink: 'syz.3.2437': attribute type 1 has an invalid length. [ 421.661412][T12344] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.2437'. [ 421.712743][T12347] netlink: 'syz.2.2439': attribute type 19 has an invalid length. [ 421.724236][T12347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2439'. [ 421.750865][T10446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.759736][T10446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.988683][T12358] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2441'. [ 422.008403][T12358] netlink: 4548 bytes leftover after parsing attributes in process `syz.1.2441'. [ 422.108372][T12362] syz_tun: entered promiscuous mode [ 422.180180][T12366] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.2443'. [ 422.292486][ T5782] Bluetooth: hci3: command tx timeout [ 422.544519][T12362] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 422.564186][T12360] bridge0: entered allmulticast mode [ 422.914809][T12374] FAULT_INJECTION: forcing a failure. [ 422.914809][T12374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.950789][T12374] CPU: 1 PID: 12374 Comm: syz.0.2448 Not tainted syzkaller #0 [ 422.958288][T12374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 422.968337][T12374] Call Trace: [ 422.971607][T12374] [ 422.974541][T12374] dump_stack_lvl+0x18c/0x250 [ 422.979212][T12374] ? show_regs_print_info+0x20/0x20 [ 422.984408][T12374] ? load_image+0x420/0x420 [ 422.988909][T12374] ? __might_fault+0xaa/0x120 [ 422.993573][T12374] ? __lock_acquire+0x7d40/0x7d40 [ 422.998587][T12374] should_fail_ex+0x39d/0x4d0 [ 423.003278][T12374] _copy_from_user+0x2f/0xe0 [ 423.007896][T12374] sk_setsockopt+0x2b2/0x2bc0 [ 423.012651][T12374] ? sockopt_capable+0x60/0x60 [ 423.017418][T12374] ? aa_sk_perm+0x83c/0x970 [ 423.021917][T12374] ? __fget_files+0x28/0x4b0 [ 423.026517][T12374] ? aa_af_perm+0x330/0x330 [ 423.031016][T12374] ? __fget_files+0x28/0x4b0 [ 423.035601][T12374] ? __fget_files+0x28/0x4b0 [ 423.040207][T12374] ? aa_sock_opt_perm+0x74/0x100 [ 423.045146][T12374] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 423.050689][T12374] ? security_socket_setsockopt+0x7e/0xa0 [ 423.056414][T12374] do_sock_setsockopt+0x11b/0x1a0 [ 423.061443][T12374] __x64_sys_setsockopt+0x182/0x200 [ 423.066646][T12374] do_syscall_64+0x55/0xb0 [ 423.071061][T12374] ? clear_bhb_loop+0x40/0x90 [ 423.075735][T12374] ? clear_bhb_loop+0x40/0x90 [ 423.080408][T12374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.086302][T12374] RIP: 0033:0x7f11c4f9ce59 [ 423.090712][T12374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.110316][T12374] RSP: 002b:00007f11c5f29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 423.118728][T12374] RAX: ffffffffffffffda RBX: 00007f11c5215fa0 RCX: 00007f11c4f9ce59 [ 423.126694][T12374] RDX: 000000000000004a RSI: 0000000000000001 RDI: 0000000000000003 [ 423.134681][T12374] RBP: 00007f11c5f29090 R08: 0000000000000004 R09: 0000000000000000 [ 423.142647][T12374] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 423.150614][T12374] R13: 00007f11c5216038 R14: 00007f11c5215fa0 R15: 00007ffddee49048 [ 423.158600][T12374] [ 423.295598][T12378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2449'. [ 423.405312][T12378] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2449'. [ 424.027863][ T5770] bond0: (slave syz_tun): Releasing backup interface [ 424.084065][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 424.096668][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 424.104774][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 424.119984][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 424.133556][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 424.148456][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 424.372233][ T5782] Bluetooth: hci3: command tx timeout [ 424.433918][T12394] chnl_net:caif_netlink_parms(): no params data found [ 424.586092][T12394] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.599914][T12394] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.607666][T12394] bridge_slave_0: entered allmulticast mode [ 424.615773][T12394] bridge_slave_0: entered promiscuous mode [ 424.651785][T12394] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.660350][T12394] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.668008][T12394] bridge_slave_1: entered allmulticast mode [ 424.675980][T12394] bridge_slave_1: entered promiscuous mode [ 424.889704][T12394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.917892][T12394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.954832][T12394] team0: Port device team_slave_0 added [ 424.965002][T12420] __nla_validate_parse: 1 callbacks suppressed [ 424.965015][T12420] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2464'. [ 424.989203][T12394] team0: Port device team_slave_1 added [ 425.017745][T12420] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2464'. [ 425.028603][T12394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.036037][T12394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.062343][T12394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.077672][T12394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.089274][T12394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.142512][T12394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.167614][T12419] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2464'. [ 425.228404][T12423] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2464'. [ 425.263386][T12394] hsr_slave_0: entered promiscuous mode [ 425.283363][T12394] hsr_slave_1: entered promiscuous mode [ 425.605487][ T5782] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 425.645192][T12394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.662870][T12394] Cannot create hsr debugfs directory [ 425.685676][T12427] validate_nla: 3 callbacks suppressed [ 425.685706][T12427] netlink: 'syz.1.2466': attribute type 10 has an invalid length. [ 426.074946][T12394] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.080894][T12447] netlink: 'syz.1.2474': attribute type 29 has an invalid length. [ 426.110381][T12447] netlink: 'syz.1.2474': attribute type 29 has an invalid length. [ 426.120938][T12447] netlink: 'syz.1.2474': attribute type 29 has an invalid length. [ 426.129945][T12447] netlink: 'syz.1.2474': attribute type 29 has an invalid length. [ 426.139825][T12447] netlink: 'syz.1.2474': attribute type 29 has an invalid length. [ 426.201130][T12394] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.222432][ T5782] Bluetooth: hci0: command tx timeout [ 426.229935][T12447] IPv6: Can't replace route, no match found [ 426.313445][T12394] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.440950][T12394] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.737707][T12394] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 426.997034][T12394] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 427.030528][T12394] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 427.051461][T12394] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 427.229583][T12468] netlink: 'syz.1.2481': attribute type 2 has an invalid length. [ 427.248677][T12468] netlink: 'syz.1.2481': attribute type 1 has an invalid length. [ 427.268013][T12394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.274707][T12468] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2481'. [ 427.296975][T12472] netlink: 'syz.2.2483': attribute type 29 has an invalid length. [ 427.317408][T12394] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.327044][T12472] netlink: 'syz.2.2483': attribute type 29 has an invalid length. [ 427.353578][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.360778][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.421343][T10464] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.428520][T10464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.526621][T12394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.537920][T12394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.631363][T12479] IPv6: Can't replace route, no match found [ 427.988782][T12394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.081742][T12394] veth0_vlan: entered promiscuous mode [ 428.114461][T12394] veth1_vlan: entered promiscuous mode [ 428.187368][T12494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2489'. [ 428.235616][T12394] veth0_macvtap: entered promiscuous mode [ 428.273695][T12394] veth1_macvtap: entered promiscuous mode [ 428.292589][ T5782] Bluetooth: hci0: command tx timeout [ 428.309989][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.320686][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.331788][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.342532][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.352466][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.363075][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.373246][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.383884][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.394281][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.405187][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.415112][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.425651][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.438503][T12394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.449366][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.460537][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.475192][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.486734][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.497415][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.508471][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.518534][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.529263][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.539304][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.549936][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.559987][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.570922][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.590872][T12394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.603310][T12498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2490'. [ 428.623709][T12394] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.632514][T12394] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.641215][T12394] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.652836][T12394] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.765866][T10462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.788960][T10462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.862742][T10462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.881672][T10462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.079790][T12514] veth0_macvtap: left promiscuous mode [ 429.323997][T12511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2451'. [ 429.368806][T12524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2499'. [ 429.584936][T12532] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2503'. [ 429.719956][T12532] syzkaller0: entered promiscuous mode [ 429.743080][T12532] syzkaller0: entered allmulticast mode [ 429.821945][T12540] FAULT_INJECTION: forcing a failure. [ 429.821945][T12540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.839708][T12540] CPU: 1 PID: 12540 Comm: syz.1.2505 Not tainted syzkaller #0 [ 429.847175][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 429.857233][T12540] Call Trace: [ 429.860501][T12540] [ 429.863422][T12540] dump_stack_lvl+0x18c/0x250 [ 429.868099][T12540] ? show_regs_print_info+0x20/0x20 [ 429.873291][T12540] ? load_image+0x420/0x420 [ 429.877795][T12540] ? __might_fault+0xaa/0x120 [ 429.882460][T12540] ? __lock_acquire+0x7d40/0x7d40 [ 429.887490][T12540] should_fail_ex+0x39d/0x4d0 [ 429.892190][T12540] _copy_from_iter+0x1d9/0x12e0 [ 429.897054][T12540] ? rep_movs_alternative+0x4a/0x90 [ 429.902255][T12540] ? _copy_from_iter+0x24e/0x12e0 [ 429.907278][T12540] ? __virt_addr_valid+0x18c/0x540 [ 429.912387][T12540] ? __lock_acquire+0x7d40/0x7d40 [ 429.917405][T12540] ? copyout_mc+0x70/0x70 [ 429.921743][T12540] ? copyout_mc+0x70/0x70 [ 429.926071][T12540] ? __virt_addr_valid+0x18c/0x540 [ 429.931185][T12540] ? page_copy_sane+0x16a/0x270 [ 429.936037][T12540] copy_page_from_iter+0x7b/0x100 [ 429.941056][T12540] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 429.946880][T12540] tun_get_user+0x15db/0x3ca0 [ 429.951565][T12540] ? aa_file_perm+0x11b/0xee0 [ 429.956243][T12540] ? rcu_read_unlock+0xa0/0xa0 [ 429.961027][T12540] ? tun_get+0x1c/0x2e0 [ 429.965200][T12540] ? __lock_acquire+0x7d40/0x7d40 [ 429.970222][T12540] ? tun_get+0x1c/0x2e0 [ 429.974382][T12540] tun_chr_write_iter+0x119/0x200 [ 429.979422][T12540] vfs_write+0x46c/0x990 [ 429.983668][T12540] ? file_end_write+0x250/0x250 [ 429.988528][T12540] ? __fget_files+0x43d/0x4b0 [ 429.993209][T12540] ? __fdget_pos+0x1d8/0x330 [ 429.997795][T12540] ? ksys_write+0x75/0x260 [ 430.002209][T12540] ksys_write+0x150/0x260 [ 430.006540][T12540] ? __ia32_sys_read+0x90/0x90 [ 430.011301][T12540] ? lockdep_hardirqs_on+0x98/0x150 [ 430.016506][T12540] do_syscall_64+0x55/0xb0 [ 430.020913][T12540] ? clear_bhb_loop+0x40/0x90 [ 430.025581][T12540] ? clear_bhb_loop+0x40/0x90 [ 430.030257][T12540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.036150][T12540] RIP: 0033:0x7fc21479ce59 [ 430.040567][T12540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.060169][T12540] RSP: 002b:00007fc2156f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 430.068612][T12540] RAX: ffffffffffffffda RBX: 00007fc214a15fa0 RCX: 00007fc21479ce59 [ 430.076594][T12540] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 430.084557][T12540] RBP: 00007fc2156f9090 R08: 0000000000000000 R09: 0000000000000000 [ 430.092520][T12540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.100484][T12540] R13: 00007fc214a16038 R14: 00007fc214a15fa0 R15: 00007fff5488a9a8 [ 430.108463][T12540] [ 430.382729][ T5782] Bluetooth: hci0: command tx timeout [ 431.851468][T12547] validate_nla: 10 callbacks suppressed [ 431.851482][T12547] netlink: 'syz.1.2507': attribute type 10 has an invalid length. [ 431.870116][T12554] netlink: 'syz.0.2510': attribute type 10 has an invalid length. [ 432.069011][T12565] netlink: 'syz.1.2511': attribute type 19 has an invalid length. [ 432.085048][T12565] __nla_validate_parse: 1 callbacks suppressed [ 432.085062][T12565] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2511'. [ 432.256116][T12574] netlink: 'syz.2.2514': attribute type 21 has an invalid length. [ 432.287002][T12571] netlink: 'syz.0.2513': attribute type 19 has an invalid length. [ 432.312899][T12571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2513'. [ 432.463810][ T5782] Bluetooth: hci0: command tx timeout [ 432.669253][T12587] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2519'. [ 432.728214][T12586] netlink: 'syz.1.2518': attribute type 19 has an invalid length. [ 432.738857][T12586] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2518'. [ 432.883226][T12589] netlink: 'syz.0.2522': attribute type 10 has an invalid length. [ 433.067866][T12598] netlink: 'syz.3.2524': attribute type 2 has an invalid length. [ 433.077642][T12598] netlink: 'syz.3.2524': attribute type 1 has an invalid length. [ 433.086579][T12598] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2524'. [ 433.204756][T12600] netlink: 'syz.1.2525': attribute type 19 has an invalid length. [ 433.214517][T12600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2525'. [ 436.514996][T12617] FAULT_INJECTION: forcing a failure. [ 436.514996][T12617] name failslab, interval 1, probability 0, space 0, times 0 [ 436.528081][T12617] CPU: 0 PID: 12617 Comm: syz.2.2530 Not tainted syzkaller #0 [ 436.535559][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.545624][T12617] Call Trace: [ 436.548934][T12617] [ 436.551874][T12617] dump_stack_lvl+0x18c/0x250 [ 436.556567][T12617] ? show_regs_print_info+0x20/0x20 [ 436.561768][T12617] ? load_image+0x420/0x420 [ 436.566271][T12617] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 436.572297][T12617] ? lock_chain_count+0x20/0x20 [ 436.577169][T12617] should_fail_ex+0x39d/0x4d0 [ 436.581912][T12617] should_failslab+0x9/0x20 [ 436.586429][T12617] slab_pre_alloc_hook+0x59/0x310 [ 436.591465][T12617] ? _get_random_bytes+0x250/0x250 [ 436.596583][T12617] ? ip_setup_cork+0x22e/0x860 [ 436.601359][T12617] __kmem_cache_alloc_node+0x53/0x250 [ 436.606745][T12617] ? ip_setup_cork+0x22e/0x860 [ 436.611527][T12617] kmalloc_trace+0x2a/0xe0 [ 436.615956][T12617] ip_setup_cork+0x22e/0x860 [ 436.620558][T12617] ip_append_data+0x135/0x180 [ 436.625249][T12617] ? ip_route_input+0x510/0x510 [ 436.630110][T12617] icmp_push_reply+0x86/0x400 [ 436.634788][T12617] ? rcu_is_watching+0x15/0xb0 [ 436.639549][T12617] ? __icmp_send+0x216/0x1420 [ 436.644226][T12617] __icmp_send+0x10b5/0x1420 [ 436.648820][T12617] ? __icmp_send+0x216/0x1420 [ 436.653498][T12617] ? icmp_out_count+0x90/0x90 [ 436.658197][T12617] ? __asan_memset+0x22/0x40 [ 436.662788][T12617] ? xfrm_lookup_with_ifid+0x17b2/0x1aa0 [ 436.668427][T12617] ? ipv4_link_failure+0x3cb/0xa40 [ 436.673530][T12617] ipv4_link_failure+0x657/0xa40 [ 436.678493][T12617] ? ipv4_negative_advice+0x1a0/0x1a0 [ 436.683860][T12617] ? dst_release+0x79/0x1a0 [ 436.688362][T12617] ? ipv4_negative_advice+0x1a0/0x1a0 [ 436.693739][T12617] vti_tunnel_xmit+0xe59/0x1690 [ 436.698596][T12617] ? vti_tunnel_init+0x110/0x110 [ 436.703545][T12617] dev_hard_start_xmit+0x246/0x740 [ 436.708670][T12617] __dev_queue_xmit+0x19a3/0x3660 [ 436.713728][T12617] ? __dev_queue_xmit+0x265/0x3660 [ 436.718834][T12617] ? lockdep_hardirqs_on+0x98/0x150 [ 436.724034][T12617] ? read_seqbegin+0x1c8/0x270 [ 436.728806][T12617] ? __nf_conntrack_confirm+0xb2/0xf70 [ 436.734262][T12617] ? neigh_event_send+0x110/0x110 [ 436.739283][T12617] ? netdev_core_pick_tx+0x340/0x340 [ 436.744575][T12617] ? neigh_connected_output+0x3b0/0x450 [ 436.750132][T12617] ? ip_finish_output2+0x457/0x11e0 [ 436.755326][T12617] ip_finish_output2+0xd3a/0x11e0 [ 436.760348][T12617] ? ip_finish_output2+0x457/0x11e0 [ 436.765545][T12617] ? nf_hook+0xa2/0x390 [ 436.769735][T12617] ? __ip_local_out+0x5f0/0x5f0 [ 436.774580][T12617] ? ip_fragment+0x210/0x210 [ 436.779164][T12617] ? ip_mc_finish_output+0x250/0x250 [ 436.784443][T12617] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 436.789293][T12617] ? ip_finish_output+0x3ef/0x4c0 [ 436.794318][T12617] ip_output+0x2a1/0x3b0 [ 436.798559][T12617] ? ip_output+0x60/0x3b0 [ 436.802885][T12617] ip_send_skb+0x12f/0x1d0 [ 436.807304][T12617] udp_send_skb+0xa37/0x13a0 [ 436.811911][T12617] udp_sendmsg+0x1b16/0x23b0 [ 436.816511][T12617] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 436.821360][T12617] ? udp_cmsg_send+0x350/0x350 [ 436.826135][T12617] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 436.832116][T12617] ? lock_chain_count+0x20/0x20 [ 436.836969][T12617] ? inet_sendmsg+0x14b/0x2f0 [ 436.841651][T12617] ? __local_bh_enable_ip+0x13a/0x1c0 [ 436.847017][T12617] ? _local_bh_enable+0xa0/0xa0 [ 436.851867][T12617] ? inet_sendmsg+0x14b/0x2f0 [ 436.856548][T12617] ? inet_sendmsg+0x14b/0x2f0 [ 436.861250][T12617] ? inet_send_prepare+0x260/0x260 [ 436.866370][T12617] ____sys_sendmsg+0x5ba/0x960 [ 436.871135][T12617] ? __lock_acquire+0x7d40/0x7d40 [ 436.876161][T12617] ? __sys_sendmsg_sock+0x30/0x30 [ 436.881178][T12617] ? __import_iovec+0x5f2/0x850 [ 436.886032][T12617] ? import_iovec+0x73/0xa0 [ 436.890552][T12617] ___sys_sendmsg+0x2a6/0x360 [ 436.895224][T12617] ? get_pid_task+0x20/0x1e0 [ 436.899834][T12617] ? __sys_sendmsg+0x2a0/0x2a0 [ 436.904613][T12617] ? __lock_acquire+0x7d40/0x7d40 [ 436.909658][T12617] __se_sys_sendmsg+0x1c2/0x2b0 [ 436.914549][T12617] ? __x64_sys_sendmsg+0x80/0x80 [ 436.919536][T12617] ? lockdep_hardirqs_on+0x98/0x150 [ 436.924739][T12617] do_syscall_64+0x55/0xb0 [ 436.929151][T12617] ? clear_bhb_loop+0x40/0x90 [ 436.933820][T12617] ? clear_bhb_loop+0x40/0x90 [ 436.938494][T12617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.944391][T12617] RIP: 0033:0x7fb42a19ce59 [ 436.948798][T12617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.968400][T12617] RSP: 002b:00007fb42af92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.976812][T12617] RAX: ffffffffffffffda RBX: 00007fb42a415fa0 RCX: 00007fb42a19ce59 [ 436.984817][T12617] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000007 [ 436.992781][T12617] RBP: 00007fb42af92090 R08: 0000000000000000 R09: 0000000000000000 [ 437.000745][T12617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 437.008713][T12617] R13: 00007fb42a416038 R14: 00007fb42a415fa0 R15: 00007ffe9bb3cee8 [ 437.016693][T12617] [ 437.288276][T12627] netlink: 'syz.2.2535': attribute type 10 has an invalid length. [ 437.296956][T12622] netlink: 'syz.3.2533': attribute type 19 has an invalid length. [ 437.308628][T12622] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2533'. [ 437.651239][T12638] netlink: 'syz.0.2538': attribute type 21 has an invalid length. [ 437.685948][T12640] netlink: 'syz.2.2540': attribute type 2 has an invalid length. [ 437.697264][T12640] netlink: 'syz.2.2540': attribute type 1 has an invalid length. [ 437.714523][T12640] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2540'. [ 438.338222][T12647] netlink: 'syz.3.2543': attribute type 19 has an invalid length. [ 438.347125][T12647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2543'. [ 438.688170][T10464] hsr_slave_0: left promiscuous mode [ 438.699119][T10464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.712265][T10464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.730864][T10464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.743409][T10464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.776484][T10464] veth1_macvtap: left promiscuous mode [ 438.792188][T10464] veth0_vlan: left promiscuous mode [ 438.953046][T12667] FAULT_INJECTION: forcing a failure. [ 438.953046][T12667] name failslab, interval 1, probability 0, space 0, times 0 [ 438.967806][T12667] CPU: 1 PID: 12667 Comm: syz.0.2551 Not tainted syzkaller #0 [ 438.975322][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 438.985419][T12667] Call Trace: [ 438.988732][T12667] [ 438.991670][T12667] dump_stack_lvl+0x18c/0x250 [ 438.996360][T12667] ? show_regs_print_info+0x20/0x20 [ 439.001573][T12667] ? load_image+0x420/0x420 [ 439.006087][T12667] ? __might_sleep+0xe0/0xe0 [ 439.010687][T12667] ? __lock_acquire+0x7d40/0x7d40 [ 439.015729][T12667] should_fail_ex+0x39d/0x4d0 [ 439.020457][T12667] should_failslab+0x9/0x20 [ 439.024984][T12667] slab_pre_alloc_hook+0x59/0x310 [ 439.030053][T12667] ? kernfs_fop_write_iter+0x159/0x520 [ 439.035536][T12667] ? kernfs_fop_write_iter+0x159/0x520 [ 439.041018][T12667] __kmem_cache_alloc_node+0x53/0x250 [ 439.046425][T12667] ? kernfs_fop_write_iter+0x159/0x520 [ 439.051926][T12667] __kmalloc+0xa4/0x230 [ 439.056097][T12667] kernfs_fop_write_iter+0x159/0x520 [ 439.061412][T12667] vfs_write+0x46c/0x990 [ 439.065675][T12667] ? file_end_write+0x250/0x250 [ 439.070537][T12667] ? __fget_files+0x43d/0x4b0 [ 439.075264][T12667] ? __fdget_pos+0x2a3/0x330 [ 439.079887][T12667] ? ksys_write+0x75/0x260 [ 439.084334][T12667] ksys_write+0x150/0x260 [ 439.088677][T12667] ? __ia32_sys_read+0x90/0x90 [ 439.093453][T12667] ? lockdep_hardirqs_on+0x98/0x150 [ 439.098677][T12667] do_syscall_64+0x55/0xb0 [ 439.103119][T12667] ? clear_bhb_loop+0x40/0x90 [ 439.107797][T12667] ? clear_bhb_loop+0x40/0x90 [ 439.112474][T12667] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.118370][T12667] RIP: 0033:0x7f11c4f9ce59 [ 439.122828][T12667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.142457][T12667] RSP: 002b:00007f11c5f29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.150878][T12667] RAX: ffffffffffffffda RBX: 00007f11c5215fa0 RCX: 00007f11c4f9ce59 [ 439.158858][T12667] RDX: 0000000000000009 RSI: 0000200000001100 RDI: 000000000000000e [ 439.166832][T12667] RBP: 00007f11c5f29090 R08: 0000000000000000 R09: 0000000000000000 [ 439.174817][T12667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.182822][T12667] R13: 00007f11c5216038 R14: 00007f11c5215fa0 R15: 00007ffddee49048 [ 439.190840][T12667] [ 439.746480][T10464] team_slave_1 (unregistering): left promiscuous mode [ 439.753868][T10464] team_slave_1 (unregistering): left allmulticast mode [ 439.763748][T10464] team0 (unregistering): Port device team_slave_1 removed [ 440.057945][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.064410][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.209893][T12658] netlink: 'syz.1.2548': attribute type 10 has an invalid length. [ 440.224929][T12658] veth0_macvtap: left promiscuous mode [ 440.548561][T12689] netlink: 'syz.2.2559': attribute type 21 has an invalid length. [ 440.611514][T12695] netlink: 'syz.1.2560': attribute type 19 has an invalid length. [ 440.642227][T12695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2560'. [ 441.045824][T12705] syz.0.2567[12705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 441.046092][T12705] syz.0.2567[12705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 441.086921][T12705] netlink: 'syz.0.2567': attribute type 3 has an invalid length. [ 441.115977][T12705] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2567'. [ 441.133953][T12703] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2566'. [ 441.145979][T12705] bridge0: port 3(hsr_slave_1) entered blocking state [ 441.162248][T12705] bridge0: port 3(hsr_slave_1) entered disabled state [ 441.175017][T12705] hsr_slave_1: entered allmulticast mode [ 441.188236][T12705] hsr_slave_1: left allmulticast mode [ 441.888682][T12723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2574'. [ 442.758737][T12751] bridge0: port 2(team0) entered blocking state [ 442.768583][T12751] bridge0: port 2(team0) entered disabled state [ 442.778045][T12751] team0: entered allmulticast mode [ 442.783862][T12751] team_slave_1: entered allmulticast mode [ 442.790152][T12751] geneve1: entered allmulticast mode [ 442.807314][T12752] FAULT_INJECTION: forcing a failure. [ 442.807314][T12752] name failslab, interval 1, probability 0, space 0, times 0 [ 442.835795][T12751] team0: entered promiscuous mode [ 442.841392][T12751] team_slave_1: entered promiscuous mode [ 442.847818][T12752] CPU: 0 PID: 12752 Comm: syz.2.2585 Not tainted syzkaller #0 [ 442.855305][T12752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 442.865384][T12752] Call Trace: [ 442.868672][T12752] [ 442.871614][T12752] dump_stack_lvl+0x18c/0x250 [ 442.876323][T12752] ? show_regs_print_info+0x20/0x20 [ 442.881539][T12752] ? load_image+0x420/0x420 [ 442.886066][T12752] ? perf_trace_lock+0xfc/0x3b0 [ 442.890959][T12752] should_fail_ex+0x39d/0x4d0 [ 442.895681][T12752] should_failslab+0x9/0x20 [ 442.900202][T12752] slab_pre_alloc_hook+0x59/0x310 [ 442.905253][T12752] ? ___neigh_create+0x6d2/0x2440 [ 442.910302][T12752] ? ___neigh_create+0x6d2/0x2440 [ 442.915347][T12752] __kmem_cache_alloc_node+0x53/0x250 [ 442.920738][T12752] ? ___neigh_create+0x6d2/0x2440 [ 442.925776][T12752] __kmalloc+0xa4/0x230 [ 442.929946][T12752] ___neigh_create+0x6d2/0x2440 [ 442.934817][T12752] ? __ipv6_neigh_lookup_noref+0x5b2/0x7d0 [ 442.940641][T12752] ip6_finish_output2+0x1581/0x1630 [ 442.945848][T12752] ? ip6_finish_output2+0x645/0x1630 [ 442.951138][T12752] ? ip6_mtu+0x7d/0x3f0 [ 442.955320][T12752] ? nf_hook+0x390/0x390 [ 442.959577][T12752] ? ip6_finish_output+0x57b/0x820 [ 442.964697][T12752] ? ip6_send_skb+0x10f/0x380 [ 442.969378][T12752] ip6_send_skb+0x1d5/0x380 [ 442.973890][T12752] ping_v6_sendmsg+0xf2e/0x11f0 [ 442.978753][T12752] ? ping_v6_pre_connect+0x30/0x30 [ 442.983898][T12752] ? perf_trace_preemptirq_template+0xac/0x330 [ 442.990069][T12752] ? inet_sendmsg+0x14b/0x2f0 [ 442.994755][T12752] ? __local_bh_enable_ip+0x13a/0x1c0 [ 443.000135][T12752] ? lockdep_hardirqs_on+0x98/0x150 [ 443.005344][T12752] ? _local_bh_enable+0xa0/0xa0 [ 443.010198][T12752] ? do_raw_spin_unlock+0x121/0x230 [ 443.015398][T12752] ? inet_sendmsg+0x14b/0x2f0 [ 443.020080][T12752] ? inet_sendmsg+0x14b/0x2f0 [ 443.024760][T12752] ? inet_send_prepare+0x260/0x260 [ 443.029878][T12752] ____sys_sendmsg+0x5ba/0x960 [ 443.034645][T12752] ? __lock_acquire+0x7d40/0x7d40 [ 443.039674][T12752] ? __asan_memset+0x22/0x40 [ 443.044267][T12752] ? __sys_sendmsg_sock+0x30/0x30 [ 443.049292][T12752] ? __import_iovec+0x3fa/0x850 [ 443.054149][T12752] ? import_iovec+0x73/0xa0 [ 443.058667][T12752] ___sys_sendmsg+0x2a6/0x360 [ 443.063351][T12752] ? __sys_sendmsg+0x2a0/0x2a0 [ 443.068138][T12752] ? __lock_acquire+0x7d40/0x7d40 [ 443.073193][T12752] __se_sys_sendmsg+0x1c2/0x2b0 [ 443.078047][T12752] ? __x64_sys_sendmsg+0x80/0x80 [ 443.083029][T12752] ? lockdep_hardirqs_on+0x98/0x150 [ 443.088234][T12752] do_syscall_64+0x55/0xb0 [ 443.092658][T12752] ? clear_bhb_loop+0x40/0x90 [ 443.097331][T12752] ? clear_bhb_loop+0x40/0x90 [ 443.102005][T12752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.107926][T12752] RIP: 0033:0x7fb42a19ce59 [ 443.112341][T12752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.131988][T12752] RSP: 002b:00007fb42af71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.140414][T12752] RAX: ffffffffffffffda RBX: 00007fb42a416090 RCX: 00007fb42a19ce59 [ 443.148383][T12752] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 000000000000000c [ 443.156352][T12752] RBP: 00007fb42af71090 R08: 0000000000000000 R09: 0000000000000000 [ 443.164323][T12752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.172291][T12752] R13: 00007fb42a416128 R14: 00007fb42a416090 R15: 00007ffe9bb3cee8 [ 443.180277][T12752] [ 443.195253][T12751] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 443.203833][T12751] geneve1: entered promiscuous mode [ 443.444409][T12761] validate_nla: 3 callbacks suppressed [ 443.444422][T12761] netlink: 'syz.1.2587': attribute type 10 has an invalid length. [ 443.545790][T12761] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.553536][T12761] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.622854][T12761] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.630085][T12761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.637628][T12761] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.644827][T12761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.733559][T12761] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 443.751524][T12762] netlink: 'syz.0.2588': attribute type 19 has an invalid length. [ 443.771501][T12762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2588'. [ 443.841240][T12764] netlink: 'syz.3.2589': attribute type 29 has an invalid length. [ 443.860756][T12764] netlink: 'syz.3.2589': attribute type 29 has an invalid length. [ 443.869912][T12765] netlink: 'syz.3.2589': attribute type 29 has an invalid length. [ 443.880234][T12767] netlink: 'syz.2.2590': attribute type 10 has an invalid length. [ 444.036173][T12775] netlink: 'syz.3.2592': attribute type 10 has an invalid length. [ 444.063336][T12775] FAULT_INJECTION: forcing a failure. [ 444.063336][T12775] name failslab, interval 1, probability 0, space 0, times 0 [ 444.076002][T12775] CPU: 1 PID: 12775 Comm: syz.3.2592 Not tainted syzkaller #0 [ 444.083473][T12775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.093541][T12775] Call Trace: [ 444.096832][T12775] [ 444.099777][T12775] dump_stack_lvl+0x18c/0x250 [ 444.104474][T12775] ? show_regs_print_info+0x20/0x20 [ 444.109687][T12775] ? load_image+0x420/0x420 [ 444.114200][T12775] ? add_lock_to_list+0x191/0x280 [ 444.119258][T12775] should_fail_ex+0x39d/0x4d0 [ 444.123966][T12775] should_failslab+0x9/0x20 [ 444.128485][T12775] slab_pre_alloc_hook+0x59/0x310 [ 444.133532][T12775] ? switchdev_deferred_enqueue+0x2d/0x240 [ 444.139357][T12775] ? switchdev_deferred_enqueue+0x2d/0x240 [ 444.145180][T12775] __kmem_cache_alloc_node+0x53/0x250 [ 444.150581][T12775] ? switchdev_deferred_enqueue+0x2d/0x240 [ 444.156423][T12775] ? switchdev_deferred_enqueue+0x240/0x240 [ 444.162328][T12775] __kmalloc+0xa4/0x230 [ 444.166508][T12775] switchdev_deferred_enqueue+0x2d/0x240 [ 444.172164][T12775] switchdev_port_attr_set+0xf9/0x2d0 [ 444.177554][T12775] ? switchdev_deferred_process+0x2a0/0x2a0 [ 444.183465][T12775] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 444.189467][T12775] ? mark_lock+0x94/0x320 [ 444.193815][T12775] br_set_state+0x36f/0x710 [ 444.198341][T12775] ? br_ioctl_stub+0xd50/0xd50 [ 444.203122][T12775] ? do_raw_spin_lock+0x11f/0x2c0 [ 444.208165][T12775] ? __rwlock_init+0x150/0x150 [ 444.212949][T12775] ? br_become_designated_port+0x20/0x250 [ 444.218710][T12775] br_stp_disable_port+0x76/0x1c0 [ 444.223762][T12775] br_stp_disable_bridge+0x81/0x150 [ 444.228977][T12775] br_dev_stop+0x2d/0x180 [ 444.233326][T12775] ? br_dev_open+0x140/0x140 [ 444.237936][T12775] __dev_close_many+0x1d5/0x2b0 [ 444.242806][T12775] ? dev_close_many+0x410/0x410 [ 444.247682][T12775] __dev_change_flags+0x2dc/0x6a0 [ 444.252723][T12775] ? vprintk_emit+0x53d/0x610 [ 444.257413][T12775] ? dev_get_flags+0x1c0/0x1c0 [ 444.262187][T12775] ? printk_sprint+0x460/0x460 [ 444.266969][T12775] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 444.272880][T12775] ? _raw_spin_unlock+0x40/0x40 [ 444.277744][T12775] dev_change_flags+0x88/0x1a0 [ 444.282516][T12775] do_setlink+0xc58/0x4130 [ 444.286937][T12775] ? arch_stack_walk+0x160/0x190 [ 444.291873][T12775] ? load_image+0x420/0x420 [ 444.296386][T12775] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 444.302534][T12775] ? stack_trace_save+0xaa/0x100 [ 444.307472][T12775] ? __nla_validate_parse+0x2522/0x2ea0 [ 444.313028][T12775] ? __nla_validate+0x50/0x50 [ 444.317720][T12775] ? validate_linkmsg+0x719/0x910 [ 444.322743][T12775] rtnl_newlink+0x17da/0x20a0 [ 444.327425][T12775] ? rtnl_newlink+0x511/0x20a0 [ 444.332208][T12775] ? rtnl_setlink+0x4e0/0x4e0 [ 444.336894][T12775] ? trace_raw_output_contention_end+0xd0/0xd0 [ 444.343085][T12775] ? rcu_is_watching+0x15/0xb0 [ 444.347847][T12775] ? trace_contention_end+0x39/0xe0 [ 444.353046][T12775] ? __mutex_lock+0x315/0xcc0 [ 444.357738][T12775] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 444.362858][T12775] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 444.367975][T12775] ? rtnl_setlink+0x4e0/0x4e0 [ 444.372665][T12775] rtnetlink_rcv_msg+0x869/0xfa0 [ 444.377607][T12775] ? lockdep_hardirqs_on+0x98/0x150 [ 444.382805][T12775] ? rtnetlink_bind+0x80/0x80 [ 444.387485][T12775] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 444.393462][T12775] ? lock_chain_count+0x20/0x20 [ 444.398312][T12775] ? __local_bh_enable_ip+0x13a/0x1c0 [ 444.403677][T12775] ? lockdep_hardirqs_on+0x98/0x150 [ 444.408876][T12775] ? __local_bh_enable_ip+0x13a/0x1c0 [ 444.414245][T12775] ? _local_bh_enable+0xa0/0xa0 [ 444.419118][T12775] ? __dev_queue_xmit+0x265/0x3660 [ 444.424225][T12775] ? __dev_queue_xmit+0x265/0x3660 [ 444.429338][T12775] ? __dev_queue_xmit+0x1b2c/0x3660 [ 444.434545][T12775] ? __dev_queue_xmit+0x265/0x3660 [ 444.439678][T12775] ? ref_tracker_free+0x690/0x840 [ 444.444708][T12775] netlink_rcv_skb+0x241/0x4d0 [ 444.449468][T12775] ? rtnetlink_bind+0x80/0x80 [ 444.454142][T12775] ? netlink_ack+0x1180/0x1180 [ 444.458909][T12775] ? __lock_acquire+0x7d40/0x7d40 [ 444.463937][T12775] ? netlink_deliver_tap+0x2e/0x1b0 [ 444.469130][T12775] netlink_unicast+0x751/0x8d0 [ 444.473904][T12775] netlink_sendmsg+0x8d0/0xbf0 [ 444.478671][T12775] ? netlink_getsockopt+0x590/0x590 [ 444.483867][T12775] ? aa_sock_msg_perm+0x94/0x150 [ 444.488808][T12775] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 444.494092][T12775] ? security_socket_sendmsg+0x80/0xa0 [ 444.499544][T12775] ? netlink_getsockopt+0x590/0x590 [ 444.504736][T12775] ____sys_sendmsg+0x5ba/0x960 [ 444.509510][T12775] ? __asan_memset+0x22/0x40 [ 444.514095][T12775] ? __sys_sendmsg_sock+0x30/0x30 [ 444.519122][T12775] ? __import_iovec+0x5f2/0x850 [ 444.523976][T12775] ? import_iovec+0x73/0xa0 [ 444.528475][T12775] ___sys_sendmsg+0x2a6/0x360 [ 444.533156][T12775] ? get_pid_task+0x20/0x1e0 [ 444.537762][T12775] ? __sys_sendmsg+0x2a0/0x2a0 [ 444.542552][T12775] ? __lock_acquire+0x7d40/0x7d40 [ 444.547627][T12775] __se_sys_sendmsg+0x1c2/0x2b0 [ 444.552479][T12775] ? __x64_sys_sendmsg+0x80/0x80 [ 444.557439][T12775] ? lockdep_hardirqs_on+0x98/0x150 [ 444.562637][T12775] do_syscall_64+0x55/0xb0 [ 444.567056][T12775] ? clear_bhb_loop+0x40/0x90 [ 444.571728][T12775] ? clear_bhb_loop+0x40/0x90 [ 444.576400][T12775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.582319][T12775] RIP: 0033:0x7fdd95f9ce59 [ 444.586729][T12775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.606327][T12775] RSP: 002b:00007fdd96e84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.614739][T12775] RAX: ffffffffffffffda RBX: 00007fdd96215fa0 RCX: 00007fdd95f9ce59 [ 444.622740][T12775] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 444.630704][T12775] RBP: 00007fdd96e84090 R08: 0000000000000000 R09: 0000000000000000 [ 444.638672][T12775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.646634][T12775] R13: 00007fdd96216038 R14: 00007fdd96215fa0 R15: 00007fffa9309938 [ 444.654638][T12775] [ 444.657775][T12775] bridge0: error setting offload STP state on port 2(bridge_slave_1) [ 444.666464][T12775] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.771297][T12775] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.778536][T12775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.786079][T12775] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.793279][T12775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.818046][T12775] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 444.835259][T12778] bridge0: port 3(team0) entered blocking state [ 444.863160][T12778] bridge0: port 3(team0) entered disabled state [ 444.892273][T12778] team0: entered allmulticast mode [ 444.901752][T12778] team_slave_0: entered allmulticast mode [ 444.914307][T12778] team_slave_1: entered allmulticast mode [ 444.962858][T12778] team0: entered promiscuous mode [ 444.969241][T12778] team_slave_0: entered promiscuous mode [ 444.992751][T12778] team_slave_1: entered promiscuous mode [ 445.017124][T12778] bridge0: port 3(team0) entered blocking state [ 445.023977][T12778] bridge0: port 3(team0) entered forwarding state [ 445.034442][T12780] netlink: 'syz.0.2593': attribute type 10 has an invalid length. [ 445.105528][T12789] netlink: 'syz.2.2598': attribute type 10 has an invalid length. [ 445.114519][T12789] bridge0: left allmulticast mode [ 445.127593][T12790] netlink: 'syz.2.2598': attribute type 10 has an invalid length. [ 445.184464][T12794] FAULT_INJECTION: forcing a failure. [ 445.184464][T12794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.214956][T12794] CPU: 1 PID: 12794 Comm: syz.1.2599 Not tainted syzkaller #0 [ 445.222456][T12794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 445.232525][T12794] Call Trace: [ 445.235818][T12794] [ 445.238763][T12794] dump_stack_lvl+0x18c/0x250 [ 445.243460][T12794] ? show_regs_print_info+0x20/0x20 [ 445.248680][T12794] ? load_image+0x420/0x420 [ 445.253213][T12794] ? __might_fault+0xaa/0x120 [ 445.257902][T12794] ? __lock_acquire+0x7d40/0x7d40 [ 445.262947][T12794] should_fail_ex+0x39d/0x4d0 [ 445.267653][T12794] _copy_from_user+0x2f/0xe0 [ 445.272304][T12794] kstrtouint_from_user+0xde/0x170 [ 445.277432][T12794] ? kstrtol_from_user+0x190/0x190 [ 445.282571][T12794] proc_fail_nth_write+0x8f/0x250 [ 445.287643][T12794] ? proc_fail_nth_read+0x260/0x260 [ 445.292864][T12794] ? proc_fail_nth_read+0x260/0x260 [ 445.298098][T12794] vfs_write+0x296/0x990 [ 445.302351][T12794] ? file_end_write+0x250/0x250 [ 445.307202][T12794] ? __fget_files+0x28/0x4b0 [ 445.311788][T12794] ? __fget_files+0x28/0x4b0 [ 445.316379][T12794] ? __fget_files+0x43d/0x4b0 [ 445.321086][T12794] ? __fdget_pos+0x2a3/0x330 [ 445.325675][T12794] ? ksys_write+0x75/0x260 [ 445.330095][T12794] ksys_write+0x150/0x260 [ 445.334426][T12794] ? __ia32_sys_read+0x90/0x90 [ 445.339192][T12794] ? lockdep_hardirqs_on+0x98/0x150 [ 445.344390][T12794] do_syscall_64+0x55/0xb0 [ 445.348798][T12794] ? clear_bhb_loop+0x40/0x90 [ 445.353468][T12794] ? clear_bhb_loop+0x40/0x90 [ 445.358136][T12794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.364027][T12794] RIP: 0033:0x7fc21475d68e [ 445.368436][T12794] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 445.388039][T12794] RSP: 002b:00007fc2156f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.396448][T12794] RAX: ffffffffffffffda RBX: 00007fc2156f96c0 RCX: 00007fc21475d68e [ 445.404413][T12794] RDX: 0000000000000001 RSI: 00007fc2156f90a0 RDI: 000000000000000c [ 445.412376][T12794] RBP: 00007fc2156f9090 R08: 0000000000000000 R09: 0000000000000000 [ 445.420346][T12794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.428311][T12794] R13: 00007fc214a16038 R14: 00007fc214a15fa0 R15: 00007fff5488a9a8 [ 445.436290][T12794] [ 446.069832][T12822] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2611'. [ 446.995242][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2623'. [ 447.012624][T12855] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2623'. [ 447.056711][T12855] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 447.064122][T12855] syzkaller1: Linktype set failed because interface is up [ 447.082729][T12855] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2623'. [ 447.083256][ T786] syzkaller1: tun_net_xmit 90 [ 447.094079][T12855] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 447.594333][ T786] syzkaller1: tun_net_xmit 90 [ 447.631282][T10446] syzkaller1: tun_net_xmit 86 [ 448.511429][T12885] FAULT_INJECTION: forcing a failure. [ 448.511429][T12885] name failslab, interval 1, probability 0, space 0, times 0 [ 448.533691][T12885] CPU: 0 PID: 12885 Comm: syz.0.2634 Not tainted syzkaller #0 [ 448.541205][T12885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 448.551276][T12885] Call Trace: [ 448.554568][T12885] [ 448.557530][T12885] dump_stack_lvl+0x18c/0x250 [ 448.562226][T12885] ? show_regs_print_info+0x20/0x20 [ 448.567436][T12885] ? load_image+0x420/0x420 [ 448.571952][T12885] ? __might_sleep+0xe0/0xe0 [ 448.576558][T12885] ? __lock_acquire+0x7d40/0x7d40 [ 448.581613][T12885] should_fail_ex+0x39d/0x4d0 [ 448.586315][T12885] should_failslab+0x9/0x20 [ 448.590832][T12885] slab_pre_alloc_hook+0x59/0x310 [ 448.595885][T12885] ? kvmalloc_node+0x70/0x180 [ 448.600598][T12885] ? kvmalloc_node+0x70/0x180 [ 448.605290][T12885] __kmem_cache_alloc_node+0x53/0x250 [ 448.610687][T12885] ? kvmalloc_node+0x70/0x180 [ 448.615376][T12885] __kmalloc_node+0xa4/0x230 [ 448.619986][T12885] kvmalloc_node+0x70/0x180 [ 448.624507][T12885] page_pool_create+0x1eb/0x5c0 [ 448.629385][T12885] bpf_test_run_xdp_live+0x203/0x1b20 [ 448.634783][T12885] ? 0xffffffffa00044c0 [ 448.638950][T12885] ? 0xffffffffa00044c0 [ 448.643122][T12885] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 448.649036][T12885] ? 0xffffffffa00044c0 [ 448.653207][T12885] ? xdp_convert_md_to_buff+0x330/0x330 [ 448.658801][T12885] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 448.665059][T12885] ? _copy_from_user+0xa5/0xe0 [ 448.669862][T12885] ? bpf_test_init+0x119/0x140 [ 448.674643][T12885] ? xdp_convert_md_to_buff+0x5b/0x330 [ 448.680119][T12885] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 448.685524][T12885] ? dev_put+0x80/0x80 [ 448.689634][T12885] ? dev_put+0x80/0x80 [ 448.693727][T12885] bpf_prog_test_run+0x321/0x390 [ 448.698680][T12885] __sys_bpf+0x49d/0x890 [ 448.702939][T12885] ? bpf_link_show_fdinfo+0x390/0x390 [ 448.708339][T12885] ? lock_chain_count+0x20/0x20 [ 448.713203][T12885] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 448.719214][T12885] __x64_sys_bpf+0x7c/0x90 [ 448.723651][T12885] do_syscall_64+0x55/0xb0 [ 448.728072][T12885] ? clear_bhb_loop+0x40/0x90 [ 448.732752][T12885] ? clear_bhb_loop+0x40/0x90 [ 448.737451][T12885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.743364][T12885] RIP: 0033:0x7f11c4f9ce59 [ 448.747789][T12885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.767397][T12885] RSP: 002b:00007f11c5f29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 448.775817][T12885] RAX: ffffffffffffffda RBX: 00007f11c5215fa0 RCX: 00007f11c4f9ce59 [ 448.783802][T12885] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 448.791774][T12885] RBP: 00007f11c5f29090 R08: 0000000000000000 R09: 0000000000000000 [ 448.799732][T12885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.807690][T12885] R13: 00007f11c5216038 R14: 00007f11c5215fa0 R15: 00007ffddee49048 [ 448.815658][T12885] [ 448.828677][T12885] page_pool_create() gave up with errno -12 [ 449.371551][T12905] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2640'. [ 449.910258][T12911] validate_nla: 4 callbacks suppressed [ 449.910379][T12911] netlink: 'syz.1.2643': attribute type 19 has an invalid length. [ 449.926387][T12911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2643'. [ 450.442435][T12925] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2649'. [ 450.976315][T12934] netlink: 'syz.1.2653': attribute type 19 has an invalid length. [ 451.004397][T12934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2653'. [ 451.170767][T12941] bridge0: port 3(team0) entered blocking state [ 451.183231][T12941] bridge0: port 3(team0) entered disabled state [ 451.202347][T12941] team0: entered allmulticast mode [ 451.207505][T12941] team_slave_0: entered allmulticast mode [ 451.234431][T12941] team_slave_1: entered allmulticast mode [ 451.270035][T12941] team0: entered promiscuous mode [ 451.290435][T12941] team_slave_0: entered promiscuous mode [ 451.304712][T12941] team_slave_1: entered promiscuous mode [ 451.323047][T12941] bridge0: port 3(team0) entered blocking state [ 451.329442][T12941] bridge0: port 3(team0) entered forwarding state [ 452.510348][T12970] netlink: 'syz.2.2665': attribute type 19 has an invalid length. [ 452.526090][T12970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2665'. [ 453.891363][T13001] netlink: 'syz.1.2675': attribute type 19 has an invalid length. [ 453.903309][T13001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2675'. [ 454.260915][T13011] FAULT_INJECTION: forcing a failure. [ 454.260915][T13011] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 454.282099][T13011] CPU: 1 PID: 13011 Comm: syz.1.2680 Not tainted syzkaller #0 [ 454.289589][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 454.299650][T13011] Call Trace: [ 454.302939][T13011] [ 454.305882][T13011] dump_stack_lvl+0x18c/0x250 [ 454.310582][T13011] ? show_regs_print_info+0x20/0x20 [ 454.315814][T13011] ? load_image+0x420/0x420 [ 454.320327][T13011] ? __lock_acquire+0x7d40/0x7d40 [ 454.325380][T13011] should_fail_ex+0x39d/0x4d0 [ 454.330089][T13011] prepare_alloc_pages+0x1e2/0x5f0 [ 454.335228][T13011] __alloc_pages+0x134/0x460 [ 454.339835][T13011] ? zone_statistics+0x170/0x170 [ 454.344799][T13011] ? alloc_pages+0x4dc/0x740 [ 454.349414][T13011] ? do_raw_spin_unlock+0x121/0x230 [ 454.354651][T13011] __get_free_pages+0xc/0x30 [ 454.359254][T13011] kasan_populate_vmalloc_pte+0x35/0x100 [ 454.364903][T13011] __apply_to_page_range+0x860/0xdd0 [ 454.370227][T13011] ? kasan_populate_vmalloc+0x70/0x70 [ 454.375621][T13011] ? apply_to_page_range+0x50/0x50 [ 454.380751][T13011] ? do_raw_spin_unlock+0x121/0x230 [ 454.385968][T13011] alloc_vmap_area+0x1d0c/0x1e30 [ 454.390937][T13011] ? vm_map_ram+0xcb0/0xcb0 [ 454.395459][T13011] ? rcu_is_watching+0x15/0xb0 [ 454.400244][T13011] __get_vm_area_node+0x162/0x370 [ 454.405298][T13011] __vmalloc_node_range+0x36e/0x1330 [ 454.410602][T13011] ? htab_map_alloc+0x3da/0xe80 [ 454.415471][T13011] ? _raw_spin_unlock+0x40/0x40 [ 454.420364][T13011] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 454.425670][T13011] ? free_vm_area+0x50/0x50 [ 454.430208][T13011] bpf_map_area_alloc+0xf1/0x110 [ 454.435162][T13011] ? htab_map_alloc+0x3da/0xe80 [ 454.440025][T13011] htab_map_alloc+0x3da/0xe80 [ 454.444726][T13011] map_create+0x877/0x12f0 [ 454.449158][T13011] ? bpf_lsm_bpf+0x9/0x10 [ 454.453509][T13011] __sys_bpf+0x651/0x890 [ 454.457768][T13011] ? bpf_link_show_fdinfo+0x390/0x390 [ 454.463166][T13011] ? lock_chain_count+0x20/0x20 [ 454.468039][T13011] __x64_sys_bpf+0x7c/0x90 [ 454.472509][T13011] do_syscall_64+0x55/0xb0 [ 454.476950][T13011] ? clear_bhb_loop+0x40/0x90 [ 454.481636][T13011] ? clear_bhb_loop+0x40/0x90 [ 454.486325][T13011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.492238][T13011] RIP: 0033:0x7fc21479ce59 [ 454.496675][T13011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.516302][T13011] RSP: 002b:00007fc2156f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 454.524730][T13011] RAX: ffffffffffffffda RBX: 00007fc214a15fa0 RCX: 00007fc21479ce59 [ 454.532715][T13011] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 0000000000000000 [ 454.540707][T13011] RBP: 00007fc2156f9090 R08: 0000000000000000 R09: 0000000000000000 [ 454.548705][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.556692][T13011] R13: 00007fc214a16038 R14: 00007fc214a15fa0 R15: 00007fff5488a9a8 [ 454.564694][T13011] [ 455.088670][T13029] FAULT_INJECTION: forcing a failure. [ 455.088670][T13029] name failslab, interval 1, probability 0, space 0, times 0 [ 455.131828][T13029] CPU: 0 PID: 13029 Comm: syz.0.2687 Not tainted syzkaller #0 [ 455.139330][T13029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 455.149456][T13029] Call Trace: [ 455.152751][T13029] [ 455.155696][T13029] dump_stack_lvl+0x18c/0x250 [ 455.160393][T13029] ? show_regs_print_info+0x20/0x20 [ 455.165614][T13029] ? load_image+0x420/0x420 [ 455.170149][T13029] ? __lock_acquire+0x7d40/0x7d40 [ 455.175194][T13029] ? __mutex_trylock_common+0x159/0x260 [ 455.180764][T13029] should_fail_ex+0x39d/0x4d0 [ 455.185470][T13029] should_failslab+0x9/0x20 [ 455.190002][T13029] slab_pre_alloc_hook+0x59/0x310 [ 455.195061][T13029] ? __mutex_lock+0x315/0xcc0 [ 455.199798][T13029] ? tracepoint_add_func+0x2eb/0xa00 [ 455.205115][T13029] ? tracepoint_add_func+0x2eb/0xa00 [ 455.210427][T13029] __kmem_cache_alloc_node+0x53/0x250 [ 455.215833][T13029] ? tracepoint_add_func+0x2eb/0xa00 [ 455.221140][T13029] __kmalloc+0xa4/0x230 [ 455.225324][T13029] ? trace_event_raw_event_sched_wakeup_template+0x2f0/0x2f0 [ 455.232718][T13029] tracepoint_add_func+0x2eb/0xa00 [ 455.237869][T13029] ? trace_event_raw_event_sched_wakeup_template+0x2f0/0x2f0 [ 455.245265][T13029] tracepoint_probe_register+0x5e/0x90 [ 455.250741][T13029] ? trace_event_raw_event_sched_wakeup_template+0x2f0/0x2f0 [ 455.258142][T13029] perf_trace_event_init+0x4d2/0x9b0 [ 455.263459][T13029] perf_trace_init+0x238/0x2d0 [ 455.268251][T13029] perf_tp_event_init+0x8d/0x110 [ 455.273219][T13029] perf_try_init_event+0x12b/0x3c0 [ 455.278382][T13029] perf_event_alloc+0xfa4/0x21b0 [ 455.283339][T13029] ? perf_event_alloc+0xc06/0x21b0 [ 455.288484][T13029] ? find_lively_task_by_vpid+0x19/0x290 [ 455.294161][T13029] __se_sys_perf_event_open+0x740/0x1c50 [ 455.299830][T13029] ? mutex_unlock+0x10/0x10 [ 455.304361][T13029] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 455.310051][T13029] ? lock_chain_count+0x20/0x20 [ 455.314948][T13029] ? lockdep_hardirqs_on+0x98/0x150 [ 455.320170][T13029] ? __x64_sys_perf_event_open+0x20/0xc0 [ 455.325833][T13029] do_syscall_64+0x55/0xb0 [ 455.330276][T13029] ? clear_bhb_loop+0x40/0x90 [ 455.334975][T13029] ? clear_bhb_loop+0x40/0x90 [ 455.339671][T13029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.345594][T13029] RIP: 0033:0x7f11c4f9ce59 [ 455.350028][T13029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.369656][T13029] RSP: 002b:00007f11c5f29028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 455.378092][T13029] RAX: ffffffffffffffda RBX: 00007f11c5215fa0 RCX: 00007f11c4f9ce59 [ 455.386087][T13029] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000200000000540 [ 455.394078][T13029] RBP: 00007f11c5f29090 R08: 000000000000000b R09: 0000000000000000 [ 455.402068][T13029] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 455.410097][T13029] R13: 00007f11c5216038 R14: 00007f11c5215fa0 R15: 00007ffddee49048 [ 455.418154][T13029] [ 456.060104][T13033] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 456.081895][T13037] netlink: 'syz.0.2696': attribute type 3 has an invalid length. [ 456.092350][T13037] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.2696'. [ 456.226726][T13033] netlink: 'syz.0.2696': attribute type 12 has an invalid length. [ 456.239798][T13033] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2696'. [ 457.929172][T13073] FAULT_INJECTION: forcing a failure. [ 457.929172][T13073] name failslab, interval 1, probability 0, space 0, times 0 [ 457.958769][T13073] CPU: 1 PID: 13073 Comm: syz.0.2702 Not tainted syzkaller #0 [ 457.966268][T13073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 457.976344][T13073] Call Trace: [ 457.979636][T13073] [ 457.982568][T13073] dump_stack_lvl+0x18c/0x250 [ 457.987275][T13073] ? show_regs_print_info+0x20/0x20 [ 457.992481][T13073] ? load_image+0x420/0x420 [ 457.996988][T13073] ? __might_sleep+0xe0/0xe0 [ 458.001579][T13073] ? __lock_acquire+0x7d40/0x7d40 [ 458.006609][T13073] ? __lock_acquire+0x1273/0x7d40 [ 458.011634][T13073] should_fail_ex+0x39d/0x4d0 [ 458.016316][T13073] should_failslab+0x9/0x20 [ 458.020822][T13073] slab_pre_alloc_hook+0x59/0x310 [ 458.025848][T13073] ? __lock_acquire+0x1347/0x7d40 [ 458.030867][T13073] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 458.036238][T13073] __kmem_cache_alloc_node+0x53/0x250 [ 458.041628][T13073] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 458.047008][T13073] kmalloc_trace+0x2a/0xe0 [ 458.051431][T13073] tcp_sendmsg_fastopen+0x1de/0x5d0 [ 458.056633][T13073] tcp_sendmsg_locked+0x4621/0x4bd0 [ 458.061839][T13073] ? verify_lock_unused+0x140/0x140 [ 458.067033][T13073] ? verify_lock_unused+0x140/0x140 [ 458.072238][T13073] ? __might_sleep+0xe0/0xe0 [ 458.076827][T13073] ? mark_lock+0x94/0x320 [ 458.081186][T13073] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 458.087163][T13073] ? lock_chain_count+0x20/0x20 [ 458.092020][T13073] ? tcp_set_state+0x680/0x680 [ 458.096798][T13073] tcp_sendmsg+0x2f/0x50 [ 458.101035][T13073] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 458.106230][T13073] ____sys_sendmsg+0x5ba/0x960 [ 458.111004][T13073] ? __asan_memset+0x22/0x40 [ 458.115591][T13073] ? __sys_sendmsg_sock+0x30/0x30 [ 458.120612][T13073] ? __import_iovec+0x3fa/0x850 [ 458.125490][T13073] ? import_iovec+0x73/0xa0 [ 458.130021][T13073] ___sys_sendmsg+0x2a6/0x360 [ 458.134695][T13073] ? get_pid_task+0x20/0x1e0 [ 458.139285][T13073] ? __sys_sendmsg+0x2a0/0x2a0 [ 458.144078][T13073] ? __lock_acquire+0x7d40/0x7d40 [ 458.149119][T13073] __se_sys_sendmsg+0x1c2/0x2b0 [ 458.153967][T13073] ? __x64_sys_sendmsg+0x80/0x80 [ 458.158942][T13073] ? lockdep_hardirqs_on+0x98/0x150 [ 458.164146][T13073] do_syscall_64+0x55/0xb0 [ 458.168555][T13073] ? clear_bhb_loop+0x40/0x90 [ 458.173229][T13073] ? clear_bhb_loop+0x40/0x90 [ 458.177899][T13073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.183794][T13073] RIP: 0033:0x7f11c4f9ce59 [ 458.188203][T13073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.207803][T13073] RSP: 002b:00007f11c5f29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.216212][T13073] RAX: ffffffffffffffda RBX: 00007f11c5215fa0 RCX: 00007f11c4f9ce59 [ 458.224177][T13073] RDX: 0000000020040019 RSI: 0000200000000680 RDI: 0000000000000003 [ 458.232143][T13073] RBP: 00007f11c5f29090 R08: 0000000000000000 R09: 0000000000000000 [ 458.240104][T13073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.248076][T13073] R13: 00007f11c5216038 R14: 00007f11c5215fa0 R15: 00007ffddee49048 [ 458.256051][T13073] [ 458.420181][T13080] netlink: 'syz.2.2704': attribute type 19 has an invalid length. [ 458.446969][T13080] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2704'. [ 459.171938][T13094] netlink: 'syz.1.2711': attribute type 12 has an invalid length. [ 459.192210][T13094] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.2711'. [ 459.534372][T13108] netlink: 'syz.2.2715': attribute type 10 has an invalid length. [ 459.870890][T13121] netlink: 'syz.0.2719': attribute type 19 has an invalid length. [ 459.907945][ T2902] wlan1: Trigger new scan to find an IBSS to join [ 459.978293][T13121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2719'. [ 460.980314][ T5782] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 462.165644][T13167] netlink: 'syz.1.2733': attribute type 19 has an invalid length. [ 462.202816][T13167] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2733'. [ 463.094369][T13179] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 463.122246][T13186] netlink: 'syz.3.2739': attribute type 3 has an invalid length. [ 463.181758][T13186] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.2739'. [ 463.220117][T13187] netlink: 'syz.3.2739': attribute type 12 has an invalid length. [ 463.264341][T13187] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2739'. [ 464.444974][T13203] netlink: 'syz.3.2746': attribute type 19 has an invalid length. [ 464.480432][T13203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2746'. [ 464.534739][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 464.551740][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 464.561502][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 464.573077][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 464.593023][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 464.600937][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 464.932693][ T3525] wlan1: Trigger new scan to find an IBSS to join [ 465.030519][T13209] chnl_net:caif_netlink_parms(): no params data found [ 465.074464][T13225] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2753'. [ 465.285321][T13209] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.320999][T13209] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.346996][T13209] bridge_slave_0: entered allmulticast mode [ 465.382252][T13209] bridge_slave_0: entered promiscuous mode [ 465.419429][T13209] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.446945][T13209] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.474673][T13209] bridge_slave_1: entered allmulticast mode [ 465.505276][T13209] bridge_slave_1: entered promiscuous mode [ 465.636093][T13209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.685487][T13209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.811251][T13209] team0: Port device team_slave_0 added [ 465.839112][T13209] team0: Port device team_slave_1 added [ 466.397970][T10446] wlan1: Creating new IBSS network, BSSID 8a:c0:ba:fc:2e:a6 [ 466.411825][T13209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.419307][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.445845][T13209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.483077][T13209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.490178][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.525706][T13209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.579013][T13209] hsr_slave_0: entered promiscuous mode [ 466.593184][T13209] hsr_slave_1: entered promiscuous mode [ 466.599429][T13209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.612060][T13209] Cannot create hsr debugfs directory [ 466.641984][T13248] FAULT_INJECTION: forcing a failure. [ 466.641984][T13248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.692180][ T5782] Bluetooth: hci1: command tx timeout [ 466.698339][T13248] CPU: 0 PID: 13248 Comm: syz.1.2762 Not tainted syzkaller #0 [ 466.705822][T13248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.715941][T13248] Call Trace: [ 466.719243][T13248] [ 466.722188][T13248] dump_stack_lvl+0x18c/0x250 [ 466.726901][T13248] ? show_regs_print_info+0x20/0x20 [ 466.732137][T13248] ? load_image+0x420/0x420 [ 466.736671][T13248] ? __might_fault+0xaa/0x120 [ 466.741364][T13248] ? __lock_acquire+0x7d40/0x7d40 [ 466.746414][T13248] should_fail_ex+0x39d/0x4d0 [ 466.751118][T13248] _copy_from_iter+0x1d9/0x12e0 [ 466.756010][T13248] ? txopt_get+0x7a/0x3f0 [ 466.760359][T13248] ? copyout_mc+0x70/0x70 [ 466.764743][T13248] ? txopt_get+0x344/0x3f0 [ 466.769176][T13248] ? fl6_sock_lookup+0xc0/0xc0 [ 466.773962][T13248] ? aa_sk_perm+0x970/0x970 [ 466.778489][T13248] rawv6_sendmsg+0xad9/0x1770 [ 466.783198][T13248] ? compat_rawv6_ioctl+0x70/0x70 [ 466.788253][T13248] ? aa_sk_perm+0x83c/0x970 [ 466.792775][T13248] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 466.799212][T13248] ? inet_sendmsg+0x7c/0x2f0 [ 466.803820][T13248] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 466.809147][T13248] ? security_socket_sendmsg+0x80/0xa0 [ 466.814623][T13248] ? inet_send_prepare+0x260/0x260 [ 466.819795][T13248] ____sys_sendmsg+0x5ba/0x960 [ 466.824580][T13248] ? __lock_acquire+0x7d40/0x7d40 [ 466.829609][T13248] ? __asan_memset+0x22/0x40 [ 466.834203][T13248] ? __sys_sendmsg_sock+0x30/0x30 [ 466.839271][T13248] ? __import_iovec+0x5f2/0x850 [ 466.844144][T13248] ? import_iovec+0x73/0xa0 [ 466.848663][T13248] ___sys_sendmsg+0x2a6/0x360 [ 466.853357][T13248] ? get_pid_task+0x20/0x1e0 [ 466.857968][T13248] ? __sys_sendmsg+0x2a0/0x2a0 [ 466.862777][T13248] ? __lock_acquire+0x7d40/0x7d40 [ 466.867829][T13248] __se_sys_sendmsg+0x1c2/0x2b0 [ 466.872689][T13248] ? __x64_sys_sendmsg+0x80/0x80 [ 466.877632][T13248] ? lockdep_hardirqs_on+0x98/0x150 [ 466.882827][T13248] do_syscall_64+0x55/0xb0 [ 466.887239][T13248] ? clear_bhb_loop+0x40/0x90 [ 466.891911][T13248] ? clear_bhb_loop+0x40/0x90 [ 466.896580][T13248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.902475][T13248] RIP: 0033:0x7fc21479ce59 [ 466.906882][T13248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.926480][T13248] RSP: 002b:00007fc2156f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.934886][T13248] RAX: ffffffffffffffda RBX: 00007fc214a15fa0 RCX: 00007fc21479ce59 [ 466.942852][T13248] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 466.950815][T13248] RBP: 00007fc2156f9090 R08: 0000000000000000 R09: 0000000000000000 [ 466.958799][T13248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.966758][T13248] R13: 00007fc214a16038 R14: 00007fc214a15fa0 R15: 00007fff5488a9a8 [ 466.974731][T13248] [ 466.987361][T10446] wlan1: Trigger new scan to find an IBSS to join [ 467.094203][T13209] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.117282][T13254] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2763'. [ 467.180163][T13253] netlink: 'syz.3.2763': attribute type 10 has an invalid length. [ 467.202420][T13253] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2763'. [ 467.379263][T13209] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.491961][T13209] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.511738][T13268] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.2769'. [ 467.676932][T13209] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.060667][T13276] netlink: 207912 bytes leftover after parsing attributes in process `syz.3.2773'. [ 468.165259][T13209] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 468.191345][T13209] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 468.208885][T13209] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 468.232387][T13209] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 468.441314][T13209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.486187][T13209] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.509663][T10446] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.516862][T10446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.544548][T10446] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.551724][T10446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.772282][ T5782] Bluetooth: hci1: command tx timeout [ 469.069169][T13209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.140047][T13294] netlink: 'syz.3.2778': attribute type 10 has an invalid length. [ 469.247090][T13294] hsr_slave_0: left promiscuous mode [ 469.505740][T13294] hsr_slave_1: left promiscuous mode [ 469.646031][T13209] veth0_vlan: entered promiscuous mode [ 469.696018][T13209] veth1_vlan: entered promiscuous mode [ 469.759762][T13209] veth0_macvtap: entered promiscuous mode [ 469.786889][T13209] veth1_macvtap: entered promiscuous mode [ 469.860098][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.880999][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.904409][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.915271][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.925832][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.936658][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.946827][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.957613][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.968332][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.980075][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.992578][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.005497][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.019631][T13209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.407821][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.457638][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.500375][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.542116][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.587814][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.629339][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.674302][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.722404][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.767809][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.809315][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.829364][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.842109][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.852377][ T5782] Bluetooth: hci1: command tx timeout [ 470.870420][T13209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.914159][T13209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.923605][T13209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.940877][T13209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.962090][T13209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.900598][T10462] wlan1: Trigger new scan to find an IBSS to join [ 472.136216][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.149365][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.250934][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.273153][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.884527][ T3525] wlan1: Creating new IBSS network, BSSID 96:89:db:e1:06:64 [ 472.932485][ T5782] Bluetooth: hci1: command tx timeout [ 473.222306][T13353] netlink: 'syz.3.2796': attribute type 10 has an invalid length. [ 474.127893][T13365] mac80211_hwsim hwsim23 ..ãc¤±ÿÿ: renamed from wlan1 (while UP) [ 474.575275][T13377] netlink: 'syz.3.2806': attribute type 10 has an invalid length. [ 474.618162][T13377] veth0_macvtap: left promiscuous mode [ 474.842334][T13382] netlink: 'syz.2.2809': attribute type 10 has an invalid length. [ 474.906301][T13382] hsr_slave_0: left promiscuous mode [ 474.978845][T13382] hsr_slave_1: left promiscuous mode [ 475.683032][T13390] netlink: 'syz.1.2811': attribute type 1 has an invalid length. [ 477.353213][T13417] mac80211_hwsim hwsim28 ..ãc¤±ÿÿ: renamed from wlan1 (while UP) [ 477.515122][T13418] netlink: 'syz.1.2821': attribute type 10 has an invalid length. [ 477.525834][T13418] hsr_slave_0: left promiscuous mode [ 477.596021][T13418] hsr_slave_1: left promiscuous mode [ 477.630729][T13423] netlink: 'syz.3.2825': attribute type 6 has an invalid length. [ 477.649661][T13423] netlink: 135020 bytes leftover after parsing attributes in process `syz.3.2825'. [ 477.869289][T13425] netlink: 'syz.0.2823': attribute type 10 has an invalid length. [ 478.747247][T13457] netlink: 'syz.2.2834': attribute type 1 has an invalid length. [ 479.575312][T13467] netlink: 'syz.1.2837': attribute type 10 has an invalid length. [ 480.208377][T13484] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2845'. [ 480.893022][T13502] netlink: 'syz.3.2853': attribute type 10 has an invalid length. [ 481.073994][T13502] team0: Port device hsr_slave_0 added [ 481.137766][T13504] netlink: 'syz.1.2854': attribute type 10 has an invalid length. [ 481.358673][T13515] FAULT_INJECTION: forcing a failure. [ 481.358673][T13515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.407842][T13515] CPU: 1 PID: 13515 Comm: syz.3.2857 Not tainted syzkaller #0 [ 481.415344][T13515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 481.425414][T13515] Call Trace: [ 481.428708][T13515] [ 481.431656][T13515] dump_stack_lvl+0x18c/0x250 [ 481.436369][T13515] ? show_regs_print_info+0x20/0x20 [ 481.441596][T13515] ? load_image+0x420/0x420 [ 481.446123][T13515] ? __might_fault+0xaa/0x120 [ 481.450820][T13515] ? __lock_acquire+0x7d40/0x7d40 [ 481.455868][T13515] should_fail_ex+0x39d/0x4d0 [ 481.460568][T13515] _copy_from_user+0x2f/0xe0 [ 481.465170][T13515] ___sys_sendmsg+0x1c7/0x360 [ 481.469864][T13515] ? __sys_sendmsg+0x2a0/0x2a0 [ 481.474656][T13515] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 481.480929][T13515] __se_sys_sendmsg+0x1c2/0x2b0 [ 481.485805][T13515] ? __x64_sys_sendmsg+0x80/0x80 [ 481.490779][T13515] ? lockdep_hardirqs_on+0x98/0x150 [ 481.496005][T13515] do_syscall_64+0x55/0xb0 [ 481.500475][T13515] ? clear_bhb_loop+0x40/0x90 [ 481.505159][T13515] ? clear_bhb_loop+0x40/0x90 [ 481.509847][T13515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.515751][T13515] RIP: 0033:0x7fdd95f9ce59 [ 481.520176][T13515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.539850][T13515] RSP: 002b:00007fdd96e84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.548314][T13515] RAX: ffffffffffffffda RBX: 00007fdd96215fa0 RCX: 00007fdd95f9ce59 [ 481.556297][T13515] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000b [ 481.564286][T13515] RBP: 00007fdd96e84090 R08: 0000000000000000 R09: 0000000000000000 [ 481.573545][T13515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.581523][T13515] R13: 00007fdd96216038 R14: 00007fdd96215fa0 R15: 00007fffa9309938 [ 481.589524][T13515] [ 482.745053][T13539] netlink: 'syz.0.2867': attribute type 10 has an invalid length. [ 482.925568][T13545] netlink: 2220 bytes leftover after parsing attributes in process `syz.2.2869'. [ 484.663304][T13578] netlink: 'syz.2.2883': attribute type 10 has an invalid length. [ 484.684780][T13578] veth0_macvtap: left promiscuous mode [ 487.739275][T13621] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2899'. [ 487.748955][T13621] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.2899'. [ 490.690889][T13685] FAULT_INJECTION: forcing a failure. [ 490.690889][T13685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.704277][T13685] CPU: 1 PID: 13685 Comm: syz.2.2927 Not tainted syzkaller #0 [ 490.711753][T13685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 490.721821][T13685] Call Trace: [ 490.725126][T13685] [ 490.728080][T13685] dump_stack_lvl+0x18c/0x250 [ 490.732786][T13685] ? show_regs_print_info+0x20/0x20 [ 490.738004][T13685] ? load_image+0x420/0x420 [ 490.742523][T13685] ? __might_fault+0xaa/0x120 [ 490.747215][T13685] ? __lock_acquire+0x7d40/0x7d40 [ 490.752259][T13685] should_fail_ex+0x39d/0x4d0 [ 490.756965][T13685] _copy_from_user+0x2f/0xe0 [ 490.761579][T13685] __sys_bpf+0x23e/0x890 [ 490.765839][T13685] ? bpf_link_show_fdinfo+0x390/0x390 [ 490.771216][T13685] ? lock_chain_count+0x20/0x20 [ 490.776070][T13685] __x64_sys_bpf+0x7c/0x90 [ 490.780480][T13685] do_syscall_64+0x55/0xb0 [ 490.784890][T13685] ? clear_bhb_loop+0x40/0x90 [ 490.789567][T13685] ? clear_bhb_loop+0x40/0x90 [ 490.794238][T13685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.800128][T13685] RIP: 0033:0x7fddd059ce59 [ 490.804537][T13685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.824135][T13685] RSP: 002b:00007fddd14db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 490.832545][T13685] RAX: ffffffffffffffda RBX: 00007fddd0815fa0 RCX: 00007fddd059ce59 [ 490.840506][T13685] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 490.848475][T13685] RBP: 00007fddd14db090 R08: 0000000000000000 R09: 0000000000000000 [ 490.856438][T13685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.864401][T13685] R13: 00007fddd0816038 R14: 00007fddd0815fa0 R15: 00007fff4f874558 [ 490.872394][T13685] [ 493.509850][T13744] FAULT_INJECTION: forcing a failure. [ 493.509850][T13744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.529572][T13744] CPU: 0 PID: 13744 Comm: syz.1.2950 Not tainted syzkaller #0 [ 493.537057][T13744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 493.547107][T13744] Call Trace: [ 493.550376][T13744] [ 493.553299][T13744] dump_stack_lvl+0x18c/0x250 [ 493.557978][T13744] ? show_regs_print_info+0x20/0x20 [ 493.563172][T13744] ? load_image+0x420/0x420 [ 493.567671][T13744] ? __lock_acquire+0x7d40/0x7d40 [ 493.572687][T13744] ? snprintf+0xe9/0x140 [ 493.576925][T13744] should_fail_ex+0x39d/0x4d0 [ 493.581609][T13744] _copy_to_user+0x2f/0xa0 [ 493.586035][T13744] simple_read_from_buffer+0xe7/0x150 [ 493.591408][T13744] proc_fail_nth_read+0x1e8/0x260 [ 493.596429][T13744] ? proc_fault_inject_write+0x360/0x360 [ 493.602069][T13744] ? fsnotify_perm+0x271/0x5e0 [ 493.606822][T13744] ? proc_fault_inject_write+0x360/0x360 [ 493.612449][T13744] vfs_read+0x28b/0x970 [ 493.616624][T13744] ? kernel_read+0x1e0/0x1e0 [ 493.621207][T13744] ? __fget_files+0x28/0x4b0 [ 493.625793][T13744] ? __fget_files+0x28/0x4b0 [ 493.630378][T13744] ? __fget_files+0x43d/0x4b0 [ 493.635055][T13744] ? __fdget_pos+0x2a3/0x330 [ 493.639635][T13744] ? ksys_read+0x75/0x260 [ 493.643958][T13744] ksys_read+0x150/0x260 [ 493.648208][T13744] ? vfs_write+0x990/0x990 [ 493.652618][T13744] ? lockdep_hardirqs_on+0x98/0x150 [ 493.657813][T13744] do_syscall_64+0x55/0xb0 [ 493.662233][T13744] ? clear_bhb_loop+0x40/0x90 [ 493.666898][T13744] ? clear_bhb_loop+0x40/0x90 [ 493.671565][T13744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.677466][T13744] RIP: 0033:0x7fc21475d68e [ 493.681871][T13744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 493.701472][T13744] RSP: 002b:00007fc2156f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 493.709882][T13744] RAX: ffffffffffffffda RBX: 00007fc2156f96c0 RCX: 00007fc21475d68e [ 493.717873][T13744] RDX: 000000000000000f RSI: 00007fc2156f90a0 RDI: 0000000000000004 [ 493.725835][T13744] RBP: 00007fc2156f9090 R08: 0000000000000000 R09: 0000000000000000 [ 493.733798][T13744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.741782][T13744] R13: 00007fc214a16038 R14: 00007fc214a15fa0 R15: 00007fff5488a9a8 [ 493.749754][T13744] [ 494.135133][T13758] netlink: 'syz.3.2957': attribute type 4 has an invalid length. [ 494.143966][T13758] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.2957'. [ 494.391521][T13762] FAULT_INJECTION: forcing a failure. [ 494.391521][T13762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.405355][T13762] CPU: 0 PID: 13762 Comm: syz.3.2959 Not tainted syzkaller #0 [ 494.412834][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 494.422898][T13762] Call Trace: [ 494.426178][T13762] [ 494.429114][T13762] dump_stack_lvl+0x18c/0x250 [ 494.433826][T13762] ? show_regs_print_info+0x20/0x20 [ 494.439044][T13762] ? load_image+0x420/0x420 [ 494.443558][T13762] ? __lock_acquire+0x7d40/0x7d40 [ 494.448597][T13762] ? snprintf+0xe9/0x140 [ 494.452884][T13762] should_fail_ex+0x39d/0x4d0 [ 494.457587][T13762] _copy_to_user+0x2f/0xa0 [ 494.462023][T13762] simple_read_from_buffer+0xe7/0x150 [ 494.467423][T13762] proc_fail_nth_read+0x1e8/0x260 [ 494.472471][T13762] ? proc_fault_inject_write+0x360/0x360 [ 494.478136][T13762] ? fsnotify_perm+0x271/0x5e0 [ 494.482917][T13762] ? proc_fault_inject_write+0x360/0x360 [ 494.488586][T13762] vfs_read+0x28b/0x970 [ 494.492770][T13762] ? kernel_read+0x1e0/0x1e0 [ 494.497406][T13762] ? __fget_files+0x28/0x4b0 [ 494.502000][T13762] ? __fget_files+0x28/0x4b0 [ 494.506598][T13762] ? __fget_files+0x43d/0x4b0 [ 494.511288][T13762] ? __fdget_pos+0x2a3/0x330 [ 494.515896][T13762] ? ksys_read+0x75/0x260 [ 494.520235][T13762] ksys_read+0x150/0x260 [ 494.524487][T13762] ? vfs_write+0x990/0x990 [ 494.528910][T13762] ? lockdep_hardirqs_on+0x98/0x150 [ 494.534129][T13762] do_syscall_64+0x55/0xb0 [ 494.538548][T13762] ? clear_bhb_loop+0x40/0x90 [ 494.543225][T13762] ? clear_bhb_loop+0x40/0x90 [ 494.547905][T13762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.553810][T13762] RIP: 0033:0x7fdd95f5d68e [ 494.558228][T13762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 494.577840][T13762] RSP: 002b:00007fdd96e83fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 494.586257][T13762] RAX: ffffffffffffffda RBX: 00007fdd96e846c0 RCX: 00007fdd95f5d68e [ 494.594236][T13762] RDX: 000000000000000f RSI: 00007fdd96e840a0 RDI: 0000000000000005 [ 494.602208][T13762] RBP: 00007fdd96e84090 R08: 0000000000000000 R09: 0000000000000000 [ 494.610228][T13762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.618203][T13762] R13: 00007fdd96216038 R14: 00007fdd96215fa0 R15: 00007fffa9309938 [ 494.626192][T13762] [ 494.712461][T13768] netlink: 'syz.3.2961': attribute type 46 has an invalid length. [ 494.720970][T13768] netlink: 'syz.3.2961': attribute type 46 has an invalid length. [ 494.814441][T13768] netlink: 'syz.3.2961': attribute type 46 has an invalid length. [ 494.894815][T13768] netlink: 'syz.3.2961': attribute type 46 has an invalid length. [ 495.833618][T13789] FAULT_INJECTION: forcing a failure. [ 495.833618][T13789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.847027][T13789] CPU: 0 PID: 13789 Comm: syz.2.2966 Not tainted syzkaller #0 [ 495.854512][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 495.864577][T13789] Call Trace: [ 495.867908][T13789] [ 495.870853][T13789] dump_stack_lvl+0x18c/0x250 [ 495.875572][T13789] ? show_regs_print_info+0x20/0x20 [ 495.880795][T13789] ? load_image+0x420/0x420 [ 495.885317][T13789] ? __might_fault+0xaa/0x120 [ 495.890003][T13789] ? __lock_acquire+0x7d40/0x7d40 [ 495.895039][T13789] should_fail_ex+0x39d/0x4d0 [ 495.899741][T13789] _copy_from_user+0x2f/0xe0 [ 495.904345][T13789] xsk_setsockopt+0x2c0/0x760 [ 495.909041][T13789] ? xsk_poll+0x680/0x680 [ 495.913377][T13789] ? __fget_files+0x28/0x4b0 [ 495.917972][T13789] ? __fget_files+0x28/0x4b0 [ 495.922583][T13789] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 495.928133][T13789] ? security_socket_setsockopt+0x7e/0xa0 [ 495.933866][T13789] ? xsk_poll+0x680/0x680 [ 495.938209][T13789] do_sock_setsockopt+0x175/0x1a0 [ 495.943253][T13789] ? __fdget+0x180/0x210 [ 495.947515][T13789] __x64_sys_setsockopt+0x182/0x200 [ 495.952730][T13789] do_syscall_64+0x55/0xb0 [ 495.957149][T13789] ? clear_bhb_loop+0x40/0x90 [ 495.961833][T13789] ? clear_bhb_loop+0x40/0x90 [ 495.966510][T13789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.972413][T13789] RIP: 0033:0x7fddd059ce59 [ 495.976834][T13789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.996447][T13789] RSP: 002b:00007fddd14db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 496.004867][T13789] RAX: ffffffffffffffda RBX: 00007fddd0815fa0 RCX: 00007fddd059ce59 [ 496.012850][T13789] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 496.020824][T13789] RBP: 00007fddd14db090 R08: 0000000000000004 R09: 0000000000000000 [ 496.028825][T13789] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.036800][T13789] R13: 00007fddd0816038 R14: 00007fddd0815fa0 R15: 00007fff4f874558 [ 496.044799][T13789] [ 497.211417][T13813] netlink: 'syz.0.2976': attribute type 10 has an invalid length. [ 498.934834][ T3525] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 500.845978][T13831] netlink: 'syz.1.2982': attribute type 10 has an invalid length. [ 500.952521][T13831] ipvlan1: entered promiscuous mode [ 501.355724][T13831] team0: Device ipvlan1 failed to register rx_handler [ 501.552537][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.558934][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.592964][T13849] netlink: 'syz.0.2988': attribute type 10 has an invalid length. [ 501.951529][T13863] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2993'. [ 502.021452][T13867] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2992'. [ 502.052387][T13867] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2992'. [ 502.065050][T13864] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2992'. [ 502.075198][T13867] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2992'. [ 503.611252][T13887] netlink: 'syz.1.3000': attribute type 10 has an invalid length. [ 505.335779][T10450] ..ãc¤±ÿÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 506.995667][T13918] netlink: 'syz.2.3010': attribute type 10 has an invalid length. [ 507.657546][T13931] FAULT_INJECTION: forcing a failure. [ 507.657546][T13931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.727049][T13931] CPU: 0 PID: 13931 Comm: syz.2.3013 Not tainted syzkaller #0 [ 507.734548][T13931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 507.744616][T13931] Call Trace: [ 507.747904][T13931] [ 507.750860][T13931] dump_stack_lvl+0x18c/0x250 [ 507.755563][T13931] ? show_regs_print_info+0x20/0x20 [ 507.760793][T13931] ? load_image+0x420/0x420 [ 507.765309][T13931] ? __lock_acquire+0x7d40/0x7d40 [ 507.770345][T13931] ? __virt_addr_valid+0x18c/0x540 [ 507.775472][T13931] should_fail_ex+0x39d/0x4d0 [ 507.780175][T13931] _copy_from_user+0x2f/0xe0 [ 507.784783][T13931] bpf_test_init+0xde/0x140 [ 507.789305][T13931] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 507.794705][T13931] ? dev_put+0x80/0x80 [ 507.798818][T13931] ? dev_put+0x80/0x80 [ 507.802921][T13931] bpf_prog_test_run+0x321/0x390 [ 507.807872][T13931] __sys_bpf+0x49d/0x890 [ 507.812129][T13931] ? bpf_link_show_fdinfo+0x390/0x390 [ 507.817531][T13931] ? lock_chain_count+0x20/0x20 [ 507.822408][T13931] __x64_sys_bpf+0x7c/0x90 [ 507.826841][T13931] do_syscall_64+0x55/0xb0 [ 507.831284][T13931] ? clear_bhb_loop+0x40/0x90 [ 507.835970][T13931] ? clear_bhb_loop+0x40/0x90 [ 507.840668][T13931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.846579][T13931] RIP: 0033:0x7fddd059ce59 [ 507.851012][T13931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.870668][T13931] RSP: 002b:00007fddd14db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 507.879096][T13931] RAX: ffffffffffffffda RBX: 00007fddd0815fa0 RCX: 00007fddd059ce59 [ 507.887082][T13931] RDX: 000000000000003e RSI: 0000200000000640 RDI: 000000000000000a [ 507.895075][T13931] RBP: 00007fddd14db090 R08: 0000000000000000 R09: 0000000000000000 [ 507.903071][T13931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.911050][T13931] R13: 00007fddd0816038 R14: 00007fddd0815fa0 R15: 00007fff4f874558 [ 507.919050][T13931] [ 508.009228][T13928] Ÿë: port 1(veth0_to_team) entered blocking state [ 508.019528][T13928] Ÿë: port 1(veth0_to_team) entered disabled state [ 508.030899][T13928] veth0_to_team: entered allmulticast mode [ 508.061107][T13928] veth0_to_team: entered promiscuous mode [ 509.624590][T13965] bridge_slave_1: left allmulticast mode [ 509.630437][T13965] bridge_slave_1: left promiscuous mode [ 509.697036][T13965] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.877993][T13965] bridge_slave_0: left allmulticast mode [ 509.912208][T13965] bridge_slave_0: left promiscuous mode [ 509.919107][T13965] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.316286][T13966] netlink: 'syz.3.3026': attribute type 10 has an invalid length. [ 510.355468][T13966] ipvlan1: entered promiscuous mode [ 510.874422][T13966] team0: Device ipvlan1 failed to register rx_handler [ 512.182475][T13980] Ÿë: port 1(gretap0) entered blocking state [ 512.188658][T13980] Ÿë: port 1(gretap0) entered disabled state [ 512.249545][T13980] gretap0: entered allmulticast mode [ 512.259488][T13980] gretap0: entered promiscuous mode [ 514.855769][T14017] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3046'. [ 515.893276][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.900854][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.963163][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.970612][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.119276][ T49] veth1_macvtap: left promiscuous mode [ 516.144470][ T49] veth1_vlan: left promiscuous mode [ 516.149890][ T49] veth0_vlan: left promiscuous mode [ 518.214516][ T49] team0 (unregistering): Port device team_slave_1 removed [ 518.367295][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.457298][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.940759][ T49] bond0 (unregistering): Released all slaves [ 519.029994][T14053] netlink: 'syz.2.3056': attribute type 10 has an invalid length. [ 519.054880][T14053] ipvlan1: entered promiscuous mode [ 519.095150][T14053] team0: Device ipvlan1 failed to register rx_handler [ 519.686732][T14084] netlink: 'syz.3.3071': attribute type 10 has an invalid length. [ 519.999605][T14091] FAULT_INJECTION: forcing a failure. [ 519.999605][T14091] name failslab, interval 1, probability 0, space 0, times 0 [ 520.027095][T14091] CPU: 1 PID: 14091 Comm: syz.2.3073 Not tainted syzkaller #0 [ 520.034588][T14091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 520.044642][T14091] Call Trace: [ 520.047916][T14091] [ 520.050839][T14091] dump_stack_lvl+0x18c/0x250 [ 520.055520][T14091] ? show_regs_print_info+0x20/0x20 [ 520.060721][T14091] ? load_image+0x420/0x420 [ 520.065220][T14091] ? __might_sleep+0xe0/0xe0 [ 520.069810][T14091] ? __lock_acquire+0x7d40/0x7d40 [ 520.074832][T14091] should_fail_ex+0x39d/0x4d0 [ 520.079510][T14091] should_failslab+0x9/0x20 [ 520.084009][T14091] slab_pre_alloc_hook+0x59/0x310 [ 520.089032][T14091] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 520.094746][T14091] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 520.100456][T14091] __kmem_cache_alloc_node+0x53/0x250 [ 520.105830][T14091] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 520.111544][T14091] __kmalloc+0xa4/0x230 [ 520.115700][T14091] tomoyo_realpath_from_path+0xe3/0x5d0 [ 520.121252][T14091] tomoyo_path_number_perm+0x248/0x620 [ 520.126703][T14091] ? tomoyo_path_number_perm+0x217/0x620 [ 520.132329][T14091] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 520.137780][T14091] ? ksys_write+0x1c4/0x260 [ 520.142304][T14091] ? __fget_files+0x28/0x4b0 [ 520.146891][T14091] ? __fget_files+0x28/0x4b0 [ 520.151487][T14091] security_file_ioctl+0x70/0xa0 [ 520.156419][T14091] __se_sys_ioctl+0x48/0x170 [ 520.161006][T14091] do_syscall_64+0x55/0xb0 [ 520.165418][T14091] ? clear_bhb_loop+0x40/0x90 [ 520.170084][T14091] ? clear_bhb_loop+0x40/0x90 [ 520.174754][T14091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 520.180662][T14091] RIP: 0033:0x7fddd059ce59 [ 520.185073][T14091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.204676][T14091] RSP: 002b:00007fddd14db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.213087][T14091] RAX: ffffffffffffffda RBX: 00007fddd0815fa0 RCX: 00007fddd059ce59 [ 520.221052][T14091] RDX: 0000200000000040 RSI: 0000000000008994 RDI: 0000000000000003 [ 520.229016][T14091] RBP: 00007fddd14db090 R08: 0000000000000000 R09: 0000000000000000 [ 520.236979][T14091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.244942][T14091] R13: 00007fddd0816038 R14: 00007fddd0815fa0 R15: 00007fff4f874558 [ 520.252920][T14091] [ 520.266278][T14091] ERROR: Out of memory at tomoyo_realpath_from_path. [ 521.116672][T14104] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3079'. [ 522.981519][T14138] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3090'. [ 524.393298][T14165] netlink: 'syz.1.3099': attribute type 10 has an invalid length. [ 525.204593][T14183] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3105'. [ 525.596963][T14196] netlink: 'syz.2.3110': attribute type 46 has an invalid length. [ 526.359557][T14202] netlink: 'syz.2.3110': attribute type 39 has an invalid length. [ 526.687053][T14196] netlink: 'syz.2.3110': attribute type 46 has an invalid length. [ 526.704642][T14204] netlink: 'syz.3.3114': attribute type 10 has an invalid length. [ 527.060023][T14211] netlink: 'syz.0.3115': attribute type 46 has an invalid length. [ 527.273866][T14214] syzkaller0: entered promiscuous mode [ 527.279814][T14214] syzkaller0: entered allmulticast mode [ 527.370004][T14211] netlink: 'syz.0.3115': attribute type 46 has an invalid length. [ 529.250110][T14215] Bluetooth: hci4: command 0x0406 tx timeout [ 530.933742][T10444] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 533.997757][T14240] netlink: 'syz.2.3126': attribute type 10 has an invalid length. [ 534.276390][T14254] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3130'. [ 534.537974][T14262] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3133'. [ 534.739391][T14267] bridge0: port 3(team0) entered disabled state [ 534.746018][T14267] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.753632][T14267] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.774468][T14267] bridge0: entered allmulticast mode [ 534.829517][T14272] team0: left allmulticast mode [ 534.839379][T14272] team_slave_0: left allmulticast mode [ 534.847837][T14272] team_slave_1: left allmulticast mode [ 534.859675][T14272] team0: left promiscuous mode [ 534.884395][T14272] team_slave_0: left promiscuous mode [ 534.900786][T14272] team_slave_1: left promiscuous mode [ 534.906958][T14272] bridge0: port 3(team0) entered disabled state [ 534.923629][T14272] bridge_slave_1: left allmulticast mode [ 534.929481][T14272] bridge_slave_1: left promiscuous mode [ 534.938808][T14272] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.948080][T14272] bridge_slave_0: left allmulticast mode [ 534.954045][T14272] bridge_slave_0: left promiscuous mode [ 534.959805][T14272] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.056666][T14274] netlink: 'syz.1.3138': attribute type 10 has an invalid length. [ 535.286100][T14280] FAULT_INJECTION: forcing a failure. [ 535.286100][T14280] name failslab, interval 1, probability 0, space 0, times 0 [ 535.301398][T14280] CPU: 0 PID: 14280 Comm: syz.2.3140 Not tainted syzkaller #0 [ 535.308889][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.318952][T14280] Call Trace: [ 535.322233][T14280] [ 535.325167][T14280] dump_stack_lvl+0x18c/0x250 [ 535.329856][T14280] ? show_regs_print_info+0x20/0x20 [ 535.335057][T14280] ? load_image+0x420/0x420 [ 535.339586][T14280] ? __might_sleep+0xe0/0xe0 [ 535.344183][T14280] ? __lock_acquire+0x7d40/0x7d40 [ 535.349241][T14280] should_fail_ex+0x39d/0x4d0 [ 535.353937][T14280] should_failslab+0x9/0x20 [ 535.358443][T14280] slab_pre_alloc_hook+0x59/0x310 [ 535.363475][T14280] ? rtnl_newlink+0x10d/0x20a0 [ 535.368240][T14280] __kmem_cache_alloc_node+0x53/0x250 [ 535.373634][T14280] ? rtnl_newlink+0x10d/0x20a0 [ 535.378399][T14280] kmalloc_trace+0x2a/0xe0 [ 535.382821][T14280] ? rtnl_setlink+0x4e0/0x4e0 [ 535.387498][T14280] rtnl_newlink+0x10d/0x20a0 [ 535.392119][T14280] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 535.397839][T14280] ? rtnl_setlink+0x4e0/0x4e0 [ 535.402524][T14280] ? mark_lock+0x94/0x320 [ 535.406860][T14280] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 535.412843][T14280] ? lock_chain_count+0x20/0x20 [ 535.417696][T14280] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.423857][T14280] ? lockdep_hardirqs_on+0x98/0x150 [ 535.429062][T14280] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.435236][T14280] ? rtnl_setlink+0x4e0/0x4e0 [ 535.439933][T14280] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 535.445050][T14280] ? rtnetlink_rcv_msg+0x857/0xfa0 [ 535.450172][T14280] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 535.455294][T14280] ? rtnl_setlink+0x4e0/0x4e0 [ 535.459976][T14280] rtnetlink_rcv_msg+0x869/0xfa0 [ 535.465005][T14280] ? rtnetlink_bind+0x80/0x80 [ 535.469684][T14280] ? perf_trace_preemptirq_template+0x269/0x330 [ 535.475935][T14280] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 535.481940][T14280] ? lock_chain_count+0x20/0x20 [ 535.486794][T14280] ? __local_bh_enable_ip+0x13a/0x1c0 [ 535.492170][T14280] ? lockdep_hardirqs_on+0x98/0x150 [ 535.497375][T14280] ? __local_bh_enable_ip+0x13a/0x1c0 [ 535.502746][T14280] ? _local_bh_enable+0xa0/0xa0 [ 535.507623][T14280] ? __dev_queue_xmit+0x265/0x3660 [ 535.512736][T14280] ? __dev_queue_xmit+0x265/0x3660 [ 535.517869][T14280] ? __dev_queue_xmit+0x1b2c/0x3660 [ 535.523086][T14280] ? __dev_queue_xmit+0x265/0x3660 [ 535.528212][T14280] ? ref_tracker_free+0x690/0x840 [ 535.533249][T14280] netlink_rcv_skb+0x241/0x4d0 [ 535.538015][T14280] ? rtnetlink_bind+0x80/0x80 [ 535.542713][T14280] ? netlink_ack+0x1180/0x1180 [ 535.547496][T14280] ? __lock_acquire+0x7d40/0x7d40 [ 535.552533][T14280] ? netlink_deliver_tap+0x2e/0x1b0 [ 535.557740][T14280] netlink_unicast+0x751/0x8d0 [ 535.562518][T14280] netlink_sendmsg+0x8d0/0xbf0 [ 535.567298][T14280] ? netlink_getsockopt+0x590/0x590 [ 535.572504][T14280] ? aa_sock_msg_perm+0x94/0x150 [ 535.577450][T14280] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 535.582738][T14280] ? security_socket_sendmsg+0x80/0xa0 [ 535.588210][T14280] ? netlink_getsockopt+0x590/0x590 [ 535.593420][T14280] ____sys_sendmsg+0x5ba/0x960 [ 535.598195][T14280] ? __asan_memset+0x22/0x40 [ 535.602801][T14280] ? __sys_sendmsg_sock+0x30/0x30 [ 535.607824][T14280] ? __import_iovec+0x5f2/0x850 [ 535.612682][T14280] ? import_iovec+0x73/0xa0 [ 535.617200][T14280] ___sys_sendmsg+0x2a6/0x360 [ 535.621897][T14280] ? get_pid_task+0x20/0x1e0 [ 535.626494][T14280] ? __sys_sendmsg+0x2a0/0x2a0 [ 535.631285][T14280] ? __lock_acquire+0x7d40/0x7d40 [ 535.636336][T14280] __se_sys_sendmsg+0x1c2/0x2b0 [ 535.641190][T14280] ? __x64_sys_sendmsg+0x80/0x80 [ 535.646147][T14280] ? lockdep_hardirqs_on+0x98/0x150 [ 535.651351][T14280] do_syscall_64+0x55/0xb0 [ 535.655783][T14280] ? clear_bhb_loop+0x40/0x90 [ 535.660487][T14280] ? clear_bhb_loop+0x40/0x90 [ 535.665172][T14280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.671074][T14280] RIP: 0033:0x7fddd059ce59 [ 535.675506][T14280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.695114][T14280] RSP: 002b:00007fddd14db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.703533][T14280] RAX: ffffffffffffffda RBX: 00007fddd0815fa0 RCX: 00007fddd059ce59 [ 535.711506][T14280] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000008 [ 535.719476][T14280] RBP: 00007fddd14db090 R08: 0000000000000000 R09: 0000000000000000 [ 535.727444][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.735412][T14280] R13: 00007fddd0816038 R14: 00007fddd0815fa0 R15: 00007fff4f874558 [ 535.743413][T14280] [ 535.906559][ T2902] [ 535.908942][ T2902] ====================================================== [ 535.915966][ T2902] WARNING: possible circular locking dependency detected [ 535.923016][ T2902] syzkaller #0 Not tainted [ 535.927440][ T2902] ------------------------------------------------------ [ 535.934454][ T2902] kworker/u4:7/2902 is trying to acquire lock: [ 535.940607][ T2902] ffff88807e2b4d80 (team->team_lock_key#5){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 535.950197][ T2902] [ 535.950197][ T2902] but task is already holding lock: [ 535.957556][ T2902] ffff8880790c0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 535.967910][ T2902] [ 535.967910][ T2902] which lock already depends on the new lock. [ 535.967910][ T2902] [ 535.978318][ T2902] [ 535.978318][ T2902] the existing dependency chain (in reverse order) is: [ 535.987321][ T2902] [ 535.987321][ T2902] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 535.995048][ T2902] __mutex_lock+0x136/0xcc0 [ 536.000081][ T2902] ieee80211_open+0x144/0x200 [ 536.005276][ T2902] __dev_open+0x2cb/0x430 [ 536.010122][ T2902] dev_open+0xab/0x190 [ 536.014706][ T2902] team_add_slave+0x75f/0x29a0 [ 536.019987][ T2902] do_setlink+0xdfe/0x4130 [ 536.024923][ T2902] rtnl_newlink+0x17da/0x20a0 [ 536.030112][ T2902] rtnetlink_rcv_msg+0x869/0xfa0 [ 536.035566][ T2902] netlink_rcv_skb+0x241/0x4d0 [ 536.040845][ T2902] netlink_unicast+0x751/0x8d0 [ 536.046146][ T2902] netlink_sendmsg+0x8d0/0xbf0 [ 536.051426][ T2902] ____sys_sendmsg+0x5ba/0x960 [ 536.056713][ T2902] ___sys_sendmsg+0x2a6/0x360 [ 536.061910][ T2902] __se_sys_sendmsg+0x1c2/0x2b0 [ 536.067279][ T2902] do_syscall_64+0x55/0xb0 [ 536.072216][ T2902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.078626][ T2902] [ 536.078626][ T2902] -> #0 (team->team_lock_key#5){+.+.}-{3:3}: [ 536.086796][ T2902] __lock_acquire+0x2df1/0x7d40 [ 536.092207][ T2902] lock_acquire+0x19e/0x420 [ 536.097225][ T2902] __mutex_lock+0x136/0xcc0 [ 536.102245][ T2902] team_del_slave+0x32/0x1c0 [ 536.107348][ T2902] team_device_event+0x28d/0xa20 [ 536.112799][ T2902] notifier_call_chain+0x197/0x380 [ 536.118427][ T2902] unregister_netdevice_many_notify+0x100d/0x1900 [ 536.125360][ T2902] unregister_netdevice_queue+0x32c/0x370 [ 536.131594][ T2902] _cfg80211_unregister_wdev+0x16b/0x580 [ 536.137745][ T2902] ieee80211_remove_interfaces+0x49e/0x690 [ 536.144071][ T2902] ieee80211_unregister_hw+0x5d/0x2a0 [ 536.149958][ T2902] mac80211_hwsim_del_radio+0x289/0x480 [ 536.156019][ T2902] hwsim_exit_net+0x58d/0x650 [ 536.161220][ T2902] cleanup_net+0x70a/0xbb0 [ 536.166150][ T2902] process_scheduled_works+0xa5d/0x15d0 [ 536.172210][ T2902] worker_thread+0xa55/0xfc0 [ 536.177312][ T2902] kthread+0x2fa/0x390 [ 536.181896][ T2902] ret_from_fork+0x48/0x80 [ 536.186827][ T2902] ret_from_fork_asm+0x11/0x20 [ 536.192107][ T2902] [ 536.192107][ T2902] other info that might help us debug this: [ 536.192107][ T2902] [ 536.202322][ T2902] Possible unsafe locking scenario: [ 536.202322][ T2902] [ 536.209757][ T2902] CPU0 CPU1 [ 536.215114][ T2902] ---- ---- [ 536.220474][ T2902] lock(&rdev->wiphy.mtx); [ 536.224983][ T2902] lock(team->team_lock_key#5); [ 536.232437][ T2902] lock(&rdev->wiphy.mtx); [ 536.239451][ T2902] lock(team->team_lock_key#5); [ 536.244387][ T2902] [ 536.244387][ T2902] *** DEADLOCK *** [ 536.244387][ T2902] [ 536.252521][ T2902] 5 locks held by kworker/u4:7/2902: [ 536.257791][ T2902] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 536.268663][ T2902] #1: ffffc9000b997d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 536.279186][ T2902] #2: ffffffff8e3b9990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 536.288576][ T2902] #3: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 536.298403][ T2902] #4: ffff8880790c0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 536.309186][ T2902] [ 536.309186][ T2902] stack backtrace: [ 536.315069][ T2902] CPU: 1 PID: 2902 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 536.322606][ T2902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 536.332656][ T2902] Workqueue: netns cleanup_net [ 536.337419][ T2902] Call Trace: [ 536.340695][ T2902] [ 536.343638][ T2902] dump_stack_lvl+0x18c/0x250 [ 536.348311][ T2902] ? load_image+0x420/0x420 [ 536.352810][ T2902] ? show_regs_print_info+0x20/0x20 [ 536.358007][ T2902] ? print_circular_bug+0x12b/0x1a0 [ 536.363204][ T2902] check_noncircular+0x2fc/0x400 [ 536.368142][ T2902] ? print_deadlock_bug+0x5d0/0x5d0 [ 536.373343][ T2902] ? lockdep_lock+0xf5/0x230 [ 536.377934][ T2902] ? _find_first_zero_bit+0xd3/0x100 [ 536.383215][ T2902] __lock_acquire+0x2df1/0x7d40 [ 536.388077][ T2902] ? verify_lock_unused+0x140/0x140 [ 536.393270][ T2902] ? perf_trace_lock_acquire+0x104/0x410 [ 536.398908][ T2902] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 536.405493][ T2902] ? perf_trace_lock_acquire+0x104/0x410 [ 536.411131][ T2902] lock_acquire+0x19e/0x420 [ 536.415640][ T2902] ? team_del_slave+0x32/0x1c0 [ 536.420405][ T2902] ? __might_sleep+0xe0/0xe0 [ 536.425048][ T2902] ? read_lock_is_recursive+0x20/0x20 [ 536.430424][ T2902] __mutex_lock+0x136/0xcc0 [ 536.434927][ T2902] ? team_del_slave+0x32/0x1c0 [ 536.439686][ T2902] ? __lock_acquire+0x7d40/0x7d40 [ 536.444719][ T2902] ? rcu_is_watching+0x15/0xb0 [ 536.449481][ T2902] ? trace_contention_end+0x39/0xe0 [ 536.454670][ T2902] ? __mutex_lock+0x315/0xcc0 [ 536.459342][ T2902] ? team_del_slave+0x32/0x1c0 [ 536.464103][ T2902] ? mutex_lock_nested+0x20/0x20 [ 536.469034][ T2902] ? bond_netdev_event+0xeb/0xf20 [ 536.474060][ T2902] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 536.479696][ T2902] team_del_slave+0x32/0x1c0 [ 536.484281][ T2902] team_device_event+0x28d/0xa20 [ 536.489215][ T2902] notifier_call_chain+0x197/0x380 [ 536.494325][ T2902] unregister_netdevice_many_notify+0x100d/0x1900 [ 536.500736][ T2902] ? trace_event_raw_event_lock+0x250/0x250 [ 536.506637][ T2902] ? unregister_netdevice_many+0x20/0x20 [ 536.512268][ T2902] ? kernfs_remove_by_name_ns+0x117/0x150 [ 536.517986][ T2902] ? __lock_acquire+0x7d40/0x7d40 [ 536.523011][ T2902] unregister_netdevice_queue+0x32c/0x370 [ 536.528736][ T2902] ? list_netdevice+0x730/0x730 [ 536.533586][ T2902] ? kernfs_remove_by_name_ns+0x117/0x150 [ 536.539302][ T2902] _cfg80211_unregister_wdev+0x16b/0x580 [ 536.544952][ T2902] ieee80211_remove_interfaces+0x49e/0x690 [ 536.550764][ T2902] ? ieee80211_do_stop+0x1e20/0x1e20 [ 536.556046][ T2902] ? rcu_is_watching+0x15/0xb0 [ 536.560812][ T2902] ieee80211_unregister_hw+0x5d/0x2a0 [ 536.566183][ T2902] mac80211_hwsim_del_radio+0x289/0x480 [ 536.571731][ T2902] ? rhashtable_remove_fast+0xc00/0xc00 [ 536.577302][ T2902] hwsim_exit_net+0x58d/0x650 [ 536.581996][ T2902] ? hwsim_init_net+0x90/0x90 [ 536.586682][ T2902] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 536.592521][ T2902] cleanup_net+0x70a/0xbb0 [ 536.596941][ T2902] ? ops_free_list+0x3b0/0x3b0 [ 536.601699][ T2902] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.606892][ T2902] ? process_scheduled_works+0x96f/0x15d0 [ 536.612606][ T2902] ? process_scheduled_works+0x96f/0x15d0 [ 536.618320][ T2902] process_scheduled_works+0xa5d/0x15d0 [ 536.623879][ T2902] ? worker_attach_to_pool+0x380/0x380 [ 536.629335][ T2902] ? assign_work+0x3d2/0x5d0 [ 536.633925][ T2902] worker_thread+0xa55/0xfc0 [ 536.638511][ T2902] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 536.644406][ T2902] ? _raw_spin_unlock+0x40/0x40 [ 536.649249][ T2902] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 536.655149][ T2902] kthread+0x2fa/0x390 [ 536.659210][ T2902] ? pr_cont_work+0x560/0x560 [ 536.663881][ T2902] ? kthread_blkcg+0xd0/0xd0 [ 536.668461][ T2902] ret_from_fork+0x48/0x80 [ 536.672876][ T2902] ? kthread_blkcg+0xd0/0xd0 [ 536.677456][ T2902] ret_from_fork_asm+0x11/0x20 [ 536.682225][ T2902] [ 536.711356][T14291] caif:caif_disconnect_client(): nothing to disconnect [ 536.718808][T14291] caif:caif_disconnect_client(): nothing to disconnect [ 536.727062][T14291] FAULT_INJECTION: forcing a failure. [ 536.727062][T14291] name failslab, interval 1, probability 0, space 0, times 0 [ 536.734681][ T2902] mac80211_hwsim hwsim15 wlan1 (unregistering): left promiscuous mode [ 536.739887][T14291] CPU: 1 PID: 14291 Comm: syz.3.3143 Not tainted syzkaller #0 [ 536.755272][T14291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 536.765316][T14291] Call Trace: [ 536.768588][T14291] [ 536.771508][T14291] dump_stack_lvl+0x18c/0x250 [ 536.776177][T14291] ? slab_pre_alloc_hook+0x31/0x310 [ 536.781370][T14291] ? show_regs_print_info+0x20/0x20 [ 536.786561][T14291] ? load_image+0x420/0x420 [ 536.791051][T14291] ? __might_sleep+0xe0/0xe0 [ 536.795642][T14291] ? netlink_insert+0x109f/0x13a0 [ 536.800680][T14291] ? __lock_acquire+0x7d40/0x7d40 [ 536.805727][T14291] should_fail_ex+0x39d/0x4d0 [ 536.810421][T14291] should_failslab+0x9/0x20 [ 536.814918][T14291] slab_pre_alloc_hook+0x59/0x310 [ 536.819933][T14291] ? __lock_acquire+0x7d40/0x7d40 [ 536.824948][T14291] kmem_cache_alloc_node+0x60/0x320 [ 536.830136][T14291] ? __alloc_skb+0x103/0x2c0 [ 536.834718][T14291] __alloc_skb+0x103/0x2c0 [ 536.839126][T14291] netlink_sendmsg+0x66a/0xbf0 [ 536.843885][T14291] ? netlink_getsockopt+0x590/0x590 [ 536.849072][T14291] ? aa_sock_msg_perm+0x94/0x150 [ 536.854016][T14291] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 536.859311][T14291] ? security_socket_sendmsg+0x80/0xa0 [ 536.864769][T14291] ? netlink_getsockopt+0x590/0x590 [ 536.869961][T14291] ____sys_sendmsg+0x5ba/0x960 [ 536.874718][T14291] ? __might_sleep+0xe0/0xe0 [ 536.879303][T14291] ? __asan_memset+0x22/0x40 [ 536.883902][T14291] ? __sys_sendmsg_sock+0x30/0x30 [ 536.888924][T14291] ? __import_iovec+0x5f2/0x850 [ 536.893781][T14291] ? import_iovec+0x73/0xa0 [ 536.898293][T14291] ___sys_sendmsg+0x2a6/0x360 [ 536.902979][T14291] ? __sys_sendmsg+0x2a0/0x2a0 [ 536.907759][T14291] ? lock_release+0xb5/0x8c0 [ 536.912348][T14291] ? ksys_write+0x1c4/0x260 [ 536.916863][T14291] ? __lock_acquire+0x7d40/0x7d40 [ 536.921887][T14291] __se_sys_sendmsg+0x1c2/0x2b0 [ 536.926730][T14291] ? __x64_sys_sendmsg+0x80/0x80 [ 536.931665][T14291] do_syscall_64+0x55/0xb0 [ 536.936071][T14291] ? clear_bhb_loop+0x40/0x90 [ 536.940740][T14291] ? clear_bhb_loop+0x40/0x90 [ 536.945419][T14291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.951319][T14291] RIP: 0033:0x7fdd95f9ce59 [ 536.955725][T14291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.975323][T14291] RSP: 002b:00007fdd96e84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.983743][T14291] RAX: ffffffffffffffda RBX: 00007fdd96215fa0 RCX: 00007fdd95f9ce59 [ 536.991704][T14291] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000b [ 536.999663][T14291] RBP: 00007fdd96e84090 R08: 0000000000000000 R09: 0000000000000000 [ 537.007626][T14291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.015596][T14291] R13: 00007fdd96216038 R14: 00007fdd96215fa0 R15: 00007fffa9309938 [ 537.023580][T14291] [ 537.028846][ T2902] team0: Port device wlan1 removed [ 537.041330][T14285] netlink: 'syz.0.3149': attribute type 10 has an invalid length. [ 537.213675][ T2902] hsr_slave_0: left promiscuous mode [ 537.219715][ T2902] hsr_slave_1: left promiscuous mode [ 537.225548][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.235331][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.243207][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.250654][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.258401][ T2902] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 537.265907][ T2902] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 537.273583][ T2902] team0: left allmulticast mode [ 537.278449][ T2902] team_slave_1: left allmulticast mode [ 537.283934][ T2902] geneve1: left allmulticast mode [ 537.288992][ T2902] team0: left promiscuous mode [ 537.293935][ T2902] team_slave_1: left promiscuous mode [ 537.299372][ T2902] geneve1: left promiscuous mode [ 537.304639][ T2902] bridge0: port 2(team0) entered disabled state [ 537.311902][ T2902] bridge_slave_0: left allmulticast mode [ 537.317674][ T2902] bridge_slave_0: left promiscuous mode [ 537.323595][ T2902] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.335812][T10462] ..ãc¤±ÿÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 537.347093][ T2902] veth1_macvtap: left promiscuous mode [ 537.354157][ T2902] veth1_vlan: left promiscuous mode [ 537.359399][ T2902] veth0_vlan: left promiscuous mode [ 537.419323][ T2902] team0 (unregistering): Port device geneve1 removed [ 537.529009][ T2902] team0 (unregistering): Port device team_slave_1 removed [ 538.843172][T10462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.850620][T10462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.858487][T10462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.865917][T10462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.873595][T10462] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 538.881069][T10462] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 538.888913][T10462] team0: left allmulticast mode [ 538.894525][T10462] team_slave_1: left allmulticast mode [ 538.899972][T10462] geneve1: left allmulticast mode [ 538.905066][T10462] team0: left promiscuous mode [ 538.909826][T10462] team_slave_1: left promiscuous mode [ 538.915327][T10462] geneve1: left promiscuous mode [ 538.920434][T10462] bridge0: port 3(team0) entered disabled state [ 538.928214][T10462] bridge_slave_0: left allmulticast mode [ 538.933968][T10462] bridge_slave_0: left promiscuous mode [ 538.939622][T10462] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.949427][T10462] veth1_macvtap: left promiscuous mode [ 538.955013][T10462] veth1_vlan: left promiscuous mode [ 538.960285][T10462] veth0_vlan: left promiscuous mode [ 539.066387][T10462] team0 (unregistering): Port device geneve1 removed [ 539.172508][T10462] team0 (unregistering): Port device team_slave_1 removed [ 539.221343][T10462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.247986][T10462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.270748][T10462] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 539.318030][T10462] bond0 (unregistering): Released all slaves [ 539.412240][ T5775] Bluetooth: hci3: command 0x0406 tx timeout