last executing test programs: 4m24.176106429s ago: executing program 4 (id=1621): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb, 0xfc00}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x200000000000000) 4m23.9874786s ago: executing program 4 (id=1623): r0 = gettid() r1 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xb, 0x79, 0x9, 0x1, 0x0, 0x6d1, 0x80200, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ac6, 0x0, @perf_config_ext={0x1000, 0x9}, 0x103718, 0x800, 0x8739, 0x9, 0x3, 0x16, 0x7, 0x0, 0x5, 0x0, 0x8}, r0, 0x2, 0xffffffffffffffff, 0x3) syz_open_procfs$namespace(r0, &(0x7f0000000380)='ns/time\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x2502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0xfffffffffffffffd, 0x0, 0x7, 0x8, 0x582a010f, 0xff, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00'}) 4m23.854597218s ago: executing program 4 (id=1625): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e086dd200000006084000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20010010, 0x4000}, 0x48) 4m23.666470459s ago: executing program 4 (id=1630): write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0xfe33) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 4m23.426367963s ago: executing program 4 (id=1633): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4a99377e47d731d6}, 0x10) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x10, 0x0, 0xc) 4m23.345440727s ago: executing program 4 (id=1635): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070014000523a608463a3f"], 0xfe33) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="9500000000000000180000000800000000000000b5db0000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000a494cfd0113805e4b55585081a48b703000009", @ANYRES32, @ANYBLOB="00000000fdffffff21a3f0ff040000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x82, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xf, 0x1, 0x3579}, 0x10, 0xffffffffffffffff, r1, 0x1, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x3, 0x1, 0xd, 0x3}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r0, r2}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x100, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f4, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000009500800000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4}, 0xc) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8992, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000000), 0xff7b) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="0209000202000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000440)={r8, r5}) close(r6) socket$kcm(0x10, 0x400000002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) 4m7.688112783s ago: executing program 32 (id=1635): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070014000523a608463a3f"], 0xfe33) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="9500000000000000180000000800000000000000b5db0000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000a494cfd0113805e4b55585081a48b703000009", @ANYRES32, @ANYBLOB="00000000fdffffff21a3f0ff040000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x82, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xf, 0x1, 0x3579}, 0x10, 0xffffffffffffffff, r1, 0x1, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x3, 0x1, 0xd, 0x3}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r0, r2}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x100, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f4, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000009500800000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4}, 0xc) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8992, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000000), 0xff7b) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="0209000202000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000440)={r8, r5}) close(r6) socket$kcm(0x10, 0x400000002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) 2m41.784111167s ago: executing program 5 (id=2828): r0 = socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8919, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) close(0x3) 2m41.370640642s ago: executing program 5 (id=2832): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2d, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x29, 0x37, "1e"}], 0x18}, 0x97) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r4 = syz_clone(0x20800, &(0x7f0000000040)="c94d7b803f2bc4bd342b8cfd9eb0f8146cb4e09dc8d815e74344e12b646b2d", 0x1f, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000003c0)="024cb693778c7253bcf038e7395bc5fbad474d9eed2fea67d3702af459537d4de688417c1213185567a1754fc7c7f0a78fabc7301c46e98ae8cf9ecdeca870059e399050fae8e6f0ba757aa06a2bdc9aa7e102688f8467df913e2e4b06da2322c3c545181f3223a68e69358bc78227") syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/pid_for_children\x00') 2m41.141695665s ago: executing program 5 (id=2833): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x48b, 0x0, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008510000006000000852000000200000094ffef"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1115000600000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x11) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000048000000b7030000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xd0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r5, &(0x7f0000000400)={&(0x7f0000000000)={0xa, 0x0, @multicast1}, 0x56, &(0x7f0000000180)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x8}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) sendmsg$sock(r5, &(0x7f0000000740)={&(0x7f0000000500)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000580)="bd416a463aa5d2ede386fecc96011a57b6c82f30de55dc5dfe6c9ebec4e0a2d85dec1bcae4e3e6fa27696757811ed54b330783028c77620233673bd6110c167cfef40791545e804c844eb699ab3c40ca58f2d381076ef7576e0f6bfbbc5013c930814dbf4eb7afb492bac8f0f2df70d51e301a3bc76c1eb9baa8b6fc533bf9aaeb79d493bf26677331efd0a91510d20832598ef5d8ec43a228291eb8800034a3b5b51d8c7c2f9de4e182b7029bbe2c550bc877b3bc091a6f37987642d786f8d9478736d9efc206857d5ac38b1cd38991227a2529788d32cb5da04b371456ce9f7f1e", 0xe2}], 0x1, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x3800}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x60}, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 2m40.853832682s ago: executing program 5 (id=2837): r0 = socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000b000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020200400000000000000bfa10000000000000701000000feffdfb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x6f) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4}, {0x10000002, 0x5}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) close(r1) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, &(0x7f0000000040)) 2m40.619140075s ago: executing program 5 (id=2841): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x11, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffe, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) 2m40.617517825s ago: executing program 5 (id=2842): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$kcm(0x29, 0x5, 0x0) close(r0) 2m24.680489798s ago: executing program 33 (id=2842): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$kcm(0x29, 0x5, 0x0) close(r0) 7.932443776s ago: executing program 0 (id=4032): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) close(0x3) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x4, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r2, 0x4) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000"], 0x50) unlink(0x0) 6.973942772s ago: executing program 0 (id=4046): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0x4, 0xfff, 0x7}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409"], 0xa) 6.742496516s ago: executing program 0 (id=4049): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.235406415s ago: executing program 0 (id=4057): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x26e1, 0x0) close(0xffffffffffffffff) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) 4.218818973s ago: executing program 0 (id=4062): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x3000600) 3.892213662s ago: executing program 0 (id=4067): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2a, 0x2, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES8=r1, @ANYRESDEC=r0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES64=r0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x85, &(0x7f0000000ac0), 0x90) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600877e85000000070000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.750565751s ago: executing program 6 (id=4071): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000024090000060000005c09000000000000b5030000000000008500000076000000b7000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x4, 0x10}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c0200000c0c00053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.43208641s ago: executing program 6 (id=4075): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x4, 0x2, 0x2, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x11}, 0x94) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e030600bfff9801288463608646667011"], 0xffdd) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000043007f029ea6b698e82966af5c0953a6", 0x14}], 0x1}, 0x0) 3.236093101s ago: executing program 2 (id=4078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000000000000000000000ac141401827511d5b4d3a9f536f45ae68ab6086c11"], 0xee8a) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) (async) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000000000000000000000ac141401827511d5b4d3a9f536f45ae68ab6086c11"], 0xee8a) (async) 1.855620671s ago: executing program 3 (id=4081): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000000000000000003000000000500000003000000060000000700000000000011030000000300000000000000000000030000000004000000010000000000000000492e305f615f30615f3000"], &(0x7f0000000140)=""/48, 0x64, 0x30, 0x0, 0x58000000, 0x10000, @value=r0}, 0x28) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x33, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x42, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) r4 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a00fee10000007303f10100000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d012"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000001240)={&(0x7f0000000300), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000280)=""/40, 0xe}, {&(0x7f0000000380)=""/233, 0xe9}], 0x2, &(0x7f0000001600)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}], 0x6eb5}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0xc, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x43}, @printk={@llx, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x3, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$kcm(0x29, 0x5, 0x0) 1.812875634s ago: executing program 1 (id=4083): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xfffffd26) 1.804492744s ago: executing program 6 (id=4084): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x400, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8001b000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb7e4ce1b14d6d93424841f468430dfe1d9d322fe7c0aaa16bfddc64193071e9f8775730d16a4683f7a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bdffcaab", 0xd8}], 0x1}, 0x20008800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8491}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x9c) r4 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0xd, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000016000b66ff0000005a806449108f108c", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x100d, r2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000010000000000000000000000004c434b9365d230d17ad513dea9be78c0d90826fb41fcde3df6ee35c61bf0cf1e297143cb5de04346d1123964f72f82d83c09bd370049f89cd0d0089365ec69751dd45790e2441b3a3f804f2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x5}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.stat\x00', 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r8, 0x0, 0x100) 1.720127869s ago: executing program 2 (id=4085): r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000080), 0xc513712de0aa1929}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) close(r2) 1.605078276s ago: executing program 2 (id=4086): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 1.244024237s ago: executing program 2 (id=4087): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.212877289s ago: executing program 6 (id=4088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f00000001c0)=[{0x35, 0x0, 0x0, 0xfffffffe}, {0x6}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0xf1, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000dc0)={&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="f9", 0x1}], 0x1}, 0x263171b11b81c78f) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x10, &(0x7f0000000000)=r5, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540), 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xc, 0xaf, 0x7, 0x10000, r0, 0xa0, '\x00', r2, r5, 0x1, 0x4, 0x0, 0x0, @void, @value, @value=r6}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="2e0000006600811057cf89e40d4384e9f23f802c0f00000000000000000000003b87e069fcb3a76958bbe8987369", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000025000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000af000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 908.093287ms ago: executing program 3 (id=4089): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000d000000000069123a000020000004000000000000009500740000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c", 0x19}], 0x1}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2404c140) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c00000012006b009a3fe3d86e17aa31106b870000000000000000050000006504001a0038001d002a31a0e69ee52bd34460bc06000000a705251e6182949a3651f60a84c9f0d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socketpair(0x26, 0x4, 0x2, &(0x7f00000001c0)) (async) write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2b, 'perf_event'}]}, 0xc) 880.695668ms ago: executing program 1 (id=4090): r0 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, &(0x7f0000000040)) r1 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r2, 0x10) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6, 0x37, 0x6, 0x9, 0x0, 0x2, 0x4, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7ab, 0x1}, 0x2, 0x7fff, 0x7, 0x2, 0x6, 0x6, 0x9, 0x0, 0x9, 0x0, 0x7}, 0xffffffffffffffff, 0x7, r2, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x11, 0x200000000000002, 0x300) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 833.912191ms ago: executing program 2 (id=4091): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x200000000000800}, 0x0, 0x4, 0x0, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf00}, 0x80) 735.999827ms ago: executing program 6 (id=4092): r0 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x20e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x4, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b637075200dde1215ffb4415ffc60b774cc5aa53a98a42b22f46d48572ccaa4f4e4cd9c3f6cf9c12f1a2f95254f206f7383f7e8f3b9304be1ee5ec5f56cc547fd5ff559b3c76e89a913629d58bd"], 0x5) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, 0x0, &(0x7f0000000340)=""/74}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) 696.36945ms ago: executing program 3 (id=4093): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xd, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x1000000}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x0, 0x61, 0x61, 0x0, 0x61, 0x2e]}}, 0x0, 0x59, 0x0, 0x0, 0xa000000}, 0x28) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7, 0x0, 0xfff8}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 660.981371ms ago: executing program 2 (id=4094): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x4, 0x2, 0x2, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e030600bfff9801288463608646667011"], 0xffdd) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000043007f029ea6b698e82966af5c0953a6", 0x14}], 0x1}, 0x0) 657.054952ms ago: executing program 1 (id=4095): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x17}, 0x48) 592.131916ms ago: executing program 6 (id=4096): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x2, 0xfd, 0xff, 0x0, 0x20, 0x480783, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3a}, 0x7602, 0x403, 0x6, 0x0, 0x34d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x4, 0x8, &(0x7f00000000c0)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0xfffffffc, @loopback={0xfe80000000000000}, 0x4}, 0x80, 0x0}, 0x20008810) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0ffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) 455.484924ms ago: executing program 1 (id=4097): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000072000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 313.969012ms ago: executing program 1 (id=4098): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, @perf_config_ext={0x7fffffff, 0x7f}, 0x1148c6, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd20, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9101a04000a740100067402000000f00000800c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) 251.106736ms ago: executing program 3 (id=4099): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 155.975941ms ago: executing program 3 (id=4100): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000ebffff0b0000000c000000020000000000000000000004000000000330"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000042d600006d00009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 48.551547ms ago: executing program 1 (id=4101): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x3, @empty, 0xe}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000480)="9327b2635bccd3c3e409869943df2225b3f35abed524ad", 0x17}, {&(0x7f0000000580)="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", 0x56d}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010010017d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 0s ago: executing program 3 (id=4102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000140)) kernel console output (not intermixed with test programs): g later): interface not active [ 288.170103][ T6689] Bluetooth: hci1: command 0x0409 tx timeout [ 288.342928][T11241] device hsr_slave_0 entered promiscuous mode [ 288.377221][T11241] device hsr_slave_1 entered promiscuous mode [ 288.394223][T11241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.406718][T11241] Cannot create hsr debugfs directory [ 288.431952][T11368] FAULT_INJECTION: forcing a failure. [ 288.431952][T11368] name failslab, interval 1, probability 0, space 0, times 0 [ 288.455873][T11368] CPU: 0 PID: 11368 Comm: syz.3.2478 Not tainted syzkaller #0 [ 288.463376][T11368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.473433][T11368] Call Trace: [ 288.476721][T11368] [ 288.479654][T11368] dump_stack_lvl+0x188/0x250 [ 288.484341][T11368] ? show_regs_print_info+0x20/0x20 [ 288.489540][T11368] ? load_image+0x400/0x400 [ 288.494057][T11368] ? __might_sleep+0xf0/0xf0 [ 288.498664][T11368] ? __lock_acquire+0x7d10/0x7d10 [ 288.503702][T11368] should_fail+0x38c/0x4c0 [ 288.508138][T11368] should_failslab+0x5/0x20 [ 288.512661][T11368] slab_pre_alloc_hook+0x51/0xc0 [ 288.517619][T11368] kmem_cache_alloc_trace+0x47/0x2a0 [ 288.522920][T11368] ? rtnl_newlink+0x183/0x1a50 [ 288.527707][T11368] rtnl_newlink+0x183/0x1a50 [ 288.532347][T11368] ? read_lock_is_recursive+0x10/0x10 [ 288.537760][T11368] ? mark_lock+0x94/0x320 [ 288.542106][T11368] ? rtnl_setlink+0x500/0x500 [ 288.546805][T11368] ? __lock_acquire+0x13bc/0x7d10 [ 288.551860][T11368] ? finish_lock_switch+0x12f/0x280 [ 288.557080][T11368] ? finish_lock_switch+0x12f/0x280 [ 288.562300][T11368] ? verify_lock_unused+0x140/0x140 [ 288.567520][T11368] ? perf_trace_lock_acquire+0xed/0x3e0 [ 288.573089][T11368] ? __switch_to_asm+0x34/0x60 [ 288.577874][T11368] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 288.584502][T11368] ? rcu_lock_acquire+0x30/0x30 [ 288.589643][T11368] ? __mutex_lock_common+0x1552/0x2400 [ 288.595219][T11368] ? __lock_acquire+0x7d10/0x7d10 [ 288.600261][T11368] ? do_raw_spin_lock+0x128/0x2f0 [ 288.605382][T11368] ? __rwlock_init+0x140/0x140 [ 288.610168][T11368] ? do_raw_spin_unlock+0x11d/0x230 [ 288.615384][T11368] ? __mutex_lock_common+0x155c/0x2400 [ 288.620876][T11368] ? rtnetlink_rcv_msg+0x7ee/0xf30 [ 288.626011][T11368] ? mutex_lock_io_nested+0x60/0x60 [ 288.631260][T11368] ? rtnl_setlink+0x500/0x500 [ 288.635956][T11368] rtnetlink_rcv_msg+0x844/0xf30 [ 288.640913][T11368] ? rtnetlink_bind+0x80/0x80 [ 288.645600][T11368] ? __lock_acquire+0x12e8/0x7d10 [ 288.650652][T11368] ? perf_trace_lock_acquire+0xed/0x3e0 [ 288.656213][T11368] ? verify_lock_unused+0x140/0x140 [ 288.661437][T11368] ? verify_lock_unused+0x140/0x140 [ 288.666655][T11368] ? perf_trace_lock_acquire+0xed/0x3e0 [ 288.672224][T11368] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 288.678847][T11368] netlink_rcv_skb+0x1f5/0x440 [ 288.683623][T11368] ? rtnetlink_bind+0x80/0x80 [ 288.688321][T11368] ? netlink_ack+0xb50/0xb50 [ 288.692937][T11368] netlink_unicast+0x774/0x920 [ 288.697737][T11368] netlink_sendmsg+0x8ba/0xbe0 [ 288.702528][T11368] ? netlink_getsockopt+0x570/0x570 [ 288.707821][T11368] ? aa_sock_msg_perm+0x94/0x150 [ 288.712773][T11368] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 288.718157][T11368] ? security_socket_sendmsg+0x7c/0xa0 [ 288.723635][T11368] ? netlink_getsockopt+0x570/0x570 [ 288.728848][T11368] ____sys_sendmsg+0x5b7/0x8f0 [ 288.733644][T11368] ? __sys_sendmsg_sock+0x30/0x30 [ 288.738689][T11368] ? import_iovec+0x6f/0xa0 [ 288.743188][T11368] ___sys_sendmsg+0x236/0x2e0 [ 288.747868][T11368] ? __sys_sendmsg+0x2a0/0x2a0 [ 288.752641][T11368] ? vfs_write+0x8b2/0xd60 [ 288.757076][T11368] __se_sys_sendmsg+0x1af/0x290 [ 288.761925][T11368] ? __x64_sys_sendmsg+0x80/0x80 [ 288.766863][T11368] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 288.772837][T11368] ? lockdep_hardirqs_on+0x94/0x140 [ 288.778026][T11368] do_syscall_64+0x4c/0xa0 [ 288.782424][T11368] ? clear_bhb_loop+0x30/0x80 [ 288.787081][T11368] ? clear_bhb_loop+0x30/0x80 [ 288.791757][T11368] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.797636][T11368] RIP: 0033:0x7f3109c99eb9 [ 288.802041][T11368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.821682][T11368] RSP: 002b:00007f3107ed4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.830084][T11368] RAX: ffffffffffffffda RBX: 00007f3109f15090 RCX: 00007f3109c99eb9 [ 288.838045][T11368] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 288.846003][T11368] RBP: 00007f3107ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 288.853973][T11368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.861952][T11368] R13: 00007f3109f15128 R14: 00007f3109f15090 R15: 00007ffd25bd9028 [ 288.869953][T11368] [ 288.945195][T11374] validate_nla: 2 callbacks suppressed [ 288.945210][T11374] netlink: 'syz.5.2480': attribute type 10 has an invalid length. [ 289.150848][T11390] __nla_validate_parse: 7 callbacks suppressed [ 289.150864][T11390] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.2485'. [ 289.376009][T11407] netlink: 'syz.3.2491': attribute type 28 has an invalid length. [ 289.392297][T11407] netlink: 'syz.3.2491': attribute type 4 has an invalid length. [ 289.400644][T11407] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2491'. [ 290.249959][ T4246] Bluetooth: hci1: command 0x041b tx timeout [ 290.373917][T11241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 290.420294][T11241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 290.457212][T11241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 290.487013][T11241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 290.507699][T11447] netlink: 'syz.5.2503': attribute type 33 has an invalid length. [ 290.526626][T11447] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2503'. [ 290.676392][T11462] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2506'. [ 290.819061][T11241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.935930][T11471] netlink: 'syz.0.2509': attribute type 3 has an invalid length. [ 290.972334][T11471] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2509'. [ 290.973477][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.994897][T11469] netlink: 'syz.0.2509': attribute type 3 has an invalid length. [ 291.004615][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.010350][T11469] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2509'. [ 291.032261][T11241] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.069957][T11470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.090393][T11470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.137708][T11470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.190754][T11470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.217158][T11470] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 291.228519][T11470] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 291.435958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.456502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.490945][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.498094][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.542251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.571369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.587051][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.594289][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.616776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.724591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.780886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.812080][T11547] netlink: 'syz.0.2518': attribute type 29 has an invalid length. [ 291.832313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.869523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.878646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.894557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.942557][T11547] netlink: 'syz.0.2518': attribute type 29 has an invalid length. [ 291.977255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.995634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.024505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.046795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.088951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.140233][ T479] device hsr_slave_0 left promiscuous mode [ 292.155329][ T479] device hsr_slave_1 left promiscuous mode [ 292.178264][ T479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.188583][ T479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.213657][ T479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.231888][ T479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.244382][ T479] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 292.258563][ T479] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 292.274421][ T479] bridge0: port 4(dummy0) entered disabled state [ 292.297646][ T479] bridge0: port 3(.`) entered disabled state [ 292.311724][ T479] device bridge_slave_1 left promiscuous mode [ 292.325769][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.333405][T11543] Bluetooth: hci1: command 0x040f tx timeout [ 292.350989][ T479] device bridge_slave_0 left promiscuous mode [ 292.363971][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.584670][ T479] team0 (unregistering): Port device geneve1 removed [ 292.674901][ T479] team0 (unregistering): Port device team_slave_1 removed [ 292.695186][ T479] team0 (unregistering): Port device team_slave_0 removed [ 292.715759][ T479] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.731180][ T479] device bond_slave_1 left promiscuous mode [ 292.816491][ T479] .` (unregistering): Released all slaves [ 292.921591][T11241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.930786][T11552] netlink: 'syz.0.2518': attribute type 29 has an invalid length. [ 293.101126][T11583] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2523'. [ 293.425237][T11597] netlink: 'syz.5.2528': attribute type 46 has an invalid length. [ 293.450187][T11597] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2528'. [ 293.511554][T11241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.518689][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.536719][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.551112][T11599] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2527'. [ 293.610611][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.640407][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.659822][T11603] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2527'. [ 293.671610][T11610] device veth0_vlan left promiscuous mode [ 293.682774][T11610] device veth0_vlan entered promiscuous mode [ 293.696968][T11610] team0: Device veth0_vlan failed to register rx_handler [ 293.747291][T11241] device veth0_vlan entered promiscuous mode [ 293.765042][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.777983][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.824613][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.849003][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.913977][T11241] device veth1_vlan entered promiscuous mode [ 293.949768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 294.027399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.065670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.097201][T11241] device veth0_macvtap entered promiscuous mode [ 294.146541][T11241] device veth1_macvtap entered promiscuous mode [ 294.190846][T11630] validate_nla: 3 callbacks suppressed [ 294.190860][T11630] netlink: 'syz.3.2537': attribute type 3 has an invalid length. [ 294.214914][T11628] netlink: 'syz.0.2536': attribute type 12 has an invalid length. [ 294.230091][T11628] __nla_validate_parse: 2 callbacks suppressed [ 294.230136][T11628] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.2536'. [ 294.259914][T11630] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2537'. [ 294.333387][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.409785][T11544] Bluetooth: hci1: command 0x0419 tx timeout [ 294.429127][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.461566][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.503502][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.531901][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.563010][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.624679][T11241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.653940][T11650] netlink: 'syz.3.2542': attribute type 10 has an invalid length. [ 294.693881][T11650] device veth0_vlan left promiscuous mode [ 294.708931][T11655] netlink: 'syz.0.2544': attribute type 9 has an invalid length. [ 294.730317][T11650] device veth0_vlan entered promiscuous mode [ 294.759890][T11650] team0: Device veth0_vlan failed to register rx_handler [ 294.764501][T11655] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2544'. [ 294.840757][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.849170][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 294.880793][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.913784][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.949835][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.006201][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.036910][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.058123][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.078720][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.102191][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.125882][T11241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.200344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.226444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.262932][T11241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.285198][T11241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.332267][T11241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.397564][T11241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.520328][T11670] netlink: 'syz.3.2549': attribute type 12 has an invalid length. [ 295.537262][T11670] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.2549'. [ 295.619412][ T4742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.649863][ T4742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.705520][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 295.764943][ T4742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.796515][ T4742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.798741][T11687] netlink: 'syz.5.2555': attribute type 10 has an invalid length. [ 295.849699][T11687] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2555'. [ 295.863309][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.023743][T11692] device wlan0 entered promiscuous mode [ 296.127360][T11702] netlink: 'syz.5.2559': attribute type 10 has an invalid length. [ 296.173840][T11702] device veth0_vlan left promiscuous mode [ 296.200426][T11702] device veth0_vlan entered promiscuous mode [ 296.216170][T11712] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2563'. [ 296.230428][T11702] team0: Device veth0_vlan failed to register rx_handler [ 296.319478][T11706] device wlan0 left promiscuous mode [ 296.709126][T11726] netlink: 'syz.5.2565': attribute type 12 has an invalid length. [ 296.739806][T11726] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.2565'. [ 296.824017][T11728] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2567'. [ 296.836782][T11742] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.2573'. [ 296.846238][T11732] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2563'. [ 297.090852][T11752] netlink: 'syz.2.2577': attribute type 10 has an invalid length. [ 297.363231][T11761] netlink: 'syz.1.2581': attribute type 2 has an invalid length. [ 297.643434][T11776] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 297.844687][T11790] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 298.087009][T11806] device syzkaller0 entered promiscuous mode [ 299.298719][T11857] validate_nla: 9 callbacks suppressed [ 299.298735][T11857] netlink: 'syz.1.2619': attribute type 10 has an invalid length. [ 299.387702][T11856] netlink: 'syz.5.2621': attribute type 10 has an invalid length. [ 299.515130][T11871] netlink: 'syz.3.2626': attribute type 10 has an invalid length. [ 299.566781][T11871] FAULT_INJECTION: forcing a failure. [ 299.566781][T11871] name failslab, interval 1, probability 0, space 0, times 0 [ 299.615835][T11871] CPU: 1 PID: 11871 Comm: syz.3.2626 Not tainted syzkaller #0 [ 299.623337][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.633410][T11871] Call Trace: [ 299.636701][T11871] [ 299.639640][T11871] dump_stack_lvl+0x188/0x250 [ 299.644334][T11871] ? show_regs_print_info+0x20/0x20 [ 299.649539][T11871] ? load_image+0x400/0x400 [ 299.654056][T11871] ? __might_sleep+0xf0/0xf0 [ 299.658661][T11871] ? __lock_acquire+0x7d10/0x7d10 [ 299.663712][T11871] should_fail+0x38c/0x4c0 [ 299.668437][T11871] should_failslab+0x5/0x20 [ 299.672953][T11871] slab_pre_alloc_hook+0x51/0xc0 [ 299.677915][T11871] kmem_cache_alloc_node+0x47/0x2d0 [ 299.683118][T11871] ? __alloc_skb+0xf4/0x750 [ 299.687635][T11871] __alloc_skb+0xf4/0x750 [ 299.691984][T11871] netlink_ack+0x372/0xb50 [ 299.696421][T11871] ? netlink_dump+0xcf0/0xcf0 [ 299.701119][T11871] netlink_rcv_skb+0x27a/0x440 [ 299.705891][T11871] ? rtnetlink_bind+0x80/0x80 [ 299.710576][T11871] ? netlink_ack+0xb50/0xb50 [ 299.715186][T11871] netlink_unicast+0x774/0x920 [ 299.719965][T11871] netlink_sendmsg+0x8ba/0xbe0 [ 299.724736][T11871] ? netlink_getsockopt+0x570/0x570 [ 299.729934][T11871] ? aa_sock_msg_perm+0x94/0x150 [ 299.734870][T11871] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 299.740150][T11871] ? security_socket_sendmsg+0x7c/0xa0 [ 299.745611][T11871] ? netlink_getsockopt+0x570/0x570 [ 299.750806][T11871] ____sys_sendmsg+0x5b7/0x8f0 [ 299.755580][T11871] ? __sys_sendmsg_sock+0x30/0x30 [ 299.760614][T11871] ? import_iovec+0x6f/0xa0 [ 299.765123][T11871] ___sys_sendmsg+0x236/0x2e0 [ 299.769818][T11871] ? __sys_sendmsg+0x2a0/0x2a0 [ 299.774597][T11871] ? vfs_write+0x8b2/0xd60 [ 299.779050][T11871] __se_sys_sendmsg+0x1af/0x290 [ 299.783909][T11871] ? __x64_sys_sendmsg+0x80/0x80 [ 299.788851][T11871] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 299.794853][T11871] ? lockdep_hardirqs_on+0x94/0x140 [ 299.800058][T11871] do_syscall_64+0x4c/0xa0 [ 299.804469][T11871] ? clear_bhb_loop+0x30/0x80 [ 299.809140][T11871] ? clear_bhb_loop+0x30/0x80 [ 299.813815][T11871] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.819707][T11871] RIP: 0033:0x7f3109c99eb9 [ 299.824122][T11871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.843728][T11871] RSP: 002b:00007f3107ef5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.852149][T11871] RAX: ffffffffffffffda RBX: 00007f3109f14fa0 RCX: 00007f3109c99eb9 [ 299.860137][T11871] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 299.868115][T11871] RBP: 00007f3107ef5090 R08: 0000000000000000 R09: 0000000000000000 [ 299.876089][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.884070][T11871] R13: 00007f3109f15038 R14: 00007f3109f14fa0 R15: 00007ffd25bd9028 [ 299.892075][T11871] [ 300.170925][T11868] netlink: 'syz.0.2622': attribute type 2 has an invalid length. [ 300.207818][T11885] netlink: 'syz.5.2629': attribute type 10 has an invalid length. [ 300.277510][T11868] netlink: 'syz.0.2622': attribute type 1 has an invalid length. [ 300.333082][T11868] __nla_validate_parse: 8 callbacks suppressed [ 300.333194][T11868] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2622'. [ 300.796226][T11910] delete_channel: no stack [ 300.809552][T11910] delete_channel: no stack [ 300.846347][T11910] netlink: 'syz.3.2640': attribute type 7 has an invalid length. [ 300.916549][T11915] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.2643'. [ 301.167799][T11930] netlink: 'syz.1.2658': attribute type 8 has an invalid length. [ 301.216511][T11930] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2658'. [ 301.323259][T11934] netlink: 'syz.2.2649': attribute type 2 has an invalid length. [ 301.370360][T11934] netlink: 'syz.2.2649': attribute type 1 has an invalid length. [ 301.389021][T11934] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2649'. [ 301.531434][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 301.583907][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 301.666938][T11942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.618877][T12006] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2675'. [ 302.673551][T12009] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2676'. [ 303.120140][T12029] device veth0_vlan left promiscuous mode [ 303.130681][T12029] device veth0_vlan entered promiscuous mode [ 303.161564][T11988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.188792][T12029] team0: Device veth0_vlan failed to register rx_handler [ 303.325460][T12042] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2686'. [ 303.371457][T12046] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.2685'. [ 304.087340][T12081] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2700'. [ 304.572442][T12095] validate_nla: 4 callbacks suppressed [ 304.572460][T12095] netlink: 'syz.1.2706': attribute type 10 has an invalid length. [ 304.655743][T12095] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2706'. [ 304.740208][T12095] device bond0 entered promiscuous mode [ 304.786180][T12095] device bond_slave_0 entered promiscuous mode [ 304.844943][T12095] device bond_slave_1 entered promiscuous mode [ 305.045074][T12105] device wlan0 entered promiscuous mode [ 305.880834][T12148] netlink: 'syz.0.2724': attribute type 27 has an invalid length. [ 305.929031][T12148] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 305.972031][T12150] netlink: 'syz.1.2725': attribute type 30 has an invalid length. [ 306.124884][T12164] __nla_validate_parse: 1 callbacks suppressed [ 306.124934][T12164] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2728'. [ 306.689487][T12189] netlink: 'syz.0.2737': attribute type 2 has an invalid length. [ 306.707255][T12189] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2737'. [ 306.771989][T12191] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2738'. [ 306.799733][T12191] netlink: 'syz.2.2738': attribute type 2 has an invalid length. [ 307.189437][T12210] netlink: 'syz.2.2743': attribute type 27 has an invalid length. [ 307.203281][T12210] C: renamed from team_slave_0 [ 307.313322][T12213] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2745'. [ 307.325173][T12217] netlink: 'syz.0.2747': attribute type 27 has an invalid length. [ 307.404154][T12217] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 308.004379][T12247] netlink: 'syz.5.2759': attribute type 27 has an invalid length. [ 308.075458][T12247] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 308.214540][T12251] netlink: 'syz.2.2760': attribute type 25 has an invalid length. [ 308.995171][T12291] netlink: 'syz.1.2775': attribute type 27 has an invalid length. [ 309.077465][T12291] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 309.934474][T12321] netlink: 'syz.0.2787': attribute type 10 has an invalid length. [ 310.243809][T12343] netlink: 'syz.2.2793': attribute type 10 has an invalid length. [ 310.274460][T12343] FAULT_INJECTION: forcing a failure. [ 310.274460][T12343] name failslab, interval 1, probability 0, space 0, times 0 [ 310.299990][T12343] CPU: 1 PID: 12343 Comm: syz.2.2793 Not tainted syzkaller #0 [ 310.307502][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.317578][T12343] Call Trace: [ 310.320869][T12343] [ 310.323895][T12343] dump_stack_lvl+0x188/0x250 [ 310.328607][T12343] ? show_regs_print_info+0x20/0x20 [ 310.333825][T12343] ? load_image+0x400/0x400 [ 310.338343][T12343] ? __might_sleep+0xf0/0xf0 [ 310.342952][T12343] ? __lock_acquire+0x7d10/0x7d10 [ 310.347996][T12343] should_fail+0x38c/0x4c0 [ 310.352434][T12343] should_failslab+0x5/0x20 [ 310.356961][T12343] slab_pre_alloc_hook+0x51/0xc0 [ 310.361920][T12343] __kmalloc_node_track_caller+0x68/0x3a0 [ 310.367744][T12343] ? netlink_ack+0x372/0xb50 [ 310.372336][T12343] ? kmem_cache_alloc_node+0x162/0x2d0 [ 310.377799][T12343] ? __alloc_skb+0xf4/0x750 [ 310.382315][T12343] ? netlink_ack+0x372/0xb50 [ 310.386919][T12343] __alloc_skb+0x22c/0x750 [ 310.391355][T12343] netlink_ack+0x372/0xb50 [ 310.395938][T12343] ? netlink_dump+0xcf0/0xcf0 [ 310.400780][T12343] netlink_rcv_skb+0x27a/0x440 [ 310.405561][T12343] ? rtnetlink_bind+0x80/0x80 [ 310.410243][T12343] ? netlink_ack+0xb50/0xb50 [ 310.414861][T12343] netlink_unicast+0x774/0x920 [ 310.419641][T12343] netlink_sendmsg+0x8ba/0xbe0 [ 310.424417][T12343] ? netlink_getsockopt+0x570/0x570 [ 310.429715][T12343] ? aa_sock_msg_perm+0x94/0x150 [ 310.434656][T12343] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 310.439936][T12343] ? security_socket_sendmsg+0x7c/0xa0 [ 310.445400][T12343] ? netlink_getsockopt+0x570/0x570 [ 310.450595][T12343] ____sys_sendmsg+0x5b7/0x8f0 [ 310.455376][T12343] ? __sys_sendmsg_sock+0x30/0x30 [ 310.460420][T12343] ? import_iovec+0x6f/0xa0 [ 310.464931][T12343] ___sys_sendmsg+0x236/0x2e0 [ 310.469618][T12343] ? __sys_sendmsg+0x2a0/0x2a0 [ 310.474400][T12343] ? vfs_write+0x8b2/0xd60 [ 310.478850][T12343] __se_sys_sendmsg+0x1af/0x290 [ 310.483707][T12343] ? __x64_sys_sendmsg+0x80/0x80 [ 310.488683][T12343] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 310.494684][T12343] ? lockdep_hardirqs_on+0x94/0x140 [ 310.499899][T12343] do_syscall_64+0x4c/0xa0 [ 310.504319][T12343] ? clear_bhb_loop+0x30/0x80 [ 310.508997][T12343] ? clear_bhb_loop+0x30/0x80 [ 310.513674][T12343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.519570][T12343] RIP: 0033:0x7fd29492ceb9 [ 310.523990][T12343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.543601][T12343] RSP: 002b:00007fd292b88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.552018][T12343] RAX: ffffffffffffffda RBX: 00007fd294ba7fa0 RCX: 00007fd29492ceb9 [ 310.559990][T12343] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 310.567959][T12343] RBP: 00007fd292b88090 R08: 0000000000000000 R09: 0000000000000000 [ 310.575930][T12343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.583900][T12343] R13: 00007fd294ba8038 R14: 00007fd294ba7fa0 R15: 00007ffcd899c9b8 [ 310.591903][T12343] [ 310.694328][T12350] netlink: 'syz.5.2794': attribute type 2 has an invalid length. [ 310.719857][T12350] netlink: 'syz.5.2794': attribute type 4 has an invalid length. [ 310.727756][T12350] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2794'. [ 311.809144][T12365] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2801'. [ 312.061307][T12374] netlink: 'syz.0.2803': attribute type 8 has an invalid length. [ 312.145329][T12374] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2803'. [ 312.549521][T12385] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2811'. [ 312.939995][T12400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2818'. [ 314.108278][T12438] netlink: 'syz.1.2830': attribute type 46 has an invalid length. [ 314.139791][T12438] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2830'. [ 314.229214][T12418] chnl_net:caif_netlink_parms(): no params data found [ 314.408250][T12418] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.448582][T12418] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.483421][T12418] device bridge_slave_0 entered promiscuous mode [ 314.492506][T12418] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.499767][T12418] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.508247][T12418] device bridge_slave_1 entered promiscuous mode [ 314.570770][T12418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.624710][T12418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.626674][T12447] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2833'. [ 314.747724][T12418] team0: Port device team_slave_0 added [ 314.778788][T12454] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2836'. [ 314.801642][T12418] team0: Port device team_slave_1 added [ 314.877826][T12418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.913238][T12418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.982574][T12418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.026866][T12461] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2839'. [ 315.084685][T12462] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2839'. [ 315.130206][T12418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.157624][T12418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.259343][T12418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.392902][T12418] device hsr_slave_0 entered promiscuous mode [ 315.400269][T12418] device hsr_slave_1 entered promiscuous mode [ 315.407050][T12418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.416444][T12418] Cannot create hsr debugfs directory [ 315.458461][ T1228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.551725][ T1228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.615850][ T1228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.686191][ T1228] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.886082][T11508] Bluetooth: hci3: command 0x0409 tx timeout [ 316.972069][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.978453][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.127470][T12506] netlink: 'syz.1.2846': attribute type 8 has an invalid length. [ 317.150108][T12506] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2846'. [ 317.173606][T12513] netlink: 'syz.0.2845': attribute type 46 has an invalid length. [ 317.188807][T12513] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2845'. [ 317.211536][T12418] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 317.282294][T12418] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 317.334927][T12517] netlink: 'syz.2.2848': attribute type 40 has an invalid length. [ 317.404030][T12522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2847'. [ 317.417349][T12418] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 317.451632][T12521] netlink: 'syz.0.2849': attribute type 46 has an invalid length. [ 317.469908][T12521] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2849'. [ 317.511968][T12418] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 317.613595][T12527] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2851'. [ 317.713042][T12530] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2852'. [ 317.835293][T12527] netlink: 'syz.2.2851': attribute type 20 has an invalid length. [ 317.930185][T12015] Bluetooth: hci3: command 0x041b tx timeout [ 318.483965][T12418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.506140][T12547] netlink: 'syz.1.2857': attribute type 10 has an invalid length. [ 318.547470][T12547] device veth0_vlan left promiscuous mode [ 318.557742][T12547] device veth0_vlan entered promiscuous mode [ 318.583927][T12547] team0: Device veth0_vlan failed to register rx_handler [ 318.690492][T12552] netlink: 'syz.1.2859': attribute type 3 has an invalid length. [ 318.698434][T12552] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2859'. [ 320.019919][T12015] Bluetooth: hci3: command 0x040f tx timeout [ 321.713693][T12418] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.759800][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.767740][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.787391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.796807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.808222][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.815347][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.832902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.842096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.855423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.866493][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.873613][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.888937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.898050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.924666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.939295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.948995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.958238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.968239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.976258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.984881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.999172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.008043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.019778][T12418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 322.090748][T11507] Bluetooth: hci3: command 0x0419 tx timeout [ 322.132869][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.140844][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.152622][T12418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.173350][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.182495][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.199157][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.208233][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.218795][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.227243][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.236133][T12418] device veth0_vlan entered promiscuous mode [ 322.260706][T12418] device veth1_vlan entered promiscuous mode [ 322.278434][ T1228] device hsr_slave_0 left promiscuous mode [ 322.286450][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.294765][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.302984][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.311106][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.318750][ T1228] device bridge_slave_1 left promiscuous mode [ 322.325932][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.337440][ T1228] device veth1_vlan left promiscuous mode [ 322.541165][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 322.553384][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 322.567653][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.615958][ T1228] team0 (unregistering): Port device bond0 removed [ 322.635052][ T1228] bond0 (unregistering): Released all slaves [ 322.678165][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 322.687155][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 322.695337][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 322.704104][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 322.715698][T12418] device veth0_macvtap entered promiscuous mode [ 322.728273][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 322.744252][T12418] device veth1_macvtap entered promiscuous mode [ 322.767552][T12418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.778467][T12418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.788924][T12418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.799509][T12418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.809986][T12418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.820739][T12418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.832145][T12418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.843351][T12418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.854865][T12418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.864949][T12418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.875441][T12418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.885289][T12418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.896290][T12418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.907854][T12418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.918903][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.927967][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.937191][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.946312][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.958939][T12418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.968122][T12418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.976961][T12418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.986211][T12418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.070068][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.078103][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.096783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 323.110413][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.118491][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.134608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 323.433154][T12574] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.2861'. [ 323.660911][T12578] netlink: 'syz.3.2860': attribute type 46 has an invalid length. [ 323.684226][T12578] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2860'. [ 323.996489][T12571] chnl_net:caif_netlink_parms(): no params data found [ 324.272178][T12571] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.333074][T12571] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.379862][T12571] device bridge_slave_0 entered promiscuous mode [ 324.426447][T12571] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.453754][T12571] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.491749][T12571] device bridge_slave_1 entered promiscuous mode [ 324.604489][T12571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.653397][T12571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.729184][T12626] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2878'. [ 324.774235][T12571] team0: Port device team_slave_0 added [ 325.529813][T11508] Bluetooth: hci4: command 0x0409 tx timeout [ 327.512888][T12571] team0: Port device team_slave_1 added [ 327.640296][T11508] Bluetooth: hci4: command 0x041b tx timeout [ 327.706434][T12571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.745424][T12571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.842234][T12571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.886206][T12571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.926773][T12571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.976939][T12571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.044288][T12571] device hsr_slave_0 entered promiscuous mode [ 328.082695][T12571] device hsr_slave_1 entered promiscuous mode [ 328.099462][T12571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.108941][T12571] Cannot create hsr debugfs directory [ 328.401176][T12571] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.689806][T11508] Bluetooth: hci4: command 0x040f tx timeout [ 331.472268][T12571] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.673110][T12687] netlink: 'syz.1.2898': attribute type 9 has an invalid length. [ 331.687240][T12687] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2898'. [ 331.787601][T11507] Bluetooth: hci4: command 0x0419 tx timeout [ 331.825732][T12677] chnl_net:caif_netlink_parms(): no params data found [ 331.897895][T12571] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.056103][T12571] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.200064][T12677] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.207837][T12677] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.216074][T12677] device bridge_slave_0 entered promiscuous mode [ 332.224974][T12677] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.232227][T12677] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.242102][T12677] device bridge_slave_1 entered promiscuous mode [ 332.307724][T12677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.383615][T12677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.529811][T12677] team0: Port device team_slave_0 added [ 332.558071][T12571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 333.289918][T11544] Bluetooth: hci0: command 0x0409 tx timeout [ 335.224995][T12677] team0: Port device team_slave_1 added [ 335.281761][T12571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 335.344691][T12571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 335.360727][T12571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 335.369791][T12017] Bluetooth: hci0: command 0x041b tx timeout [ 335.384141][T12735] netlink: 'syz.3.2912': attribute type 10 has an invalid length. [ 335.393537][T12735] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2912'. [ 335.403064][T12735] device bond0 entered promiscuous mode [ 335.408815][T12735] device bond_slave_0 entered promiscuous mode [ 335.415817][T12735] device bond_slave_1 entered promiscuous mode [ 335.430265][T12735] bridge0: port 3(bond0) entered blocking state [ 335.440191][T12735] bridge0: port 3(bond0) entered disabled state [ 335.461848][T12735] bridge0: port 3(bond0) entered blocking state [ 335.468217][T12735] bridge0: port 3(bond0) entered forwarding state [ 335.485894][T12677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.510666][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.538728][T12677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.590340][T12677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.597316][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.633886][T12677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.732827][T12677] device hsr_slave_0 entered promiscuous mode [ 335.790057][T12677] device hsr_slave_1 entered promiscuous mode [ 335.811380][T12677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.829185][T12677] Cannot create hsr debugfs directory [ 335.943780][T12571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.007662][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 336.025051][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.037381][T12571] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.067210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.082449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.102188][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.109323][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.156693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 336.177733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.194359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.206346][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.213506][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.230702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 336.247378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 336.321764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 336.340007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.348870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.361077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.370129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.378668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.388051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.403223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.435059][T12571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.452267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.607549][T12677] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.623673][T12677] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.640403][T12677] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.670197][T12677] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 336.697442][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.705589][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.732351][T12571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.779821][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.788562][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.818639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.834181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.854789][T12571] device veth0_vlan entered promiscuous mode [ 336.862657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.870756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.891327][T12677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.909179][T12677] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.920091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 336.927733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.943319][T12571] device veth1_vlan entered promiscuous mode [ 336.960069][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 336.968494][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.978375][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.987936][ T4742] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.995003][ T4742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.026069][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 337.037964][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 337.046613][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 337.056713][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 337.066777][ T4742] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.073847][ T4742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.095071][T12571] device veth0_macvtap entered promiscuous mode [ 337.106703][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 337.115740][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 337.124718][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 337.137012][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 337.145836][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.154516][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.163436][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 337.174242][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.187195][T12571] device veth1_macvtap entered promiscuous mode [ 337.199198][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.209127][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 337.217957][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 337.235283][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.249824][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.260100][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.270647][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.280853][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.292736][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.303554][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.314133][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.325553][T12571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.346441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.355293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.364047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 337.373006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 337.382065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 337.392168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 337.403091][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.414513][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.424504][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.436312][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.446421][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.458390][T12016] Bluetooth: hci0: command 0x040f tx timeout [ 337.466243][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.476103][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.486647][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.497705][T12571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.510949][T12677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 337.527843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.537019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.560032][T12571] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.568754][T12571] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.579289][T12571] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.588497][T12571] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.653443][ T1228] device hsr_slave_0 left promiscuous mode [ 337.659986][ T1228] device hsr_slave_1 left promiscuous mode [ 337.666606][ T1228] bridge0: port 3(team0) entered disabled state [ 337.674870][ T1228] device bridge_slave_1 left promiscuous mode [ 337.682820][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.692691][ T1228] device bridge_slave_0 left promiscuous mode [ 337.699007][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.710497][ T1228] device veth1_macvtap left promiscuous mode [ 337.716532][ T1228] device veth1_vlan left promiscuous mode [ 337.877162][ T1228] device geneve1 left promiscuous mode [ 337.885885][ T1228] team0 (unregistering): Port device geneve1 removed [ 337.957351][ T1228] device team_slave_1 left promiscuous mode [ 337.966910][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 337.981020][ T1228] device team_slave_0 left promiscuous mode [ 337.987533][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 338.001120][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.011002][ T1228] device bond_slave_1 left promiscuous mode [ 338.068894][ T1228] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 338.078406][ T1228] device bridge0 left promiscuous mode [ 338.084888][ T1228] bond0 (unregistering): Released all slaves [ 338.165094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 338.173864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 338.195339][T12677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.282703][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.298689][ T5070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.322724][ T5070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.329007][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.356020][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 338.364752][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 338.801013][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 338.820842][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 338.855640][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 338.864618][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 338.893929][T12677] device veth0_vlan entered promiscuous mode [ 338.901527][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.914090][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.955646][T12677] device veth1_vlan entered promiscuous mode [ 339.019294][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 339.035413][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 339.061182][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.091477][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.123283][T12677] device veth0_macvtap entered promiscuous mode [ 339.144464][T12677] device veth1_macvtap entered promiscuous mode [ 339.181433][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.197741][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.217668][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.245122][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.275370][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.296253][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.317476][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.328846][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.359671][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.399662][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.411510][T12677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.436939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.445291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.463343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.477980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.492057][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.509749][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.519578][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.529886][T12016] Bluetooth: hci0: command 0x0419 tx timeout [ 339.538345][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.548220][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.565165][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.575082][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.593776][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.605000][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.620980][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.637533][T12677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.653212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.670667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.681958][T12677] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.694127][T12677] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.703291][T12677] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.712133][T12677] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.796770][ T5070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.810101][ T5070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.818552][ T4742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.822759][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.832195][ T4742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.852313][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.962018][T12799] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2935'. [ 343.571318][T12862] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 343.657843][T12862] netlink: 'syz.3.2942': attribute type 39 has an invalid length. [ 343.856931][T12862] device hsr_slave_1 left promiscuous mode [ 344.162339][T12872] netlink: 'syz.1.2947': attribute type 4 has an invalid length. [ 344.208051][T12872] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2947'. [ 346.158011][T12886] device wlan0 entered promiscuous mode [ 346.391949][T12910] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2958'. [ 346.417604][T12910] netlink: 'syz.0.2958': attribute type 2 has an invalid length. [ 346.707378][T12927] netlink: 'syz.0.2964': attribute type 10 has an invalid length. [ 346.737538][T12927] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2964'. [ 346.771411][T12927] device bond0 entered promiscuous mode [ 346.782562][T12931] netlink: 'syz.6.2965': attribute type 4 has an invalid length. [ 346.791078][T12927] device bond_slave_0 entered promiscuous mode [ 346.801348][T12927] device bond_slave_1 entered promiscuous mode [ 346.811372][T12931] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2965'. [ 346.828327][T12927] bridge0: port 3(bond0) entered blocking state [ 346.855946][T12927] bridge0: port 3(bond0) entered disabled state [ 346.887693][T12927] bridge0: port 3(bond0) entered blocking state [ 346.894105][T12927] bridge0: port 3(bond0) entered forwarding state [ 348.949846][T12942] netlink: 'syz.6.2969': attribute type 27 has an invalid length. [ 348.963900][T12942] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 348.987520][T12947] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 349.001017][T12947] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 349.012245][T12947] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 349.261508][T12981] netlink: 'syz.3.2981': attribute type 4 has an invalid length. [ 349.309440][T12981] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2981'. [ 349.517457][T12991] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2984'. [ 351.786729][T12991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.797985][T12991] device bond_slave_0 left promiscuous mode [ 351.815895][T12991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.825854][T12991] device bond_slave_1 left promiscuous mode [ 351.837962][T12991] bond0 (unregistering): Released all slaves [ 353.295021][T13053] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3009'. [ 353.667831][T13053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.851469][T13053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.984736][T13053] bond0 (unregistering): Released all slaves [ 354.153808][T13077] netlink: 'syz.3.3014': attribute type 39 has an invalid length. [ 354.890199][T12017] Bluetooth: hci5: command 0x0406 tx timeout [ 355.863922][T13123] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3029'. [ 355.967578][T13123] bridge0: port 3(bond0) entered disabled state [ 356.155886][T13123] bridge0: port 3(bond0) entered disabled state [ 356.352447][T13123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.377814][T13123] device bond_slave_0 left promiscuous mode [ 356.561453][T13123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.669709][T13123] device bond_slave_1 left promiscuous mode [ 356.750447][T13123] bond0 (unregistering): Released all slaves [ 356.798982][T13140] netlink: 'syz.0.3033': attribute type 39 has an invalid length. [ 358.085728][T13162] netlink: 'syz.2.3039': attribute type 3 has an invalid length. [ 358.271607][T13162] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3039'. [ 358.301431][T13167] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3041'. [ 358.371136][T13179] netlink: 'syz.3.3047': attribute type 10 has an invalid length. [ 358.600844][T13183] netlink: 'syz.6.3045': attribute type 4 has an invalid length. [ 358.640360][T13183] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3045'. [ 358.712704][T13190] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3049'. [ 358.802115][T13190] bridge0: port 3(bond0) entered disabled state [ 358.916339][T13190] bridge0: port 3(bond0) entered disabled state [ 359.065327][T13190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.095471][T13190] device bond_slave_0 left promiscuous mode [ 359.171313][T13178] delete_channel: no stack [ 359.219329][T13190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.282529][T13190] device bond_slave_1 left promiscuous mode [ 359.426017][T13190] bond0 (unregistering): Released all slaves [ 359.501513][T13194] netlink: 'syz.2.3051': attribute type 39 has an invalid length. [ 361.939562][T13217] netlink: 'syz.3.3060': attribute type 3 has an invalid length. [ 361.968430][T13217] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3060'. [ 362.111592][T13231] netlink: 'syz.6.3064': attribute type 20 has an invalid length. [ 362.426938][T13241] netlink: 'syz.6.3067': attribute type 39 has an invalid length. [ 362.913992][T13255] netlink: 'syz.0.3070': attribute type 7 has an invalid length. [ 362.937654][T13255] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3070'. [ 363.175620][T13266] netlink: 'syz.1.3074': attribute type 10 has an invalid length. [ 363.228470][T13266] FAULT_INJECTION: forcing a failure. [ 363.228470][T13266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.257668][T13266] CPU: 0 PID: 13266 Comm: syz.1.3074 Not tainted syzkaller #0 [ 363.265168][T13266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.275343][T13266] Call Trace: [ 363.278634][T13266] [ 363.281572][T13266] dump_stack_lvl+0x188/0x250 [ 363.286275][T13266] ? show_regs_print_info+0x20/0x20 [ 363.291490][T13266] ? load_image+0x400/0x400 [ 363.296080][T13266] ? __lock_acquire+0x7d10/0x7d10 [ 363.301138][T13266] should_fail+0x38c/0x4c0 [ 363.305578][T13266] _copy_to_user+0x2e/0x130 [ 363.310092][T13266] simple_read_from_buffer+0xe3/0x150 [ 363.315487][T13266] proc_fail_nth_read+0x1a6/0x220 [ 363.320537][T13266] ? proc_fault_inject_write+0x310/0x310 [ 363.326187][T13266] ? fsnotify_perm+0x254/0x560 [ 363.330960][T13266] ? proc_fault_inject_write+0x310/0x310 [ 363.336602][T13266] vfs_read+0x301/0xd60 [ 363.340763][T13266] ? kernel_read+0x1e0/0x1e0 [ 363.345362][T13266] ? __fget_files+0x40f/0x480 [ 363.350043][T13266] ? mutex_lock_nested+0x17/0x20 [ 363.355011][T13266] ? __fdget_pos+0x2bf/0x370 [ 363.359591][T13266] ? ksys_read+0x71/0x260 [ 363.363915][T13266] ksys_read+0x152/0x260 [ 363.368147][T13266] ? vfs_write+0xd60/0xd60 [ 363.372555][T13266] ? lockdep_hardirqs_on+0x94/0x140 [ 363.377745][T13266] do_syscall_64+0x4c/0xa0 [ 363.382144][T13266] ? clear_bhb_loop+0x30/0x80 [ 363.386804][T13266] ? clear_bhb_loop+0x30/0x80 [ 363.391468][T13266] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.397344][T13266] RIP: 0033:0x7f42d5e6b78e [ 363.401747][T13266] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 363.421338][T13266] RSP: 002b:00007f42d4105fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 363.429742][T13266] RAX: ffffffffffffffda RBX: 00007f42d41066c0 RCX: 00007f42d5e6b78e [ 363.437699][T13266] RDX: 000000000000000f RSI: 00007f42d41060a0 RDI: 0000000000000008 [ 363.445652][T13266] RBP: 00007f42d4106090 R08: 0000000000000000 R09: 0000000000000000 [ 363.453603][T13266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.461558][T13266] R13: 00007f42d6126038 R14: 00007f42d6125fa0 R15: 00007fff16ba9a58 [ 363.469542][T13266] [ 365.344193][T13289] netlink: 'syz.1.3080': attribute type 3 has an invalid length. [ 365.386893][T13289] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3080'. [ 365.543231][T13304] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3093'. [ 365.828102][T13314] netlink: 'syz.1.3088': attribute type 39 has an invalid length. [ 366.002203][T13322] netlink: 'syz.6.3095': attribute type 8 has an invalid length. [ 366.029221][T13322] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3095'. [ 368.350104][T13354] netlink: 'syz.6.3100': attribute type 3 has an invalid length. [ 368.367107][T13354] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.3100'. [ 368.473970][T13361] netlink: 'syz.1.3104': attribute type 10 has an invalid length. [ 368.619211][T13361] team0: Port device geneve1 added [ 369.018476][T13386] netlink: 'syz.0.3114': attribute type 8 has an invalid length. [ 369.039720][T13386] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3114'. [ 369.164354][T13393] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 369.257688][T13399] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3122'. [ 369.400442][T13405] netlink: 'syz.6.3123': attribute type 10 has an invalid length. [ 369.624109][T13405] team0: Port device geneve1 added [ 369.802108][T13423] netlink: 'syz.3.3129': attribute type 3 has an invalid length. [ 369.819793][T13423] netlink: 'syz.3.3129': attribute type 1 has an invalid length. [ 369.891222][T13423] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3129'. [ 370.342870][T13451] netlink: 'syz.0.3140': attribute type 17 has an invalid length. [ 370.383021][T13451] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3140'. [ 370.442547][T13453] netlink: 'syz.3.3141': attribute type 10 has an invalid length. [ 370.577348][T13453] team0: Port device geneve1 added [ 371.253592][T13498] netlink: 'syz.6.3167': attribute type 46 has an invalid length. [ 371.279285][T13498] netlink: 51 bytes leftover after parsing attributes in process `syz.6.3167'. [ 371.381498][T13507] netlink: 'syz.2.3158': attribute type 10 has an invalid length. [ 371.512440][T13514] netlink: 'syz.2.3161': attribute type 8 has an invalid length. [ 371.539815][T13514] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3161'. [ 371.810674][T13528] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.3171'. [ 372.060864][T13543] netlink: 'syz.6.3175': attribute type 10 has an invalid length. [ 372.126127][T13543] device veth0_vlan left promiscuous mode [ 372.171180][T13543] device veth0_vlan entered promiscuous mode [ 372.200298][T13543] team0: Device veth0_vlan failed to register rx_handler [ 372.289231][T13548] netlink: 'syz.1.3177': attribute type 21 has an invalid length. [ 372.303283][T13548] netlink: 'syz.1.3177': attribute type 1 has an invalid length. [ 372.313742][T13548] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.3177'. [ 372.358078][T13552] netlink: 'syz.3.3178': attribute type 3 has an invalid length. [ 372.368638][T13552] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3178'. [ 372.370304][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.503449][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.527099][T13558] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.3181'. [ 372.596948][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.762404][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.067757][T13549] chnl_net:caif_netlink_parms(): no params data found [ 373.408816][T13549] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.429850][T13549] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.438055][T13549] device bridge_slave_0 entered promiscuous mode [ 373.448330][T13549] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.457799][T13549] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.468930][T13549] device bridge_slave_1 entered promiscuous mode [ 373.574227][T13549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.654504][T13549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.837629][T13549] team0: Port device team_slave_0 added [ 373.850184][T13549] team0: Port device team_slave_1 added [ 373.948521][T13549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.976053][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.019417][T13549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.066585][T13549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.076556][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.145352][T13549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.249950][T11544] Bluetooth: hci2: command 0x0409 tx timeout [ 374.302955][T13549] device hsr_slave_0 entered promiscuous mode [ 374.381583][T13549] device hsr_slave_1 entered promiscuous mode [ 374.652724][T13642] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3204'. [ 375.472097][T13662] netlink: 'syz.6.3209': attribute type 19 has an invalid length. [ 375.865733][T13694] netlink: 'syz.3.3218': attribute type 10 has an invalid length. [ 375.897997][T13694] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3218'. [ 376.039735][T13696] netlink: 'syz.1.3219': attribute type 21 has an invalid length. [ 376.083935][T13696] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3219'. [ 376.165309][T13696] netlink: 'syz.1.3219': attribute type 10 has an invalid length. [ 376.193887][T13696] device hsr0 entered promiscuous mode [ 376.340111][T11506] Bluetooth: hci2: command 0x041b tx timeout [ 376.402363][ T144] device hsr_slave_0 left promiscuous mode [ 376.420355][ T144] device hsr_slave_1 left promiscuous mode [ 376.441142][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.448643][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.494361][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.542891][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.563447][ T144] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 376.576046][ T144] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 376.586795][ T144] bridge0: port 5(dummy0) entered disabled state [ 376.617607][ T144] device veth0_to_bridge left promiscuous mode [ 376.629976][ T144] bridge0: port 4(veth0_to_bridge) entered disabled state [ 376.649232][ T144] device bridge_slave_1 left promiscuous mode [ 376.659890][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.708504][ T144] device bridge_slave_0 left promiscuous mode [ 376.731795][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.791121][ T144] device veth1_vlan left promiscuous mode [ 377.308799][T13711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.422636][T13549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 377.496758][T13549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 377.540741][T13549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 377.561143][T13549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 377.594070][T13754] FAULT_INJECTION: forcing a failure. [ 377.594070][T13754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.680446][T13754] CPU: 1 PID: 13754 Comm: syz.0.3233 Not tainted syzkaller #0 [ 377.687952][T13754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.698021][T13754] Call Trace: [ 377.701314][T13754] [ 377.704254][T13754] dump_stack_lvl+0x188/0x250 [ 377.708982][T13754] ? show_regs_print_info+0x20/0x20 [ 377.714209][T13754] ? load_image+0x400/0x400 [ 377.718746][T13754] ? __lock_acquire+0x7d10/0x7d10 [ 377.723836][T13754] should_fail+0x38c/0x4c0 [ 377.728276][T13754] _copy_from_user+0x2e/0x170 [ 377.732975][T13754] __copy_msghdr_from_user+0xc9/0x630 [ 377.738363][T13754] ? verify_lock_unused+0x140/0x140 [ 377.743588][T13754] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 377.748899][T13754] ___sys_sendmsg+0x19a/0x2e0 [ 377.753595][T13754] ? __sys_sendmsg+0x2a0/0x2a0 [ 377.758396][T13754] ? vfs_write+0x8b2/0xd60 [ 377.762845][T13754] __se_sys_sendmsg+0x1af/0x290 [ 377.767715][T13754] ? __x64_sys_sendmsg+0x80/0x80 [ 377.772679][T13754] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 377.778695][T13754] ? lockdep_hardirqs_on+0x94/0x140 [ 377.784004][T13754] do_syscall_64+0x4c/0xa0 [ 377.788433][T13754] ? clear_bhb_loop+0x30/0x80 [ 377.793124][T13754] ? clear_bhb_loop+0x30/0x80 [ 377.797815][T13754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.803713][T13754] RIP: 0033:0x7fbf29936eb9 [ 377.808146][T13754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.827764][T13754] RSP: 002b:00007fbf27b92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.836202][T13754] RAX: ffffffffffffffda RBX: 00007fbf29bb1fa0 RCX: 00007fbf29936eb9 [ 377.844188][T13754] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 377.852174][T13754] RBP: 00007fbf27b92090 R08: 0000000000000000 R09: 0000000000000000 [ 377.860178][T13754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.868251][T13754] R13: 00007fbf29bb2038 R14: 00007fbf29bb1fa0 R15: 00007fff33eee368 [ 377.876252][T13754] [ 377.907033][T13765] netlink: 'syz.3.3236': attribute type 1 has an invalid length. [ 377.929156][T13765] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3236'. [ 378.143924][T13549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.227163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 378.262438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.300825][T13549] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.365033][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 378.385959][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.410990][T11544] Bluetooth: hci2: command 0x040f tx timeout [ 378.417610][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.423980][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.470218][ T479] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.477321][ T479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.546187][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.590526][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.599042][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.606187][ T479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.673447][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 378.712039][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.766201][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.821081][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.851162][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.872393][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 378.890470][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 378.900526][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 379.051213][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.060964][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.069337][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.158527][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.195057][T13549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 379.266669][T13805] device wlan0 entered promiscuous mode [ 379.631166][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 379.649546][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 379.678536][T13549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.738414][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.767677][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.825404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.839042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.860135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.877421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.898991][T13549] device veth0_vlan entered promiscuous mode [ 379.924667][T13549] device veth1_vlan entered promiscuous mode [ 379.975549][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 380.003161][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 380.034920][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.054781][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.066600][T13549] device veth0_macvtap entered promiscuous mode [ 380.106477][T13549] device veth1_macvtap entered promiscuous mode [ 380.195693][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.245446][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.295492][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.342777][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.369964][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.409946][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.441176][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.472096][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.500041][T11507] Bluetooth: hci2: command 0x0419 tx timeout [ 380.511362][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.542451][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.575449][T13549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.615817][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 380.636249][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.685184][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.724626][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.771181][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.799845][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.834698][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.865623][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.896049][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.927270][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.956630][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.996960][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.011009][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.021608][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.032955][T13549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.054772][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 381.068509][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.103454][T13549] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.130029][T13549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.159111][T13549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.199664][T13549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.527230][ T1228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.547886][ T1228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.566309][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.584043][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.595193][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 382.662614][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 382.834058][T13869] netlink: 'syz.2.3172': attribute type 10 has an invalid length. [ 382.914652][T13869] team0: Port device geneve1 added [ 383.926428][T13896] sctp: [Deprecated]: syz.3.3275 (pid 13896) Use of int in max_burst socket option deprecated. [ 383.926428][T13896] Use struct sctp_assoc_value instead [ 383.949835][T13897] sctp: [Deprecated]: syz.3.3275 (pid 13897) Use of int in max_burst socket option deprecated. [ 383.949835][T13897] Use struct sctp_assoc_value instead [ 385.268507][T13909] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3279'. [ 385.298913][T13909] netlink: 'syz.1.3279': attribute type 2 has an invalid length. [ 385.525719][T13928] sctp: [Deprecated]: syz.0.3284 (pid 13928) Use of int in max_burst socket option deprecated. [ 385.525719][T13928] Use struct sctp_assoc_value instead [ 388.200857][T13959] netlink: 'syz.2.3296': attribute type 27 has an invalid length. [ 388.279543][T13959] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 388.725421][T13978] caif0: mtu less than device minimum [ 390.256985][T14026] netlink: set zone limit has 8 unknown bytes [ 391.504258][T14054] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.3327'. [ 392.233062][T14078] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3338'. [ 392.811993][T14094] netlink: 'syz.2.3343': attribute type 10 has an invalid length. [ 392.874479][T14097] netlink: 'syz.3.3344': attribute type 10 has an invalid length. [ 392.895966][T14100] netlink: 'syz.6.3345': attribute type 10 has an invalid length. [ 393.382782][T14133] netlink: 'syz.0.3356': attribute type 29 has an invalid length. [ 393.450095][T14133] netlink: 'syz.0.3356': attribute type 29 has an invalid length. [ 393.727370][T14147] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3360'. [ 394.121979][T14160] netlink: 'syz.3.3366': attribute type 8 has an invalid length. [ 394.138427][T14160] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3366'. [ 395.858161][T14181] netlink: 'syz.3.3374': attribute type 8 has an invalid length. [ 395.879570][T14181] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3374'. [ 396.109246][T14187] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.3376'. [ 398.326524][T14227] netlink: 'syz.0.3389': attribute type 29 has an invalid length. [ 398.360924][T14227] netlink: 'syz.0.3389': attribute type 29 has an invalid length. [ 398.376428][T14227] netlink: 'syz.0.3389': attribute type 29 has an invalid length. [ 400.882684][T14247] delete_channel: no stack [ 401.163776][T14266] netlink: 'syz.1.3405': attribute type 9 has an invalid length. [ 401.179704][T14266] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3405'. [ 401.345191][T14278] netlink: 'syz.2.3408': attribute type 46 has an invalid length. [ 401.359681][T14278] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3408'. [ 401.449715][T14281] netlink: 'syz.3.3411': attribute type 8 has an invalid length. [ 401.506546][T14281] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3411'. [ 402.288354][T14305] netlink: 179 bytes leftover after parsing attributes in process `syz.2.3419'. [ 402.337965][T14305] netlink: 'syz.2.3419': attribute type 9 has an invalid length. [ 402.351441][T14305] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3419'. [ 402.397756][T14306] netlink: 'syz.2.3419': attribute type 9 has an invalid length. [ 402.419679][T14306] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3419'. [ 404.551520][T14318] netlink: 'syz.0.3425': attribute type 3 has an invalid length. [ 404.559308][T14318] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3425'. [ 404.652324][T14321] netlink: 'syz.6.3426': attribute type 10 has an invalid length. [ 404.687509][T14321] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3426'. [ 404.739885][T14321] device dummy0 entered promiscuous mode [ 404.748404][T14334] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.3430'. [ 404.759775][T14321] bridge0: port 3(dummy0) entered blocking state [ 404.781388][T14321] bridge0: port 3(dummy0) entered disabled state [ 404.800401][T14321] bridge0: port 3(dummy0) entered blocking state [ 404.806993][T14321] bridge0: port 3(dummy0) entered forwarding state [ 407.476256][T14383] netlink: 'syz.0.3448': attribute type 10 has an invalid length. [ 407.516262][T14383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3448'. [ 407.568792][T14383] device dummy0 entered promiscuous mode [ 407.591865][T14383] bridge0: port 3(dummy0) entered blocking state [ 407.599167][T14383] bridge0: port 3(dummy0) entered disabled state [ 407.613208][T14383] bridge0: port 3(dummy0) entered blocking state [ 407.619818][T14383] bridge0: port 3(dummy0) entered forwarding state [ 410.037328][T14429] netlink: 'syz.0.3464': attribute type 21 has an invalid length. [ 410.054625][T14429] IPv6: NLM_F_CREATE should be specified when creating new route [ 410.179505][T14440] netlink: 'syz.2.3466': attribute type 10 has an invalid length. [ 410.196000][T14440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3466'. [ 410.229791][T14440] device dummy0 entered promiscuous mode [ 410.254794][T14440] bridge0: port 3(dummy0) entered blocking state [ 410.301719][T14440] bridge0: port 3(dummy0) entered disabled state [ 410.327157][T14440] bridge0: port 3(dummy0) entered blocking state [ 410.333862][T14440] bridge0: port 3(dummy0) entered forwarding state [ 410.367721][T14453] netlink: 'syz.3.3471': attribute type 1 has an invalid length. [ 410.389345][T14453] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3471'. [ 410.476297][T14455] FAULT_INJECTION: forcing a failure. [ 410.476297][T14455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.507220][T14455] CPU: 1 PID: 14455 Comm: syz.6.3473 Not tainted syzkaller #0 [ 410.514812][T14455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.524871][T14455] Call Trace: [ 410.528151][T14455] [ 410.531077][T14455] dump_stack_lvl+0x188/0x250 [ 410.535751][T14455] ? show_regs_print_info+0x20/0x20 [ 410.540933][T14455] ? load_image+0x400/0x400 [ 410.545420][T14455] ? __lock_acquire+0x7d10/0x7d10 [ 410.550433][T14455] should_fail+0x38c/0x4c0 [ 410.554835][T14455] _copy_from_user+0x2e/0x170 [ 410.559493][T14455] iovec_from_user+0x142/0x370 [ 410.564243][T14455] __import_iovec+0x70/0x490 [ 410.568840][T14455] import_iovec+0x6f/0xa0 [ 410.573154][T14455] ___sys_sendmsg+0x1fd/0x2e0 [ 410.577820][T14455] ? __sys_sendmsg+0x2a0/0x2a0 [ 410.582575][T14455] ? vfs_write+0x8b2/0xd60 [ 410.586985][T14455] __se_sys_sendmsg+0x1af/0x290 [ 410.591826][T14455] ? __x64_sys_sendmsg+0x80/0x80 [ 410.596743][T14455] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 410.602721][T14455] ? lockdep_hardirqs_on+0x94/0x140 [ 410.607902][T14455] do_syscall_64+0x4c/0xa0 [ 410.612300][T14455] ? clear_bhb_loop+0x30/0x80 [ 410.616958][T14455] ? clear_bhb_loop+0x30/0x80 [ 410.621612][T14455] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 410.627483][T14455] RIP: 0033:0x7f8005b99eb9 [ 410.631878][T14455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.651461][T14455] RSP: 002b:00007f8003df5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.659853][T14455] RAX: ffffffffffffffda RBX: 00007f8005e14fa0 RCX: 00007f8005b99eb9 [ 410.667805][T14455] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 410.675753][T14455] RBP: 00007f8003df5090 R08: 0000000000000000 R09: 0000000000000000 [ 410.683706][T14455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.691658][T14455] R13: 00007f8005e15038 R14: 00007f8005e14fa0 R15: 00007ffd0f3fff68 [ 410.699624][T14455] [ 411.216839][T11507] Bluetooth: hci1: command 0x0406 tx timeout [ 414.548403][T14544] FAULT_INJECTION: forcing a failure. [ 414.548403][T14544] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 414.581878][T14544] CPU: 0 PID: 14544 Comm: syz.0.3502 Not tainted syzkaller #0 [ 414.589379][T14544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.599426][T14544] Call Trace: [ 414.602703][T14544] [ 414.605618][T14544] dump_stack_lvl+0x188/0x250 [ 414.610284][T14544] ? show_regs_print_info+0x20/0x20 [ 414.615467][T14544] ? load_image+0x400/0x400 [ 414.619957][T14544] ? __lock_acquire+0x7d10/0x7d10 [ 414.624964][T14544] ? __lock_acquire+0x13bc/0x7d10 [ 414.629974][T14544] should_fail+0x38c/0x4c0 [ 414.634379][T14544] prepare_alloc_pages+0x1e4/0x5f0 [ 414.639478][T14544] __alloc_pages+0x11b/0x480 [ 414.644069][T14544] ? zone_statistics+0x170/0x170 [ 414.649002][T14544] alloc_pages_vma+0x393/0x7c0 [ 414.653752][T14544] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 414.659555][T14544] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 414.665179][T14544] ? shmem_swapin_page+0x2300/0x2300 [ 414.670460][T14544] ? __lock_acquire+0x7d10/0x7d10 [ 414.675470][T14544] ? xas_start+0x3d1/0x770 [ 414.679871][T14544] ? xas_load+0x119/0x140 [ 414.684194][T14544] ? pagecache_get_page+0xc27/0xf10 [ 414.689464][T14544] ? page_cache_prev_miss+0x380/0x380 [ 414.694814][T14544] ? mark_lock+0x94/0x320 [ 414.699126][T14544] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 414.705088][T14544] ? lock_chain_count+0x20/0x20 [ 414.709923][T14544] ? do_user_addr_fault+0x694/0xc80 [ 414.715135][T14544] shmem_getpage_gfp+0x14f4/0x2d40 [ 414.720247][T14544] ? exc_page_fault+0x88/0x100 [ 414.725010][T14544] ? __get_user_nocheck_1+0x6/0x10 [ 414.730193][T14544] shmem_write_begin+0xcd/0x1a0 [ 414.735034][T14544] generic_perform_write+0x2b6/0x550 [ 414.740302][T14544] ? atime_needs_update+0x780/0x780 [ 414.745492][T14544] ? grab_cache_page_write_begin+0xa0/0xa0 [ 414.751281][T14544] ? file_remove_privs+0x5d0/0x5d0 [ 414.756378][T14544] ? rwsem_write_trylock+0x135/0x1c0 [ 414.761644][T14544] ? clear_nonspinnable+0x60/0x60 [ 414.766672][T14544] __generic_file_write_iter+0x25f/0x4e0 [ 414.772309][T14544] generic_file_write_iter+0xa6/0x1b0 [ 414.777665][T14544] vfs_write+0x745/0xd60 [ 414.781895][T14544] ? file_end_write+0x250/0x250 [ 414.786737][T14544] ? __fget_files+0x40f/0x480 [ 414.791404][T14544] ? mutex_lock_nested+0x17/0x20 [ 414.796327][T14544] ? __fdget_pos+0x2bf/0x370 [ 414.800898][T14544] ? ksys_write+0x71/0x260 [ 414.805301][T14544] ksys_write+0x152/0x260 [ 414.809615][T14544] ? __ia32_sys_read+0x80/0x80 [ 414.814384][T14544] ? lockdep_hardirqs_on+0x94/0x140 [ 414.819572][T14544] do_syscall_64+0x4c/0xa0 [ 414.823970][T14544] ? clear_bhb_loop+0x30/0x80 [ 414.828645][T14544] ? clear_bhb_loop+0x30/0x80 [ 414.833306][T14544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 414.839190][T14544] RIP: 0033:0x7fbf29936eb9 [ 414.843627][T14544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.863215][T14544] RSP: 002b:00007fbf27b92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 414.871633][T14544] RAX: ffffffffffffffda RBX: 00007fbf29bb1fa0 RCX: 00007fbf29936eb9 [ 414.879586][T14544] RDX: 0000000000040001 RSI: 0000200000000180 RDI: 0000000000000007 [ 414.887544][T14544] RBP: 00007fbf27b92090 R08: 0000000000000000 R09: 0000000000000000 [ 414.895509][T14544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.903479][T14544] R13: 00007fbf29bb2038 R14: 00007fbf29bb1fa0 R15: 00007fff33eee368 [ 414.911507][T14544] [ 417.304977][T14583] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3515'. [ 417.349261][T14586] netlink: 105120 bytes leftover after parsing attributes in process `syz.6.3516'. [ 417.449497][T14586] netlink: 'syz.6.3516': attribute type 2 has an invalid length. [ 419.432081][T14603] netlink: 'syz.6.3522': attribute type 41 has an invalid length. [ 419.543568][T14615] netlink: 'syz.6.3527': attribute type 27 has an invalid length. [ 419.592351][T14615] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 419.651675][T14618] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 419.671365][T14616] netlink: 'syz.0.3524': attribute type 10 has an invalid length. [ 419.692095][T14616] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3524'. [ 424.060393][T14654] netlink: 'syz.2.3542': attribute type 6 has an invalid length. [ 424.068160][T14654] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3542'. [ 426.460911][T14715] netlink: 'syz.6.3562': attribute type 28 has an invalid length. [ 426.507714][T14715] netlink: 'syz.6.3562': attribute type 10 has an invalid length. [ 426.534289][T14720] netlink: 'syz.1.3564': attribute type 10 has an invalid length. [ 427.357641][T14749] netlink: 'syz.2.3563': attribute type 1 has an invalid length. [ 427.399262][T14749] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3563'. [ 428.116508][T14763] sctp: [Deprecated]: syz.6.3577 (pid 14763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.116508][T14763] Use struct sctp_sack_info instead [ 430.243434][T14793] netlink: 'syz.6.3587': attribute type 8 has an invalid length. [ 430.276473][T14793] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3587'. [ 430.417420][T14800] netlink: 'syz.1.3590': attribute type 8 has an invalid length. [ 430.459915][T14800] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3590'. [ 430.615592][T14805] À: port 1(vlan0) entered blocking state [ 430.639995][T14805] À: port 1(vlan0) entered disabled state [ 430.668564][T14805] device vlan0 entered promiscuous mode [ 431.426973][T14812] netlink: 'syz.2.3595': attribute type 8 has an invalid length. [ 431.447178][T14812] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3595'. [ 431.560446][T14824] netlink: 'syz.1.3599': attribute type 10 has an invalid length. [ 431.633496][T14824] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.641904][T14824] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.886830][T14889] netlink: 'syz.3.3624': attribute type 21 has an invalid length. [ 433.917632][T14889] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3624'. [ 433.941554][T14889] netlink: 'syz.3.3624': attribute type 1 has an invalid length. [ 434.138235][T14905] netlink: 'syz.3.3629': attribute type 46 has an invalid length. [ 434.178332][T14905] netlink: 51 bytes leftover after parsing attributes in process `syz.3.3629'. [ 434.200648][T14910] netlink: 'syz.6.3630': attribute type 8 has an invalid length. [ 434.210133][T14910] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3630'. [ 435.886322][T14941] netlink: 'syz.6.3640': attribute type 21 has an invalid length. [ 435.935988][T14941] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3640'. [ 435.972671][T14950] netlink: 'syz.2.3644': attribute type 3 has an invalid length. [ 435.980652][T14941] netlink: 'syz.6.3640': attribute type 1 has an invalid length. [ 436.000509][T14950] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3644'. [ 436.810436][T11508] Bluetooth: hci3: command 0x0406 tx timeout [ 437.010307][T14974] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.3650'. [ 439.852106][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.858771][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.277395][T15055] netlink: 'syz.1.3681': attribute type 1 has an invalid length. [ 442.319811][T15055] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3681'. [ 442.384616][T15060] netlink: 'syz.0.3683': attribute type 21 has an invalid length. [ 442.399090][T15060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3683'. [ 442.444046][T15060] netlink: 'syz.0.3683': attribute type 1 has an invalid length. [ 443.137448][T15076] FAULT_INJECTION: forcing a failure. [ 443.137448][T15076] name failslab, interval 1, probability 0, space 0, times 0 [ 443.154022][T15076] CPU: 1 PID: 15076 Comm: syz.6.3688 Not tainted syzkaller #0 [ 443.161512][T15076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 443.171579][T15076] Call Trace: [ 443.174866][T15076] [ 443.177798][T15076] dump_stack_lvl+0x188/0x250 [ 443.182485][T15076] ? show_regs_print_info+0x20/0x20 [ 443.187691][T15076] ? load_image+0x400/0x400 [ 443.192203][T15076] ? __might_sleep+0xf0/0xf0 [ 443.196796][T15076] ? __lock_acquire+0x7d10/0x7d10 [ 443.201829][T15076] ? __local_bh_enable_ip+0x136/0x1c0 [ 443.207205][T15076] should_fail+0x38c/0x4c0 [ 443.211629][T15076] should_failslab+0x5/0x20 [ 443.216137][T15076] slab_pre_alloc_hook+0x51/0xc0 [ 443.221084][T15076] kmem_cache_alloc_node_trace+0x4a/0x300 [ 443.226819][T15076] ? __get_vm_area_node+0x119/0x2d0 [ 443.232028][T15076] __get_vm_area_node+0x119/0x2d0 [ 443.237061][T15076] __vmalloc_node_range+0xef/0x8b0 [ 443.242174][T15076] ? netlink_sendmsg+0x5ec/0xbe0 [ 443.247117][T15076] ? netlink_data_ready+0x10/0x10 [ 443.252154][T15076] ? netlink_sendmsg+0x5ec/0xbe0 [ 443.257094][T15076] vmalloc+0x75/0x80 [ 443.261000][T15076] ? netlink_sendmsg+0x5ec/0xbe0 [ 443.265945][T15076] netlink_sendmsg+0x5ec/0xbe0 [ 443.270734][T15076] ? netlink_getsockopt+0x570/0x570 [ 443.275952][T15076] ? aa_sock_msg_perm+0x94/0x150 [ 443.281166][T15076] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 443.286475][T15076] ? security_socket_sendmsg+0x7c/0xa0 [ 443.291951][T15076] ? netlink_getsockopt+0x570/0x570 [ 443.297180][T15076] ____sys_sendmsg+0x5b7/0x8f0 [ 443.301989][T15076] ? __sys_sendmsg_sock+0x30/0x30 [ 443.307046][T15076] ? import_iovec+0x6f/0xa0 [ 443.311568][T15076] ___sys_sendmsg+0x236/0x2e0 [ 443.316276][T15076] ? __sys_sendmsg+0x2a0/0x2a0 [ 443.321140][T15076] ? vfs_write+0x8b2/0xd60 [ 443.325584][T15076] __se_sys_sendmsg+0x1af/0x290 [ 443.330444][T15076] ? __x64_sys_sendmsg+0x80/0x80 [ 443.335390][T15076] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 443.341397][T15076] ? lockdep_hardirqs_on+0x94/0x140 [ 443.346603][T15076] do_syscall_64+0x4c/0xa0 [ 443.351042][T15076] ? clear_bhb_loop+0x30/0x80 [ 443.355730][T15076] ? clear_bhb_loop+0x30/0x80 [ 443.360416][T15076] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 443.366402][T15076] RIP: 0033:0x7f8005b99eb9 [ 443.370822][T15076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.390440][T15076] RSP: 002b:00007f8003df5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.398876][T15076] RAX: ffffffffffffffda RBX: 00007f8005e14fa0 RCX: 00007f8005b99eb9 [ 443.406854][T15076] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 443.414917][T15076] RBP: 00007f8003df5090 R08: 0000000000000000 R09: 0000000000000000 [ 443.422983][T15076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.430964][T15076] R13: 00007f8005e15038 R14: 00007f8005e14fa0 R15: 00007ffd0f3fff68 [ 443.438958][T15076] [ 443.456311][T15076] syz.6.3688: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 443.482589][T15076] CPU: 1 PID: 15076 Comm: syz.6.3688 Not tainted syzkaller #0 [ 443.490267][T15076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 443.500424][T15076] Call Trace: [ 443.503712][T15076] [ 443.506651][T15076] dump_stack_lvl+0x188/0x250 [ 443.511337][T15076] ? rcu_lock_release+0x5/0x20 [ 443.516110][T15076] ? show_regs_print_info+0x20/0x20 [ 443.521317][T15076] ? load_image+0x400/0x400 [ 443.525835][T15076] warn_alloc+0x243/0x320 [ 443.530173][T15076] ? zone_watermark_ok_safe+0x240/0x240 [ 443.535731][T15076] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 443.541736][T15076] ? __get_vm_area_node+0x119/0x2d0 [ 443.546955][T15076] __vmalloc_node_range+0x2b1/0x8b0 [ 443.552158][T15076] ? netlink_data_ready+0x10/0x10 [ 443.557204][T15076] ? netlink_sendmsg+0x5ec/0xbe0 [ 443.562152][T15076] vmalloc+0x75/0x80 [ 443.566057][T15076] ? netlink_sendmsg+0x5ec/0xbe0 [ 443.570998][T15076] netlink_sendmsg+0x5ec/0xbe0 [ 443.575776][T15076] ? netlink_getsockopt+0x570/0x570 [ 443.580992][T15076] ? aa_sock_msg_perm+0x94/0x150 [ 443.585942][T15076] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 443.591234][T15076] ? security_socket_sendmsg+0x7c/0xa0 [ 443.596695][T15076] ? netlink_getsockopt+0x570/0x570 [ 443.601895][T15076] ____sys_sendmsg+0x5b7/0x8f0 [ 443.606672][T15076] ? __sys_sendmsg_sock+0x30/0x30 [ 443.611708][T15076] ? import_iovec+0x6f/0xa0 [ 443.616219][T15076] ___sys_sendmsg+0x236/0x2e0 [ 443.620911][T15076] ? __sys_sendmsg+0x2a0/0x2a0 [ 443.625692][T15076] ? vfs_write+0x8b2/0xd60 [ 443.630129][T15076] __se_sys_sendmsg+0x1af/0x290 [ 443.634984][T15076] ? __x64_sys_sendmsg+0x80/0x80 [ 443.639929][T15076] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 443.645931][T15076] ? lockdep_hardirqs_on+0x94/0x140 [ 443.651137][T15076] do_syscall_64+0x4c/0xa0 [ 443.655557][T15076] ? clear_bhb_loop+0x30/0x80 [ 443.660235][T15076] ? clear_bhb_loop+0x30/0x80 [ 443.664923][T15076] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 443.670825][T15076] RIP: 0033:0x7f8005b99eb9 [ 443.675246][T15076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.694860][T15076] RSP: 002b:00007f8003df5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.703284][T15076] RAX: ffffffffffffffda RBX: 00007f8005e14fa0 RCX: 00007f8005b99eb9 [ 443.711267][T15076] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 443.719248][T15076] RBP: 00007f8003df5090 R08: 0000000000000000 R09: 0000000000000000 [ 443.727227][T15076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.735202][T15076] R13: 00007f8005e15038 R14: 00007f8005e14fa0 R15: 00007ffd0f3fff68 [ 443.743201][T15076] [ 443.757213][T15076] Mem-Info: [ 443.760602][T15076] active_anon:283 inactive_anon:12750 isolated_anon:0 [ 443.760602][T15076] active_file:20240 inactive_file:40271 isolated_file:0 [ 443.760602][T15076] unevictable:768 dirty:136 writeback:0 [ 443.760602][T15076] slab_reclaimable:20896 slab_unreclaimable:102633 [ 443.760602][T15076] mapped:34746 shmem:1641 pagetables:784 bounce:0 [ 443.760602][T15076] kernel_misc_reclaimable:0 [ 443.760602][T15076] free:1345053 free_pcp:12707 free_cma:0 [ 443.803214][T15076] Node 0 active_anon:1100kB inactive_anon:50492kB active_file:80760kB inactive_file:161084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138984kB dirty:544kB writeback:0kB shmem:4488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:14060kB pagetables:3136kB all_unreclaimable? no [ 443.839783][T15076] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 443.879878][T15076] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 443.913584][T15076] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 443.921980][T15076] Node 0 DMA32 free:1448692kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1100kB inactive_anon:50492kB active_file:80760kB inactive_file:161084kB unevictable:1536kB writepending:544kB present:3129332kB managed:2606560kB mlocked:0kB bounce:0kB free_pcp:42412kB local_pcp:20684kB free_cma:0kB [ 443.959075][T15076] lowmem_reserve[]: 0 0 0 0 0 [ 443.964064][T15076] Node 0 Normal free:8kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 443.993814][T15076] lowmem_reserve[]: 0 0 0 0 0 [ 444.003119][T15076] Node 1 Normal free:3916312kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:8512kB local_pcp:1632kB free_cma:0kB [ 444.043869][T15076] lowmem_reserve[]: 0 0 0 0 0 [ 444.048691][T15076] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 444.062088][T15076] Node 0 DMA32: 2060*4kB (UME) 2926*8kB (UME) 1900*16kB (UME) 3164*32kB (UME) 1097*64kB (UME) 281*128kB (UM) 104*256kB (UM) 17*512kB (UM) 9*1024kB (UME) 3*2048kB (M) 276*4096kB (M) = 1450656kB [ 444.083119][T15076] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 444.114392][T15082] netlink: 'syz.1.3690': attribute type 1 has an invalid length. [ 444.124233][T15076] Node 1 Normal: 96*4kB (UME) 35*8kB (UME) 34*16kB (UME) 133*32kB (UME) 43*64kB (UME) 12*128kB (UE) 6*256kB (UM) 7*512kB (U) 0*1024kB 3*2048kB (UME) 951*4096kB (M) = 3916312kB [ 444.131603][T15082] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3690'. [ 444.142463][T15076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.161111][T15076] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.181973][T15076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.204268][T15076] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.220764][T15076] 62152 total pagecache pages [ 444.239783][T15076] 0 pages in swap cache [ 444.244146][T15076] Swap cache stats: add 0, delete 0, find 0/0 [ 444.257375][T15076] Free swap = 124996kB [ 444.268518][T15076] Total swap = 124996kB [ 444.280119][T15076] 2097051 pages RAM [ 444.285910][T15076] 0 pages HighMem/MovableOnly [ 444.306077][T15076] 411488 pages reserved [ 444.348233][T15076] 0 pages cma reserved [ 444.790476][T15116] netlink: 'syz.2.3703': attribute type 21 has an invalid length. [ 444.802238][T15116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3703'. [ 444.813250][T15116] netlink: 'syz.2.3703': attribute type 1 has an invalid length. [ 445.301729][T15134] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3710'. [ 445.338560][T15134] netlink: 'syz.3.3710': attribute type 2 has an invalid length. [ 445.688828][T15156] netlink: 'syz.0.3716': attribute type 27 has an invalid length. [ 445.729865][T15156] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 445.947695][T15170] netlink: 'syz.6.3720': attribute type 10 has an invalid length. [ 445.988191][T15170] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3720'. [ 446.377188][T15182] netlink: 'syz.1.3725': attribute type 3 has an invalid length. [ 446.391392][T15182] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3725'. [ 446.772893][T15190] device syzkaller0 entered promiscuous mode [ 447.050028][T12011] Bluetooth: hci4: command 0x0406 tx timeout [ 447.236512][T15220] device syzkaller0 entered promiscuous mode [ 448.106373][T15264] validate_nla: 1 callbacks suppressed [ 448.106419][T15264] netlink: 'syz.6.3754': attribute type 8 has an invalid length. [ 448.159685][T15264] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3754'. [ 448.371165][T15272] device syzkaller0 entered promiscuous mode [ 448.705311][T15292] netlink: 'syz.2.3762': attribute type 10 has an invalid length. [ 448.723070][T15292] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3762'. [ 449.537373][T15330] netlink: 57407 bytes leftover after parsing attributes in process `syz.1.3777'. [ 450.245253][T15344] netlink: 'syz.1.3787': attribute type 46 has an invalid length. [ 450.297229][T15344] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3787'. [ 450.415902][T15354] netlink: 'syz.0.3790': attribute type 4 has an invalid length. [ 450.498237][T15354] netlink: 105084 bytes leftover after parsing attributes in process `syz.0.3790'. [ 450.601575][T15362] netlink: 'syz.0.3790': attribute type 2 has an invalid length. [ 450.624880][T15362] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3790'. [ 450.775480][T15374] netlink: 'syz.0.3797': attribute type 3 has an invalid length. [ 450.799885][T15374] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3797'. [ 450.853139][T15378] netlink: 'syz.2.3799': attribute type 21 has an invalid length. [ 450.883293][T15378] IPv6: NLM_F_CREATE should be specified when creating new route [ 451.489526][T15416] netlink: 'syz.6.3814': attribute type 10 has an invalid length. [ 451.519312][T15416] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3814'. [ 452.057546][T15445] netlink: 'syz.3.3826': attribute type 1 has an invalid length. [ 452.106757][T15445] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3826'. [ 452.166137][T15449] device syzkaller0 entered promiscuous mode [ 454.189257][T15473] netlink: 'syz.6.3837': attribute type 1 has an invalid length. [ 454.198735][T15473] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.3837'. [ 454.328992][T15488] bridge0: port 3(dummy0) entered disabled state [ 454.483797][T15488] device bridge_slave_1 left promiscuous mode [ 454.530530][T15488] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.584128][T15488] device bridge_slave_0 left promiscuous mode [ 454.609150][T15488] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.014824][T15522] netlink: 204996 bytes leftover after parsing attributes in process `syz.1.3854'. [ 457.084504][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3854'. [ 457.143677][T15530] netlink: 'syz.1.3854': attribute type 21 has an invalid length. [ 457.289838][T11544] Bluetooth: hci0: command 0x0406 tx timeout [ 457.602522][T15546] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3862'. [ 458.617199][T15582] netlink: 'syz.6.3875': attribute type 8 has an invalid length. [ 458.660793][T15582] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3875'. [ 459.804443][T15621] netlink: 'syz.2.3891': attribute type 10 has an invalid length. [ 459.832342][T15621] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3891'. [ 460.326257][T15639] netlink: 'syz.3.3899': attribute type 3 has an invalid length. [ 460.359589][T15639] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3899'. [ 460.435581][T15636] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3898'. [ 460.439874][T15643] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.3901'. [ 460.477271][T15636] erspan0: refused to change device tx_queue_len [ 460.859478][T15660] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3909'. [ 460.933350][T15660] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3909'. [ 462.720995][T15736] device syzkaller0 entered promiscuous mode [ 463.344634][T15777] device wg2 entered promiscuous mode [ 470.170468][T12016] Bluetooth: hci0: command 0x0409 tx timeout [ 471.473316][T16023] netlink: 'syz.0.4062': attribute type 10 has an invalid length. [ 471.508992][T16023] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4062'. [ 471.862916][T16042] netlink: 'syz.1.4069': attribute type 27 has an invalid length. [ 471.872943][T16042] C: renamed from team_slave_0 [ 471.952027][T16047] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4067'. [ 472.020893][T16050] netlink: 'syz.6.4071': attribute type 1 has an invalid length. [ 472.057064][T16050] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.4071'. [ 472.328068][T16064] device syzkaller0 entered promiscuous mode [ 473.730572][T16072] device syzkaller0 entered promiscuous mode [ 473.887541][T16089] netlink: 'syz.6.4084': attribute type 27 has an invalid length. [ 473.902877][T16089] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 474.146709][T16095] FAULT_INJECTION: forcing a failure. [ 474.146709][T16095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.195057][T16095] CPU: 0 PID: 16095 Comm: syz.2.4086 Not tainted syzkaller #0 [ 474.202560][T16095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.212627][T16095] Call Trace: [ 474.215917][T16095] [ 474.218848][T16095] dump_stack_lvl+0x188/0x250 [ 474.223544][T16095] ? show_regs_print_info+0x20/0x20 [ 474.228754][T16095] ? load_image+0x400/0x400 [ 474.233269][T16095] ? __lock_acquire+0x7d10/0x7d10 [ 474.238312][T16095] should_fail+0x38c/0x4c0 [ 474.242743][T16095] _copy_from_user+0x2e/0x170 [ 474.247432][T16095] __sys_bpf+0x26d/0x6f0 [ 474.251684][T16095] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 474.258034][T16095] ? bpf_link_show_fdinfo+0x380/0x380 [ 474.263417][T16095] ? rcu_nmi_exit+0x6f/0xf0 [ 474.267936][T16095] ? vtime_user_exit+0x2c8/0x3e0 [ 474.272883][T16095] __x64_sys_bpf+0x78/0x90 [ 474.277310][T16095] do_syscall_64+0x4c/0xa0 [ 474.281731][T16095] ? clear_bhb_loop+0x30/0x80 [ 474.286411][T16095] ? clear_bhb_loop+0x30/0x80 [ 474.291093][T16095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 474.296985][T16095] RIP: 0033:0x7f70e2544eb9 [ 474.301405][T16095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.321160][T16095] RSP: 002b:00007f70e07a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.329584][T16095] RAX: ffffffffffffffda RBX: 00007f70e27bffa0 RCX: 00007f70e2544eb9 [ 474.337563][T16095] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 474.345542][T16095] RBP: 00007f70e07a0090 R08: 0000000000000000 R09: 0000000000000000 [ 474.353521][T16095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.361499][T16095] R13: 00007f70e27c0038 R14: 00007f70e27bffa0 R15: 00007ffda73ca2b8 [ 474.369666][T16095] [ 474.633765][T16102] sctp: [Deprecated]: syz.6.4088 (pid 16102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.633765][T16102] Use struct sctp_sack_info instead [ 474.779063][T16104] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4089'. [ 475.359529][T16118] device syzkaller0 entered promiscuous mode [ 475.399166][T16129] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.4098'. [ 475.470052][T16129] netlink: 'syz.1.4098': attribute type 2 has an invalid length. [ 475.691085][ T27] INFO: task syz.5.2842:12469 blocked for more than 143 seconds. [ 475.699206][ T27] Not tainted syzkaller #0 [ 475.737676][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.758887][ T27] task:syz.5.2842 state:D stack:26896 pid:12469 ppid: 8863 flags:0x00004004 [ 475.786059][ T27] Call Trace: [ 475.800857][ T27] [ 475.807328][ T27] __schedule+0x11ef/0x43c0 [ 475.824234][ T27] ? __mutex_trylock_common+0x155/0x260 [ 475.848245][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 475.865761][ T27] ? event_function_call+0x42e/0x510 [ 475.882387][ T27] ? release_firmware_map_entry+0x190/0x190 [ 475.908482][ T27] schedule+0x11b/0x1e0 [ 475.925232][ T27] perf_pending_task_sync+0x13c/0x1c0 [ 475.949777][ T27] ? perf_mmap+0x13e0/0x13e0 [ 475.969099][ T27] _free_event+0x34/0xe60 [ 475.985931][ T27] ? perf_mmap+0x13e0/0x13e0 [ 476.007526][ T27] perf_event_release_kernel+0x83e/0x8d0 [ 476.029725][ T27] ? __might_sleep+0xf0/0xf0 [ 476.034365][ T27] ? calc_timer_values+0x410/0x410 [ 476.059711][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 476.076099][ T27] ? perf_mmap+0x13e0/0x13e0 [ 476.094310][ T27] perf_release+0x37/0x40 [ 476.109043][ T27] __fput+0x234/0x930 [ 476.117391][ T27] task_work_run+0x125/0x1a0 [ 476.129414][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 476.154023][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 476.174241][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 476.194087][ T27] do_syscall_64+0x58/0xa0 [ 476.198550][ T27] ? clear_bhb_loop+0x30/0x80 [ 476.214161][ T27] ? clear_bhb_loop+0x30/0x80 [ 476.218893][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 476.245403][ T27] RIP: 0033:0x7f6fbb795eb9 [ 476.261766][ T27] RSP: 002b:00007f6fb99f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 476.294107][ T27] RAX: 0000000000000000 RBX: 00007f6fbba10fa0 RCX: 00007f6fbb795eb9 [ 476.321734][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 476.349736][ T27] RBP: 00007f6fbb803c1f R08: 0000000000000000 R09: 0000000000000000 [ 476.368124][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.398598][ T27] R13: 00007f6fbba11038 R14: 00007f6fbba10fa0 R15: 00007ffec34291a8 [ 476.422105][ T27] [ 476.425464][ T27] [ 476.425464][ T27] Showing all locks held in the system: [ 476.497693][ T27] 1 lock held by khungtaskd/27: [ 476.510023][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 476.519415][ T27] 4 locks held by kworker/u4:3/479: [ 476.565071][ T27] 2 locks held by getty/3957: [ 476.585050][ T27] #0: ffff88802cc62098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 476.610761][ T27] #1: ffffc90002d032e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 476.646499][ T27] 1 lock held by syz-executor/4172: [ 476.665901][ T27] #0: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 476.706018][ T27] 2 locks held by kworker/1:26/12011: [ 476.713919][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 476.743787][ T27] #1: ffffc900033dfd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 476.769769][ T27] 1 lock held by syz.0.4067/16038: [ 476.774914][ T27] 1 lock held by syz.6.4096/16121: [ 476.806203][ T27] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x88f/0xa70 [ 476.846201][ T27] 2 locks held by syz.3.4102/16138: [ 476.851793][ T27] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 476.884927][ T27] #1: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 476.917093][ T27] [ 476.919453][ T27] ============================================= [ 476.919453][ T27] [ 476.966305][ T27] NMI backtrace for cpu 1 [ 476.970676][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 476.977886][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.987947][ T27] Call Trace: [ 476.991228][ T27] [ 476.994157][ T27] dump_stack_lvl+0x188/0x250 [ 476.998841][ T27] ? show_regs_print_info+0x20/0x20 [ 477.004042][ T27] ? load_image+0x400/0x400 [ 477.008552][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 477.013937][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 477.019239][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 477.024187][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 477.030353][ T27] ? _printk+0xda/0x130 [ 477.034533][ T27] ? load_image+0x400/0x400 [ 477.039052][ T27] ? load_image+0x400/0x400 [ 477.043571][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 477.049645][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 477.055635][ T27] watchdog+0xe0f/0xe50 [ 477.059855][ T27] kthread+0x436/0x520 [ 477.063924][ T27] ? hungtask_pm_notify+0x40/0x40 [ 477.068948][ T27] ? kthread_blkcg+0xd0/0xd0 [ 477.073541][ T27] ret_from_fork+0x1f/0x30 [ 477.077972][ T27] [ 477.081831][ T27] Sending NMI from CPU 1 to CPUs 0: [ 477.087067][ C0] NMI backtrace for cpu 0 [ 477.087078][ C0] CPU: 0 PID: 16038 Comm: syz.0.4067 Not tainted syzkaller #0 [ 477.087093][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.087101][ C0] RIP: 0010:__lock_acquire+0x86e/0x7d10 [ 477.087123][ C0] Code: 89 e6 65 8b 05 c7 66 a5 7e 41 b5 02 85 c0 48 8b 5c 24 40 4c 8b bc 24 98 00 00 00 75 24 48 8b 84 24 c0 00 00 00 42 0f b6 04 00 <84> c0 0f 85 d8 64 00 00 41 83 3f 00 41 0f 94 c5 45 00 ed 41 80 c5 [ 477.087135][ C0] RSP: 0018:ffffc9000370f3a0 EFLAGS: 00000046 [ 477.087149][ C0] RAX: 0000000000000000 RBX: ffff888021c54668 RCX: 0000000000000001 [ 477.087158][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901d10c0 [ 477.087168][ C0] RBP: ffffc9000370f5f0 R08: dffffc0000000000 R09: 1ffffffff203a218 [ 477.087178][ C0] R10: dffffc0000000000 R11: fffffbfff203a219 R12: 0000000000000000 [ 477.087187][ C0] R13: ffff888021c54602 R14: 0000000000000000 R15: ffff888021c54654 [ 477.087197][ C0] FS: 00007fbf27b926c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 477.087210][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.087220][ C0] CR2: 00007f8005de0198 CR3: 000000002f44b000 CR4: 00000000003506f0 [ 477.087233][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 477.087241][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 477.087250][ C0] Call Trace: [ 477.087256][ C0] [ 477.087260][ C0] ? __switch_to_asm+0x34/0x60 [ 477.087278][ C0] ? __schedule+0x11f7/0x43c0 [ 477.087297][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 477.087314][ C0] ? lock_chain_count+0x20/0x20 [ 477.087330][ C0] ? verify_lock_unused+0x140/0x140 [ 477.087346][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 477.087360][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 477.087376][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 477.087395][ C0] lock_acquire+0x19e/0x400 [ 477.087410][ C0] ? rcu_lock_acquire+0x5/0x30 [ 477.087428][ C0] ? rcu_lock_release+0x5/0x20 [ 477.087443][ C0] ? read_lock_is_recursive+0x10/0x10 [ 477.087459][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 477.087476][ C0] ? inet_twsk_purge+0x13b/0x840 [ 477.087492][ C0] rcu_lock_acquire+0x2a/0x30 [ 477.087506][ C0] ? rcu_lock_acquire+0x5/0x30 [ 477.087520][ C0] inet_twsk_purge+0x119/0x840 [ 477.087539][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 477.087555][ C0] ? iput+0x706/0x8a0 [ 477.087570][ C0] ? dccp_v4_exit_net+0x80/0x80 [ 477.087586][ C0] setup_net+0x844/0xa10 [ 477.087602][ C0] ? copy_net_ns+0x5b0/0x5b0 [ 477.087622][ C0] ? copy_net_ns+0x32e/0x5b0 [ 477.087635][ C0] ? down_read_killable+0x1ce/0x340 [ 477.087652][ C0] copy_net_ns+0x348/0x5b0 [ 477.087668][ C0] create_new_namespaces+0x3d3/0x6f0 [ 477.087688][ C0] copy_namespaces+0x37d/0x3e0 [ 477.087703][ C0] copy_process+0x1834/0x3e20 [ 477.087729][ C0] ? __pidfd_prepare+0x140/0x140 [ 477.087746][ C0] kernel_clone+0x23f/0x990 [ 477.087762][ C0] ? create_io_thread+0x180/0x180 [ 477.087782][ C0] __x64_sys_clone+0x19a/0x210 [ 477.087797][ C0] ? __ia32_sys_vfork+0x130/0x130 [ 477.087816][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 477.087831][ C0] do_syscall_64+0x4c/0xa0 [ 477.087844][ C0] ? clear_bhb_loop+0x30/0x80 [ 477.087857][ C0] ? clear_bhb_loop+0x30/0x80 [ 477.087870][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 477.087884][ C0] RIP: 0033:0x7fbf29936eb9 [ 477.087897][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.087908][ C0] RSP: 002b:00007fbf27b91fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 477.087922][ C0] RAX: ffffffffffffffda RBX: 00007fbf29bb1fa0 RCX: 00007fbf29936eb9 [ 477.087932][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040800000 [ 477.087940][ C0] RBP: 00007fbf299a4c1f R08: 0000000000000000 R09: 0000000000000000 [ 477.087949][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 477.087957][ C0] R13: 00007fbf29bb2038 R14: 00007fbf29bb1fa0 R15: 00007fff33eee368 [ 477.087973][ C0] [ 477.291588][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 477.496888][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 477.504090][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.514155][ T27] Call Trace: [ 477.517435][ T27] [ 477.520366][ T27] dump_stack_lvl+0x188/0x250 [ 477.525055][ T27] ? show_regs_print_info+0x20/0x20 [ 477.530253][ T27] ? load_image+0x400/0x400 [ 477.534769][ T27] panic+0x2e5/0x810 [ 477.538668][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 477.544304][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 477.548813][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 477.554973][ T27] watchdog+0xe4e/0xe50 [ 477.559140][ T27] kthread+0x436/0x520 [ 477.563213][ T27] ? hungtask_pm_notify+0x40/0x40 [ 477.568675][ T27] ? kthread_blkcg+0xd0/0xd0 [ 477.573266][ T27] ret_from_fork+0x1f/0x30 [ 477.577695][ T27] [ 477.580998][ T27] Kernel Offset: disabled [ 477.585325][ T27] Rebooting in 86400 seconds..