last executing test programs: 9.446212355s ago: executing program 3 (id=3217): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={0xffffffffffffffff, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000001900)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001940), &(0x7f0000001980), 0x8, 0xfa, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@bloom_filter={0x1e, 0xffffffff, 0x0, 0x8, 0x10808, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0xd}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c40)={0x1b, 0x0, 0x0, 0xae1, 0x0, 0xffffffffffffffff, 0x3b4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000640)=0x1, 0x12) write$cgroup_int(r1, &(0x7f0000000080), 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x4000001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.082382633s ago: executing program 0 (id=3220): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8400a000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8912, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)=r1}, 0x20) 8.612144883s ago: executing program 4 (id=3221): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 8.454188336s ago: executing program 2 (id=3122): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0x1c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffdf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000010c0)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff200000400000000000000000000003000000000200000002", @ANYRES32=0x0, @ANYRES8], 0x0, 0x56}, 0x28) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x40000000}, 0x0, 0x0, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000000090071198c000000000095000000802ee500"], &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000060000000c0000004ce484bf84730c0000000200000000000000000000faaccb3fee8543cbe35b91216c0905cfdec9f485f4605064d9bdc702dd28efb26f90e5689689b3ca46c71f3d5d29c79d70a261f47e2d84d9b55ec83f75c96dce1e605163e8"], 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r5, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4096, 0x1009}, {&(0x7f00000019c0)=""/221, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000a80)=""/209, 0xd1}], 0x8}, 0x1) recvmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(r5, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) close(r4) recvmsg(r1, &(0x7f0000000f40)={&(0x7f00000000c0)=@caif=@dbg, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/208, 0xd0}, {&(0x7f0000000e00)=""/197, 0xc5}, {&(0x7f0000000f00)=""/10, 0xa}, {&(0x7f0000000c80)=""/53, 0x35}, {&(0x7f0000000f80)=""/121, 0x79}], 0x5}, 0x80) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 8.378859218s ago: executing program 3 (id=3222): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r4, r1, 0x4, r2}, 0x10) socket$kcm(0x2, 0x3, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 8.354790638s ago: executing program 0 (id=3224): socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000"], 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000003fc0)}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3250}, 0x0, 0x0, 0x4, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r1, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000026000000080000000200000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061117c00e9ff00001e000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000300), 0x0}, 0x20) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) 8.2801464s ago: executing program 4 (id=3225): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) unlink(&(0x7f0000000200)='./cgroup\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r0, 0x58, &(0x7f0000000740)}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) mkdir(&(0x7f0000000580)='./cgroup\x00', 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0xfffffffb}, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffecb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x7ffffffc, 0x9}, {0x1000000a, 0x4, 0x1, 0x6}], 0x10, 0x4}, 0x94) close(r3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r8, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e000300aaaaaacbaafbaaaaaaaaaa000180c2000000"]) 7.859493829s ago: executing program 3 (id=3227): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100)=r2, 0x12) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={0xffffffffffffffff, 0x1}, 0xc) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 7.748222402s ago: executing program 0 (id=3228): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x1ff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x80000001) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x5, 0xff, 0x7, 0x0, 0x7fffffff, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x7}, 0x20a, 0x1, 0x7, 0x2, 0x81, 0x7, 0x8, 0x0, 0x58, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 7.743600652s ago: executing program 4 (id=3229): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000004c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x11, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c40)={&(0x7f0000000840)="cd57f1829465e7f89a8b2790b5ecb8004d4731a6fa1185090161a73d5e9e5babc7fe0aa17c43b6842fe0241099a7af7d3dc0d1374491809a249208edb8e6059fa1607281a3942a50b21c8bf206f6c95e428206639cd4014be2d0ff9fea05eb8588cf4fa348fa00721e19b807f023ec700b54ef9ed049491d74768883056a74e72d4c150144701143c8e69aabb3f285956083213b1b4474f8b923a92d1de8746f86b92adaf0f541e10ee4b912c16161cd6fb64f5b02b4d2ba838c2601f9239666f9", 0x0, 0x0, 0x0, 0x5, r3}, 0x38) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000940)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r7, 0x4004743c, 0xf0ff1f00000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c80)=ANY=[@ANYRES64=0x0, @ANYRES8=r5, @ANYRES32=r1, @ANYBLOB="367eb8eb435c47b7876b124cec0a546dfbfc548ffd80fa0c69735f336a95891adefbd22c1029f8b6f37b128b080efebf55b25221fb0bb91fd09aac09b81fc03a6b46d6e6fa0592375798b2cb90e5871968d969fd17ce91b542c4722d2954f4192512b78a48a3c10836983074d2604493d0172cdd5d38e2e9d0e578cfa983266c2d5fc764934187680f338947948c998168d5ea11", @ANYRES8=r2, @ANYBLOB="925e0e34a79816caf67a4010a3afd0354fb125434fbb5f1dd8ac41911fa908a7d355edbd0a929f36ba7e9c58f9816958d537686760d07c68df9b95b162d9b6c282105fdbf97b25db6888a1e6415bf4f607fe3f8907a18ce168f19f605aff4e5f897e97ed2895920cf09c590df491c7554e1db36a8206af0bab6db001354eddf9c569f3d19f09e6cc2bf2920d2b60ba136c38edae60073bd344ec97ac864c15b93a208e1cc942b007e1b12ebea2c16fd7b4028dedee760ca8ec650cd9c6b281", @ANYRES16=r0, @ANYRES8=r6], 0x10) socketpair(0x1e, 0xa, 0x80, &(0x7f0000000b00)) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 7.111950476s ago: executing program 2 (id=3231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000009536ed206d837ee089cf82fe000000000000000000efb817d78c194d0c8f00f5f6666cc99a69f9f69c48f799dad8eef8b736e3056f16ae52ac9d4262429e2242373fc35eaa949376617c953396ba3246"], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) recvmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222) 6.389655561s ago: executing program 0 (id=3233): socket$kcm(0xa, 0x5, 0x0) close(0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4464, 0xac5d, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x1000000, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x34000}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="5c00000015006b05c84e21008af32c6e0ada75f802000000400001800000d34460bc04eab505001525346182949a36c23d3b48dfd801000000003f4bd94517e6c1ce86b634ca973e4ad901c86361f68213036342919adcda15a1611a", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000440)='b', 0x1}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a1810141", 0x15}, {&(0x7f00000001c0)="b4f29805b163730fce2095abbd724e394d06b96bcb664c08f9", 0x19}], 0x2}, 0x0) 6.224352665s ago: executing program 2 (id=3234): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8400a000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)}, 0x20) 6.209966325s ago: executing program 4 (id=3235): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 4.851453665s ago: executing program 4 (id=3236): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.850867915s ago: executing program 2 (id=3237): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r4, r1, 0x4, r2}, 0x10) socket$kcm(0x2, 0x3, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 4.837303815s ago: executing program 0 (id=3239): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) unlink(&(0x7f0000000200)='./cgroup\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r0, 0x58, &(0x7f0000000740)}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) mkdir(&(0x7f0000000580)='./cgroup\x00', 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0xfffffffb}, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffecb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x7ffffffc, 0x9}, {0x1000000a, 0x4, 0x1, 0x6}], 0x10, 0x4}, 0x94) close(r3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r7, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e000300aaaaaacbaafbaaaaaaaaaa000180c2000000"]) 4.788507426s ago: executing program 3 (id=3240): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x400005, 0x400, 0x3, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, &(0x7f0000000740)=""/99, 0x0, 0x63, 0x1, 0x8}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20040040) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x3, 0x2, 0x0, r1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x401, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x3c}, @map_idx={0x18, 0xdd59ba292e7dafbe, 0x5, 0x0, 0x5}, @generic={0x4, 0x6, 0x7, 0x31c2, 0x80000001}]}, &(0x7f00000001c0)='syzkaller\x00', 0x200, 0xa, &(0x7f0000000200)=""/10, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000002c0)=[r1, r1, r1, r0, r0, r0, r0], &(0x7f0000000300)=[{0x3, 0x5, 0x3, 0xc}, {0x2, 0x3, 0xe, 0x3}, {0x1, 0x5, 0x2, 0xa}], 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)='\x00', 0x0}, 0x50) 4.543874972s ago: executing program 4 (id=3241): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="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", 0x13b}, {&(0x7f0000001cc0)="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", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc7078ff74aca53708cb4e62ed", 0xf6}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x11, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_all\x00', 0x275a, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000700)=')', 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000000}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03700000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4.468415813s ago: executing program 3 (id=3242): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xe) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffff3e7d}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x4, 0x0, 0x0, 0x5, 0x10481, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa29}, 0x4220, 0x9, 0x0, 0x9, 0x0, 0x3, 0xb90, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000090000000000000000", 0x25}, {&(0x7f0000000080)="e3da9b", 0x3}, {0x0, 0xbb}], 0x3}, 0x0) socket$kcm(0x10, 0x2, 0x0) 4.449162544s ago: executing program 0 (id=3243): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x1ff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x80000001) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x5, 0xff, 0x7, 0x0, 0x7fffffff, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x7}, 0x20a, 0x1, 0x7, 0x2, 0x81, 0x7, 0x8, 0x0, 0x58, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 4.100033841s ago: executing program 2 (id=3244): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x60, @multicast1}, 0x69, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x4000000, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x34}}}}], 0x20}, 0x0) 4.036512173s ago: executing program 3 (id=3245): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000004c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x11, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c40)={&(0x7f0000000840)="cd57f1829465e7f89a8b2790b5ecb8004d4731a6fa1185090161a73d5e9e5babc7fe0aa17c43b6842fe0241099a7af7d3dc0d1374491809a249208edb8e6059fa1607281a3942a50b21c8bf206f6c95e428206639cd4014be2d0ff9fea05eb8588cf4fa348fa00721e19b807f023ec700b54ef9ed049491d74768883056a74e72d4c150144701143c8e69aabb3f285956083213b1b4474f8b923a92d1de8746f86b92adaf0f541e10ee4b912c16161cd6fb64f5b02b4d2ba838c2601f9239666f9", 0x0, 0x0, 0x0, 0x5, r3}, 0x38) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000940)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r7, 0x4004743c, 0xf0ff1f00000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c80)=ANY=[@ANYRES64=0x0, @ANYRES8=r5, @ANYRES32=r1, @ANYBLOB="367eb8eb435c47b7876b124cec0a546dfbfc548ffd80fa0c69735f336a95891adefbd22c1029f8b6f37b128b080efebf55b25221fb0bb91fd09aac09b81fc03a6b46d6e6fa0592375798b2cb90e5871968d969fd17ce91b542c4722d2954f4192512b78a48a3c10836983074d2604493d0172cdd5d38e2e9d0e578cfa983266c2d5fc764934187680f338947948c998168d5ea11", @ANYRES8=r2, @ANYBLOB="925e0e34a79816caf67a4010a3afd0354fb125434fbb5f1dd8ac41911fa908a7d355edbd0a929f36ba7e9c58f9816958d537686760d07c68df9b95b162d9b6c282105fdbf97b25db6888a1e6415bf4f607fe3f8907a18ce168f19f605aff4e5f897e97ed2895920cf09c590df491c7554e1db36a8206af0bab6db001354eddf9c569f3d19f09e6cc2bf2920d2b60ba136c38edae60073bd344ec97ac864c15b93a208e1cc942b007e1b12ebea2c16fd7b4028dedee760ca8ec650cd9c6b281", @ANYRES16=r0, @ANYRES8=r6], 0x10) socketpair(0x1e, 0xa, 0x80, &(0x7f0000000b00)) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 3.512110034s ago: executing program 2 (id=3247): socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x5, 0x0, 0xfea5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) r5 = socket$kcm(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)}, 0x20) kernel console output (not intermixed with test programs): [T11549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.874271][T11549] RSP: 002b:00007fbfc9141028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 601.882699][T11549] RAX: ffffffffffffffda RBX: 00007fbfc8425fa0 RCX: 00007fbfc819de59 [ 601.890697][T11549] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 601.898715][T11549] RBP: 00007fbfc9141090 R08: 0000000000000000 R09: 0000000000000000 [ 601.906696][T11549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.914683][T11549] R13: 00007fbfc8426038 R14: 00007fbfc8425fa0 R15: 00007fffe9a3b888 [ 601.922686][T11549] [ 603.270456][T11576] device syzkaller0 entered promiscuous mode [ 603.303205][T11581] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving [ 603.370717][T11575] netlink: 'syz.4.1971': attribute type 10 has an invalid length. [ 605.727787][T11591] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 605.737526][T11591] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 605.747850][T11591] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 605.973656][T11597] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1977'. [ 606.026496][T11595] netlink: 'syz.0.1978': attribute type 10 has an invalid length. [ 606.045596][T11595] device hsr0 left promiscuous mode [ 606.057957][T11595] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 606.232097][T11597] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1977'. [ 606.278601][T11597] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 608.560638][ T6378] bridge0: port 2(team0) entered disabled state [ 609.246729][T11638] FAULT_INJECTION: forcing a failure. [ 609.246729][T11638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.260068][T11638] CPU: 1 PID: 11638 Comm: syz.3.1990 Not tainted syzkaller #0 [ 609.267572][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 609.277917][T11638] Call Trace: [ 609.281226][T11638] [ 609.284200][T11638] dump_stack_lvl+0x188/0x24e [ 609.288935][T11638] ? show_regs_print_info+0x12/0x12 [ 609.294172][T11638] ? load_image+0x410/0x410 [ 609.298734][T11638] ? __lock_acquire+0x7c40/0x7c40 [ 609.303806][T11638] should_fail_ex+0x390/0x4c0 [ 609.308528][T11638] _copy_from_user+0x2c/0x170 [ 609.313236][T11638] csum_and_copy_from_iter+0x693/0x1380 [ 609.318832][T11638] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 609.324520][T11638] ip_generic_getfrag+0x150/0x2e0 [ 609.329585][T11638] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 609.334476][T11638] ? raw_getfrag+0xe6/0x300 [ 609.339018][T11638] ? __alloc_skb+0x4e6/0x7d0 [ 609.343643][T11638] ? skb_put+0x10e/0x200 [ 609.348020][T11638] __ip_append_data+0x2a6c/0x38d0 [ 609.353133][T11638] ? raw_send_hdrinc+0x1130/0x1130 [ 609.358310][T11638] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 609.364333][T11638] ? ip_setup_cork+0x850/0x850 [ 609.369142][T11638] ? ipv4_mtu+0x30c/0x420 [ 609.373505][T11638] ? ip_setup_cork+0x528/0x850 [ 609.378284][T11638] ip_append_data+0x132/0x1a0 [ 609.382978][T11638] ? raw_send_hdrinc+0x1130/0x1130 [ 609.388128][T11638] raw_sendmsg+0x12c8/0x1940 [ 609.392774][T11638] ? compat_raw_ioctl+0x60/0x60 [ 609.397660][T11638] ? aa_sk_perm+0x81f/0x950 [ 609.402184][T11638] ? __might_fault+0xa6/0x120 [ 609.406875][T11638] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 609.413304][T11638] ? aa_sock_msg_perm+0x94/0x150 [ 609.418275][T11638] ? sock_rps_record_flow+0x19/0x3f0 [ 609.423580][T11638] ? inet_sendmsg+0x7a/0x2a0 [ 609.428180][T11638] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 609.433473][T11638] ? inet_send_prepare+0x250/0x250 [ 609.438598][T11638] ____sys_sendmsg+0x5ed/0x9a0 [ 609.443384][T11638] ? __sys_sendmsg_sock+0x30/0x30 [ 609.448416][T11638] ? __import_iovec+0x306/0x510 [ 609.453283][T11638] ? import_iovec+0x6f/0xa0 [ 609.457813][T11638] ___sys_sendmsg+0x2a2/0x360 [ 609.462594][T11638] ? __sys_sendmsg+0x2a0/0x2a0 [ 609.467472][T11638] ? __lock_acquire+0x7c40/0x7c40 [ 609.472528][T11638] __se_sys_sendmsg+0x1c3/0x2b0 [ 609.477398][T11638] ? __x64_sys_sendmsg+0x80/0x80 [ 609.482369][T11638] ? lockdep_hardirqs_on+0x94/0x140 [ 609.487582][T11638] do_syscall_64+0x4c/0xa0 [ 609.492011][T11638] ? clear_bhb_loop+0x60/0xb0 [ 609.496701][T11638] ? clear_bhb_loop+0x60/0xb0 [ 609.501402][T11638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.507305][T11638] RIP: 0033:0x7fc8d859de59 [ 609.511733][T11638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.531349][T11638] RSP: 002b:00007fc8d9499028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.539773][T11638] RAX: ffffffffffffffda RBX: 00007fc8d8825fa0 RCX: 00007fc8d859de59 [ 609.547755][T11638] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 609.555761][T11638] RBP: 00007fc8d9499090 R08: 0000000000000000 R09: 0000000000000000 [ 609.563743][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 609.571729][T11638] R13: 00007fc8d8826038 R14: 00007fc8d8825fa0 R15: 00007ffeaa074a28 [ 609.579730][T11638] [ 609.643423][T11630] device syzkaller0 entered promiscuous mode [ 610.231427][ T4286] Bluetooth: hci4: ISO packet for unknown connection handle 2 [ 613.275250][T11666] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1999'. [ 613.964955][ T4286] Bluetooth: hci1: ISO packet for unknown connection handle 2 [ 615.168820][T11710] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2012'. [ 615.549819][T11722] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2025'. [ 615.825776][T11718] device syzkaller0 entered promiscuous mode [ 615.843705][T11721] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2014'. [ 618.584239][T11734] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 618.598012][T11734] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 618.608038][T11734] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 619.546039][T11753] netlink: 'syz.4.2023': attribute type 10 has an invalid length. [ 619.612633][T11753] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2023'. [ 619.889604][T11766] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2028'. [ 620.102392][T11774] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2030'. [ 620.185796][T11774] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2030'. [ 620.198998][T11776] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2030'. [ 620.223558][T11777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2030'. [ 620.492777][ T4286] Bluetooth: hci3: ISO packet for unknown connection handle 2 [ 624.195546][T11826] FAULT_INJECTION: forcing a failure. [ 624.195546][T11826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.392317][T11826] CPU: 0 PID: 11826 Comm: syz.3.2046 Not tainted syzkaller #0 [ 624.399862][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 624.409949][T11826] Call Trace: [ 624.413344][T11826] [ 624.416304][T11826] dump_stack_lvl+0x188/0x24e [ 624.421029][T11826] ? show_regs_print_info+0x12/0x12 [ 624.426260][T11826] ? load_image+0x410/0x410 [ 624.430793][T11826] ? __lock_acquire+0x7c40/0x7c40 [ 624.435848][T11826] ? trace_call_bpf+0x5d6/0x6b0 [ 624.440733][T11826] should_fail_ex+0x390/0x4c0 [ 624.445443][T11826] _copy_from_user+0x2c/0x170 [ 624.450151][T11826] __sys_bpf+0x2ea/0x780 [ 624.454425][T11826] ? bpf_link_show_fdinfo+0x380/0x380 [ 624.459843][T11826] ? lock_chain_count+0x20/0x20 [ 624.465175][T11826] __x64_sys_bpf+0x78/0x90 [ 624.469796][T11826] do_syscall_64+0x4c/0xa0 [ 624.474237][T11826] ? clear_bhb_loop+0x60/0xb0 [ 624.478938][T11826] ? clear_bhb_loop+0x60/0xb0 [ 624.483650][T11826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.489569][T11826] RIP: 0033:0x7fc8d859de59 [ 624.494014][T11826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.513653][T11826] RSP: 002b:00007fc8d9478028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 624.522093][T11826] RAX: ffffffffffffffda RBX: 00007fc8d8826090 RCX: 00007fc8d859de59 [ 624.530086][T11826] RDX: 0000000000000090 RSI: 0000200000000200 RDI: 0000000000000005 [ 624.538078][T11826] RBP: 00007fc8d9478090 R08: 0000000000000000 R09: 0000000000000000 [ 624.546066][T11826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.554054][T11826] R13: 00007fc8d8826128 R14: 00007fc8d8826090 R15: 00007ffeaa074a28 [ 624.562064][T11826] [ 624.568098][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.574539][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.843897][T11864] netlink: 'syz.0.2056': attribute type 29 has an invalid length. [ 626.857403][T11864] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2056'. [ 627.228887][T11881] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2061'. [ 631.002801][T11955] netlink: 'syz.4.2086': attribute type 10 has an invalid length. [ 631.049828][T11955] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2086'. [ 634.622471][T12027] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2108'. [ 635.216389][T12046] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2112'. [ 636.230275][T12065] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2120'. [ 639.460992][T12136] netlink: 'syz.2.2145': attribute type 2 has an invalid length. [ 639.632219][T12137] netlink: 'syz.4.2146': attribute type 29 has an invalid length. [ 639.736625][T12137] netlink: 'syz.4.2146': attribute type 29 has an invalid length. [ 639.858422][T12139] netlink: 'syz.4.2146': attribute type 29 has an invalid length. [ 641.075667][T12171] netlink: 'syz.1.2158': attribute type 7 has an invalid length. [ 641.164612][T12174] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2157'. [ 641.270411][T12177] netlink: 'syz.3.2161': attribute type 3 has an invalid length. [ 641.365924][T12177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.419483][T12177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.272916][T12191] device syzkaller0 entered promiscuous mode [ 643.683251][T12235] FAULT_INJECTION: forcing a failure. [ 643.683251][T12235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.728513][T12235] CPU: 1 PID: 12235 Comm: syz.3.2178 Not tainted syzkaller #0 [ 643.736064][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 643.746343][T12235] Call Trace: [ 643.749657][T12235] [ 643.752613][T12235] dump_stack_lvl+0x188/0x24e [ 643.757344][T12235] ? show_regs_print_info+0x12/0x12 [ 643.762663][T12235] ? load_image+0x410/0x410 [ 643.767196][T12235] ? __lock_acquire+0x7c40/0x7c40 [ 643.772424][T12235] ? snprintf+0xe5/0x140 [ 643.776863][T12235] should_fail_ex+0x390/0x4c0 [ 643.781576][T12235] _copy_to_user+0x2c/0x130 [ 643.786105][T12235] simple_read_from_buffer+0xe3/0x150 [ 643.791506][T12235] proc_fail_nth_read+0x1a6/0x220 [ 643.796647][T12235] ? proc_fault_inject_write+0x310/0x310 [ 643.802308][T12235] ? fsnotify_perm+0x248/0x550 [ 643.807090][T12235] ? proc_fault_inject_write+0x310/0x310 [ 643.812749][T12235] vfs_read+0x2db/0x960 [ 643.816940][T12235] ? kernel_read+0x1e0/0x1e0 [ 643.821639][T12235] ? __fget_files+0x28/0x460 [ 643.826252][T12235] ? __fget_files+0x3fc/0x460 [ 643.831064][T12235] ? __fdget_pos+0x2ae/0x360 [ 643.835681][T12235] ? ksys_read+0x70/0x260 [ 643.840041][T12235] ksys_read+0x14d/0x260 [ 643.844313][T12235] ? vfs_write+0x9a0/0x9a0 [ 643.848760][T12235] ? lockdep_hardirqs_on+0x94/0x140 [ 643.853981][T12235] do_syscall_64+0x4c/0xa0 [ 643.858421][T12235] ? clear_bhb_loop+0x60/0xb0 [ 643.863120][T12235] ? clear_bhb_loop+0x60/0xb0 [ 643.867820][T12235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.873757][T12235] RIP: 0033:0x7fc8d855e68e [ 643.878204][T12235] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 643.897944][T12235] RSP: 002b:00007fc8d9498fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 643.906512][T12235] RAX: ffffffffffffffda RBX: 00007fc8d94996c0 RCX: 00007fc8d855e68e [ 643.914520][T12235] RDX: 000000000000000f RSI: 00007fc8d94990a0 RDI: 0000000000000007 [ 643.922542][T12235] RBP: 00007fc8d9499090 R08: 0000000000000000 R09: 0000000000000000 [ 643.930617][T12235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.938607][T12235] R13: 00007fc8d8826038 R14: 00007fc8d8825fa0 R15: 00007ffeaa074a28 [ 643.946800][T12235] [ 645.830610][T12257] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2184'. [ 645.883383][T12257] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 646.222561][T12267] netlink: 'syz.3.2188': attribute type 10 has an invalid length. [ 646.323064][T12271] netlink: 'syz.3.2188': attribute type 10 has an invalid length. [ 646.508688][T12278] FAULT_INJECTION: forcing a failure. [ 646.508688][T12278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.547103][T12278] CPU: 1 PID: 12278 Comm: syz.1.2191 Not tainted syzkaller #0 [ 646.554640][T12278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 646.564736][T12278] Call Trace: [ 646.568042][T12278] [ 646.571006][T12278] dump_stack_lvl+0x188/0x24e [ 646.575727][T12278] ? show_regs_print_info+0x12/0x12 [ 646.581053][T12278] ? load_image+0x410/0x410 [ 646.585597][T12278] ? __lock_acquire+0x7c40/0x7c40 [ 646.590667][T12278] should_fail_ex+0x390/0x4c0 [ 646.595395][T12278] _copy_from_user+0x2c/0x170 [ 646.600116][T12278] bpf_prog_test_run_skb+0x263/0x18e0 [ 646.605540][T12278] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 646.611722][T12278] ? lockdep_hardirqs_on+0x94/0x140 [ 646.617113][T12278] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 646.623389][T12278] ? cpu_online+0xa0/0xa0 [ 646.627730][T12278] bpf_prog_test_run+0x31c/0x390 [ 646.632691][T12278] __sys_bpf+0x62b/0x780 [ 646.636948][T12278] ? bpf_link_show_fdinfo+0x380/0x380 [ 646.642345][T12278] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 646.648532][T12278] __x64_sys_bpf+0x78/0x90 [ 646.652964][T12278] do_syscall_64+0x4c/0xa0 [ 646.657395][T12278] ? clear_bhb_loop+0x60/0xb0 [ 646.662091][T12278] ? clear_bhb_loop+0x60/0xb0 [ 646.666782][T12278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.672689][T12278] RIP: 0033:0x7f914919de59 [ 646.677112][T12278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.696729][T12278] RSP: 002b:00007f914a0fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 646.705192][T12278] RAX: ffffffffffffffda RBX: 00007f9149425fa0 RCX: 00007f914919de59 [ 646.713170][T12278] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 646.721149][T12278] RBP: 00007f914a0fd090 R08: 0000000000000000 R09: 0000000000000000 [ 646.729168][T12278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.737184][T12278] R13: 00007f9149426038 R14: 00007f9149425fa0 R15: 00007ffe6f572f88 [ 646.745223][T12278] [ 649.368636][T12313] device syzkaller0 entered promiscuous mode [ 653.043201][T12367] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2218'. [ 655.291029][T12425] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2238'. [ 655.699299][T12440] netlink: 'syz.2.2241': attribute type 29 has an invalid length. [ 655.778710][T12440] netlink: 'syz.2.2241': attribute type 29 has an invalid length. [ 655.786902][T12440] netlink: 'syz.2.2241': attribute type 29 has an invalid length. [ 655.790509][T12441] netlink: 'syz.2.2241': attribute type 29 has an invalid length. [ 655.886394][T12441] netlink: 'syz.2.2241': attribute type 29 has an invalid length. [ 655.948676][T12441] netlink: 'syz.2.2241': attribute type 29 has an invalid length. [ 656.028477][T12440] netlink: 'syz.2.2241': attribute type 29 has an invalid length. [ 656.029321][T12441] netlink: 'syz.2.2241': attribute type 29 has an invalid length. [ 656.416370][T12441] netlink: 'syz.2.2241': attribute type 29 has an invalid length. [ 656.441595][T12440] netlink: 'syz.2.2241': attribute type 29 has an invalid length. [ 656.648786][T12463] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2248'. [ 657.386530][T12482] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2255'. [ 658.424947][T12511] FAULT_INJECTION: forcing a failure. [ 658.424947][T12511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.468314][T12511] CPU: 0 PID: 12511 Comm: syz.0.2266 Not tainted syzkaller #0 [ 658.475880][T12511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 658.486001][T12511] Call Trace: [ 658.489326][T12511] [ 658.492303][T12511] dump_stack_lvl+0x188/0x24e [ 658.497046][T12511] ? show_regs_print_info+0x12/0x12 [ 658.502313][T12511] ? load_image+0x410/0x410 [ 658.506883][T12511] ? __might_fault+0xa6/0x120 [ 658.511627][T12511] should_fail_ex+0x390/0x4c0 [ 658.516368][T12511] copyin+0x1b/0x120 [ 658.520320][T12511] _copy_from_iter+0x447/0x1130 [ 658.525235][T12511] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 658.530684][T12511] ? copyout_mc+0x110/0x110 [ 658.535244][T12511] ? __virt_addr_valid+0x188/0x540 [ 658.540437][T12511] ? __virt_addr_valid+0x188/0x540 [ 658.545614][T12511] ? __virt_addr_valid+0x467/0x540 [ 658.550799][T12511] ? __check_object_size+0x4f6/0xa70 [ 658.556161][T12511] skb_copy_datagram_from_iter+0xee/0x6b0 [ 658.561947][T12511] ? dev_get_by_index+0x1e/0x2d0 [ 658.566950][T12511] ? skb_put+0x10e/0x200 [ 658.571263][T12511] packet_sendmsg+0x36d2/0x4de0 [ 658.576179][T12511] ? aa_sk_perm+0x950/0x950 [ 658.580778][T12511] ? __might_sleep+0xd0/0xd0 [ 658.585448][T12511] ? trace_event_raw_event_lock+0x230/0x230 [ 658.591493][T12511] ? aa_sk_perm+0x81f/0x950 [ 658.596250][T12511] ? aa_af_perm+0x340/0x340 [ 658.600814][T12511] ? packet_getsockopt+0x980/0x980 [ 658.606017][T12511] ? apparmor_socket_sendmsg+0x8a/0x330 [ 658.611628][T12511] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 658.616971][T12511] ? security_socket_sendmsg+0x7c/0xa0 [ 658.622493][T12511] ? packet_getsockopt+0x980/0x980 [ 658.627674][T12511] ____sys_sendmsg+0x5ed/0x9a0 [ 658.632514][T12511] ? __sys_sendmsg_sock+0x30/0x30 [ 658.637598][T12511] ? __import_iovec+0x306/0x510 [ 658.642612][T12511] ? import_iovec+0x6f/0xa0 [ 658.647393][T12511] ___sys_sendmsg+0x2a2/0x360 [ 658.652149][T12511] ? __sys_sendmsg+0x2a0/0x2a0 [ 658.656989][T12511] ? __lock_acquire+0x7c40/0x7c40 [ 658.662077][T12511] __se_sys_sendmsg+0x1c3/0x2b0 [ 658.666977][T12511] ? __x64_sys_sendmsg+0x80/0x80 [ 658.672000][T12511] ? lockdep_hardirqs_on+0x94/0x140 [ 658.677284][T12511] do_syscall_64+0x4c/0xa0 [ 658.681770][T12511] ? clear_bhb_loop+0x60/0xb0 [ 658.686697][T12511] ? clear_bhb_loop+0x60/0xb0 [ 658.691429][T12511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 658.697390][T12511] RIP: 0033:0x7ff92159de59 [ 658.701857][T12511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.721702][T12511] RSP: 002b:00007ff92252b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.730182][T12511] RAX: ffffffffffffffda RBX: 00007ff921825fa0 RCX: 00007ff92159de59 [ 658.738299][T12511] RDX: 0000000006000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 658.746327][T12511] RBP: 00007ff92252b090 R08: 0000000000000000 R09: 0000000000000000 [ 658.754388][T12511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.762408][T12511] R13: 00007ff921826038 R14: 00007ff921825fa0 R15: 00007ffd020be6f8 [ 658.770468][T12511] [ 660.572116][T12567] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2290'. [ 661.610275][T12587] batman_adv: batadv0: Interface deactivated: vlan1 [ 661.727685][T12600] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.2293'. [ 661.782160][T12600] openvswitch: netlink: Key type 386 is out of range max 32 [ 662.541251][T12587] batman_adv: batadv0: Removing interface: vlan1 [ 663.367511][T12621] validate_nla: 14 callbacks suppressed [ 663.367530][T12621] netlink: 'syz.3.2299': attribute type 10 has an invalid length. [ 663.697219][T12627] netlink: 'syz.2.2301': attribute type 10 has an invalid length. [ 663.716958][T12627] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2301'. [ 663.726740][T12627] device ipvlan1 entered promiscuous mode [ 663.735667][T12627] bridge0: port 4(ipvlan1) entered blocking state [ 663.743036][T12627] bridge0: port 4(ipvlan1) entered disabled state [ 663.753931][T12627] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 664.574577][T12661] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2312'. [ 664.617275][T12661] netlink: zone id is out of range [ 664.645342][T12661] netlink: zone id is out of range [ 665.579037][T12682] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 665.647201][T12682] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2319'. [ 665.775125][T12687] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2320'. [ 666.271456][T12682] team0: Port device team_slave_0 removed [ 666.681611][T12708] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2326'. [ 668.036988][T12737] netlink: 'syz.1.2332': attribute type 2 has an invalid length. [ 668.096161][T12737] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2332'. [ 671.562922][T12811] FAULT_INJECTION: forcing a failure. [ 671.562922][T12811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.641368][T12811] CPU: 1 PID: 12811 Comm: syz.1.2354 Not tainted syzkaller #0 [ 671.648900][T12811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 671.659168][T12811] Call Trace: [ 671.662468][T12811] [ 671.665419][T12811] dump_stack_lvl+0x188/0x24e [ 671.670110][T12811] ? show_regs_print_info+0x12/0x12 [ 671.675318][T12811] ? load_image+0x410/0x410 [ 671.679848][T12811] ? __lock_acquire+0x7c40/0x7c40 [ 671.684891][T12811] ? ip6_append_data+0x1c8/0x3d0 [ 671.689842][T12811] ? ____sys_sendmsg+0x5ed/0x9a0 [ 671.694803][T12811] ? ___sys_sendmsg+0x2a2/0x360 [ 671.699687][T12811] should_fail_ex+0x390/0x4c0 [ 671.704417][T12811] _copy_from_user+0x2c/0x170 [ 671.709129][T12811] csum_and_copy_from_iter+0x492/0x1380 [ 671.714745][T12811] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 671.720415][T12811] ? __kmem_cache_alloc_node+0x19d/0x270 [ 671.726076][T12811] ? __ip6_append_data+0x2b5e/0x3e30 [ 671.731486][T12811] ? rcu_is_watching+0x11/0xa0 [ 671.736297][T12811] ? __ip6_append_data+0x2b5e/0x3e30 [ 671.741650][T12811] ping_getfrag+0x69/0x280 [ 671.746087][T12811] ? skb_put+0x10e/0x200 [ 671.750357][T12811] __ip6_append_data+0x2ee1/0x3e30 [ 671.755513][T12811] ? inet6_sk+0xe0/0xe0 [ 671.760063][T12811] ? ip6_setup_cork+0xff0/0xff0 [ 671.764933][T12811] ? ip6_setup_cork+0xa4a/0xff0 [ 671.769890][T12811] ip6_append_data+0x1c8/0x3d0 [ 671.774675][T12811] ? inet6_sk+0xe0/0xe0 [ 671.778848][T12811] ping_v6_sendmsg+0xdab/0x1170 [ 671.783793][T12811] ? ping_v6_pre_connect+0x30/0x30 [ 671.788916][T12811] ? ct_irq_exit_irqson+0x113/0x170 [ 671.794150][T12811] ? __local_bh_enable_ip+0x136/0x1c0 [ 671.799534][T12811] ? lockdep_hardirqs_on+0x94/0x140 [ 671.804746][T12811] ? _local_bh_enable+0xa0/0xa0 [ 671.809639][T12811] ? do_raw_spin_unlock+0x11d/0x230 [ 671.814848][T12811] ? inet_sendmsg+0x109/0x2a0 [ 671.819543][T12811] ? inet_sendmsg+0x109/0x2a0 [ 671.824239][T12811] ? inet_send_prepare+0x250/0x250 [ 671.829375][T12811] ____sys_sendmsg+0x5ed/0x9a0 [ 671.834167][T12811] ? __sys_sendmsg_sock+0x30/0x30 [ 671.839224][T12811] ? __import_iovec+0x306/0x510 [ 671.844218][T12811] ? import_iovec+0x6f/0xa0 [ 671.848783][T12811] ___sys_sendmsg+0x2a2/0x360 [ 671.853613][T12811] ? __sys_sendmsg+0x2a0/0x2a0 [ 671.858436][T12811] ? __lock_acquire+0x7c40/0x7c40 [ 671.863539][T12811] __se_sys_sendmsg+0x1c3/0x2b0 [ 671.868437][T12811] ? __x64_sys_sendmsg+0x80/0x80 [ 671.873418][T12811] ? lockdep_hardirqs_on+0x94/0x140 [ 671.878640][T12811] do_syscall_64+0x4c/0xa0 [ 671.883070][T12811] ? clear_bhb_loop+0x60/0xb0 [ 671.887765][T12811] ? clear_bhb_loop+0x60/0xb0 [ 671.892456][T12811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 671.898364][T12811] RIP: 0033:0x7f914919de59 [ 671.902879][T12811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.922756][T12811] RSP: 002b:00007f914a0dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.931204][T12811] RAX: ffffffffffffffda RBX: 00007f9149426090 RCX: 00007f914919de59 [ 671.939382][T12811] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000009 [ 671.947393][T12811] RBP: 00007f914a0dc090 R08: 0000000000000000 R09: 0000000000000000 [ 671.955387][T12811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 671.963375][T12811] R13: 00007f9149426128 R14: 00007f9149426090 R15: 00007ffe6f572f88 [ 671.971377][T12811] [ 672.246808][T12817] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2357'. [ 672.292485][T12816] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2357'. [ 674.025925][T12871] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 674.072939][T12871] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2377'. [ 674.814894][T12890] netlink: 'syz.0.2383': attribute type 3 has an invalid length. [ 674.867466][T12885] device syzkaller0 entered promiscuous mode [ 674.898272][T12890] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2383'. [ 674.909298][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 674.922610][T12893] netlink: 'syz.0.2383': attribute type 29 has an invalid length. [ 674.933237][T12893] netlink: 'syz.0.2383': attribute type 3 has an invalid length. [ 674.946466][T12893] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2383'. [ 675.778526][T12927] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving [ 675.822493][T12926] netlink: 'syz.4.2394': attribute type 10 has an invalid length. [ 676.030305][T12936] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 676.097270][T12936] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2397'. [ 676.248487][T12936] device team_slave_0 left promiscuous mode [ 676.287120][T12936] team0: Port device team_slave_0 removed [ 676.675702][T12954] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2401'. [ 676.687471][T12954] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2401'. [ 676.711268][T12954] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2401'. [ 676.737017][T12954] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2401'. [ 677.071375][T12970] netlink: 'syz.0.2408': attribute type 21 has an invalid length. [ 677.294071][T12975] netlink: 'syz.2.2410': attribute type 29 has an invalid length. [ 677.334572][T12975] netlink: 'syz.2.2410': attribute type 29 has an invalid length. [ 677.367040][T12976] netlink: 'syz.2.2410': attribute type 29 has an invalid length. [ 677.672713][T12990] netlink: 'syz.2.2415': attribute type 27 has an invalid length. [ 677.811475][T12992] netlink: 'syz.4.2412': attribute type 10 has an invalid length. [ 679.408909][T13039] device syzkaller0 entered promiscuous mode [ 679.555887][T13028] __nla_validate_parse: 1 callbacks suppressed [ 679.555934][T13028] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2426'. [ 679.653522][T13026] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2426'. [ 679.994374][T13052] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2434'. [ 680.073453][T13056] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2431'. [ 680.085042][T13056] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2431'. [ 680.107995][T13050] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2431'. [ 680.169289][T13050] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2431'. [ 680.187435][T13058] device pim6reg1 entered promiscuous mode [ 680.223490][T13054] FAULT_INJECTION: forcing a failure. [ 680.223490][T13054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.278449][T13054] CPU: 0 PID: 13054 Comm: syz.3.2435 Not tainted syzkaller #0 [ 680.285990][T13054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 680.296076][T13054] Call Trace: [ 680.299397][T13054] [ 680.302361][T13054] dump_stack_lvl+0x188/0x24e [ 680.307070][T13054] ? show_regs_print_info+0x12/0x12 [ 680.312365][T13054] ? load_image+0x410/0x410 [ 680.316897][T13054] ? __lock_acquire+0x7c40/0x7c40 [ 680.321947][T13054] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 680.327963][T13054] ? __lock_acquire+0x7c40/0x7c40 [ 680.333025][T13054] should_fail_ex+0x390/0x4c0 [ 680.337740][T13054] _copy_to_user+0x2c/0x130 [ 680.342284][T13054] bpf_test_finish+0x266/0x600 [ 680.347114][T13054] ? convert_skb_to___skb+0x420/0x420 [ 680.352528][T13054] bpf_prog_test_run_flow_dissector+0x4c5/0x640 [ 680.358816][T13054] ? xdp_convert_buff_to_md+0x200/0x200 [ 680.364478][T13054] ? __fget_files+0x28/0x460 [ 680.369119][T13054] ? xdp_convert_buff_to_md+0x200/0x200 [ 680.374716][T13054] bpf_prog_test_run+0x31c/0x390 [ 680.379694][T13054] __sys_bpf+0x62b/0x780 [ 680.383964][T13054] ? bpf_link_show_fdinfo+0x380/0x380 [ 680.389403][T13054] ? lock_chain_count+0x20/0x20 [ 680.394284][T13054] __x64_sys_bpf+0x78/0x90 [ 680.398825][T13054] do_syscall_64+0x4c/0xa0 [ 680.403257][T13054] ? clear_bhb_loop+0x60/0xb0 [ 680.407946][T13054] ? clear_bhb_loop+0x60/0xb0 [ 680.412659][T13054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.418652][T13054] RIP: 0033:0x7fc8d859de59 [ 680.423076][T13054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.442691][T13054] RSP: 002b:00007fc8d9499028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 680.451118][T13054] RAX: ffffffffffffffda RBX: 00007fc8d8825fa0 RCX: 00007fc8d859de59 [ 680.459097][T13054] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 680.467075][T13054] RBP: 00007fc8d9499090 R08: 0000000000000000 R09: 0000000000000000 [ 680.475056][T13054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.483036][T13054] R13: 00007fc8d8826038 R14: 00007fc8d8825fa0 R15: 00007ffeaa074a28 [ 680.491029][T13054] [ 681.383141][T13087] validate_nla: 5 callbacks suppressed [ 681.383162][T13087] netlink: 'syz.3.2442': attribute type 41 has an invalid length. [ 681.964722][T13096] netlink: 'syz.3.2445': attribute type 10 has an invalid length. [ 682.205220][T13090] netlink: 'syz.4.2446': attribute type 3 has an invalid length. [ 682.215003][T13090] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2446'. [ 682.260608][T13097] netlink: 'syz.4.2446': attribute type 29 has an invalid length. [ 682.301087][T13097] netlink: 'syz.4.2446': attribute type 3 has an invalid length. [ 682.337297][T13097] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2446'. [ 682.986578][T13122] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2454'. [ 683.152644][T13122] netlink: 'syz.1.2454': attribute type 10 has an invalid length. [ 683.474893][T13131] netlink: 'syz.0.2456': attribute type 41 has an invalid length. [ 683.676930][T13134] netlink: 'syz.2.2459': attribute type 10 has an invalid length. [ 684.096944][T13134] device hsr_slave_0 entered promiscuous mode [ 684.335596][T13134] team0: Port device hsr_slave_0 added [ 685.507359][T13162] netlink: 'syz.4.2465': attribute type 29 has an invalid length. [ 685.549124][T13162] netlink: 'syz.4.2465': attribute type 29 has an invalid length. [ 685.761720][T13165] FAULT_INJECTION: forcing a failure. [ 685.761720][T13165] name failslab, interval 1, probability 0, space 0, times 0 [ 685.798009][T13165] CPU: 1 PID: 13165 Comm: syz.0.2466 Not tainted syzkaller #0 [ 685.805577][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 685.815698][T13165] Call Trace: [ 685.819038][T13165] [ 685.822020][T13165] dump_stack_lvl+0x188/0x24e [ 685.826776][T13165] ? show_regs_print_info+0x12/0x12 [ 685.832050][T13165] ? load_image+0x410/0x410 [ 685.836639][T13165] ? __might_sleep+0xd0/0xd0 [ 685.841291][T13165] ? __lock_acquire+0x7c40/0x7c40 [ 685.846380][T13165] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 685.852079][T13165] should_fail_ex+0x390/0x4c0 [ 685.856832][T13165] should_failslab+0x5/0x20 [ 685.861381][T13165] slab_pre_alloc_hook+0x59/0x300 [ 685.866479][T13165] kmem_cache_alloc_node+0x5a/0x310 [ 685.871731][T13165] ? __alloc_skb+0xf9/0x7d0 [ 685.876312][T13165] __alloc_skb+0xf9/0x7d0 [ 685.880720][T13165] __ip_append_data+0x26d0/0x38d0 [ 685.885925][T13165] ? raw_send_hdrinc+0x1130/0x1130 [ 685.891136][T13165] ? ip_setup_cork+0x850/0x850 [ 685.895987][T13165] ? ipv4_mtu+0x30c/0x420 [ 685.900409][T13165] ? ip_setup_cork+0x528/0x850 [ 685.905271][T13165] ip_append_data+0x132/0x1a0 [ 685.910022][T13165] ? raw_send_hdrinc+0x1130/0x1130 [ 685.915206][T13165] raw_sendmsg+0x12c8/0x1940 [ 685.919926][T13165] ? compat_raw_ioctl+0x60/0x60 [ 685.924861][T13165] ? aa_sk_perm+0x81f/0x950 [ 685.929439][T13165] ? __might_fault+0xa6/0x120 [ 685.934191][T13165] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 685.940663][T13165] ? aa_sock_msg_perm+0x94/0x150 [ 685.945688][T13165] ? sock_rps_record_flow+0x19/0x3f0 [ 685.951072][T13165] ? inet_sendmsg+0x7a/0x2a0 [ 685.955729][T13165] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 685.961066][T13165] ? inet_send_prepare+0x250/0x250 [ 685.966252][T13165] ____sys_sendmsg+0x5ed/0x9a0 [ 685.971114][T13165] ? __sys_sendmsg_sock+0x30/0x30 [ 685.976273][T13165] ? __import_iovec+0x306/0x510 [ 685.981212][T13165] ? import_iovec+0x6f/0xa0 [ 685.985814][T13165] ___sys_sendmsg+0x2a2/0x360 [ 685.990661][T13165] ? __sys_sendmsg+0x2a0/0x2a0 [ 685.995559][T13165] ? __lock_acquire+0x7c40/0x7c40 [ 686.000734][T13165] __se_sys_sendmsg+0x1c3/0x2b0 [ 686.005679][T13165] ? __x64_sys_sendmsg+0x80/0x80 [ 686.010735][T13165] ? lockdep_hardirqs_on+0x94/0x140 [ 686.016001][T13165] do_syscall_64+0x4c/0xa0 [ 686.020471][T13165] ? clear_bhb_loop+0x60/0xb0 [ 686.025197][T13165] ? clear_bhb_loop+0x60/0xb0 [ 686.029943][T13165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 686.035895][T13165] RIP: 0033:0x7ff92159de59 [ 686.040367][T13165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.060030][T13165] RSP: 002b:00007ff92252b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.068677][T13165] RAX: ffffffffffffffda RBX: 00007ff921825fa0 RCX: 00007ff92159de59 [ 686.076703][T13165] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 686.084720][T13165] RBP: 00007ff92252b090 R08: 0000000000000000 R09: 0000000000000000 [ 686.092739][T13165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 686.100766][T13165] R13: 00007ff921826038 R14: 00007ff921825fa0 R15: 00007ffd020be6f8 [ 686.108926][T13165] [ 686.158214][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.164935][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.335697][T13167] FAULT_INJECTION: forcing a failure. [ 686.335697][T13167] name failslab, interval 1, probability 0, space 0, times 0 [ 686.362379][T13167] CPU: 1 PID: 13167 Comm: syz.1.2467 Not tainted syzkaller #0 [ 686.369918][T13167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.380003][T13167] Call Trace: [ 686.383352][T13167] [ 686.386295][T13167] dump_stack_lvl+0x188/0x24e [ 686.391092][T13167] ? rcu_is_watching+0x11/0xa0 [ 686.395880][T13167] ? show_regs_print_info+0x12/0x12 [ 686.401103][T13167] ? load_image+0x410/0x410 [ 686.405617][T13167] ? lockdep_hardirqs_on+0x94/0x140 [ 686.410835][T13167] should_fail_ex+0x390/0x4c0 [ 686.415547][T13167] should_failslab+0x5/0x20 [ 686.420061][T13167] slab_pre_alloc_hook+0x59/0x300 [ 686.425099][T13167] ? stack_trace_save+0xf0/0xf0 [ 686.430030][T13167] ? rtnl_newlink+0x10f/0x1f90 [ 686.434808][T13167] __kmem_cache_alloc_node+0x4f/0x270 [ 686.440186][T13167] ? mark_lock+0x94/0x320 [ 686.444528][T13167] ? rtnl_newlink+0x10f/0x1f90 [ 686.449310][T13167] kmalloc_trace+0x26/0xe0 [ 686.453742][T13167] rtnl_newlink+0x10f/0x1f90 [ 686.458343][T13167] ? __stack_depot_save+0x35/0x480 [ 686.463485][T13167] ? __mutex_trylock_common+0x15c/0x260 [ 686.469132][T13167] ? rtnl_setlink+0x510/0x510 [ 686.473842][T13167] ? trace_raw_output_contention_end+0xd0/0xd0 [ 686.480011][T13167] ? rcu_is_watching+0x11/0xa0 [ 686.484803][T13167] ? trace_contention_end+0x5f/0x170 [ 686.490098][T13167] ? __mutex_lock+0x1ab/0xae0 [ 686.494794][T13167] ? rtnetlink_rcv_msg+0x80d/0xfb0 [ 686.499915][T13167] ? rcu_read_unlock+0x8c/0xa0 [ 686.504688][T13167] ? mutex_lock_nested+0x10/0x10 [ 686.509678][T13167] ? rtnl_setlink+0x510/0x510 [ 686.514387][T13167] rtnetlink_rcv_msg+0x863/0xfb0 [ 686.519605][T13167] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 686.524749][T13167] ? rtnetlink_bind+0x80/0x80 [ 686.529434][T13167] ? __local_bh_enable_ip+0x136/0x1c0 [ 686.534820][T13167] ? lockdep_hardirqs_on+0x94/0x140 [ 686.540032][T13167] ? __local_bh_enable_ip+0x136/0x1c0 [ 686.545429][T13167] ? _local_bh_enable+0xa0/0xa0 [ 686.550306][T13167] ? __dev_queue_xmit+0x281/0x3810 [ 686.555438][T13167] ? __dev_queue_xmit+0x281/0x3810 [ 686.560665][T13167] ? __dev_queue_xmit+0x1d84/0x3810 [ 686.565966][T13167] ? __dev_queue_xmit+0x281/0x3810 [ 686.571105][T13167] ? ref_tracker_free+0x682/0x830 [ 686.576142][T13167] ? refcount_inc+0x70/0x70 [ 686.580656][T13167] ? memcpy+0x3c/0x60 [ 686.584650][T13167] ? __copy_skb_header+0x3ba/0x4f0 [ 686.589774][T13167] ? __skb_clone+0x446/0x6c0 [ 686.594380][T13167] netlink_rcv_skb+0x1ef/0x440 [ 686.599157][T13167] ? rtnetlink_bind+0x80/0x80 [ 686.603849][T13167] ? netlink_ack+0x1160/0x1160 [ 686.608656][T13167] ? netlink_deliver_tap+0x2e/0x1b0 [ 686.613873][T13167] netlink_unicast+0x7ad/0x920 [ 686.618658][T13167] netlink_sendmsg+0x8ad/0xbd0 [ 686.623438][T13167] ? netlink_getsockopt+0x550/0x550 [ 686.628647][T13167] ? apparmor_socket_sendmsg+0x8a/0x330 [ 686.634205][T13167] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 686.639494][T13167] ? security_socket_sendmsg+0x7c/0xa0 [ 686.644978][T13167] ? netlink_getsockopt+0x550/0x550 [ 686.650189][T13167] ____sys_sendmsg+0x5ed/0x9a0 [ 686.654970][T13167] ? __sys_sendmsg_sock+0x30/0x30 [ 686.660006][T13167] ? __import_iovec+0x306/0x510 [ 686.664879][T13167] ? import_iovec+0x6f/0xa0 [ 686.669416][T13167] ___sys_sendmsg+0x2a2/0x360 [ 686.674109][T13167] ? __sys_sendmsg+0x2a0/0x2a0 [ 686.678897][T13167] ? rcu_is_watching+0x11/0xa0 [ 686.683692][T13167] __se_sys_sendmsg+0x1c3/0x2b0 [ 686.688560][T13167] ? __x64_sys_sendmsg+0x80/0x80 [ 686.693522][T13167] ? lockdep_hardirqs_on+0x94/0x140 [ 686.698741][T13167] do_syscall_64+0x4c/0xa0 [ 686.703225][T13167] ? clear_bhb_loop+0x60/0xb0 [ 686.707910][T13167] ? clear_bhb_loop+0x60/0xb0 [ 686.712608][T13167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 686.718512][T13167] RIP: 0033:0x7f914919de59 [ 686.722956][T13167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.742576][T13167] RSP: 002b:00007f914a0fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.751008][T13167] RAX: ffffffffffffffda RBX: 00007f9149425fa0 RCX: 00007f914919de59 [ 686.758984][T13167] RDX: 000000000400c084 RSI: 0000200000000040 RDI: 000000000000000a [ 686.766983][T13167] RBP: 00007f914a0fd090 R08: 0000000000000000 R09: 0000000000000000 [ 686.774978][T13167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.782954][T13167] R13: 00007f9149426038 R14: 00007f9149425fa0 R15: 00007ffe6f572f88 [ 686.790942][T13167] [ 690.935831][T13221] validate_nla: 1 callbacks suppressed [ 690.935853][T13221] netlink: 'syz.1.2483': attribute type 29 has an invalid length. [ 691.058636][T13221] netlink: 'syz.1.2483': attribute type 29 has an invalid length. [ 691.247217][T13227] netlink: 'syz.1.2483': attribute type 29 has an invalid length. [ 692.418056][T13236] netlink: 'syz.4.2486': attribute type 10 has an invalid length. [ 692.468436][T13236] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2486'. [ 693.656209][T13245] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2488'. [ 697.118650][T13308] netlink: 'syz.4.2507': attribute type 10 has an invalid length. [ 697.171266][T13308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2507'. [ 697.722889][T13321] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2511'. [ 697.943290][T13324] FAULT_INJECTION: forcing a failure. [ 697.943290][T13324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.018848][T13324] CPU: 0 PID: 13324 Comm: syz.0.2514 Not tainted syzkaller #0 [ 698.026405][T13324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 698.036499][T13324] Call Trace: [ 698.039813][T13324] [ 698.042779][T13324] dump_stack_lvl+0x188/0x24e [ 698.047508][T13324] ? show_regs_print_info+0x12/0x12 [ 698.052763][T13324] ? load_image+0x410/0x410 [ 698.057286][T13324] ? __lock_acquire+0x7c40/0x7c40 [ 698.062342][T13324] should_fail_ex+0x390/0x4c0 [ 698.067036][T13324] _copy_to_user+0x2c/0x130 [ 698.071553][T13324] bpf_test_finish+0x4a2/0x600 [ 698.076342][T13324] ? convert_skb_to___skb+0x420/0x420 [ 698.081727][T13324] ? bpf_test_init+0x119/0x140 [ 698.086504][T13324] bpf_prog_test_run_xdp+0x827/0xf80 [ 698.091796][T13324] ? __lock_acquire+0x7c40/0x7c40 [ 698.096841][T13324] ? dev_put+0x80/0x80 [ 698.100928][T13324] ? dev_put+0x80/0x80 [ 698.105200][T13324] bpf_prog_test_run+0x31c/0x390 [ 698.110167][T13324] __sys_bpf+0x62b/0x780 [ 698.114422][T13324] ? bpf_link_show_fdinfo+0x380/0x380 [ 698.119826][T13324] ? lock_chain_count+0x20/0x20 [ 698.124694][T13324] __x64_sys_bpf+0x78/0x90 [ 698.129126][T13324] do_syscall_64+0x4c/0xa0 [ 698.133640][T13324] ? clear_bhb_loop+0x60/0xb0 [ 698.138330][T13324] ? clear_bhb_loop+0x60/0xb0 [ 698.143025][T13324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 698.149022][T13324] RIP: 0033:0x7ff92159de59 [ 698.153451][T13324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.173175][T13324] RSP: 002b:00007ff92252b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 698.181601][T13324] RAX: ffffffffffffffda RBX: 00007ff921825fa0 RCX: 00007ff92159de59 [ 698.189583][T13324] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 698.197560][T13324] RBP: 00007ff92252b090 R08: 0000000000000000 R09: 0000000000000000 [ 698.205717][T13324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 698.213697][T13324] R13: 00007ff921826038 R14: 00007ff921825fa0 R15: 00007ffd020be6f8 [ 698.221692][T13324] [ 699.995804][T13372] netlink: 'syz.4.2528': attribute type 2 has an invalid length. [ 700.283054][T13377] netlink: 'syz.3.2527': attribute type 6 has an invalid length. [ 700.897647][T13392] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2535'. [ 702.719165][T13414] netlink: 'syz.3.2538': attribute type 2 has an invalid length. [ 702.733143][T13414] netlink: 'syz.3.2538': attribute type 8 has an invalid length. [ 702.751370][T13414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2538'. [ 705.393178][T13431] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2547'. [ 705.821769][T13451] netlink: 'syz.0.2553': attribute type 29 has an invalid length. [ 705.849435][T13451] netlink: 'syz.0.2553': attribute type 29 has an invalid length. [ 705.865465][T13446] netlink: 'syz.0.2553': attribute type 29 has an invalid length. [ 705.882872][T13452] netlink: 'syz.0.2553': attribute type 29 has an invalid length. [ 705.922378][ T4286] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 709.891186][T13546] netlink: 'syz.2.2582': attribute type 29 has an invalid length. [ 709.942229][T13546] netlink: 'syz.2.2582': attribute type 29 has an invalid length. [ 709.976278][T13543] netlink: 'syz.2.2582': attribute type 29 has an invalid length. [ 710.105985][T13549] netlink: 'syz.2.2582': attribute type 29 has an invalid length. [ 712.348005][T13602] netlink: 'syz.4.2597': attribute type 29 has an invalid length. [ 712.372284][T13602] netlink: 'syz.4.2597': attribute type 29 has an invalid length. [ 712.424193][T13600] netlink: 'syz.4.2597': attribute type 29 has an invalid length. [ 712.628566][T13603] netlink: 'syz.4.2597': attribute type 29 has an invalid length. [ 712.686659][T13606] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2598'. [ 718.240435][T13660] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2615'. [ 720.004714][T13679] netlink: 'syz.0.2620': attribute type 3 has an invalid length. [ 720.048751][T13679] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2620'. [ 720.782480][T13696] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2627'. [ 722.904792][T13743] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2641'. [ 723.482670][T13739] delete_channel: no stack [ 724.157381][T13769] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2651'. [ 724.836399][T13787] netlink: 'syz.1.2657': attribute type 10 has an invalid length. [ 725.523695][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 730.695560][T13893] netlink: 'syz.1.2697': attribute type 5 has an invalid length. [ 730.957531][T13904] FAULT_INJECTION: forcing a failure. [ 730.957531][T13904] name failslab, interval 1, probability 0, space 0, times 0 [ 730.988338][T13904] CPU: 1 PID: 13904 Comm: syz.2.2690 Not tainted syzkaller #0 [ 730.995878][T13904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 731.006053][T13904] Call Trace: [ 731.009362][T13904] [ 731.012326][T13904] dump_stack_lvl+0x188/0x24e [ 731.017141][T13904] ? show_regs_print_info+0x12/0x12 [ 731.022384][T13904] ? load_image+0x410/0x410 [ 731.026927][T13904] ? __might_sleep+0xd0/0xd0 [ 731.031571][T13904] ? __lock_acquire+0x7c40/0x7c40 [ 731.036638][T13904] should_fail_ex+0x390/0x4c0 [ 731.041355][T13904] should_failslab+0x5/0x20 [ 731.045882][T13904] slab_pre_alloc_hook+0x59/0x300 [ 731.050946][T13904] ? mas_next_entry+0xde9/0xe90 [ 731.055860][T13904] kmem_cache_alloc+0x56/0x2f0 [ 731.060661][T13904] ? vm_area_dup+0x23/0x1a0 [ 731.065210][T13904] vm_area_dup+0x23/0x1a0 [ 731.069601][T13904] copy_mm+0xb13/0x1680 [ 731.073895][T13904] ? copy_signal+0x640/0x640 [ 731.078514][T13904] ? lockdep_init_map_type+0x98/0x8d0 [ 731.083935][T13904] ? __init_rwsem+0x11e/0x160 [ 731.088643][T13904] ? copy_signal+0x51f/0x640 [ 731.093269][T13904] copy_process+0x19a6/0x40c0 [ 731.098000][T13904] ? copy_process+0x974/0x40c0 [ 731.102801][T13904] ? idle_dummy+0x10/0x10 [ 731.107152][T13904] kernel_clone+0x24b/0x900 [ 731.111667][T13904] ? ksys_write+0x1ce/0x260 [ 731.116190][T13904] ? create_io_thread+0x170/0x170 [ 731.121243][T13904] __x64_sys_clone+0x1a7/0x220 [ 731.126013][T13904] ? __fget_files+0x3fc/0x460 [ 731.130710][T13904] ? __ia32_sys_vfork+0x140/0x140 [ 731.135946][T13904] ? lock_chain_count+0x20/0x20 [ 731.140837][T13904] ? lockdep_hardirqs_on+0x94/0x140 [ 731.146048][T13904] do_syscall_64+0x4c/0xa0 [ 731.150563][T13904] ? clear_bhb_loop+0x60/0xb0 [ 731.155253][T13904] ? clear_bhb_loop+0x60/0xb0 [ 731.159942][T13904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.165847][T13904] RIP: 0033:0x7f7dea19de59 [ 731.170274][T13904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.189888][T13904] RSP: 002b:00007f7deb10cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 731.198333][T13904] RAX: ffffffffffffffda RBX: 00007f7dea425fa0 RCX: 00007f7dea19de59 [ 731.206345][T13904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 731.214350][T13904] RBP: 00007f7deb10d090 R08: 0000000000000000 R09: 0000000000000000 [ 731.222368][T13904] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 731.230379][T13904] R13: 00007f7dea426038 R14: 00007f7dea425fa0 R15: 00007ffddd4ac4a8 [ 731.238406][T13904] [ 732.848500][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2696'. [ 733.212125][T13940] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2703'. [ 733.226939][T13941] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2702'. [ 734.516980][T13964] netlink: 'syz.4.2709': attribute type 5 has an invalid length. [ 734.572062][T13966] netlink: 'syz.0.2711': attribute type 10 has an invalid length. [ 735.247227][T13981] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.2714'. [ 735.408348][T13981] openvswitch: netlink: Key type 386 is out of range max 32 [ 735.927979][T13993] netlink: 'syz.0.2718': attribute type 10 has an invalid length. [ 735.941333][T13993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2718'. [ 735.957997][T13993] bridge0: port 2(ipvlan1) entered blocking state [ 735.971380][T13993] bridge0: port 2(ipvlan1) entered disabled state [ 735.985496][T13995] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2719'. [ 736.001659][T13995] netlink: zone id is out of range [ 736.003524][T13993] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 736.007624][T13995] netlink: zone id is out of range [ 736.041115][T13997] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2720'. [ 736.879632][T14006] netlink: 'syz.3.2723': attribute type 5 has an invalid length. [ 737.466721][T14022] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2730'. [ 738.056298][T14036] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2735'. [ 739.225417][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2738'. [ 739.328266][T14056] netlink: 'syz.2.2741': attribute type 10 has an invalid length. [ 739.349200][T14056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2741'. [ 739.412066][T14056] bridge0: port 4(ipvlan1) entered blocking state [ 739.462156][T14056] bridge0: port 4(ipvlan1) entered disabled state [ 739.665895][T14056] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 741.811559][T14079] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2747'. [ 741.994388][T14083] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2749'. [ 742.682236][T14099] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2752'. [ 743.381627][T14096] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 743.410305][T14096] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 743.428998][T14096] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 743.737305][T14110] netlink: 'syz.3.2756': attribute type 10 has an invalid length. [ 743.756651][T14110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2756'. [ 743.801218][T14110] device ipvlan1 entered promiscuous mode [ 743.891366][T14110] bridge0: port 2(ipvlan1) entered blocking state [ 743.905746][T14115] sctp: [Deprecated]: syz.0.2757 (pid 14115) Use of int in maxseg socket option. [ 743.905746][T14115] Use struct sctp_assoc_value instead [ 743.929995][T14110] bridge0: port 2(ipvlan1) entered disabled state [ 744.005283][T14110] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 744.271398][T14118] netlink: 'syz.1.2754': attribute type 3 has an invalid length. [ 744.374654][T14118] netlink: 'syz.1.2754': attribute type 8 has an invalid length. [ 744.410929][T14118] netlink: 187680 bytes leftover after parsing attributes in process `syz.1.2754'. [ 744.786252][T14117] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2754'. [ 745.229807][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2761'. [ 745.647228][T14141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2766'. [ 747.290575][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.297076][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.929335][T14176] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2780'. [ 748.101789][T14181] netlink: 'syz.4.2779': attribute type 17 has an invalid length. [ 748.123058][T14181] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2779'. [ 748.158495][T14181] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 748.219384][T14181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.461578][T14181] netlink: 'syz.4.2779': attribute type 1 has an invalid length. [ 748.512321][T14181] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2779'. [ 750.082499][T14198] netlink: 'syz.3.2786': attribute type 10 has an invalid length. [ 750.242704][T14206] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2787'. [ 750.272998][T14202] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2787'. [ 750.509757][T14211] device veth1_macvtap entered promiscuous mode [ 750.592057][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 750.606006][T14218] netlink: 'syz.0.2792': attribute type 21 has an invalid length. [ 751.593584][T14227] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2797'. [ 752.210929][T14233] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2799'. [ 755.014734][T14298] netlink: 'syz.4.2817': attribute type 21 has an invalid length. [ 755.289119][T14308] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2821'. [ 755.349733][T14310] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2822'. [ 757.269406][T14357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2836'. [ 757.339845][T14359] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2837'. [ 758.324570][T14373] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2842'. [ 758.388304][T14373] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2842'. [ 758.420068][T14373] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2842'. [ 758.458953][T14373] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2842'. [ 758.779722][T14383] netlink: 'syz.4.2845': attribute type 21 has an invalid length. [ 761.976910][T14437] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2862'. [ 762.056759][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2861'. [ 762.080171][T14437] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 762.287736][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 763.022370][T14437] bridge0: port 3(dummy0) entered disabled state [ 763.029102][T14437] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.096281][T14444] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 763.109930][T14446] bridge0: port 3(dummy0) entered disabled state [ 763.125522][T14444] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 763.144235][T14444] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 763.184442][T14446] device bridge_slave_0 left promiscuous mode [ 763.224027][T14446] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.632719][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2868'. [ 765.017931][T14483] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.2870'. [ 765.387075][T14487] netlink: 'syz.4.2874': attribute type 10 has an invalid length. [ 766.014657][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2885'. [ 766.430891][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2876'. [ 766.924793][T14506] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2879'. [ 766.934350][T14506] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 767.018890][T14506] bridge0: port 3(dummy0) entered disabled state [ 767.025512][T14506] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.229302][T14507] bridge0: port 3(dummy0) entered disabled state [ 767.293479][T14507] device bridge_slave_0 left promiscuous mode [ 767.346278][T14507] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.872176][T14538] netlink: 'syz.0.2889': attribute type 3 has an invalid length. [ 768.892740][T14538] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2889'. [ 769.027518][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2890'. [ 769.806363][T14555] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2895'. [ 769.836337][T14555] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 769.995967][T14555] bridge0: port 3(dummy0) entered disabled state [ 770.002640][T14555] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.229733][T14560] bridge0: port 3(dummy0) entered disabled state [ 771.221868][T14560] bridge0: port 2(team0) entered disabled state [ 771.275167][T14560] device bridge_slave_0 left promiscuous mode [ 771.298835][T14560] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.913235][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2902'. [ 772.132585][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 772.147109][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 772.156136][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 772.164923][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 772.174171][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 772.184494][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 772.609772][T14591] chnl_net:caif_netlink_parms(): no params data found [ 773.222823][T14610] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2907'. [ 773.525799][T14616] netlink: 'syz.4.2908': attribute type 10 has an invalid length. [ 774.718242][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 774.906836][T14616] team0: Port device wlan1 added [ 774.926923][T14591] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.934300][T14591] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.950110][T14591] device bridge_slave_0 entered promiscuous mode [ 774.982691][T14591] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.995933][T14591] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.004550][T14591] device bridge_slave_1 entered promiscuous mode [ 775.493991][ T6380] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.539750][T14591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.541989][T14634] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2915'. [ 775.592152][T14634] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2915'. [ 775.627535][T14591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.691046][ T6380] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.710683][T14636] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2915'. [ 775.858991][ T6380] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.912196][T14591] team0: Port device team_slave_0 added [ 775.923131][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2916'. [ 775.949338][T14591] team0: Port device team_slave_1 added [ 776.005943][ T6380] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.097078][T14591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.154014][T14591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.441098][T14591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.567631][T14591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.678672][T14591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.798466][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 776.987619][T14591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.085992][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2922'. [ 777.546605][T14591] device hsr_slave_0 entered promiscuous mode [ 777.622019][T14591] device hsr_slave_1 entered promiscuous mode [ 777.709703][T14591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 777.717343][T14591] Cannot create hsr debugfs directory [ 777.897306][T14667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2924'. [ 778.878253][T14593] Bluetooth: hci5: command 0x040f tx timeout [ 779.523867][T14591] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 779.563905][T14591] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 779.621043][T14701] netlink: 'syz.0.2932': attribute type 10 has an invalid length. [ 779.656955][T14701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.856931][T14713] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2936'. [ 779.936765][T14701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.989336][T14591] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 780.007824][T14717] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2937'. [ 780.061244][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2934'. [ 780.120306][T14713] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2936'. [ 780.165871][T14591] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 780.531236][T14591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.815339][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 780.835710][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 780.888905][T14591] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.958787][T14593] Bluetooth: hci5: command 0x0419 tx timeout [ 781.197951][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 781.222801][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 781.355126][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.362374][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.444659][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 783.941135][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 784.049152][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 784.068287][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.075405][ T6378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.117388][ T6380] device hsr_slave_0 left promiscuous mode [ 784.129169][ T6380] device hsr_slave_1 left promiscuous mode [ 784.144212][ T6380] device bridge_slave_0 left promiscuous mode [ 784.160463][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.227618][ T6380] device veth1_macvtap left promiscuous mode [ 784.238606][ T6380] device veth0_macvtap left promiscuous mode [ 784.245531][ T6380] device veth1_vlan left promiscuous mode [ 784.263802][ T6380] device veth0_vlan left promiscuous mode [ 785.554063][T14777] __nla_validate_parse: 2 callbacks suppressed [ 785.554086][T14777] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2949'. [ 786.512308][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 786.522049][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'. [ 786.559061][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 786.580883][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 786.597752][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 786.660157][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 786.706138][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 786.715304][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 786.745392][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 786.763455][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 786.816325][T14591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 786.859231][T14591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 787.237060][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 787.254992][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 787.337927][T14792] netlink: 'syz.2.2950': attribute type 10 has an invalid length. [ 787.387961][T14784] tap1: tun_chr_ioctl cmd 1074025675 [ 787.394441][T14784] tap1: persist enabled [ 787.444120][T14799] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2954'. [ 788.063340][T14813] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2959'. [ 788.485806][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 788.494941][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 788.581871][T14591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.640707][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2960'. [ 788.791258][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 788.805951][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 788.864451][T14822] netlink: 'syz.2.2962': attribute type 39 has an invalid length. [ 789.314227][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 789.335961][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 789.357768][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 789.366983][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 789.404644][T14591] device veth0_vlan entered promiscuous mode [ 789.442057][T14591] device veth1_vlan entered promiscuous mode [ 789.496666][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 789.529727][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 789.563747][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 789.608896][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 789.684868][T14591] device veth0_macvtap entered promiscuous mode [ 789.717192][T14591] device veth1_macvtap entered promiscuous mode [ 789.795870][T14591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.833960][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 789.859321][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 789.899272][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 789.977966][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 790.017268][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.046823][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.091555][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.121249][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.144828][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.247761][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.366499][T14591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.622193][T14847] netlink: 'syz.1.2967': attribute type 10 has an invalid length. [ 790.648301][ T6380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 790.664851][ T6380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 790.678974][T14591] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.693954][T14591] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.703445][T14591] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.716310][T14591] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.911772][ T6380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.933228][ T6380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.946303][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 790.983008][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.994435][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.007909][ T6373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 791.019149][T14856] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2971'. [ 791.088701][T14856] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2971'. [ 791.288896][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2901'. [ 792.586035][T14593] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 792.618466][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 792.627228][T14593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 792.637399][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 792.650295][T14593] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 792.659865][T14593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 794.432504][T14879] chnl_net:caif_netlink_parms(): no params data found [ 794.718668][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 794.802201][T14879] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.814413][T14879] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.827004][T14879] device bridge_slave_0 entered promiscuous mode [ 795.008679][T14795] bond0: (slave syz_tun): Releasing backup interface [ 795.043592][T14879] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.063537][T14879] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.079472][T14879] device bridge_slave_1 entered promiscuous mode [ 795.263129][ T4314] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.373843][ T4314] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.410546][T14879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.469664][T14879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.311824][ T4314] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.343771][T14918] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 796.357153][T14917] netlink: 'syz.0.2986': attribute type 10 has an invalid length. [ 796.378459][T14918] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 796.390169][T14918] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 796.453473][T14917] device veth0_vlan left promiscuous mode [ 796.490539][T14917] device veth0_vlan entered promiscuous mode [ 796.520620][T14917] team0: Device veth0_vlan failed to register rx_handler [ 796.802950][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 797.992919][ T4314] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.021656][T14879] team0: Port device team_slave_0 added [ 798.028573][T14924] device virt_wifi0 entered promiscuous mode [ 798.060856][T14879] team0: Port device team_slave_1 added [ 798.125206][T14879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.193210][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.264389][T14879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.286598][T14879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.317950][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.365584][T14879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.388424][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2993'. [ 798.532239][T14879] device hsr_slave_0 entered promiscuous mode [ 798.547674][T14879] device hsr_slave_1 entered promiscuous mode [ 798.565299][ T4314] device 0 left promiscuous mode [ 798.878302][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 798.922205][T14962] netlink: 'syz.0.3001': attribute type 11 has an invalid length. [ 798.932225][T14962] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3001'. [ 799.090005][T14961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.455587][T14971] tap0: tun_chr_ioctl cmd 1074025675 [ 800.472984][T14971] tap0: persist enabled [ 800.958344][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 801.303179][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3009'. [ 801.776157][T14879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 801.842832][T15019] device virt_wifi0 entered promiscuous mode [ 801.955946][T14879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 801.972808][T14879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 802.039794][T14879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 802.278777][T15031] netlink: 'syz.4.3017': attribute type 7 has an invalid length. [ 802.379089][T14879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.204636][T14879] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.267421][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 803.284767][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 803.525083][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 803.544838][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 803.561930][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.569212][ T6378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.579715][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 803.589094][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 803.606435][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.613712][ T6378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.623107][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 803.733445][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.748243][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.835286][ T4314] device veth1_macvtap left promiscuous mode [ 803.859654][ T4314] device veth0_macvtap left promiscuous mode [ 804.424793][T15072] netlink: 'syz.2.3029': attribute type 29 has an invalid length. [ 804.621627][ T4314] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 804.719070][ T4314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.771930][ T4314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.058002][ T4314] bond0 (unregistering): Released all slaves [ 805.092533][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 805.102058][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 805.112548][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 805.124270][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 805.134208][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 805.148416][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3025'. [ 805.163650][T15072] netlink: 'syz.2.3029': attribute type 29 has an invalid length. [ 805.179909][T15071] netlink: 'syz.2.3029': attribute type 29 has an invalid length. [ 805.212575][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 805.222426][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 805.281212][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 805.327471][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 805.359327][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 805.384260][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 805.411395][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 806.437937][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 806.446522][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 806.463780][T14879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.592448][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 806.612171][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 806.662565][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 806.686496][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 806.715955][T14879] device veth0_vlan entered promiscuous mode [ 806.732000][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 806.755641][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 806.792784][T14879] device veth1_vlan entered promiscuous mode [ 806.848193][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 806.856576][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 806.873015][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 806.892824][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 806.911092][T14879] device veth0_macvtap entered promiscuous mode [ 806.936810][T14879] device veth1_macvtap entered promiscuous mode [ 806.973528][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.993249][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.012809][T14879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.024201][ T6373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 807.054035][ T6373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 807.075362][ T6373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 807.102405][ T6373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 807.139788][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.182414][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.212663][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.244153][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.283413][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.314663][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.345127][T14879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.362561][ T6373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 807.382444][ T6373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 807.400852][T14879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.417443][T14879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.428002][T14879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.446613][T14879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.153199][ T6378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.165748][ T6378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.267642][ T6373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 808.375898][ T6372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.408297][ T6372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.554844][ T6380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 808.721383][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.727829][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.163862][T15131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2974'. [ 809.226308][T15133] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3040'. [ 809.290376][T15133] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3040'. [ 809.634673][T15139] netlink: 'syz.0.3041': attribute type 29 has an invalid length. [ 809.709044][T15139] netlink: 'syz.0.3041': attribute type 29 has an invalid length. [ 809.791477][T15141] netlink: 'syz.0.3041': attribute type 29 has an invalid length. [ 810.630892][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 810.663337][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 810.702127][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 810.710519][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 810.718654][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 810.726150][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 811.345375][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.495615][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.900845][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.963862][T15192] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3053'. [ 812.110508][T15198] FAULT_INJECTION: forcing a failure. [ 812.110508][T15198] name failslab, interval 1, probability 0, space 0, times 0 [ 812.126228][T15198] CPU: 0 PID: 15198 Comm: syz.2.3054 Not tainted syzkaller #0 [ 812.133768][T15198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 812.143884][T15198] Call Trace: [ 812.147216][T15198] [ 812.150215][T15198] dump_stack_lvl+0x188/0x24e [ 812.154983][T15198] ? show_regs_print_info+0x12/0x12 [ 812.160264][T15198] ? load_image+0x410/0x410 [ 812.164847][T15198] ? __might_sleep+0xd0/0xd0 [ 812.169504][T15198] ? __lock_acquire+0x7c40/0x7c40 [ 812.174611][T15198] should_fail_ex+0x390/0x4c0 [ 812.179379][T15198] should_failslab+0x5/0x20 [ 812.183941][T15198] slab_pre_alloc_hook+0x59/0x300 [ 812.189040][T15198] ? apparmor_sk_alloc_security+0x74/0x100 [ 812.194919][T15198] __kmem_cache_alloc_node+0x4f/0x270 [ 812.200330][T15198] ? apparmor_sk_alloc_security+0x74/0x100 [ 812.206341][T15198] kmalloc_trace+0x26/0xe0 [ 812.210797][T15198] apparmor_sk_alloc_security+0x74/0x100 [ 812.216461][T15198] security_sk_alloc+0x6a/0xa0 [ 812.221262][T15198] sk_prot_alloc+0x101/0x210 [ 812.225876][T15198] ? sk_alloc+0x20/0x330 [ 812.230243][T15198] sk_alloc+0x36/0x330 [ 812.234357][T15198] ? bpf_ctx_init+0x154/0x190 [ 812.239098][T15198] bpf_prog_test_run_skb+0x36d/0x18e0 [ 812.244530][T15198] ? __fget_files+0x28/0x460 [ 812.249159][T15198] ? __fget_files+0x3fc/0x460 [ 812.253914][T15198] ? cpu_online+0xa0/0xa0 [ 812.258287][T15198] bpf_prog_test_run+0x31c/0x390 [ 812.263268][T15198] __sys_bpf+0x62b/0x780 [ 812.267547][T15198] ? bpf_link_show_fdinfo+0x380/0x380 [ 812.272989][T15198] ? lock_chain_count+0x20/0x20 [ 812.277891][T15198] __x64_sys_bpf+0x78/0x90 [ 812.282342][T15198] do_syscall_64+0x4c/0xa0 [ 812.286783][T15198] ? clear_bhb_loop+0x60/0xb0 [ 812.291489][T15198] ? clear_bhb_loop+0x60/0xb0 [ 812.296205][T15198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 812.302123][T15198] RIP: 0033:0x7f7dea19de59 [ 812.306569][T15198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.326375][T15198] RSP: 002b:00007f7deb0ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 812.334823][T15198] RAX: ffffffffffffffda RBX: 00007f7dea426090 RCX: 00007f7dea19de59 [ 812.342839][T15198] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 812.350833][T15198] RBP: 00007f7deb0ec090 R08: 0000000000000000 R09: 0000000000000000 [ 812.358841][T15198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.366849][T15198] R13: 00007f7dea426128 R14: 00007f7dea426090 R15: 00007ffddd4ac4a8 [ 812.374917][T15198] [ 812.674342][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.798381][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 812.951681][T15207] netlink: 'syz.3.3057': attribute type 23 has an invalid length. [ 813.084580][T15160] chnl_net:caif_netlink_parms(): no params data found [ 813.584748][T15160] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.594279][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.615437][T15160] device bridge_slave_0 entered promiscuous mode [ 813.737521][T15160] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.747463][T15160] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.756334][T15160] device bridge_slave_1 entered promiscuous mode [ 813.825629][T15160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.865708][T15160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.779371][T15160] team0: Port device team_slave_0 added [ 814.878289][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 814.973775][T15160] team0: Port device team_slave_1 added [ 815.149030][T15260] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3068'. [ 815.194807][T15258] netlink: 'syz.1.3067': attribute type 33 has an invalid length. [ 815.245533][T15258] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3067'. [ 815.376812][T15263] netlink: 'syz.1.3067': attribute type 39 has an invalid length. [ 815.636031][T15160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.664759][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.727607][T15160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.938959][T15160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.952133][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.038215][T15160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.260418][T15276] can: request_module (can-proto-0) failed. [ 816.416929][T15160] device hsr_slave_0 entered promiscuous mode [ 816.445088][T15160] device hsr_slave_1 entered promiscuous mode [ 816.482747][T15160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 816.582679][T15160] Cannot create hsr debugfs directory [ 816.641521][T15289] netlink: 'syz.3.3073': attribute type 10 has an invalid length. [ 816.651942][T15289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3073'. [ 816.958247][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 817.970291][T15324] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3081'. [ 819.047457][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 820.323861][T15345] pimreg: tun_chr_ioctl cmd 2147767511 [ 821.321323][T15160] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 821.395034][T15160] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 821.464221][T15160] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 821.545086][T15160] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 822.057224][ T53] team0: Port device wlan1 removed [ 822.129036][T15369] netlink: 'syz.2.3089': attribute type 21 has an invalid length. [ 822.185378][T15369] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3089'. [ 822.301842][T15160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.392090][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 822.411106][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 822.464760][T15160] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.519857][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 822.554574][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 822.587642][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.594897][ T6379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.634099][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 822.671447][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 822.702604][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.709828][ T6379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.743001][T15385] FAULT_INJECTION: forcing a failure. [ 822.743001][T15385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.779081][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 822.894562][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 822.903020][T15385] CPU: 1 PID: 15385 Comm: syz.3.3093 Not tainted syzkaller #0 [ 822.910515][T15385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 822.920611][T15385] Call Trace: [ 822.923943][T15385] [ 822.926893][T15385] dump_stack_lvl+0x188/0x24e [ 822.931585][T15385] ? show_regs_print_info+0x12/0x12 [ 822.936794][T15385] ? load_image+0x410/0x410 [ 822.941300][T15385] ? __lock_acquire+0x7c40/0x7c40 [ 822.946345][T15385] should_fail_ex+0x390/0x4c0 [ 822.951057][T15385] _copy_from_user+0x2c/0x170 [ 822.955771][T15385] ___sys_sendmsg+0x1c3/0x360 [ 822.960469][T15385] ? __sys_sendmsg+0x2a0/0x2a0 [ 822.965294][T15385] ? __lock_acquire+0x7c40/0x7c40 [ 822.970381][T15385] __se_sys_sendmsg+0x1c3/0x2b0 [ 822.972611][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 822.975251][T15385] ? __x64_sys_sendmsg+0x80/0x80 [ 822.975296][T15385] ? lockdep_hardirqs_on+0x94/0x140 [ 822.993362][T15385] do_syscall_64+0x4c/0xa0 [ 822.997820][T15385] ? clear_bhb_loop+0x60/0xb0 [ 823.002536][T15385] ? clear_bhb_loop+0x60/0xb0 [ 823.007344][T15385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 823.013283][T15385] RIP: 0033:0x7f41f639de59 [ 823.017731][T15385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.037384][T15385] RSP: 002b:00007f41f727e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.045846][T15385] RAX: ffffffffffffffda RBX: 00007f41f6625fa0 RCX: 00007f41f639de59 [ 823.053849][T15385] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 823.061875][T15385] RBP: 00007f41f727e090 R08: 0000000000000000 R09: 0000000000000000 [ 823.069858][T15385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.077839][T15385] R13: 00007f41f6626038 R14: 00007f41f6625fa0 R15: 00007ffe4cbcf628 [ 823.085827][T15385] [ 823.102143][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 823.129428][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 823.154954][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 823.170338][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 823.215915][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 823.251533][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 823.266421][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 823.323826][T15160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 823.365837][T15160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 823.376292][T15391] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3094'. [ 823.386308][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 823.414287][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 824.857898][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.868956][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.899108][ T53] device bridge_slave_0 left promiscuous mode [ 824.906144][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.999447][ T53] device veth1_macvtap left promiscuous mode [ 825.005584][ T53] device veth0_macvtap left promiscuous mode [ 825.130983][ T53] device veth1_vlan left promiscuous mode [ 827.193795][T15434] can: request_module (can-proto-0) failed. [ 827.607152][T15460] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3109'. [ 827.927829][ T53] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 827.978943][ T53] team0 (unregistering): Port device team_slave_1 removed [ 828.022218][ T53] team0 (unregistering): Port device team_slave_0 removed [ 828.065698][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.124299][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.169650][ T53] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 828.466872][ T53] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 828.475760][ T53] bond0 (unregistering): Released all slaves [ 828.644321][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 828.667603][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 828.694708][T15160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.318897][T15485] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3114'. [ 829.371159][T15485] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3114'. [ 830.147892][ T6380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 830.167491][ T6380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 830.227055][ T6380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 830.242923][ T6380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 830.259995][T15160] device veth0_vlan entered promiscuous mode [ 830.281147][ T6380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 830.311556][ T6380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 830.336345][T15160] device veth1_vlan entered promiscuous mode [ 830.423619][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 830.447525][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 830.475038][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 830.489564][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 830.508638][T15160] device veth0_macvtap entered promiscuous mode [ 830.522597][T15160] device veth1_macvtap entered promiscuous mode [ 830.593230][T15160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.624532][T15160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.655994][T15160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.701861][T15160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.720986][T15160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.734581][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 830.745607][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 830.765304][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 830.781681][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 830.797928][T15160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.820088][T15160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.834845][T15160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.852367][T15160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.864077][T15160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.883066][T15160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.911200][T15160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.945802][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 830.956111][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 830.986821][T15160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.005486][T15160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.018453][T15160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.027488][T15160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.336055][ T6378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.370441][ T6378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.378616][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 831.443971][ T6379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.474387][ T6379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.520071][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 831.555403][T15515] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3119'. [ 832.260616][T15530] netlink: 'syz.3.3121': attribute type 10 has an invalid length. [ 832.307856][T15530] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3121'. [ 832.408181][T15530] device dummy0 entered promiscuous mode [ 832.495480][T15530] bridge0: port 3(dummy0) entered blocking state [ 832.623601][T15530] bridge0: port 3(dummy0) entered disabled state [ 832.689967][T15530] bridge0: port 3(dummy0) entered blocking state [ 832.696462][T15530] bridge0: port 3(dummy0) entered forwarding state [ 832.992036][T15540] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3121'. [ 833.066563][T15532] netlink: 'syz.3.3121': attribute type 3 has an invalid length. [ 833.174087][T15532] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3121'. [ 833.609139][T14593] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 833.619687][T14593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 833.628113][T14593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 833.640776][T14593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 833.651607][T14593] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 833.659114][T14593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 833.699771][T15557] FAULT_INJECTION: forcing a failure. [ 833.699771][T15557] name failslab, interval 1, probability 0, space 0, times 0 [ 833.712866][T15557] CPU: 1 PID: 15557 Comm: syz.3.3128 Not tainted syzkaller #0 [ 833.720356][T15557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 833.730444][T15557] Call Trace: [ 833.733751][T15557] [ 833.736709][T15557] dump_stack_lvl+0x188/0x24e [ 833.741425][T15557] ? show_regs_print_info+0x12/0x12 [ 833.746652][T15557] ? load_image+0x410/0x410 [ 833.751206][T15557] ? __might_sleep+0xd0/0xd0 [ 833.755831][T15557] ? __lock_acquire+0x7c40/0x7c40 [ 833.760889][T15557] ? mod_objcg_mlstate+0x88/0x320 [ 833.766005][T15557] should_fail_ex+0x390/0x4c0 [ 833.770740][T15557] should_failslab+0x5/0x20 [ 833.775356][T15557] slab_pre_alloc_hook+0x59/0x300 [ 833.780417][T15557] ? __get_vm_area_node+0x122/0x330 [ 833.785664][T15557] __kmem_cache_alloc_node+0x4f/0x270 [ 833.791106][T15557] ? __get_vm_area_node+0x122/0x330 [ 833.796433][T15557] kmalloc_node_trace+0x22/0xe0 [ 833.801329][T15557] __get_vm_area_node+0x122/0x330 [ 833.806384][T15557] ? mod_objcg_state+0x51d/0x8b0 [ 833.811363][T15557] __vmalloc_node_range+0x357/0x1380 [ 833.816674][T15557] ? copy_process+0x621/0x40c0 [ 833.821471][T15557] ? percpu_ref_put+0x12/0x100 [ 833.826265][T15557] ? free_vm_area+0x50/0x50 [ 833.830782][T15557] ? rcu_is_watching+0x11/0xa0 [ 833.835563][T15557] dup_task_struct+0x3ca/0x6b0 [ 833.840339][T15557] ? copy_process+0x621/0x40c0 [ 833.845117][T15557] copy_process+0x621/0x40c0 [ 833.849812][T15557] ? __lock_acquire+0x7c40/0x7c40 [ 833.854871][T15557] ? idle_dummy+0x10/0x10 [ 833.859218][T15557] kernel_clone+0x24b/0x900 [ 833.863729][T15557] ? ksys_write+0x1ce/0x260 [ 833.868248][T15557] ? create_io_thread+0x170/0x170 [ 833.873293][T15557] __x64_sys_clone+0x1a7/0x220 [ 833.878065][T15557] ? __fget_files+0x3fc/0x460 [ 833.882754][T15557] ? __ia32_sys_vfork+0x140/0x140 [ 833.887792][T15557] ? lock_chain_count+0x20/0x20 [ 833.892659][T15557] ? lockdep_hardirqs_on+0x94/0x140 [ 833.897866][T15557] do_syscall_64+0x4c/0xa0 [ 833.902290][T15557] ? clear_bhb_loop+0x60/0xb0 [ 833.906977][T15557] ? clear_bhb_loop+0x60/0xb0 [ 833.911671][T15557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.917591][T15557] RIP: 0033:0x7f41f639de59 [ 833.922016][T15557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.941658][T15557] RSP: 002b:00007f41f727dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 833.950278][T15557] RAX: ffffffffffffffda RBX: 00007f41f6625fa0 RCX: 00007f41f639de59 [ 833.958266][T15557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002200 [ 833.966268][T15557] RBP: 00007f41f727e090 R08: 0000000000000000 R09: 0000000000000000 [ 833.974264][T15557] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 833.982254][T15557] R13: 00007f41f6626038 R14: 00007f41f6625fa0 R15: 00007ffe4cbcf628 [ 833.990337][T15557] [ 834.010897][T15557] syz.3.3128: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 834.048900][T15557] CPU: 1 PID: 15557 Comm: syz.3.3128 Not tainted syzkaller #0 [ 834.056436][T15557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 834.066528][T15557] Call Trace: [ 834.069838][T15557] [ 834.072796][T15557] dump_stack_lvl+0x188/0x24e [ 834.077520][T15557] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 834.084001][T15557] ? show_regs_print_info+0x12/0x12 [ 834.089237][T15557] ? load_image+0x410/0x410 [ 834.093770][T15557] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 834.100212][T15557] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 834.106744][T15557] warn_alloc+0x242/0x330 [ 834.111133][T15557] ? __get_vm_area_node+0x122/0x330 [ 834.116368][T15557] ? zone_watermark_ok_safe+0x270/0x270 [ 834.122082][T15557] ? rcu_is_watching+0x11/0xa0 [ 834.126913][T15557] ? __get_vm_area_node+0x318/0x330 [ 834.132157][T15557] ? mod_objcg_state+0x51d/0x8b0 [ 834.137145][T15557] __vmalloc_node_range+0x37c/0x1380 [ 834.142474][T15557] ? percpu_ref_put+0x12/0x100 [ 834.147285][T15557] ? free_vm_area+0x50/0x50 [ 834.151821][T15557] ? rcu_is_watching+0x11/0xa0 [ 834.156806][T15557] dup_task_struct+0x3ca/0x6b0 [ 834.161605][T15557] ? copy_process+0x621/0x40c0 [ 834.166403][T15557] copy_process+0x621/0x40c0 [ 834.171048][T15557] ? __lock_acquire+0x7c40/0x7c40 [ 834.176140][T15557] ? idle_dummy+0x10/0x10 [ 834.180512][T15557] kernel_clone+0x24b/0x900 [ 834.185046][T15557] ? ksys_write+0x1ce/0x260 [ 834.189589][T15557] ? create_io_thread+0x170/0x170 [ 834.194662][T15557] __x64_sys_clone+0x1a7/0x220 [ 834.199454][T15557] ? __fget_files+0x3fc/0x460 [ 834.204166][T15557] ? __ia32_sys_vfork+0x140/0x140 [ 834.209238][T15557] ? lock_chain_count+0x20/0x20 [ 834.214146][T15557] ? lockdep_hardirqs_on+0x94/0x140 [ 834.219393][T15557] do_syscall_64+0x4c/0xa0 [ 834.223850][T15557] ? clear_bhb_loop+0x60/0xb0 [ 834.228571][T15557] ? clear_bhb_loop+0x60/0xb0 [ 834.233288][T15557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 834.239213][T15557] RIP: 0033:0x7f41f639de59 [ 834.243654][T15557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.263302][T15557] RSP: 002b:00007f41f727dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 834.271757][T15557] RAX: ffffffffffffffda RBX: 00007f41f6625fa0 RCX: 00007f41f639de59 [ 834.279768][T15557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002200 [ 834.287768][T15557] RBP: 00007f41f727e090 R08: 0000000000000000 R09: 0000000000000000 [ 834.295812][T15557] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 834.303814][T15557] R13: 00007f41f6626038 R14: 00007f41f6625fa0 R15: 00007ffe4cbcf628 [ 834.311875][T15557] [ 834.372862][T15557] Mem-Info: [ 834.376176][T15557] active_anon:7959 inactive_anon:0 isolated_anon:0 [ 834.376176][T15557] active_file:21376 inactive_file:40248 isolated_file:0 [ 834.376176][T15557] unevictable:768 dirty:122 writeback:0 [ 834.376176][T15557] slab_reclaimable:21728 slab_unreclaimable:94401 [ 834.376176][T15557] mapped:30453 shmem:1361 pagetables:609 [ 834.376176][T15557] sec_pagetables:0 bounce:0 [ 834.376176][T15557] kernel_misc_reclaimable:0 [ 834.376176][T15557] free:1313559 free_pcp:13498 free_cma:0 [ 834.429190][T15557] Node 0 active_anon:31836kB inactive_anon:0kB active_file:85504kB inactive_file:160792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121812kB dirty:488kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10068kB pagetables:2436kB sec_pagetables:0kB all_unreclaimable? no [ 834.479541][T15557] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 834.517831][T15557] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 834.551105][T15557] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 834.557153][T15557] Node 0 DMA32 free:1336820kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:31836kB inactive_anon:0kB active_file:85504kB inactive_file:160792kB unevictable:1536kB writepending:488kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:33420kB local_pcp:12672kB free_cma:0kB [ 834.633215][T15557] lowmem_reserve[]: 0 0 1 1 1 [ 834.646149][T15557] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 834.685919][T15557] lowmem_reserve[]: 0 0 0 0 0 [ 834.693629][T15557] Node 1 Normal free:3902052kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19904kB local_pcp:6912kB free_cma:0kB [ 834.736677][T15557] lowmem_reserve[]: 0 0 0 0 0 [ 834.742876][T15557] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 834.761212][T15557] Node 0 DMA32: 179*4kB (UME) 75*8kB (ME) 893*16kB (UME) 680*32kB (UME) 2388*64kB (UME) 876*128kB (UME) 237*256kB (UM) 84*512kB (UM) 45*1024kB (UME) 10*2048kB (UM) 211*4096kB (UM) = 1336820kB [ 834.789020][T15557] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 834.806374][T15557] Node 1 Normal: 219*4kB (U) 53*8kB (UE) 29*16kB (UME) 48*32kB (UME) 24*64kB (UME) 7*128kB (UME) 2*256kB (UM) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 950*4096kB (M) = 3902052kB [ 834.829585][T15557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 834.846233][T15557] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 834.861458][T15557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 834.874035][T15557] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 834.887737][T15557] 62985 total pagecache pages [ 834.893933][T15557] 0 pages in swap cache [ 834.909656][T15557] Free swap = 124996kB [ 834.913861][T15557] Total swap = 124996kB [ 834.918032][T15557] 2097051 pages RAM [ 834.941912][T15557] 0 pages HighMem/MovableOnly [ 834.953443][T15557] 415222 pages reserved [ 834.981942][T15557] 0 pages cma reserved [ 835.623314][T15578] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3131'. [ 835.678607][T14593] Bluetooth: hci1: command 0x0409 tx timeout [ 835.764665][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.972718][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.287325][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.758290][T14593] Bluetooth: hci1: command 0x041b tx timeout [ 839.091179][T15552] chnl_net:caif_netlink_parms(): no params data found [ 839.477201][T15616] netlink: 'syz.4.3141': attribute type 21 has an invalid length. [ 839.525446][T15552] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.568201][T15552] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.589552][T15552] device bridge_slave_0 entered promiscuous mode [ 839.626502][T15552] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.675170][T15622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3144'. [ 839.676081][T15552] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.751038][T15552] device bridge_slave_1 entered promiscuous mode [ 839.838564][T14593] Bluetooth: hci1: command 0x040f tx timeout [ 840.304708][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.347183][T15552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.379780][T15552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.474694][T15552] team0: Port device team_slave_0 added [ 840.525378][T15552] team0: Port device team_slave_1 added [ 840.601672][T15552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.626532][T15552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.796158][T15552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.810566][T15552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.817668][T15552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.884287][T15552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.294714][T15552] device hsr_slave_0 entered promiscuous mode [ 841.402967][T15552] device hsr_slave_1 entered promiscuous mode [ 841.494714][T15552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 841.521614][T15552] Cannot create hsr debugfs directory [ 841.711736][T15657] netlink: 'syz.1.3154': attribute type 3 has an invalid length. [ 841.794065][T15657] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3154'. [ 841.875802][T15660] netlink: 'syz.1.3154': attribute type 3 has an invalid length. [ 841.920485][T14593] Bluetooth: hci1: command 0x0419 tx timeout [ 842.019588][T15660] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3154'. [ 842.489446][T15653] delete_channel: no stack [ 844.796313][T15709] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3166'. [ 844.837578][T15709] netlink: 'syz.4.3166': attribute type 8 has an invalid length. [ 845.243029][T15552] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 845.335717][T15552] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 845.407951][T15552] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 846.138130][T15740] netlink: 'syz.4.3176': attribute type 3 has an invalid length. [ 846.177005][T15740] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3176'. [ 846.573370][T15552] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 847.498567][ T53] device veth1_macvtap left promiscuous mode [ 847.511560][ T53] device veth1_vlan left promiscuous mode [ 847.527688][ T53] device veth0_vlan left promiscuous mode [ 851.526933][ T53] device hsr_slave_0 left promiscuous mode [ 851.546820][ T53] team0 (unregistering): Port device hsr_slave_0 removed [ 851.805383][ T53] device team_slave_1 left promiscuous mode [ 851.813180][ T53] team0 (unregistering): Port device team_slave_1 removed [ 852.486148][T15552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.553569][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 852.562294][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 852.591277][T15552] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.634650][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 852.684625][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 852.706676][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.714166][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.814510][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 852.823696][T15810] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3195'. [ 852.854998][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 852.876650][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 852.899557][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.906709][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.928772][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 852.939339][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 853.061539][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 853.094977][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 853.120082][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 853.147121][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 853.173432][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 853.203664][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 853.245880][T15817] FAULT_INJECTION: forcing a failure. [ 853.245880][T15817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.320433][T15817] CPU: 1 PID: 15817 Comm: syz.3.3196 Not tainted syzkaller #0 [ 853.327976][T15817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 853.338073][T15817] Call Trace: [ 853.341386][T15817] [ 853.344354][T15817] dump_stack_lvl+0x188/0x24e [ 853.349088][T15817] ? show_regs_print_info+0x12/0x12 [ 853.354335][T15817] ? load_image+0x410/0x410 [ 853.358892][T15817] ? __lock_acquire+0x7c40/0x7c40 [ 853.363973][T15817] should_fail_ex+0x390/0x4c0 [ 853.368704][T15817] _copy_from_user+0x2c/0x170 [ 853.373422][T15817] br_ioctl_stub+0x475/0xcf0 [ 853.378094][T15817] ? rcu_is_watching+0x11/0xa0 [ 853.382996][T15817] ? rcu_read_unlock+0xa0/0xa0 [ 853.387801][T15817] ? __mutex_lock+0x1ab/0xae0 [ 853.392540][T15817] ? mutex_lock_nested+0x10/0x10 [ 853.397534][T15817] ? rcu_read_unlock+0xa0/0xa0 [ 853.402338][T15817] sock_ioctl+0x453/0x700 [ 853.406719][T15817] ? sock_poll+0x420/0x420 [ 853.411198][T15817] ? bpf_lsm_file_ioctl+0x5/0x10 [ 853.416242][T15817] ? security_file_ioctl+0x7c/0xa0 [ 853.421389][T15817] ? sock_poll+0x420/0x420 [ 853.425850][T15817] __se_sys_ioctl+0xfa/0x170 [ 853.430549][T15817] do_syscall_64+0x4c/0xa0 [ 853.435009][T15817] ? clear_bhb_loop+0x60/0xb0 [ 853.439730][T15817] ? clear_bhb_loop+0x60/0xb0 [ 853.444445][T15817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 853.450374][T15817] RIP: 0033:0x7f41f639de59 [ 853.454999][T15817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.474734][T15817] RSP: 002b:00007f41f725d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 853.483196][T15817] RAX: ffffffffffffffda RBX: 00007f41f6626090 RCX: 00007f41f639de59 [ 853.491209][T15817] RDX: 0000000000000000 RSI: 00000000000089a1 RDI: 0000000000000007 [ 853.499231][T15817] RBP: 00007f41f725d090 R08: 0000000000000000 R09: 0000000000000000 [ 853.507248][T15817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.515260][T15817] R13: 00007f41f6626128 R14: 00007f41f6626090 R15: 00007ffe4cbcf628 [ 853.523295][T15817] [ 853.566878][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 853.577931][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 853.629258][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 853.684388][T15552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 854.433191][T15848] netlink: 'syz.1.3203': attribute type 10 has an invalid length. [ 854.736885][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 854.754831][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 854.800142][T15552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.909957][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 854.925773][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 855.006049][T15552] device veth0_vlan entered promiscuous mode [ 855.024342][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 855.036197][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 855.057370][T15552] device veth1_vlan entered promiscuous mode [ 855.090142][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 855.101740][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 855.109941][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 855.190917][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 855.221588][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 855.246768][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 855.278629][T15552] device veth0_macvtap entered promiscuous mode [ 855.306371][T15552] device veth1_macvtap entered promiscuous mode [ 855.346179][T15552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.364392][T15552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.374780][T15552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.485696][T15552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.588113][T15552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.608293][T15552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.633638][T15552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.659125][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 855.671676][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 855.701310][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 855.749362][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 855.832641][T15552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.927344][T15552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.937665][T15552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.948388][T15552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.958740][T15552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.969795][T15552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.980337][T15552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.991170][T15552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.019122][T15552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.042457][T15552] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.061743][T15552] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.088312][T15552] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.107398][T15552] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.127509][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 856.140142][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 856.328920][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.336821][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.432213][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 856.536847][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.555159][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.630194][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 857.224027][T15906] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3122'. [ 861.420866][T15964] device syzkaller0 entered promiscuous mode [ 892.561519][T14104] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2676 jiffies s: 68765 root: 0x1/. [ 892.585031][T14104] rcu: blocking rcu_node structures (internal RCU debug): [ 892.598254][T14104] Sending NMI from CPU 1 to CPUs 0: [ 892.603532][ C0] NMI backtrace for cpu 0 [ 892.603550][ C0] CPU: 0 PID: 15998 Comm: syz.1.3253 Not tainted syzkaller #0 [ 892.603564][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 892.603572][ C0] RIP: 0010:strlen+0x1b/0x60 [ 892.603603][ C0] Code: e4 4c 89 f7 e8 66 53 b2 f7 eb da 0f 1f 40 00 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb <49> 89 c7 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 11 48 ff c3 [ 892.603616][ C0] RSP: 0018:ffffc90000007198 EFLAGS: 00000006 [ 892.603630][ C0] RAX: 0000000000000000 RBX: ffffffff8a8d2f21 RCX: dffffc0000000000 [ 892.603642][ C0] RDX: ffffffff81a4bc6e RSI: ffffffff8cb2db60 RDI: ffffffff8a8d2f20 [ 892.603653][ C0] RBP: ffffc900000072b0 R08: ffffffff8e2121af R09: 1ffffffff1c42435 [ 892.603665][ C0] R10: dffffc0000000000 R11: fffffbfff1c42436 R12: 1ffff92000000e64 [ 892.603676][ C0] R13: 1ffff92000000e40 R14: dffffc0000000000 R15: ffffffffffffffff [ 892.603688][ C0] FS: 00007f5a204576c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 892.603701][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 892.603713][ C0] CR2: 000000110c2dd149 CR3: 000000007b274000 CR4: 00000000003506f0 [ 892.603727][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 892.603737][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 892.603747][ C0] Call Trace: [ 892.603753][ C0] [ 892.603765][ C0] perf_trace_lock+0xd1/0x390 [ 892.603795][ C0] ? __virt_addr_valid+0x467/0x540 [ 892.603818][ C0] ? trace_event_raw_event_lock+0x230/0x230 [ 892.603843][ C0] ? arch_irq_work_raise+0x82/0xd0 [ 892.603946][ C0] lock_release+0x8ad/0x920 [ 892.603973][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 892.604004][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 892.604032][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 892.604068][ C0] perf_event_output_forward+0x282/0x2f0 [ 892.604092][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 892.604115][ C0] ? perf_get_page_size+0x430/0x430 [ 892.604145][ C0] ? perf_event_output_forward+0x282/0x2f0 [ 892.604169][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 892.604191][ C0] ? perf_get_page_size+0x430/0x430 [ 892.604218][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 892.604247][ C0] __perf_event_overflow+0x457/0x630 [ 892.604267][ C0] ? tracing_gen_ctx_irq_test+0xc9/0x150 [ 892.604323][ C0] perf_swevent_event+0x315/0x570 [ 892.604352][ C0] ? perf_tp_event+0xc10/0xc10 [ 892.604376][ C0] ? perf_trace_buf_alloc+0x300/0x300 [ 892.604415][ C0] perf_tp_event+0x36b/0xc10 [ 892.604448][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 892.604558][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 892.604573][ C0] ? sched_clock_cpu+0x6e/0x260 [ 892.604618][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 892.604653][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 892.604678][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 892.604702][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 892.604727][ C0] ? __irq_exit_rcu+0x147/0x230 [ 892.604745][ C0] ? irq_exit_rcu+0x20/0x20 [ 892.604770][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 892.604790][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 892.604817][ C0] trace_hardirqs_on+0x24/0x40 [ 892.604835][ C0] asm_sysvec_irq_work+0x16/0x20 [ 892.604854][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 892.604871][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 52 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 892.604885][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206 [ 892.604898][ C0] RAX: 97a34a2912879300 RBX: 1ffff92000000f64 RCX: 97a34a2912879300 [ 892.604909][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 892.604920][ C0] RBP: ffffc90000007bd0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 892.604931][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000246 [ 892.604942][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 892.604984][ C0] ? kmem_cache_free+0xc0/0x2a0 [ 892.605010][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 892.605052][ C0] __rcu_read_unlock+0x78/0xd0 [ 892.605066][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 892.605124][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 892.605166][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 892.605195][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 892.605223][ C0] __hrtimer_run_queues+0x522/0xc90 [ 892.605254][ C0] ? hw_scan_work+0xf00/0xf00 [ 892.605293][ C0] ? hrtimer_interrupt+0x980/0x980 [ 892.605330][ C0] hrtimer_run_softirq+0x173/0x290 [ 892.605358][ C0] handle_softirqs+0x291/0x910 [ 892.605384][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 892.605409][ C0] ? do_softirq+0x210/0x210 [ 892.605423][ C0] ? hrtimer_interrupt+0x775/0x980 [ 892.605459][ C0] __irq_exit_rcu+0x13b/0x230 [ 892.605475][ C0] ? irq_exit_rcu+0x20/0x20 [ 892.605514][ C0] irq_exit_rcu+0x5/0x20 [ 892.605527][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 892.605552][ C0] [ 892.605557][ C0] [ 892.605564][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 892.605583][ C0] RIP: 0010:put_cpu_partial+0x1b0/0x250 [ 892.605600][ C0] Code: 3b 44 24 18 0f 85 b4 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bc 7c 5d 08 f7 c5 00 02 00 00 74 c0 fb 4d 85 e4 <75> bf eb c8 e8 67 57 3f 02 85 c0 0f 84 e9 fe ff ff 83 3d d0 88 4e [ 892.605613][ C0] RSP: 0018:ffffc90005957998 EFLAGS: 00000246 [ 892.605626][ C0] RAX: 97a34a2912879300 RBX: ffff888140141000 RCX: 97a34a2912879300 [ 892.605637][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 892.605648][ C0] RBP: 0000000000000282 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 892.605658][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000000 [ 892.605669][ C0] R13: 0000000000000000 R14: ffff88801b380000 R15: ffff8880b8e44620 [ 892.605711][ C0] ? put_cpu_partial+0x6e/0x250 [ 892.605738][ C0] qlist_free_all+0x76/0xe0 [ 892.605762][ C0] kasan_quarantine_reduce+0x144/0x160 [ 892.605785][ C0] __kasan_slab_alloc+0x1e/0x80 [ 892.605810][ C0] slab_post_alloc_hook+0x4b/0x490 [ 892.605827][ C0] ? slab_pre_alloc_hook+0x59/0x300 [ 892.605843][ C0] ? trace_call_bpf+0x5d6/0x6b0 [ 892.605865][ C0] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 892.605889][ C0] __kmem_cache_alloc_node+0x19d/0x270 [ 892.605915][ C0] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 892.605933][ C0] __kmalloc+0xa3/0x240 [ 892.605963][ C0] tomoyo_realpath_from_path+0xe2/0x5c0 [ 892.605987][ C0] ? tomoyo_domain+0xd2/0x120 [ 892.606015][ C0] ? tomoyo_path_number_perm+0x205/0x650 [ 892.606035][ C0] tomoyo_path_number_perm+0x22f/0x650 [ 892.606059][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 892.606147][ C0] ? __fget_files+0x28/0x460 [ 892.606192][ C0] security_file_ioctl+0x6c/0xa0 [ 892.606216][ C0] __se_sys_ioctl+0x48/0x170 [ 892.606243][ C0] do_syscall_64+0x4c/0xa0 [ 892.606262][ C0] ? clear_bhb_loop+0x60/0xb0 [ 892.606280][ C0] ? clear_bhb_loop+0x60/0xb0 [ 892.606303][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 892.606321][ C0] RIP: 0033:0x7f5a1f59de59 [ 892.606338][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.606350][ C0] RSP: 002b:00007f5a20457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.606365][ C0] RAX: ffffffffffffffda RBX: 00007f5a1f825fa0 RCX: 00007f5a1f59de59 [ 892.606375][ C0] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000007 [ 892.606385][ C0] RBP: 00007f5a1f633e6f R08: 0000000000000000 R09: 0000000000000000 [ 892.606395][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.606404][ C0] R13: 00007f5a1f826038 R14: 00007f5a1f825fa0 R15: 00007ffd5fd0c6c8 [ 892.606444][ C0]