last executing test programs: 11.211585395s ago: executing program 2 (id=2329): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={&(0x7f0000000380)="b1a0ae5dcb15c5548e44dbc2137adc3eede9657969800254f66ad7c6b271fad8f1238f65102f705c1faa1660757116718ca6", &(0x7f0000000000)=""/9, 0x0, &(0x7f0000000140), 0xc}, 0x38) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x10001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, 0x0, 0x0) 7.056238815s ago: executing program 2 (id=2351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00'}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='blkio.throttle.io_serviced\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10000, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xc6, 0xc2, &(0x7f0000000000)="403eb6bb6da934874380eea6fb11dae5dfe3aa3283af42477535c52244da420f7eccb9afcea5ef7b1b5a34e91aa722a9c5b46db0100d63eba4561b61cfce00f64f5852dc13b8106e18052a521074f38947b92173acb1b229c915bdfbe0a50293eb1856298b07a27f40da4e036327cdce0884da778d102f776442c944c242cf4bfca1c104c8282398cac80ba2f17497068b0a2b8e13c610a199862005e1d690d534e5090dae2f4923e4e8b9f466f1c3b79dad81e1a7cfd28f601c59a6005cf7641ebf7695254c", &(0x7f0000000300)=""/194, 0x8, 0x0, 0xbc, 0xfb, &(0x7f00000006c0)="d88fa8cae88dc9434d1f267af129bdf3d0f189bf9356dd8bb5f29041fe3e250e4e66e8db29cc50fe7b9a194383cf343e0ab8a66aee07b0322fd11dad0b2cd605b466af5da59f51f805d3705935d8b936b5e39140aed12e2d9881074b4761f7219e7813de1ff89b89fa406ba59fe83d257da5419dd72449ddbc1244394fec6cf02bd516f5b406a8dcbdb217adb92c1b252be5962c8698f2f3975da8ea6961ca44ad905eda4c1862c58c4f4f0b7ceb6a8ca5d76a1e2e4db04e7f059eff", &(0x7f0000000780)="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", 0x7, 0x0, 0x8}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$inet(r4, &(0x7f0000000b00)={&(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000940)="d0f257a1dc735325e4cae0270c73c7567c392ced9fa846144d40bc4d4847a6de4b6243110658d8d376f85114fda1b83d27902cbffd1b8f2678840932942c23c0beaece9127a0510d1c640d3e8b12c8a6b2b18e1d7fc982c662df2d3d51afd77bc94f30357894c87b790a86b1f8951ef34ec29b0a9684cf283083e76b740e59726995d6ef851993c49febbcd33863fabedee17fcf123b9cf5480c8935ab9d41b1c37af120d1d16a6b7deaac275ae9afefee5a3aa823a6161cee0371885a79e3c3f7e645987da26951d79ad1c900b389372c83afaf94d4fe46e2530189fd088ea47dd3ac939f75385273b9d85ce8b2fd6713d2b939aa3ee74e", 0xf8}, {&(0x7f0000000580)="a8194473c55a785835ca7fce4aa6d7b0a89088379fb39d41a659b857dba7432bfd9d4975e643e4861f44b1", 0x2b}, {&(0x7f0000000880)="8fcf5f7f9519047efad5275354cf462be975175d08711eb0e354d90ffed10d69e7827e3697aeb3236680c66c74f16007b4d4e9ca8a35027706fc430940c2aa91d2f3094506a628", 0x47}, {&(0x7f0000000a40)="d7a72b880179c603356f9849a30f55d26ecbf590174a10b6dd53c5943f6c89a89887630a712089e3002094e19941c71d21327bd178e092a19047f79bf05f2ae848c9dc4a49d7cb39f642ad11295dbf", 0x4f}], 0x4}, 0x44840) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b80), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x8}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r3, 0x0, 0x0, 0xf1, 0x0, &(0x7f0000001a00)=""/241, 0x5e880b8b, 0x0, 0x3d, 0x0, &(0x7f0000001b00)="8ba9d25ab067d03bc27c033e113bcc2df4ccd21958391b94c0f574892d298bc14666e6162aff90cae7dee2d3564e138cc1965d0226bc5b6cf8e2f21ed8", &(0x7f00000008c0), 0x5, 0x0, 0xc}, 0x50) recvmsg$kcm(r5, 0x0, 0x40012100) recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x28, 0x0, &(0x7f00000005c0)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000900)={'syz_tun\x00', @link_local}) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x27, 0xe, 0x0, &(0x7f00000002c0)="f8ad48c5fce216efcc244f7f86dd", 0x0, 0x204000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 6.571542584s ago: executing program 2 (id=2355): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2004c841) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000005000000000000000000efff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000080)='}\'$+\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r3}, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="740a0000000000806910ac000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 6.332471019s ago: executing program 2 (id=2357): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1d, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xa4}, @alu={0x4, 0x1, 0x3, 0x4, 0x2, 0x1, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x80, 0xa, &(0x7f0000000440)=""/10, 0x40f00, 0x40, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xf, 0x0, 0x2}, 0x10, 0xffffffffffffffff, r2, 0x6, &(0x7f0000000840)=[r0, r2], &(0x7f0000000940)=[{0x0, 0x1, 0x7, 0x4}, {0x5, 0x1, 0x1, 0x5}, {0x1, 0x5, 0xc, 0xc}, {0x5, 0x2, 0x6, 0x3}, {0x0, 0x2, 0x1, 0x6}, {0x5, 0x5, 0xd}], 0x10, 0x100}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) 5.960024196s ago: executing program 2 (id=2366): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003ec0)={0x11, 0x7, &(0x7f0000002c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000002c40)='syzkaller\x00', 0x80000000, 0x89, &(0x7f0000003d40)=""/137, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003e00)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000003e40)={0x4, 0x6, 0x1, 0x74}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003e80)=[r9, r9, r9, r9, r9], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000003fc0)='9p_protocol_dump\x00', r11}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r9}, 0x20) sendmsg$kcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d080410000000000081a1180015000600142603600e1208000f0000810401a80016002000014003", 0x39}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073e1b8cc34101b79a19ef612", 0x9f}], 0x2, 0x0, 0x0, 0x7400}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r13, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102032900fc08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) recvmsg$kcm(r13, &(0x7f0000000800)={&(0x7f00000005c0)=@qipcrtr, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/21, 0x15}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x2, &(0x7f0000002d40)=""/4096, 0x1000}, 0x12100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x13, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000140)=r10, 0x4) 4.899675006s ago: executing program 0 (id=2365): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100004100000007010000f8ffffffbf9400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 4.899417966s ago: executing program 2 (id=2367): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000020007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.632738561s ago: executing program 0 (id=2370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004f0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000001f010000f8ffffffb702000008000000b7030000690f000085000000cd00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) 4.504686974s ago: executing program 0 (id=2371): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) r3 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x9, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) r7 = socket$kcm(0x28, 0x5, 0x0) close(r7) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x10, &(0x7f0000000200)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=""/27, 0x0, 0x0, 0xf0, 0x91, &(0x7f0000000100)="13ff5746b5afcc1d2ca163ad3c2629cd4502926c762b927c63ee1ffad736f1a5a08da5ac792162f4c55396962593e5dfd91a64ac2105dfb2371980c4704e73a73fc07c9632ff5a0e24b76bfb3eb76e7909e1a538dea46346038ee685ee3d210ce52867802c4f1f156fc5b67f529b36b1f1998b531cd3bda8d4b9670c86115b2fe19fb4952cfc284705f12672f4ff4fcd6e88ba047a9f366d27cb8b9ff2df75f3ad9214b1fe6ba840303b1f59ddb574c6529f04727eab4426e3e0a11005ce9b61f9973fa2e2d632ddf42dd52c6db04ea9910d297e8f0dfc9cd1bac539245997c0ed0ec8c443e57453d01c5d8e30cce179", &(0x7f0000000200)="69f4430a05e7cdb628974f29c261945b071ad89cadc6b0b1c85eb20fa4fe4429d29a40d57c02c2df193c1b21c670cb6759b4e7e30b4c4b3ce5858b916c93022e1cfc99845488e9cbeeff363e9f1f6a7bf87689d55fcc46013b31347b6f059a79817db508156a9e05f15cd7b7d324d91de11b0a74c28da40cbd241d5ac88a4420f516f6757a70ed4e8d3e821dce69de8a4d", 0x2, 0x0, 0x4}, 0x50) socket$kcm(0x28, 0x2, 0x0) 4.478269804s ago: executing program 1 (id=2372): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xb, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000006c00000008000000941f6721e757691d020000faffffff001800000000"], 0x38}, 0x40) syz_open_procfs$namespace(r0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) 4.071850832s ago: executing program 1 (id=2373): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x7000000}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x4, 0x8, 0x6}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.771570118s ago: executing program 1 (id=2374): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000cc000000cc000000070000000200000000060007000000000400000006000004ff0100000300000002000000050000000500000005000000fcffffff0900000005000000060000000200000000000000050000000700000004000000000800000600000000000000000800000d00000000000008000000000b000000060000130a0000000b000000020000001c010000040000003f010000020000000900000003000000ff03000001000000598cab4f000000000b0000007f0000005c9700000600000000040000df0c00000b0000000000000c02007f0000002e5f5f"], 0x0, 0xeb, 0x0, 0x1, 0x7}, 0x28) 3.612636591s ago: executing program 1 (id=2375): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ab000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xb787b14416c6952f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="180200008000f800000000000000000085000000276a847a19db6de9c2b7f22172f3800fa81c8579519cf46a7edd094438a8c880b985fd783434a5f0e44c90a0883ec748212381aa9e83a961bae5ca1041a22dbd5a155efdc7d9be3f7f1cf816a131adf22370397421793e2706cb2d10323493e99d64dcf1371b0c5bb6a18be8c522d2b16210d2bdafd13a8a378dd2060a202f771c03f676aec598f24a5dc353599a19a84f52dc66756ae4bd35d1339167855219da1811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x828, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x10e1a0, 0x4, 0x0, 0x1, 0x1, 0x400, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0xfffffd65, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8c1200f90429fc5a010f5dd9", 0x14}], 0x1}, 0x0) (async) close(r4) (async) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r5 = socket$kcm(0x10, 0x400000002, 0x0) close(0xffffffffffffffff) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES8=r7], 0x55) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4008}, 0x18) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b0f, &(0x7f0000000000)={'wg1\x00'}) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="186200000c000000000000000000010018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800008f0d00007b8af8ff00000000bfa2000000810848ae020000f8ffffffb703000008000000b704000001000000850000008200000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000c1930400040000007da01800ffffffffdd660800fcffffff"], &(0x7f00000004c0)='syzkaller\x00', 0x3, 0xfa, &(0x7f0000000500)=""/250, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x22, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x7, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000900)=[r6, r8, 0xffffffffffffffff, r8], &(0x7f0000000940)=[{0x5, 0x3, 0x2}], 0x10, 0x5}, 0x94) (rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r5}) (async) r9 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x65, 0x0, 0x0) (async) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0xfe33) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x24c, 0x70044, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3552, 0x4, 0x2}, 0xffffffffffffffff, 0x400000000, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1006, &(0x7f0000002080)=""/4102}, 0x94) 3.165633029s ago: executing program 1 (id=2376): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={&(0x7f0000000380)="b1a0ae5dcb15c5548e44dbc2137adc3eede9657969800254f66ad7c6b271fad8f1238f65102f705c1faa1660757116718ca6", &(0x7f0000000000)=""/9, 0x0, &(0x7f0000000140), 0xc}, 0x38) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x10001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) close(0xffffffffffffffff) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, 0x0, 0x0) 1.784725636s ago: executing program 0 (id=2381): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r6}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000024008188040f46ecdb4cb97f014da7afbb480ef90eb2a100e3bd6efb640009000a000a000063b95a789f", 0x2e}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600a400014003000000036010fab94dcf5c0461c1d67f6f94006134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1caceff000000ece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f0000000100)="a08eeae787c3ae415b298ca9c8c1b5838135c9fe9f8dbdeabcee1c2bdab9528beb94759132b9f791bc3e41bd0c8daa83a06554a1f7136ee23928dfd96acc6120b7efa8466e225d90515f7a964f3f044f6344f6cbf6096c22cd49bc152a090ba00fc35723940b2793cff284b38cb48921be8b26c6d15835977d55e8", 0x7b}, {&(0x7f0000000080)="c21b66d19cb1f56242b6c02a4f", 0xd}, {&(0x7f00000002c0)="cc3515c43bea5add75f10b3070f173d796f513414329360e1d8eb1c24dd76da3271f493b9968bd291cf794bfeef3e98d7b54a4df2cf15869c20ecc8f9cd5e77b38e3f0126f637727a36f8b0cd8e3108dcad9816fcf84b31c5b3faae7833f43d66f6e5ae371e8678d16f3da1c457b40ff5f64355c70a1ccb9ac75c54806f369bc316ada", 0x83}], 0x4}, 0x0) 1.409828113s ago: executing program 3 (id=2382): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000b0ffffff00006620020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90703600000f007049e0ff065581fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0xc9, 0x0, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea02f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688", &(0x7f0000000100)}, 0x50) 1.277235716s ago: executing program 3 (id=2383): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 862.148933ms ago: executing program 0 (id=2384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000400000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 860.543143ms ago: executing program 3 (id=2385): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000700008510000002000000851000000100000095000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 763.595155ms ago: executing program 0 (id=2386): socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4d) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xc9c7, 0x4, 0x0, 0x9, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a0050000000000000000000024000000000000000000000007000000940400004410880000000000000000000000000000000000110000000000e000000000c2d63c67000000000000000000"], 0x98}, 0x0) 666.705357ms ago: executing program 3 (id=2387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3272, 0x40, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0}, 0x80) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r6}, 0x38) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000002c0)={0xffffffffffffffff, r0}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)=r4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) 374.219253ms ago: executing program 3 (id=2388): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200060006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1d, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xa4}, @alu={0x4, 0x1, 0x3, 0x4, 0x2, 0x1, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x80, 0xa, &(0x7f0000000440)=""/10, 0x40f00, 0x40, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xf, 0x0, 0x2}, 0x10, 0xffffffffffffffff, r4, 0x5, &(0x7f0000000840)=[r0, r4], &(0x7f0000000940)=[{0x0, 0x1, 0x7, 0x4}, {0x5, 0x1, 0x1, 0x5}, {0x1, 0x5, 0xc, 0xc}, {0x5, 0x2, 0x6, 0x3}, {0x5, 0x5, 0xd}], 0x10, 0x100}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x200, r7}, 0xffffffffffffffc3) 107.717738ms ago: executing program 3 (id=2389): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x13, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES8=0xffffffffffffffff, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000001080)=ANY=[@ANYBLOB="1e0396ca3c5c980128876360864668f82ffdd569d2f570b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad80806"], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114100000000008510000002000000850000007d0000009d00a505000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x10, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000024008106", 0x8}], 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1001, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x10d, 0x4, 0x0, 0xf000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000079000000080000000200000000000000", @ANYRES32=0x1, @ANYRES16=r2, @ANYRESHEX=r5, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESOCT=r3, @ANYRES8=r3], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f0000000540), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40002100) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@generic={&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x8}, 0x18) socketpair(0x22, 0x2, 0x26, &(0x7f0000000000)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0xfffffffe}, 0x8) 0s ago: executing program 1 (id=2390): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100006400000007010000f8ffffffbf9400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 40.081649][ T5451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.099746][ T5451] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.215' (ED25519) to the list of known hosts. syzkaller login: [ 63.973125][ T5773] cgroup: Unknown subsys name 'net' [ 64.109505][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.516367][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.882040][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.890582][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.899185][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.907039][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.915061][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.937670][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.946081][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.950584][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.953296][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.961253][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.968815][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.975076][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.982406][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.988904][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.995492][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.011660][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.013487][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.019174][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.033863][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.041102][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.048550][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.048550][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.063597][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.066912][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.473114][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 67.576231][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 67.662024][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 67.715182][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 67.729828][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.737125][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.745499][ T5785] bridge_slave_0: entered allmulticast mode [ 67.752270][ T5785] bridge_slave_0: entered promiscuous mode [ 67.794647][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.801795][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.809125][ T5785] bridge_slave_1: entered allmulticast mode [ 67.816204][ T5785] bridge_slave_1: entered promiscuous mode [ 67.847635][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.854832][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.861971][ T5783] bridge_slave_0: entered allmulticast mode [ 67.869056][ T5783] bridge_slave_0: entered promiscuous mode [ 67.900461][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.907730][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.915360][ T5783] bridge_slave_1: entered allmulticast mode [ 67.922047][ T5783] bridge_slave_1: entered promiscuous mode [ 67.963745][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.976001][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.004879][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.012052][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.019799][ T5784] bridge_slave_0: entered allmulticast mode [ 68.027094][ T5784] bridge_slave_0: entered promiscuous mode [ 68.036224][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.043489][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.050685][ T5784] bridge_slave_1: entered allmulticast mode [ 68.057611][ T5784] bridge_slave_1: entered promiscuous mode [ 68.064510][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.071608][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.078989][ T5782] bridge_slave_0: entered allmulticast mode [ 68.085952][ T5782] bridge_slave_0: entered promiscuous mode [ 68.094345][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.101467][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.108729][ T5782] bridge_slave_1: entered allmulticast mode [ 68.115945][ T5782] bridge_slave_1: entered promiscuous mode [ 68.133051][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.172036][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.206627][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.229984][ T5785] team0: Port device team_slave_0 added [ 68.249866][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.261364][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.273850][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.284668][ T5785] team0: Port device team_slave_1 added [ 68.301439][ T5783] team0: Port device team_slave_0 added [ 68.338834][ T5783] team0: Port device team_slave_1 added [ 68.379059][ T5782] team0: Port device team_slave_0 added [ 68.405180][ T5784] team0: Port device team_slave_0 added [ 68.411871][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.418912][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.444865][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.458088][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.465624][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.491748][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.505025][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.511987][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.538078][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.551277][ T5782] team0: Port device team_slave_1 added [ 68.569360][ T5784] team0: Port device team_slave_1 added [ 68.584375][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.591344][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.618233][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.665231][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.672198][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.698215][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.710797][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.718607][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.744546][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.757321][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.765097][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.792558][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.828614][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.835730][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.861716][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.913302][ T5785] hsr_slave_0: entered promiscuous mode [ 68.919580][ T5785] hsr_slave_1: entered promiscuous mode [ 68.930011][ T5783] hsr_slave_0: entered promiscuous mode [ 68.936442][ T5783] hsr_slave_1: entered promiscuous mode [ 68.946167][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.954394][ T5783] Cannot create hsr debugfs directory [ 68.988560][ T5784] hsr_slave_0: entered promiscuous mode [ 68.995365][ T5784] hsr_slave_1: entered promiscuous mode [ 69.001337][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.009246][ T5784] Cannot create hsr debugfs directory [ 69.079962][ T5782] hsr_slave_0: entered promiscuous mode [ 69.087127][ T5782] hsr_slave_1: entered promiscuous mode [ 69.094089][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.101652][ T5782] Cannot create hsr debugfs directory [ 69.107852][ T5795] Bluetooth: hci0: command tx timeout [ 69.108067][ T5795] Bluetooth: hci2: command tx timeout [ 69.183144][ T5795] Bluetooth: hci1: command tx timeout [ 69.183159][ T5792] Bluetooth: hci3: command tx timeout [ 69.442549][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.458070][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.471137][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.481324][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.555719][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.569200][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.579064][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.594975][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.683619][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.708768][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.720289][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.742216][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.821935][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.839480][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.849555][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.869048][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.900903][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.929469][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.959501][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.987641][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.008887][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.016652][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.056773][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.064261][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.076977][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.084090][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.093974][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.101099][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.195251][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.245683][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.272425][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.321742][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.346230][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.353430][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.368070][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.375250][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.411572][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.418762][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.480433][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.487623][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.602376][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.721165][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.757300][ T5785] veth0_vlan: entered promiscuous mode [ 70.830066][ T5785] veth1_vlan: entered promiscuous mode [ 70.853729][ T5784] veth0_vlan: entered promiscuous mode [ 70.882151][ T5784] veth1_vlan: entered promiscuous mode [ 70.899137][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.966406][ T5785] veth0_macvtap: entered promiscuous mode [ 70.992048][ T5785] veth1_macvtap: entered promiscuous mode [ 71.007166][ T5784] veth0_macvtap: entered promiscuous mode [ 71.032823][ T5784] veth1_macvtap: entered promiscuous mode [ 71.068030][ T5783] veth0_vlan: entered promiscuous mode [ 71.081702][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.105642][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.117899][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.129084][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.145094][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.158109][ T5783] veth1_vlan: entered promiscuous mode [ 71.169719][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.179849][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.191310][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.192837][ T5795] Bluetooth: hci0: command tx timeout [ 71.201796][ T5792] Bluetooth: hci2: command tx timeout [ 71.213169][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.223028][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.231864][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.241093][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.250393][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.263288][ T5792] Bluetooth: hci3: command tx timeout [ 71.273183][ T5792] Bluetooth: hci1: command tx timeout [ 71.290290][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.301484][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.311332][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.320272][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.407440][ T5783] veth0_macvtap: entered promiscuous mode [ 71.436265][ T5783] veth1_macvtap: entered promiscuous mode [ 71.477607][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.488428][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.500732][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.512114][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.524245][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.555718][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.563430][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.570033][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.590102][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.596625][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.608927][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.615331][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.627003][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.638189][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.661372][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.662726][ T5782] veth0_vlan: entered promiscuous mode [ 71.671076][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.683741][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.692452][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.701524][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.711646][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.775992][ T5782] veth1_vlan: entered promiscuous mode [ 71.790404][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.799315][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.834765][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.845844][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.934215][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.946456][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.976737][ T5782] veth0_macvtap: entered promiscuous mode [ 71.999229][ T5782] veth1_macvtap: entered promiscuous mode [ 72.055024][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.070696][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.093539][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.115056][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.133249][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.147651][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.160457][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.175827][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.192309][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.241979][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.256956][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.268167][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.278906][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.288996][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.299607][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.311974][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.516772][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.536673][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.562418][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.572290][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.586850][ T5886] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5'. [ 72.708597][ C1] Illegal XDP return value 16128 on prog (id 4) dev hsr_slave_1, expect packet loss! [ 72.902643][ C0] hrtimer: interrupt took 48286 ns [ 73.267488][ T5792] Bluetooth: hci2: command tx timeout [ 73.273209][ T5792] Bluetooth: hci0: command tx timeout [ 73.344451][ T5792] Bluetooth: hci1: command tx timeout [ 73.347853][ T5795] Bluetooth: hci3: command tx timeout [ 74.467558][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.494992][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.550393][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.571437][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.610346][ T5902] netlink: 'syz.3.11': attribute type 2 has an invalid length. [ 74.656574][ T5902] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.11'. [ 74.847771][ T5904] tap0: tun_chr_ioctl cmd 1074025692 [ 74.885190][ T5904] netlink: 'syz.0.12': attribute type 16 has an invalid length. [ 74.913009][ T5904] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12'. [ 75.344651][ T5795] Bluetooth: hci2: command tx timeout [ 75.354787][ T5795] Bluetooth: hci0: command tx timeout [ 75.425260][ T5795] Bluetooth: hci3: command tx timeout [ 75.430723][ T5795] Bluetooth: hci1: command tx timeout [ 76.450421][ T5921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.468449][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.477978][ T5921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.486258][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.338770][ T5939] netlink: 180 bytes leftover after parsing attributes in process `syz.2.20'. [ 79.348325][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.362830][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.383231][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.390713][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.340408][ T5969] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 80.347240][ T5969] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 81.063601][ T5977] netlink: 180 bytes leftover after parsing attributes in process `syz.3.37'. [ 81.310158][ T5994] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 81.327347][ T5994] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.44'. [ 81.369655][ T5994] delete_channel: no stack [ 81.828679][ T28] cfg80211: failed to load regulatory.db [ 82.663097][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.670579][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.679420][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.687883][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.760172][ T6004] tap0: tun_chr_ioctl cmd 1074025692 [ 82.778237][ T6005] netlink: 'syz.1.46': attribute type 16 has an invalid length. [ 82.787516][ T6005] netlink: 168 bytes leftover after parsing attributes in process `syz.1.46'. [ 82.887640][ T6010] syz.3.48 uses obsolete (PF_INET,SOCK_PACKET) [ 83.413155][ T6029] netlink: 'syz.3.57': attribute type 10 has an invalid length. [ 83.430420][ T6025] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.55'. [ 83.445868][ T6029] veth0_vlan: entered allmulticast mode [ 83.504578][ T6029] veth0_vlan: left promiscuous mode [ 83.526901][ T6029] veth0_vlan: entered promiscuous mode [ 83.534253][ T6033] Zero length message leads to an empty skb [ 83.552270][ T6029] team0: Device veth0_vlan failed to register rx_handler [ 83.603369][ T6033] netlink: 132 bytes leftover after parsing attributes in process `syz.2.58'. [ 83.699257][ T6029] syz.3.57 (6029) used greatest stack depth: 20072 bytes left [ 83.925987][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.948678][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.968640][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.005853][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.052335][ T6039] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.143348][ T6040] netlink: 'syz.2.60': attribute type 21 has an invalid length. [ 84.147907][ T6025] syz.0.55 (6025) used greatest stack depth: 19912 bytes left [ 84.151037][ T6040] netlink: 128 bytes leftover after parsing attributes in process `syz.2.60'. [ 84.152057][ T6040] netlink: 'syz.2.60': attribute type 4 has an invalid length. [ 84.711143][ T6058] sit0: entered promiscuous mode [ 84.754878][ T6058] sit0: entered allmulticast mode [ 84.837419][ T6062] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.70'. [ 84.874274][ T6064] sit0: entered promiscuous mode [ 84.903911][ T6064] sit0: entered allmulticast mode [ 85.233528][ T6079] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.74'. [ 85.244329][ T6079] netlink: del zone limit has 8 unknown bytes [ 85.450203][ T6090] tap0: tun_chr_ioctl cmd 1074025692 [ 85.473196][ T6090] netlink: 'syz.3.76': attribute type 16 has an invalid length. [ 85.484418][ T6090] netlink: 168 bytes leftover after parsing attributes in process `syz.3.76'. [ 85.975112][ T6105] netlink: 132 bytes leftover after parsing attributes in process `syz.2.85'. [ 86.592550][ T6130] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.94'. [ 87.128003][ T6136] sit0: entered promiscuous mode [ 87.133106][ T6136] sit0: entered allmulticast mode [ 87.232259][ T6143] netlink: 10 bytes leftover after parsing attributes in process `syz.0.98'. [ 87.532382][ T6157] netlink: 'syz.0.104': attribute type 21 has an invalid length. [ 87.650129][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 87.953987][ T6176] netlink: 'syz.2.111': attribute type 4 has an invalid length. [ 87.961707][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 88.169254][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 88.441963][ T6192] netlink: 156 bytes leftover after parsing attributes in process `syz.3.118'. [ 88.459646][ T6193] bond_slave_1: mtu greater than device maximum [ 89.033076][ T6210] sit0: entered promiscuous mode [ 89.057389][ T6210] sit0: entered allmulticast mode [ 89.323937][ T6222] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 89.362500][ T6222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.127'. [ 89.401234][ T6222] team0: Port device geneve0 added [ 89.593112][ T6234] netlink: 'syz.1.135': attribute type 21 has an invalid length. [ 89.675708][ T6234] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.135'. [ 89.782858][ T6244] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.917859][ T6251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.925362][ T6251] IPv6: NLM_F_CREATE should be set when creating new route [ 89.932649][ T6251] IPv6: NLM_F_CREATE should be set when creating new route [ 89.939878][ T6251] IPv6: NLM_F_CREATE should be set when creating new route [ 90.118168][ T6256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.143'. [ 90.856039][ T6288] FAULT_INJECTION: forcing a failure. [ 90.856039][ T6288] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.902746][ T6288] CPU: 0 PID: 6288 Comm: syz.0.157 Not tainted syzkaller #0 [ 90.910095][ T6288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.920183][ T6288] Call Trace: [ 90.923480][ T6288] [ 90.926438][ T6288] dump_stack_lvl+0x16c/0x230 [ 90.931151][ T6288] ? show_regs_print_info+0x20/0x20 [ 90.936374][ T6288] ? load_image+0x3b0/0x3b0 [ 90.940893][ T6288] ? __might_fault+0xaa/0x120 [ 90.945582][ T6288] ? __lock_acquire+0x7c80/0x7c80 [ 90.950627][ T6288] should_fail_ex+0x39d/0x4d0 [ 90.955327][ T6288] _copy_from_user+0x2f/0xe0 [ 90.959931][ T6288] __sys_bpf+0x1e9/0x800 [ 90.964184][ T6288] ? bpf_link_show_fdinfo+0x350/0x350 [ 90.969559][ T6288] ? lock_chain_count+0x20/0x20 [ 90.974403][ T6288] __x64_sys_bpf+0x7c/0x90 [ 90.978808][ T6288] do_syscall_64+0x55/0xb0 [ 90.983215][ T6288] ? clear_bhb_loop+0x40/0x90 [ 90.987880][ T6288] ? clear_bhb_loop+0x40/0x90 [ 90.992544][ T6288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.998429][ T6288] RIP: 0033:0x7f03ca18eba9 [ 91.002832][ T6288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.022432][ T6288] RSP: 002b:00007f03cb0ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.030837][ T6288] RAX: ffffffffffffffda RBX: 00007f03ca3d5fa0 RCX: 00007f03ca18eba9 [ 91.038799][ T6288] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 91.046758][ T6288] RBP: 00007f03cb0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 91.054716][ T6288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.062678][ T6288] R13: 00007f03ca3d6038 R14: 00007f03ca3d5fa0 R15: 00007fff2ae26c48 [ 91.070649][ T6288] [ 91.195200][ T6286] netlink: 'syz.2.154': attribute type 10 has an invalid length. [ 94.064765][ T6317] netlink: 'syz.0.168': attribute type 21 has an invalid length. [ 94.250245][ T6323] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.171'. [ 94.269532][ T6323] openvswitch: netlink: Key type 29 is not supported [ 94.293672][ T6323] netlink: 830 bytes leftover after parsing attributes in process `syz.2.171'. [ 94.562504][ T6335] netlink: 'syz.0.177': attribute type 21 has an invalid length. [ 94.571484][ T6335] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.753446][ T6336] netlink: 132 bytes leftover after parsing attributes in process `syz.2.176'. [ 95.441664][ T6365] warning: `syz.1.188' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.061528][ T6385] sit0: left promiscuous mode [ 96.342977][ T6390] erspan0: entered promiscuous mode [ 96.364033][ T6390] erspan0: entered allmulticast mode [ 96.537910][ T6401] netlink: 'syz.3.202': attribute type 25 has an invalid length. [ 96.836335][ T6408] netlink: 'syz.0.205': attribute type 1 has an invalid length. [ 96.868551][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 96.903012][ T6408] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.205'. [ 96.912284][ T6408] netlink: 9 bytes leftover after parsing attributes in process `syz.0.205'. [ 97.056357][ T6419] syz.2.209[6419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.175037][ T6421] veth1_macvtap: left promiscuous mode [ 97.329129][ T6424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.211'. [ 97.636550][ T6428] C: renamed from team_slave_0 (while UP) [ 97.927783][ T6428] netlink: 'syz.3.213': attribute type 3 has an invalid length. [ 97.941470][ T6428] netlink: 152 bytes leftover after parsing attributes in process `syz.3.213'. [ 97.990532][ T6428] syz.3.213 (6428) used greatest stack depth: 19752 bytes left [ 99.086908][ T6459] veth1_macvtap: entered allmulticast mode [ 99.688727][ T6474] C: renamed from team_slave_0 (while UP) [ 99.940608][ T6474] netlink: 'syz.0.226': attribute type 3 has an invalid length. [ 99.950953][ T6474] netlink: 152 bytes leftover after parsing attributes in process `syz.0.226'. [ 100.398025][ T6487] netlink: 132 bytes leftover after parsing attributes in process `syz.2.232'. [ 100.914700][ T6511] sit0: entered promiscuous mode [ 101.867770][ T6536] C: renamed from team_slave_0 (while UP) [ 101.923078][ T6536] netlink: 'syz.1.252': attribute type 3 has an invalid length. [ 101.930996][ T6536] netlink: 152 bytes leftover after parsing attributes in process `syz.1.252'. [ 102.059011][ T6534] syz.3.250 (6534) used greatest stack depth: 18984 bytes left [ 102.288239][ T6549] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.255'. [ 102.301271][ T6545] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.255'. [ 102.667239][ T6443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.318719][ T6595] netlink: 830 bytes leftover after parsing attributes in process `syz.2.275'. [ 104.070270][ T6612] syz.0.281[6612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.070482][ T6612] syz.0.281[6612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.714924][ T6627] netlink: 'syz.1.286': attribute type 2 has an invalid length. [ 106.734264][ T6655] netlink: 'syz.0.295': attribute type 10 has an invalid length. [ 106.742009][ T6655] netlink: 'syz.0.295': attribute type 19 has an invalid length. [ 106.760099][ T6655] netlink: 156 bytes leftover after parsing attributes in process `syz.0.295'. [ 106.804727][ T6667] netlink: 132 bytes leftover after parsing attributes in process `syz.3.299'. [ 114.174476][ T6694] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 114.295876][ T6697] netlink: 132 bytes leftover after parsing attributes in process `syz.0.308'. [ 114.341441][ T6695] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 114.378846][ T6702] netlink: 'syz.1.312': attribute type 3 has an invalid length. [ 114.405656][ T6702] netlink: 152 bytes leftover after parsing attributes in process `syz.1.312'. [ 115.253184][ T6747] netlink: 'syz.0.326': attribute type 3 has an invalid length. [ 115.261217][ T6747] netlink: 152 bytes leftover after parsing attributes in process `syz.0.326'. [ 115.901523][ T6770] netlink: 'syz.3.337': attribute type 3 has an invalid length. [ 115.914484][ T6770] netlink: 152 bytes leftover after parsing attributes in process `syz.3.337'. [ 116.093663][ T6775] netlink: 'syz.2.338': attribute type 25 has an invalid length. [ 116.121843][ T6775] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.338'. [ 116.423295][ T6795] netlink: 'syz.0.348': attribute type 2 has an invalid length. [ 116.443591][ T6795] netlink: 'syz.0.348': attribute type 9 has an invalid length. [ 116.451278][ T6795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.348'. [ 116.534680][ T6799] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.348'. [ 116.558744][ T6799] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.348'. [ 116.603896][ T6799] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.348'. [ 116.627625][ T6799] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.348'. [ 116.764808][ T6811] syz.1.355[6811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.764933][ T6811] syz.1.355[6811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.138175][ T6852] netlink: 'syz.0.372': attribute type 10 has an invalid length. [ 118.193360][ T6852] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 120.241513][ T6903] netlink: 'syz.1.391': attribute type 29 has an invalid length. [ 120.259364][ T6903] netlink: 'syz.1.391': attribute type 29 has an invalid length. [ 120.271169][ T6903] netlink: 'syz.1.391': attribute type 29 has an invalid length. [ 120.294326][ T6903] netlink: 'syz.1.391': attribute type 29 has an invalid length. [ 120.315276][ T6903] netlink: 'syz.1.391': attribute type 29 has an invalid length. [ 121.010473][ T6930] sit0: left promiscuous mode [ 121.393647][ T6939] __nla_validate_parse: 32 callbacks suppressed [ 121.393663][ T6939] netlink: 132 bytes leftover after parsing attributes in process `syz.1.405'. [ 122.063925][ T6949] sit0: entered promiscuous mode [ 130.264823][ T7035] netlink: 132 bytes leftover after parsing attributes in process `syz.0.439'. [ 130.947125][ T7048] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.447'. [ 131.111812][ T7058] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.451'. [ 131.192843][ T7062] netlink: 'syz.0.453': attribute type 3 has an invalid length. [ 131.218873][ T7062] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.453'. [ 131.278598][ T7065] bond_slave_1: mtu less than device minimum [ 131.574227][ T7080] netlink: 'syz.3.462': attribute type 10 has an invalid length. [ 131.606889][ T7080] veth1_macvtap: left promiscuous mode [ 131.677773][ T7083] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.461'. [ 131.919770][ T7100] netlink: 60 bytes leftover after parsing attributes in process `syz.2.468'. [ 131.942795][ T7100] netlink: 60 bytes leftover after parsing attributes in process `syz.2.468'. [ 131.964074][ T7095] netlink: 60 bytes leftover after parsing attributes in process `syz.2.468'. [ 132.413083][ T7129] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.480'. [ 132.467701][ T7127] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.477'. [ 133.046463][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.055313][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.179549][ T7214] netlink: 'syz.2.513': attribute type 21 has an invalid length. [ 137.572387][ T7226] __nla_validate_parse: 2 callbacks suppressed [ 137.572402][ T7226] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.517'. [ 137.792032][ T7234] wg2: entered promiscuous mode [ 137.812638][ T7234] wg2: entered allmulticast mode [ 139.109706][ T7277] netlink: 'syz.2.539': attribute type 21 has an invalid length. [ 139.139489][ T7277] netlink: 'syz.2.539': attribute type 1 has an invalid length. [ 140.040100][ T7298] netlink: 'syz.1.545': attribute type 39 has an invalid length. [ 140.413052][ T7310] netlink: 132 bytes leftover after parsing attributes in process `syz.2.546'. [ 140.648284][ T7312] syz.3.550[7312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.648405][ T7312] syz.3.550[7312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.457152][ T7330] syz.3.559[7330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.480395][ T7330] syz.3.559[7330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.329903][ T7373] netlink: 'syz.2.574': attribute type 10 has an invalid length. [ 142.363161][ T7373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.574'. [ 142.372362][ T7373] netlink: 'syz.2.574': attribute type 10 has an invalid length. [ 142.381670][ T7373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.574'. [ 143.419929][ T7407] netlink: 132 bytes leftover after parsing attributes in process `syz.2.586'. [ 144.437825][ T7438] netlink: 'syz.3.600': attribute type 21 has an invalid length. [ 144.554664][ T7438] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 144.755691][ T7456] sit0: left promiscuous mode [ 144.797358][ T7456] sit0: entered promiscuous mode [ 145.908740][ T7487] bond_slave_1: mtu less than device minimum [ 146.034311][ T7492] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 146.042484][ T7492] netlink: 152 bytes leftover after parsing attributes in process `syz.0.622'. [ 146.073230][ T7492] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 146.261671][ T7494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.623'. [ 146.456069][ T7513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.630'. [ 146.467549][ T7513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.630'. [ 146.503331][ T7513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.630'. [ 146.533413][ T7513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.630'. [ 146.786800][ T7531] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.637'. [ 146.832785][ T7531] netlink: 'syz.2.637': attribute type 6 has an invalid length. [ 146.856349][ T7531] netlink: 164 bytes leftover after parsing attributes in process `syz.2.637'. [ 147.963545][ T7563] netlink: 'syz.1.652': attribute type 10 has an invalid length. [ 148.455619][ T7575] netlink: 'syz.1.657': attribute type 21 has an invalid length. [ 148.478254][ T7575] netlink: 'syz.1.657': attribute type 1 has an invalid length. [ 148.528542][ T7582] netlink: 'syz.1.657': attribute type 1 has an invalid length. [ 148.571539][ T7575] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.657'. [ 148.594676][ T7582] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.657'. [ 148.642145][ T7585] netlink: 132 bytes leftover after parsing attributes in process `syz.2.658'. [ 148.718878][ T7575] netlink: 'syz.1.657': attribute type 12 has an invalid length. [ 148.748064][ T7575] netlink: 132 bytes leftover after parsing attributes in process `syz.1.657'. [ 151.384748][ T7652] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 151.460998][ T7653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.235872][ T7683] netlink: 'syz.3.697': attribute type 25 has an invalid length. [ 153.689382][ T7687] netlink: 'syz.1.699': attribute type 10 has an invalid length. [ 153.697311][ T7687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.699'. [ 153.707111][ T7687] ipvlan1: entered promiscuous mode [ 153.712387][ T7687] ipvlan1: entered allmulticast mode [ 153.719281][ T7687] veth0_vlan: entered allmulticast mode [ 153.727373][ T7687] bridge0: port 3(ipvlan1) entered blocking state [ 153.734075][ T7687] bridge0: port 3(ipvlan1) entered disabled state [ 153.743828][ T7687] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 154.145843][ T7716] netlink: 'syz.3.711': attribute type 3 has an invalid length. [ 154.172747][ T7716] netlink: 152 bytes leftover after parsing attributes in process `syz.3.711'. [ 154.203353][ T7722] syzkaller0: entered promiscuous mode [ 154.232901][ T7722] syzkaller0: entered allmulticast mode [ 154.932278][ T7753] netlink: 'syz.1.725': attribute type 3 has an invalid length. [ 154.950186][ T7753] netlink: 152 bytes leftover after parsing attributes in process `syz.1.725'. [ 155.097935][ T7758] netlink: 'syz.3.727': attribute type 9 has an invalid length. [ 155.116637][ T7758] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.727'. [ 155.356169][ T7771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.732'. [ 155.386905][ T7771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.732'. [ 155.621061][ T7783] syzkaller0: entered promiscuous mode [ 155.674232][ T7783] syzkaller0: entered allmulticast mode [ 155.745503][ T7788] netlink: 'syz.0.737': attribute type 3 has an invalid length. [ 155.856163][ T7788] netlink: 152 bytes leftover after parsing attributes in process `syz.0.737'. [ 156.399345][ T7815] netlink: 'syz.0.749': attribute type 3 has an invalid length. [ 156.407493][ T7815] netlink: 152 bytes leftover after parsing attributes in process `syz.0.749'. [ 157.053992][ T7827] sctp: [Deprecated]: syz.3.753 (pid 7827) Use of int in maxseg socket option. [ 157.053992][ T7827] Use struct sctp_assoc_value instead [ 157.603975][ T7854] netlink: 'syz.1.762': attribute type 3 has an invalid length. [ 157.614353][ T7854] netlink: 152 bytes leftover after parsing attributes in process `syz.1.762'. [ 157.662864][ T7856] netlink: 15478 bytes leftover after parsing attributes in process `syz.2.763'. [ 157.949146][ T7866] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 158.087873][ T7868] delete_channel: no stack [ 158.101073][ T7869] netlink: 'syz.1.768': attribute type 21 has an invalid length. [ 158.428331][ T7886] netlink: 'syz.0.776': attribute type 3 has an invalid length. [ 158.595921][ T7896] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 159.143167][ T7917] __nla_validate_parse: 2 callbacks suppressed [ 159.143182][ T7917] netlink: 132 bytes leftover after parsing attributes in process `syz.0.785'. [ 159.285648][ T7923] validate_nla: 1 callbacks suppressed [ 159.285680][ T7923] netlink: 'syz.1.790': attribute type 3 has an invalid length. [ 159.350529][ T7923] netlink: 152 bytes leftover after parsing attributes in process `syz.1.790'. [ 159.547381][ T7926] can: request_module (can-proto-0) failed. [ 160.177709][ T7954] netlink: 'syz.0.801': attribute type 3 has an invalid length. [ 160.211797][ T7954] netlink: 152 bytes leftover after parsing attributes in process `syz.0.801'. [ 160.382154][ T7957] -1: renamed from syzkaller0 [ 161.613077][ T7998] wg2: entered promiscuous mode [ 161.617996][ T7998] wg2: entered allmulticast mode [ 162.152837][ T8024] netlink: 132 bytes leftover after parsing attributes in process `syz.2.825'. [ 163.008295][ T8037] netlink: 14 bytes leftover after parsing attributes in process `syz.3.832'. [ 163.045565][ T8037] hsr_slave_0: left promiscuous mode [ 163.143738][ T8037] hsr_slave_1: left promiscuous mode [ 164.533348][ T8080] sock: sock_timestamping_bind_phc: sock not bind to device [ 165.707354][ T8117] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.861'. [ 165.734892][ T8119] netlink: 'syz.3.863': attribute type 10 has an invalid length. [ 165.999926][ T8123] netlink: 2 bytes leftover after parsing attributes in process `syz.0.865'. [ 166.033566][ T8123] batadv_slave_1: entered promiscuous mode [ 166.240138][ T8135] netlink: 'syz.3.869': attribute type 16 has an invalid length. [ 166.272638][ T8135] netlink: 152 bytes leftover after parsing attributes in process `syz.3.869'. [ 166.289436][ T8136] netlink: 'syz.1.870': attribute type 10 has an invalid length. [ 166.396946][ T8136] veth0_vlan: left promiscuous mode [ 166.426754][ T8136] veth0_vlan: entered promiscuous mode [ 166.439761][ T8136] team0: Device veth0_vlan failed to register rx_handler [ 166.504086][ T8140] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.872'. [ 166.535067][ T8142] ªªªªªª: renamed from veth0_vlan [ 167.396161][ T8185] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.889'. [ 167.520940][ T8184] Â: renamed from pim6reg1 [ 167.753347][ T8198] netlink: 'syz.0.894': attribute type 27 has an invalid length. [ 167.791466][ T8198] netlink: 'syz.0.894': attribute type 4 has an invalid length. [ 167.813626][ T8198] netlink: 152 bytes leftover after parsing attributes in process `syz.0.894'. [ 167.851324][ T8198] netlink: 'syz.0.894': attribute type 27 has an invalid length. [ 167.864617][ T8198] netlink: 'syz.0.894': attribute type 4 has an invalid length. [ 167.873359][ T8198] netlink: 152 bytes leftover after parsing attributes in process `syz.0.894'. [ 167.911331][ T8198] netlink: 'syz.0.894': attribute type 27 has an invalid length. [ 167.925588][ T8198] netlink: 'syz.0.894': attribute type 4 has an invalid length. [ 167.934870][ T8198] netlink: 152 bytes leftover after parsing attributes in process `syz.0.894'. [ 168.074804][ T8212] sctp: [Deprecated]: syz.1.896 (pid 8212) Use of int in max_burst socket option deprecated. [ 168.074804][ T8212] Use struct sctp_assoc_value instead [ 168.113512][ T8214] netlink: 'syz.0.897': attribute type 10 has an invalid length. [ 169.074909][ T8234] wg2: entered promiscuous mode [ 169.080133][ T8234] wg2: entered allmulticast mode [ 169.904159][ T8269] syzkaller0: entered promiscuous mode [ 169.909683][ T8269] syzkaller0: entered allmulticast mode [ 171.526975][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 171.843478][ T8303] netlink: 132 bytes leftover after parsing attributes in process `syz.3.924'. [ 173.684496][ T8351] validate_nla: 2 callbacks suppressed [ 173.684513][ T8351] netlink: 'syz.1.950': attribute type 2 has an invalid length. [ 173.708047][ T8351] netlink: 116 bytes leftover after parsing attributes in process `syz.1.950'. [ 173.732025][ T8351] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 174.368853][ T8379] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.955'. [ 174.727473][ T8394] netlink: 'syz.0.968': attribute type 29 has an invalid length. [ 174.736181][ T8394] netlink: 'syz.0.968': attribute type 29 has an invalid length. [ 174.749253][ T8394] netlink: 'syz.0.968': attribute type 29 has an invalid length. [ 174.758994][ T8394] netlink: 'syz.0.968': attribute type 29 has an invalid length. [ 174.864914][ T8394] netlink: 'syz.0.968': attribute type 29 has an invalid length. [ 175.825295][ T8427] netlink: 'syz.2.980': attribute type 29 has an invalid length. [ 175.835515][ T8427] netlink: 'syz.2.980': attribute type 29 has an invalid length. [ 175.848928][ T8427] netlink: 'syz.2.980': attribute type 29 has an invalid length. [ 175.859854][ T8427] netlink: 'syz.2.980': attribute type 29 has an invalid length. [ 176.697018][ T8458] netlink: 180 bytes leftover after parsing attributes in process `syz.0.995'. [ 177.593539][ T8494] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1008'. [ 178.096557][ T8513] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1013'. [ 178.138739][ T8516] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1014'. [ 178.303224][ T8524] syz.0.1018: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 178.322737][ T8524] CPU: 0 PID: 8524 Comm: syz.0.1018 Not tainted syzkaller #0 [ 178.330173][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.340270][ T8524] Call Trace: [ 178.343580][ T8524] [ 178.346549][ T8524] dump_stack_lvl+0x16c/0x230 [ 178.351266][ T8524] ? show_regs_print_info+0x20/0x20 [ 178.356486][ T8524] ? load_image+0x3b0/0x3b0 [ 178.361006][ T8524] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 178.367440][ T8524] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 178.373950][ T8524] warn_alloc+0x210/0x300 [ 178.378292][ T8524] ? stack_trace_save+0x9c/0xe0 [ 178.383153][ T8524] ? zone_watermark_ok_safe+0x230/0x230 [ 178.388713][ T8524] ? kasan_set_track+0x5f/0x70 [ 178.393471][ T8524] ? kasan_set_track+0x4e/0x70 [ 178.398230][ T8524] ? __kasan_kmalloc+0x8f/0xa0 [ 178.402993][ T8524] ? xsk_init_queue+0xb0/0x110 [ 178.407752][ T8524] ? xsk_setsockopt+0x4db/0x6f0 [ 178.412603][ T8524] ? do_sock_setsockopt+0x175/0x1a0 [ 178.417800][ T8524] ? __x64_sys_setsockopt+0x184/0x200 [ 178.423177][ T8524] __vmalloc_node_range+0x126/0x1320 [ 178.428501][ T8524] ? free_vm_area+0x50/0x50 [ 178.433017][ T8524] vmalloc_user+0x74/0x80 [ 178.437355][ T8524] ? xskq_create+0xbf/0x170 [ 178.441869][ T8524] xskq_create+0xbf/0x170 [ 178.446212][ T8524] xsk_init_queue+0xb0/0x110 [ 178.450804][ T8524] xsk_setsockopt+0x4db/0x6f0 [ 178.455486][ T8524] ? xsk_poll+0x670/0x670 [ 178.459819][ T8524] ? __fget_files+0x28/0x4d0 [ 178.464425][ T8524] ? aa_sock_opt_perm+0x74/0x100 [ 178.469367][ T8524] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 178.474915][ T8524] ? security_socket_setsockopt+0x7e/0xa0 [ 178.480976][ T8524] ? xsk_poll+0x670/0x670 [ 178.485309][ T8524] do_sock_setsockopt+0x175/0x1a0 [ 178.490334][ T8524] ? __fdget+0x180/0x210 [ 178.494580][ T8524] __x64_sys_setsockopt+0x184/0x200 [ 178.499792][ T8524] do_syscall_64+0x55/0xb0 [ 178.504217][ T8524] ? clear_bhb_loop+0x40/0x90 [ 178.508890][ T8524] ? clear_bhb_loop+0x40/0x90 [ 178.513566][ T8524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.519462][ T8524] RIP: 0033:0x7f03ca18eba9 [ 178.523892][ T8524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.543499][ T8524] RSP: 002b:00007f03cb0ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.551913][ T8524] RAX: ffffffffffffffda RBX: 00007f03ca3d5fa0 RCX: 00007f03ca18eba9 [ 178.559886][ T8524] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 178.567856][ T8524] RBP: 00007f03ca211e19 R08: 0000000000000004 R09: 0000000000000000 [ 178.575823][ T8524] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 178.583791][ T8524] R13: 00007f03ca3d6038 R14: 00007f03ca3d5fa0 R15: 00007fff2ae26c48 [ 178.591783][ T8524] [ 178.619339][ T8524] Mem-Info: [ 178.633012][ T8524] active_anon:6280 inactive_anon:0 isolated_anon:0 [ 178.633012][ T8524] active_file:13097 inactive_file:39898 isolated_file:0 [ 178.633012][ T8524] unevictable:768 dirty:152 writeback:0 [ 178.633012][ T8524] slab_reclaimable:10162 slab_unreclaimable:91753 [ 178.633012][ T8524] mapped:24272 shmem:1361 pagetables:598 [ 178.633012][ T8524] sec_pagetables:0 bounce:0 [ 178.633012][ T8524] kernel_misc_reclaimable:0 [ 178.633012][ T8524] free:1351750 free_pcp:8309 free_cma:0 [ 178.680173][ T8524] Node 0 active_anon:25120kB inactive_anon:0kB active_file:52388kB inactive_file:159388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97088kB dirty:608kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11220kB pagetables:2292kB sec_pagetables:0kB all_unreclaimable? no [ 178.753269][ T8524] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 178.799320][ T8524] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.828254][ T8524] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 178.836486][ T8524] Node 0 DMA32 free:1497860kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:25068kB inactive_anon:0kB active_file:52388kB inactive_file:158064kB unevictable:1536kB writepending:608kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:12788kB local_pcp:3336kB free_cma:0kB [ 178.870098][ T8524] lowmem_reserve[]: 0 0 1 1 1 [ 178.876401][ T8524] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.904754][ T8524] lowmem_reserve[]: 0 0 0 0 0 [ 178.910178][ T8524] Node 1 Normal free:3893772kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22016kB local_pcp:10624kB free_cma:0kB [ 178.948759][ T8524] lowmem_reserve[]: 0 0 0 0 0 [ 178.983095][ T8524] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 179.006642][ T8524] Node 0 DMA32: 147*4kB (ME) 1331*8kB (UME) 1352*16kB (UME) 877*32kB (UME) 209*64kB (UME) 43*128kB (UME) 14*256kB (UME) 19*512kB (UM) 12*1024kB (UME) 2*2048kB (UM) 339*4096kB (UM) = 1498052kB [ 179.038531][ T8524] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 179.053502][ T8524] Node 1 Normal: 287*4kB (UE) 58*8kB (UME) 34*16kB (UME) 63*32kB (UME) 15*64kB (UE) 6*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3893772kB [ 179.081745][ T8524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.097215][ T8524] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.117587][ T8524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.143577][ T8524] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.152356][ T8542] validate_nla: 2 callbacks suppressed [ 179.152370][ T8542] netlink: 'syz.1.1025': attribute type 29 has an invalid length. [ 179.167300][ T8524] 54356 total pagecache pages [ 179.168733][ T8542] netlink: 'syz.1.1025': attribute type 29 has an invalid length. [ 179.172248][ T8524] 0 pages in swap cache [ 179.195894][ T8542] netlink: 'syz.1.1025': attribute type 29 has an invalid length. [ 179.201018][ T8524] Free swap = 124996kB [ 179.209082][ T8542] netlink: 'syz.1.1025': attribute type 29 has an invalid length. [ 179.223406][ T8524] Total swap = 124996kB [ 179.227597][ T8524] 2097051 pages RAM [ 179.231498][ T8524] 0 pages HighMem/MovableOnly [ 179.241124][ T8524] 416139 pages reserved [ 179.263374][ T8524] 0 pages cma reserved [ 179.587510][ T8556] netlink: 'syz.0.1030': attribute type 3 has an invalid length. [ 179.622733][ T8556] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1030'. [ 180.799176][ T8613] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1054'. [ 181.456462][ T8633] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1061'. [ 182.245155][ T8702] netlink: 'syz.3.1077': attribute type 8 has an invalid length. [ 182.260129][ T8702] netlink: 'syz.3.1077': attribute type 6 has an invalid length. [ 182.270398][ T8702] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1077'. [ 182.561408][ T8713] delete_channel: no stack [ 182.810592][ T8732] netlink: 'syz.0.1089': attribute type 3 has an invalid length. [ 182.834108][ T8732] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1089'. [ 182.862447][ T8732] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 182.962708][ T8735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1088'. [ 185.422048][ T8792] netlink: 'syz.3.1110': attribute type 21 has an invalid length. [ 185.440139][ T8792] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.866037][ T8809] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1116'. [ 186.141795][ T8816] netlink: 'syz.1.1119': attribute type 3 has an invalid length. [ 186.158341][ T8816] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1119'. [ 186.724963][ T8832] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1124'. [ 187.449304][ T8840] IPv6: pim6reg1: Disabled Multicast RS [ 187.788833][ T8848] netlink: 'syz.3.1132': attribute type 3 has an invalid length. [ 187.888817][ T8848] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1132'. [ 188.290505][ T8853] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1133'. [ 188.859330][ T5795] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 189.011152][ T8863] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1139'. [ 189.021109][ T8863] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 189.031771][ T8863] openvswitch: netlink: Message has 1 unknown bytes. [ 189.277782][ T8875] C: renamed from team_slave_0 (while UP) [ 189.301063][ T8875] netlink: 'syz.2.1143': attribute type 3 has an invalid length. [ 189.312202][ T8875] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1143'. [ 190.098372][ T8906] netlink: 'syz.0.1154': attribute type 3 has an invalid length. [ 190.107499][ T8906] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1154'. [ 190.365652][ T8919] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1158'. [ 190.833819][ T8931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1161'. [ 191.122507][ T8940] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1164'. [ 191.503084][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 191.509774][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 191.513286][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 191.584747][ T5795] Bluetooth: hci1: command 0x0406 tx timeout [ 191.639723][ T8944] netlink: 'syz.3.1167': attribute type 3 has an invalid length. [ 191.741945][ T8944] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1167'. [ 192.929454][ T8962] syz.3.1174: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 192.986037][ T8962] CPU: 1 PID: 8962 Comm: syz.3.1174 Not tainted syzkaller #0 [ 192.993493][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.003592][ T8962] Call Trace: [ 193.006911][ T8962] [ 193.009894][ T8962] dump_stack_lvl+0x16c/0x230 [ 193.014637][ T8962] ? show_regs_print_info+0x20/0x20 [ 193.019875][ T8962] ? load_image+0x3b0/0x3b0 [ 193.024440][ T8962] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 193.030910][ T8962] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 193.037475][ T8962] warn_alloc+0x210/0x300 [ 193.041861][ T8962] ? stack_trace_save+0x9c/0xe0 [ 193.046776][ T8962] ? zone_watermark_ok_safe+0x230/0x230 [ 193.052400][ T8962] ? kasan_set_track+0x5f/0x70 [ 193.057203][ T8962] ? kasan_set_track+0x4e/0x70 [ 193.062002][ T8962] ? __kasan_kmalloc+0x8f/0xa0 [ 193.066804][ T8962] ? xsk_init_queue+0xb0/0x110 [ 193.071604][ T8962] ? xsk_setsockopt+0x4db/0x6f0 [ 193.076488][ T8962] ? do_sock_setsockopt+0x175/0x1a0 [ 193.081731][ T8962] ? __x64_sys_setsockopt+0x184/0x200 [ 193.087144][ T8962] __vmalloc_node_range+0x126/0x1320 [ 193.092499][ T8962] ? free_vm_area+0x50/0x50 [ 193.097073][ T8962] vmalloc_user+0x74/0x80 [ 193.101414][ T8962] ? xskq_create+0xbf/0x170 [ 193.105927][ T8962] xskq_create+0xbf/0x170 [ 193.110266][ T8962] xsk_init_queue+0xb0/0x110 [ 193.114865][ T8962] xsk_setsockopt+0x4db/0x6f0 [ 193.119548][ T8962] ? xsk_poll+0x670/0x670 [ 193.123889][ T8962] ? __fget_files+0x28/0x4d0 [ 193.128488][ T8962] ? aa_sock_opt_perm+0x74/0x100 [ 193.133435][ T8962] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 193.138984][ T8962] ? security_socket_setsockopt+0x7e/0xa0 [ 193.144702][ T8962] ? xsk_poll+0x670/0x670 [ 193.149040][ T8962] do_sock_setsockopt+0x175/0x1a0 [ 193.154076][ T8962] ? __fdget+0x180/0x210 [ 193.158328][ T8962] __x64_sys_setsockopt+0x184/0x200 [ 193.163552][ T8962] do_syscall_64+0x55/0xb0 [ 193.167969][ T8962] ? clear_bhb_loop+0x40/0x90 [ 193.172649][ T8962] ? clear_bhb_loop+0x40/0x90 [ 193.177332][ T8962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.183232][ T8962] RIP: 0033:0x7f055318eba9 [ 193.187653][ T8962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.207262][ T8962] RSP: 002b:00007f0554040038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 193.215683][ T8962] RAX: ffffffffffffffda RBX: 00007f05533d6090 RCX: 00007f055318eba9 [ 193.223655][ T8962] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 193.231627][ T8962] RBP: 00007f0553211e19 R08: 0000000000000004 R09: 0000000000000000 [ 193.239597][ T8962] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 193.247571][ T8962] R13: 00007f05533d6128 R14: 00007f05533d6090 R15: 00007ffd688641e8 [ 193.255580][ T8962] [ 193.303486][ T8962] Mem-Info: [ 193.306677][ T8962] active_anon:6229 inactive_anon:0 isolated_anon:0 [ 193.306677][ T8962] active_file:13097 inactive_file:39904 isolated_file:0 [ 193.306677][ T8962] unevictable:768 dirty:134 writeback:0 [ 193.306677][ T8962] slab_reclaimable:10165 slab_unreclaimable:91653 [ 193.306677][ T8962] mapped:24138 shmem:1361 pagetables:591 [ 193.306677][ T8962] sec_pagetables:0 bounce:0 [ 193.306677][ T8962] kernel_misc_reclaimable:0 [ 193.306677][ T8962] free:1353773 free_pcp:8284 free_cma:0 [ 193.358661][ T8962] Node 0 active_anon:25016kB inactive_anon:0kB active_file:52388kB inactive_file:159412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96752kB dirty:336kB writeback:184kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12052kB pagetables:2364kB sec_pagetables:0kB all_unreclaimable? no [ 193.395774][ T8962] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 193.452811][ T8962] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.487771][ T8962] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 193.495436][ T8962] Node 0 DMA32 free:1505700kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:24964kB inactive_anon:0kB active_file:52388kB inactive_file:158088kB unevictable:1536kB writepending:320kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:11408kB local_pcp:7012kB free_cma:0kB [ 193.565518][ T8962] lowmem_reserve[]: 0 0 1 1 1 [ 193.573763][ T8962] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.633182][ T8962] lowmem_reserve[]: 0 0 0 0 0 [ 193.652804][ T8962] Node 1 Normal free:3893772kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22080kB local_pcp:10624kB free_cma:0kB [ 193.695281][ T8962] lowmem_reserve[]: 0 0 0 0 0 [ 193.700129][ T8962] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 193.713386][ T8962] Node 0 DMA32: 1865*4kB (UM) 1758*8kB (UME) 1447*16kB (UME) 787*32kB (UME) 331*64kB (UME) 116*128kB (UME) 84*256kB (UME) 56*512kB (UM) 32*1024kB (UME) 9*2048kB (UM) 317*4096kB (M) = 1505700kB [ 193.735028][ T8962] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 193.748530][ T8962] Node 1 Normal: 287*4kB (UE) 58*8kB (UME) 34*16kB (UME) 63*32kB (UME) 15*64kB (UE) 6*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3893772kB [ 193.772633][ T8962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.786465][ T8962] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.796159][ T8962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.806228][ T8962] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.816022][ T8962] 54362 total pagecache pages [ 193.820789][ T8962] 0 pages in swap cache [ 193.826025][ T8962] Free swap = 124996kB [ 193.830200][ T8962] Total swap = 124996kB [ 193.834860][ T8962] 2097051 pages RAM [ 193.838680][ T8962] 0 pages HighMem/MovableOnly [ 193.845823][ T8962] 416139 pages reserved [ 193.849858][ T8976] netlink: 'syz.0.1179': attribute type 3 has an invalid length. [ 193.849977][ T8962] 0 pages cma reserved [ 193.892790][ T8976] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1179'. [ 193.903404][ T8977] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1178'. [ 194.443272][ T8993] netlink: 'syz.0.1185': attribute type 21 has an invalid length. [ 194.504695][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.511213][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.144942][ T9002] netlink: 'syz.1.1189': attribute type 4 has an invalid length. [ 195.153042][ T9002] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1189'. [ 195.164814][ T9007] netlink: 'syz.2.1191': attribute type 3 has an invalid length. [ 195.173828][ T9007] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1191'. [ 195.854643][ T9039] netlink: 'syz.1.1203': attribute type 3 has an invalid length. [ 195.873460][ T9039] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1203'. [ 196.648075][ T9065] netlink: 'syz.3.1215': attribute type 3 has an invalid length. [ 196.682861][ T9065] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1215'. [ 196.734697][ T9071] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1212'. [ 197.626708][ T9099] netlink: 'syz.2.1227': attribute type 3 has an invalid length. [ 197.651058][ T9099] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1227'. [ 197.955130][ T9115] netlink: 'syz.3.1236': attribute type 4 has an invalid length. [ 197.972725][ T9115] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1236'. [ 198.196085][ T9127] netlink: 'syz.1.1241': attribute type 3 has an invalid length. [ 198.208740][ T9127] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1241'. [ 199.450922][ T9153] netlink: 'syz.0.1251': attribute type 3 has an invalid length. [ 199.461630][ T9153] __nla_validate_parse: 1 callbacks suppressed [ 199.461772][ T9153] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1251'. [ 200.865208][ T9190] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1265'. [ 200.883890][ T9190] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1265'. [ 200.905805][ T9188] netlink: 'syz.0.1263': attribute type 3 has an invalid length. [ 200.943189][ T9188] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1263'. [ 201.620483][ T9220] netlink: 'syz.2.1278': attribute type 3 has an invalid length. [ 201.628707][ T9220] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1278'. [ 202.069209][ T9241] netlink: 'syz.2.1286': attribute type 10 has an invalid length. [ 202.187557][ T9241] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.216018][ T9241] bond0: (slave team0): Enslaving as an active interface with an up link [ 202.247464][ T9247] netlink: 'syz.0.1290': attribute type 3 has an invalid length. [ 202.265974][ T9247] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1290'. [ 202.282929][ T9241] syz.2.1286 (9241) used greatest stack depth: 17960 bytes left [ 203.255526][ T9285] netlink: 'syz.2.1302': attribute type 3 has an invalid length. [ 203.273742][ T9285] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1302'. [ 203.325963][ T9287] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1303'. [ 203.351629][ T9287] batadv_slave_1: entered promiscuous mode [ 204.305784][ T9317] netlink: 'syz.0.1314': attribute type 3 has an invalid length. [ 204.346348][ T9317] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1314'. [ 204.709274][ T9326] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1317'. [ 204.743861][ T9326] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.1317'. [ 205.015552][ T9343] netlink: 'syz.2.1324': attribute type 11 has an invalid length. [ 205.024812][ T9343] netlink: 195824 bytes leftover after parsing attributes in process `syz.2.1324'. [ 205.194831][ T9350] netlink: 'syz.2.1326': attribute type 3 has an invalid length. [ 205.233201][ T9350] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1326'. [ 206.622050][ T9389] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1343'. [ 206.803164][ T9404] netlink: 'syz.3.1346': attribute type 4 has an invalid length. [ 207.142720][ T9421] netlink: 'syz.3.1355': attribute type 21 has an invalid length. [ 207.160937][ T9421] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1355'. [ 208.295046][ T9463] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1374'. [ 210.247919][ T9531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1401'. [ 210.816564][ T9564] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1415'. [ 211.722272][ T9606] netlink: 'syz.0.1427': attribute type 10 has an invalid length. [ 211.762772][ T9606] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1427'. [ 211.813568][ T9596] syzkaller0: entered allmulticast mode [ 211.987555][ T9610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1434'. [ 212.959661][ T9650] netlink: 'syz.1.1449': attribute type 1 has an invalid length. [ 212.978902][ T9650] netlink: 'syz.1.1449': attribute type 3 has an invalid length. [ 212.993641][ T9650] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1449'. [ 213.842515][ T9683] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1464'. [ 215.418477][ T9743] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.1485'. [ 216.999131][ T9790] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1503'. [ 219.022005][ T9855] netlink: 'syz.0.1528': attribute type 10 has an invalid length. [ 219.074882][ T9855] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1528'. [ 219.706925][ T9879] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1539'. [ 219.881711][ T9891] netlink: 'syz.3.1543': attribute type 9 has an invalid length. [ 219.902711][ T9891] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1543'. [ 220.085367][ T9898] netlink: 'syz.3.1543': attribute type 3 has an invalid length. [ 220.126858][ T9898] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1543'. [ 221.130486][ T9934] netlink: 'syz.3.1561': attribute type 3 has an invalid length. [ 221.203645][ T9934] netlink: 'syz.3.1561': attribute type 1 has an invalid length. [ 221.220892][ T9934] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1561'. [ 221.240296][ T9934] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 221.964822][ T5795] Bluetooth: hci0: ISO packet for unknown connection handle 10 [ 222.051990][ T9965] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1574'. [ 225.374609][T10040] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1600'. [ 225.871486][T10060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1608'. [ 226.114094][T10068] netlink: 'syz.0.1612': attribute type 6 has an invalid length. [ 227.153581][ T5795] Bluetooth: hci2: ISO packet for unknown connection handle 9 [ 227.717645][T10121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1636'. [ 227.881290][T10136] netlink: 'syz.1.1641': attribute type 21 has an invalid length. [ 227.899884][T10136] netlink: 'syz.1.1641': attribute type 1 has an invalid length. [ 227.921288][T10136] netlink: 16050 bytes leftover after parsing attributes in process `syz.1.1641'. [ 228.153269][T10143] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1643'. [ 228.602782][T10168] netlink: 'syz.0.1656': attribute type 10 has an invalid length. [ 228.982740][T10173] netlink: 'syz.0.1656': attribute type 29 has an invalid length. [ 229.032280][T10173] netlink: 'syz.0.1656': attribute type 29 has an invalid length. [ 229.640073][T10192] netlink: 'syz.2.1665': attribute type 10 has an invalid length. [ 229.811973][T10195] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1666'. [ 230.115655][T10213] netlink: 'syz.1.1673': attribute type 6 has an invalid length. [ 230.139614][T10217] netlink: 'syz.2.1675': attribute type 29 has an invalid length. [ 230.158835][T10217] netlink: 'syz.2.1675': attribute type 29 has an invalid length. [ 230.345518][T10229] Dead loop on virtual device ip6_vti0, fix it urgently! [ 231.111953][T10273] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1699'. [ 231.696022][T10301] pim6reg1: entered promiscuous mode [ 231.751649][T10301] pim6reg1: entered allmulticast mode [ 232.017108][T10309] validate_nla: 1 callbacks suppressed [ 232.017125][T10309] netlink: 'syz.2.1714': attribute type 1 has an invalid length. [ 232.045974][T10308] netlink: 'syz.2.1714': attribute type 1 has an invalid length. [ 232.059652][T10318] netlink: 'syz.0.1717': attribute type 21 has an invalid length. [ 232.067983][T10308] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.1714'. [ 232.079681][T10315] netlink: 'syz.0.1717': attribute type 21 has an invalid length. [ 232.098810][T10309] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.1714'. [ 232.273737][T10325] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1720'. [ 232.887827][T10354] sctp: [Deprecated]: syz.0.1728 (pid 10354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.887827][T10354] Use struct sctp_sack_info instead [ 235.220213][T10389] netlink: 'syz.2.1742': attribute type 3 has an invalid length. [ 235.253663][T10389] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1742'. [ 236.006712][T10425] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1758'. [ 236.585699][T10453] netlink: 'syz.2.1770': attribute type 3 has an invalid length. [ 236.593968][T10453] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1770'. [ 236.966403][T10467] netlink: 'syz.1.1777': attribute type 5 has an invalid length. [ 237.724921][T10491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1787'. [ 238.055137][T10503] netlink: 'syz.1.1792': attribute type 41 has an invalid length. [ 239.194144][T10544] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1806'. [ 240.668041][T10613] netlink: 'syz.1.1833': attribute type 3 has an invalid length. [ 240.676238][T10613] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1833'. [ 241.379430][T10647] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1849'. [ 241.670001][T10655] netlink: 'syz.0.1851': attribute type 3 has an invalid length. [ 241.678445][T10655] netlink: 'syz.0.1851': attribute type 1 has an invalid length. [ 241.687336][T10655] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1851'. [ 242.628130][T10639] netlink: 'syz.3.1845': attribute type 3 has an invalid length. [ 242.636038][T10639] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1845'. [ 242.656081][T10654] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.664918][T10654] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.681797][T10654] bridge0: entered allmulticast mode [ 242.700932][T10656] bridge_slave_1: left allmulticast mode [ 242.712817][T10656] bridge_slave_1: left promiscuous mode [ 242.719773][T10656] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.751272][T10656] bridge_slave_0: left allmulticast mode [ 242.764564][T10656] bridge_slave_0: left promiscuous mode [ 242.770387][T10656] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.882369][T10661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1853'. [ 243.105982][T10671] netlink: 'syz.0.1857': attribute type 16 has an invalid length. [ 243.136127][T10677] netlink: 'syz.1.1860': attribute type 3 has an invalid length. [ 243.145560][T10671] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1857'. [ 243.152712][T10677] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1860'. [ 243.177664][T10671] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1857'. [ 243.195512][T10681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1861'. [ 243.209044][T10681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1861'. [ 243.480663][T10694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.812357][T10712] netlink: 'syz.2.1872': attribute type 3 has an invalid length. [ 244.820322][T10741] delete_channel: no stack [ 245.071087][T10737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.908046][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.914531][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.447361][T10756] __nla_validate_parse: 2 callbacks suppressed [ 257.447407][T10756] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1887'. [ 257.991964][T10784] netlink: 'syz.2.1895': attribute type 3 has an invalid length. [ 258.042709][T10784] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1895'. [ 258.296339][T10797] pim6reg1: entered promiscuous mode [ 258.301694][T10797] pim6reg1: entered allmulticast mode [ 258.830820][T10817] netlink: 'syz.3.1908': attribute type 3 has an invalid length. [ 258.842677][T10817] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1908'. [ 259.109759][T10836] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1915'. [ 259.121666][T10837] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1915'. [ 259.661087][T10850] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1920'. [ 259.707312][T10848] netlink: 'syz.1.1921': attribute type 3 has an invalid length. [ 259.720868][T10848] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1921'. [ 261.133512][T10869] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1926'. [ 262.524042][T10889] netlink: 'syz.0.1933': attribute type 3 has an invalid length. [ 262.531990][T10889] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1933'. [ 263.411226][T10922] netlink: 'syz.1.1949': attribute type 3 has an invalid length. [ 263.432409][T10922] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1949'. [ 264.281441][T10935] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1955'. [ 264.290775][T10935] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 264.319088][T10937] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1955'. [ 264.334583][T10941] netlink: 'syz.3.1957': attribute type 5 has an invalid length. [ 264.340644][T10937] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 264.349737][T10941] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1957'. [ 264.549208][T10946] netlink: 'syz.1.1959': attribute type 3 has an invalid length. [ 264.572775][T10946] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1959'. [ 264.790665][T10957] pim6reg1: entered promiscuous mode [ 264.812404][T10957] pim6reg1: entered allmulticast mode [ 265.408742][T10965] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1965'. [ 265.415283][T10977] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.707986][T10988] FAULT_INJECTION: forcing a failure. [ 265.707986][T10988] name failslab, interval 1, probability 0, space 0, times 1 [ 265.729625][T10988] CPU: 1 PID: 10988 Comm: syz.1.1974 Not tainted syzkaller #0 [ 265.737139][T10988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 265.747209][T10988] Call Trace: [ 265.750517][T10988] [ 265.753455][T10988] dump_stack_lvl+0x16c/0x230 [ 265.758158][T10988] ? show_regs_print_info+0x20/0x20 [ 265.763375][T10988] ? load_image+0x3b0/0x3b0 [ 265.767908][T10988] ? __might_sleep+0xe0/0xe0 [ 265.772513][T10988] ? __lock_acquire+0x7c80/0x7c80 [ 265.777562][T10988] ? __asan_memset+0x22/0x40 [ 265.782170][T10988] should_fail_ex+0x39d/0x4d0 [ 265.786868][T10988] should_failslab+0x9/0x20 [ 265.791382][T10988] slab_pre_alloc_hook+0x59/0x310 [ 265.796431][T10988] kmem_cache_alloc+0x5a/0x2e0 [ 265.801217][T10988] ? security_inode_alloc+0x34/0x110 [ 265.806530][T10988] security_inode_alloc+0x34/0x110 [ 265.811658][T10988] inode_init_always+0x8fc/0xc90 [ 265.816603][T10988] new_inode_pseudo+0x95/0x1d0 [ 265.821363][T10988] __sock_create+0x12d/0x940 [ 265.825953][T10988] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 265.831930][T10988] __sys_socket+0xd7/0x1a0 [ 265.836341][T10988] __x64_sys_socket+0x7a/0x90 [ 265.841009][T10988] do_syscall_64+0x55/0xb0 [ 265.845438][T10988] ? clear_bhb_loop+0x40/0x90 [ 265.850099][T10988] ? clear_bhb_loop+0x40/0x90 [ 265.854761][T10988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.860649][T10988] RIP: 0033:0x7f7e6e18eba9 [ 265.865053][T10988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.884650][T10988] RSP: 002b:00007f7e6f097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 265.893055][T10988] RAX: ffffffffffffffda RBX: 00007f7e6e3d5fa0 RCX: 00007f7e6e18eba9 [ 265.901013][T10988] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 265.908973][T10988] RBP: 00007f7e6f097090 R08: 0000000000000000 R09: 0000000000000000 [ 265.916932][T10988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.924896][T10988] R13: 00007f7e6e3d6038 R14: 00007f7e6e3d5fa0 R15: 00007fff9446d448 [ 265.932950][T10988] [ 265.952730][T10988] socket: no more sockets [ 266.225895][T11008] netlink: 'syz.3.1981': attribute type 21 has an invalid length. [ 266.880370][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'. [ 266.914180][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'. [ 267.805729][T11083] FAULT_INJECTION: forcing a failure. [ 267.805729][T11083] name failslab, interval 1, probability 0, space 0, times 0 [ 267.861754][T11083] CPU: 1 PID: 11083 Comm: syz.1.2007 Not tainted syzkaller #0 [ 267.869268][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.879344][T11083] Call Trace: [ 267.882640][T11083] [ 267.885589][T11083] dump_stack_lvl+0x16c/0x230 [ 267.890291][T11083] ? show_regs_print_info+0x20/0x20 [ 267.895525][T11083] ? load_image+0x3b0/0x3b0 [ 267.900048][T11083] ? __might_sleep+0xe0/0xe0 [ 267.904657][T11083] ? __lock_acquire+0x7c80/0x7c80 [ 267.909707][T11083] should_fail_ex+0x39d/0x4d0 [ 267.914410][T11083] should_failslab+0x9/0x20 [ 267.918928][T11083] slab_pre_alloc_hook+0x59/0x310 [ 267.923971][T11083] kmem_cache_alloc+0x5a/0x2e0 [ 267.928750][T11083] ? sk_prot_alloc+0x57/0x210 [ 267.933449][T11083] sk_prot_alloc+0x57/0x210 [ 267.937963][T11083] ? sk_alloc+0x24/0x360 [ 267.942235][T11083] sk_alloc+0x3a/0x360 [ 267.946319][T11083] rxrpc_create+0xd9/0x680 [ 267.950749][T11083] __sock_create+0x4a6/0x940 [ 267.955357][T11083] __sys_socket+0xd7/0x1a0 [ 267.959769][T11083] __x64_sys_socket+0x7a/0x90 [ 267.964437][T11083] do_syscall_64+0x55/0xb0 [ 267.968844][T11083] ? clear_bhb_loop+0x40/0x90 [ 267.973507][T11083] ? clear_bhb_loop+0x40/0x90 [ 267.978169][T11083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.984055][T11083] RIP: 0033:0x7f7e6e18eba9 [ 267.988458][T11083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.008055][T11083] RSP: 002b:00007f7e6f097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 268.016460][T11083] RAX: ffffffffffffffda RBX: 00007f7e6e3d5fa0 RCX: 00007f7e6e18eba9 [ 268.024428][T11083] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 268.032395][T11083] RBP: 00007f7e6f097090 R08: 0000000000000000 R09: 0000000000000000 [ 268.040351][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.048315][T11083] R13: 00007f7e6e3d6038 R14: 00007f7e6e3d5fa0 R15: 00007fff9446d448 [ 268.056291][T11083] [ 268.227891][T11086] netlink: 'syz.2.2008': attribute type 3 has an invalid length. [ 268.272296][T11086] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2008'. [ 268.285879][T11094] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2011'. [ 268.654684][T11109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.692887][T11108] netlink: 'syz.1.2017': attribute type 10 has an invalid length. [ 268.732786][T11108] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2017'. [ 268.825664][T11108] team0: Port device geneve0 added [ 269.560213][T11121] delete_channel: no stack [ 269.942931][T11159] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2025'. [ 270.818979][T11240] FAULT_INJECTION: forcing a failure. [ 270.818979][T11240] name failslab, interval 1, probability 0, space 0, times 0 [ 270.853040][T11240] CPU: 1 PID: 11240 Comm: syz.3.2039 Not tainted syzkaller #0 [ 270.860555][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.870631][T11240] Call Trace: [ 270.873933][T11240] [ 270.876878][T11240] dump_stack_lvl+0x16c/0x230 [ 270.881578][T11240] ? show_regs_print_info+0x20/0x20 [ 270.886802][T11240] ? load_image+0x3b0/0x3b0 [ 270.891324][T11240] ? __might_sleep+0xe0/0xe0 [ 270.895930][T11240] ? __lock_acquire+0x7c80/0x7c80 [ 270.900971][T11240] should_fail_ex+0x39d/0x4d0 [ 270.905669][T11240] should_failslab+0x9/0x20 [ 270.910179][T11240] slab_pre_alloc_hook+0x59/0x310 [ 270.915196][T11240] ? apparmor_sk_alloc_security+0x77/0x100 [ 270.920989][T11240] __kmem_cache_alloc_node+0x53/0x260 [ 270.926355][T11240] ? apparmor_sk_alloc_security+0x77/0x100 [ 270.932149][T11240] kmalloc_trace+0x2a/0xe0 [ 270.936572][T11240] apparmor_sk_alloc_security+0x77/0x100 [ 270.942193][T11240] security_sk_alloc+0x6e/0xa0 [ 270.946952][T11240] sk_prot_alloc+0x101/0x210 [ 270.951544][T11240] sk_alloc+0x3a/0x360 [ 270.955599][T11240] rxrpc_create+0xd9/0x680 [ 270.960001][T11240] __sock_create+0x4a6/0x940 [ 270.964602][T11240] __sys_socket+0xd7/0x1a0 [ 270.969037][T11240] __x64_sys_socket+0x7a/0x90 [ 270.973737][T11240] do_syscall_64+0x55/0xb0 [ 270.978173][T11240] ? clear_bhb_loop+0x40/0x90 [ 270.982879][T11240] ? clear_bhb_loop+0x40/0x90 [ 270.987563][T11240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.993452][T11240] RIP: 0033:0x7f055318eba9 [ 270.997874][T11240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.017512][T11240] RSP: 002b:00007f0554061038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 271.025935][T11240] RAX: ffffffffffffffda RBX: 00007f05533d5fa0 RCX: 00007f055318eba9 [ 271.033902][T11240] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 271.041873][T11240] RBP: 00007f0554061090 R08: 0000000000000000 R09: 0000000000000000 [ 271.049854][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.057817][T11240] R13: 00007f05533d6038 R14: 00007f05533d5fa0 R15: 00007ffd688641e8 [ 271.065791][T11240] [ 271.172582][T11246] netlink: 'syz.0.2036': attribute type 39 has an invalid length. [ 272.088154][T11259] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2046'. [ 273.945144][T11310] FAULT_INJECTION: forcing a failure. [ 273.945144][T11310] name failslab, interval 1, probability 0, space 0, times 0 [ 273.959173][T11310] CPU: 1 PID: 11310 Comm: syz.2.2067 Not tainted syzkaller #0 [ 273.966655][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.976700][T11310] Call Trace: [ 273.979969][T11310] [ 273.982892][T11310] dump_stack_lvl+0x16c/0x230 [ 273.987565][T11310] ? show_regs_print_info+0x20/0x20 [ 273.992756][T11310] ? load_image+0x3b0/0x3b0 [ 273.997255][T11310] ? __might_sleep+0xe0/0xe0 [ 274.001843][T11310] ? __lock_acquire+0x7c80/0x7c80 [ 274.006854][T11310] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 274.012399][T11310] should_fail_ex+0x39d/0x4d0 [ 274.017072][T11310] should_failslab+0x9/0x20 [ 274.021572][T11310] slab_pre_alloc_hook+0x59/0x310 [ 274.026596][T11310] kmem_cache_alloc_lru+0x4d/0x2e0 [ 274.031702][T11310] ? __d_alloc+0x31/0x730 [ 274.036031][T11310] __d_alloc+0x31/0x730 [ 274.040183][T11310] ? alloc_fd+0x58f/0x630 [ 274.044508][T11310] d_alloc_pseudo+0x1d/0x70 [ 274.049006][T11310] alloc_file_pseudo+0xcc/0x200 [ 274.053882][T11310] ? alloc_empty_backing_file+0xe0/0xe0 [ 274.059425][T11310] ? _raw_spin_unlock+0x28/0x40 [ 274.064264][T11310] ? alloc_fd+0x58f/0x630 [ 274.068585][T11310] sock_alloc_file+0xb7/0x280 [ 274.073255][T11310] __sys_socket+0x13d/0x1a0 [ 274.077749][T11310] __x64_sys_socket+0x7a/0x90 [ 274.082422][T11310] do_syscall_64+0x55/0xb0 [ 274.086834][T11310] ? clear_bhb_loop+0x40/0x90 [ 274.091503][T11310] ? clear_bhb_loop+0x40/0x90 [ 274.096172][T11310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.102056][T11310] RIP: 0033:0x7fa74f18eba9 [ 274.106514][T11310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.126109][T11310] RSP: 002b:00007fa750103038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 274.134511][T11310] RAX: ffffffffffffffda RBX: 00007fa74f3d5fa0 RCX: 00007fa74f18eba9 [ 274.142469][T11310] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 274.150425][T11310] RBP: 00007fa750103090 R08: 0000000000000000 R09: 0000000000000000 [ 274.158382][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.166338][T11310] R13: 00007fa74f3d6038 R14: 00007fa74f3d5fa0 R15: 00007ffcd72c25e8 [ 274.174310][T11310] [ 275.538621][T11352] netlink: 'syz.2.2080': attribute type 10 has an invalid length. [ 275.616343][T11352] team0: Port device wlan1 added [ 275.692784][T11353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2079'. [ 277.106301][T11391] netlink: 'syz.3.2096': attribute type 7 has an invalid length. [ 277.341121][T11406] FAULT_INJECTION: forcing a failure. [ 277.341121][T11406] name failslab, interval 1, probability 0, space 0, times 0 [ 277.393753][T11406] CPU: 0 PID: 11406 Comm: syz.1.2100 Not tainted syzkaller #0 [ 277.401272][T11406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.411346][T11406] Call Trace: [ 277.414624][T11406] [ 277.417555][T11406] dump_stack_lvl+0x16c/0x230 [ 277.422227][T11406] ? show_regs_print_info+0x20/0x20 [ 277.427417][T11406] ? load_image+0x3b0/0x3b0 [ 277.431910][T11406] ? __might_sleep+0xe0/0xe0 [ 277.436490][T11406] ? __lock_acquire+0x7c80/0x7c80 [ 277.441506][T11406] should_fail_ex+0x39d/0x4d0 [ 277.446182][T11406] should_failslab+0x9/0x20 [ 277.450681][T11406] slab_pre_alloc_hook+0x59/0x310 [ 277.455698][T11406] ? d_instantiate+0x6f/0x90 [ 277.460281][T11406] kmem_cache_alloc+0x5a/0x2e0 [ 277.465033][T11406] ? alloc_empty_file+0x9e/0x1d0 [ 277.469965][T11406] alloc_empty_file+0x9e/0x1d0 [ 277.474729][T11406] alloc_file+0x5c/0x600 [ 277.478972][T11406] alloc_file_pseudo+0x17e/0x200 [ 277.483902][T11406] ? alloc_empty_backing_file+0xe0/0xe0 [ 277.489445][T11406] ? _raw_spin_unlock+0x28/0x40 [ 277.494282][T11406] ? alloc_fd+0x58f/0x630 [ 277.498599][T11406] sock_alloc_file+0xb7/0x280 [ 277.503268][T11406] __sys_socket+0x13d/0x1a0 [ 277.507765][T11406] __x64_sys_socket+0x7a/0x90 [ 277.512431][T11406] do_syscall_64+0x55/0xb0 [ 277.516836][T11406] ? clear_bhb_loop+0x40/0x90 [ 277.521499][T11406] ? clear_bhb_loop+0x40/0x90 [ 277.526165][T11406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.532049][T11406] RIP: 0033:0x7f7e6e18eba9 [ 277.536456][T11406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.556050][T11406] RSP: 002b:00007f7e6f097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 277.564450][T11406] RAX: ffffffffffffffda RBX: 00007f7e6e3d5fa0 RCX: 00007f7e6e18eba9 [ 277.572418][T11406] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 277.580380][T11406] RBP: 00007f7e6f097090 R08: 0000000000000000 R09: 0000000000000000 [ 277.588339][T11406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.596295][T11406] R13: 00007f7e6e3d6038 R14: 00007f7e6e3d5fa0 R15: 00007fff9446d448 [ 277.604265][T11406] [ 279.314436][T11474] netlink: 'syz.1.2125': attribute type 10 has an invalid length. [ 279.331461][T11474] veth0_vlan: left promiscuous mode [ 279.352949][T11474] veth0_vlan: entered promiscuous mode [ 279.387502][T11474] team0: Device veth0_vlan failed to register rx_handler [ 279.622343][T11489] netlink: 'syz.0.2131': attribute type 21 has an invalid length. [ 279.643025][T11489] netlink: 'syz.0.2131': attribute type 6 has an invalid length. [ 279.650800][T11489] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2131'. [ 279.690332][T11493] FAULT_INJECTION: forcing a failure. [ 279.690332][T11493] name failslab, interval 1, probability 0, space 0, times 0 [ 279.706261][T11493] CPU: 1 PID: 11493 Comm: syz.2.2132 Not tainted syzkaller #0 [ 279.713772][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 279.723842][T11493] Call Trace: [ 279.727128][T11493] [ 279.730046][T11493] dump_stack_lvl+0x16c/0x230 [ 279.734731][T11493] ? show_regs_print_info+0x20/0x20 [ 279.739942][T11493] ? load_image+0x3b0/0x3b0 [ 279.744453][T11493] ? __lock_acquire+0x7c80/0x7c80 [ 279.749498][T11493] should_fail_ex+0x39d/0x4d0 [ 279.754196][T11493] should_failslab+0x9/0x20 [ 279.758714][T11493] slab_pre_alloc_hook+0x59/0x310 [ 279.763758][T11493] ? __lock_acquire+0x7c80/0x7c80 [ 279.768806][T11493] kmem_cache_alloc+0x5a/0x2e0 [ 279.773578][T11493] ? security_file_alloc+0x34/0x120 [ 279.778772][T11493] security_file_alloc+0x34/0x120 [ 279.783799][T11493] init_file+0x94/0x1f0 [ 279.787970][T11493] alloc_empty_file+0xb7/0x1d0 [ 279.792749][T11493] alloc_file+0x5c/0x600 [ 279.796988][T11493] alloc_file_pseudo+0x17e/0x200 [ 279.801918][T11493] ? alloc_empty_backing_file+0xe0/0xe0 [ 279.807459][T11493] ? _raw_spin_unlock+0x28/0x40 [ 279.812298][T11493] ? alloc_fd+0x58f/0x630 [ 279.816625][T11493] sock_alloc_file+0xb7/0x280 [ 279.821299][T11493] __sys_socket+0x13d/0x1a0 [ 279.825801][T11493] __x64_sys_socket+0x7a/0x90 [ 279.830474][T11493] do_syscall_64+0x55/0xb0 [ 279.834881][T11493] ? clear_bhb_loop+0x40/0x90 [ 279.839545][T11493] ? clear_bhb_loop+0x40/0x90 [ 279.844215][T11493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.850111][T11493] RIP: 0033:0x7fa74f18eba9 [ 279.854515][T11493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.874110][T11493] RSP: 002b:00007fa750103038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 279.882518][T11493] RAX: ffffffffffffffda RBX: 00007fa74f3d5fa0 RCX: 00007fa74f18eba9 [ 279.890482][T11493] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 279.898438][T11493] RBP: 00007fa750103090 R08: 0000000000000000 R09: 0000000000000000 [ 279.906395][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.914357][T11493] R13: 00007fa74f3d6038 R14: 00007fa74f3d5fa0 R15: 00007ffcd72c25e8 [ 279.922328][T11493] [ 279.934231][T11495] lo: entered allmulticast mode [ 279.966085][T11499] netlink: 'syz.0.2136': attribute type 3 has an invalid length. [ 280.001825][T11499] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2136'. [ 280.023031][T11495] lo: entered promiscuous mode [ 280.038300][T11495] lo: left allmulticast mode [ 280.218834][T11508] netlink: 'syz.1.2137': attribute type 3 has an invalid length. [ 280.267887][T11508] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2137'. [ 280.278706][T11508] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 280.735932][T11529] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2145'. [ 280.773598][T11529] netlink: 'syz.0.2145': attribute type 21 has an invalid length. [ 280.813935][T11531] netlink: 'syz.3.2148': attribute type 3 has an invalid length. [ 280.829148][T11531] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2148'. [ 281.493126][T11560] netlink: 'syz.2.2157': attribute type 2 has an invalid length. [ 281.522471][T11560] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2157'. [ 281.905786][T11570] netlink: 'syz.2.2162': attribute type 3 has an invalid length. [ 281.922820][T11570] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2162'. [ 282.496586][T11592] FAULT_INJECTION: forcing a failure. [ 282.496586][T11592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.512042][T11592] CPU: 0 PID: 11592 Comm: syz.2.2171 Not tainted syzkaller #0 [ 282.519532][T11592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.529596][T11592] Call Trace: [ 282.532886][T11592] [ 282.535863][T11592] dump_stack_lvl+0x16c/0x230 [ 282.540557][T11592] ? show_regs_print_info+0x20/0x20 [ 282.545764][T11592] ? load_image+0x3b0/0x3b0 [ 282.550280][T11592] ? __lock_acquire+0x7c80/0x7c80 [ 282.555315][T11592] ? snprintf+0xdb/0x120 [ 282.559569][T11592] should_fail_ex+0x39d/0x4d0 [ 282.564307][T11592] _copy_to_user+0x2f/0xa0 [ 282.568733][T11592] simple_read_from_buffer+0xe7/0x150 [ 282.574122][T11592] proc_fail_nth_read+0x1e3/0x250 [ 282.579163][T11592] ? proc_fault_inject_write+0x340/0x340 [ 282.584808][T11592] ? fsnotify_perm+0x271/0x5e0 [ 282.589583][T11592] ? proc_fault_inject_write+0x340/0x340 [ 282.595222][T11592] vfs_read+0x27e/0x920 [ 282.599399][T11592] ? kernel_read+0x1e0/0x1e0 [ 282.603999][T11592] ? __fget_files+0x28/0x4d0 [ 282.608596][T11592] ? __fget_files+0x44a/0x4d0 [ 282.613291][T11592] ? __fdget_pos+0x2a3/0x330 [ 282.617887][T11592] ? ksys_read+0x75/0x250 [ 282.622233][T11592] ksys_read+0x147/0x250 [ 282.626491][T11592] ? vfs_write+0x940/0x940 [ 282.630918][T11592] ? lockdep_hardirqs_on+0x98/0x150 [ 282.636134][T11592] do_syscall_64+0x55/0xb0 [ 282.640553][T11592] ? clear_bhb_loop+0x40/0x90 [ 282.645237][T11592] ? clear_bhb_loop+0x40/0x90 [ 282.649919][T11592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.655824][T11592] RIP: 0033:0x7fa74f18d5bc [ 282.660247][T11592] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 282.679860][T11592] RSP: 002b:00007fa750103030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.688294][T11592] RAX: ffffffffffffffda RBX: 00007fa74f3d5fa0 RCX: 00007fa74f18d5bc [ 282.696277][T11592] RDX: 000000000000000f RSI: 00007fa7501030a0 RDI: 0000000000000003 [ 282.704255][T11592] RBP: 00007fa750103090 R08: 0000000000000000 R09: 0000000000000000 [ 282.712233][T11592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.720208][T11592] R13: 00007fa74f3d6038 R14: 00007fa74f3d5fa0 R15: 00007ffcd72c25e8 [ 282.728203][T11592] [ 283.022970][T11599] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2170'. [ 284.507594][T11643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2189'. [ 289.229402][T11729] netlink: 'syz.1.2223': attribute type 21 has an invalid length. [ 289.268565][T11733] netlink: 'syz.2.2225': attribute type 2 has an invalid length. [ 289.282867][T11733] netlink: 'syz.2.2225': attribute type 8 has an invalid length. [ 289.302642][T11733] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2225'. [ 290.313568][T11752] netlink: 'syz.0.2227': attribute type 2 has an invalid length. [ 290.321353][T11752] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2227'. [ 290.352598][T11752] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 290.633011][T11767] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2238'. [ 291.487031][T11810] netlink: 'syz.2.2254': attribute type 10 has an invalid length. [ 291.502675][T11810] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2254'. [ 291.529733][T11810] bond0: (slave team0): Releasing backup interface [ 291.554677][T11810] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 291.760023][T11819] IPv6: pim6reg1: Disabled Multicast RS [ 292.522588][T11858] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.530214][T11858] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.553054][T11858] bridge0: entered allmulticast mode [ 292.591146][T11858] bridge_slave_1: left allmulticast mode [ 292.597062][T11858] bridge_slave_1: left promiscuous mode [ 292.613612][T11858] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.633494][T11858] bridge_slave_0: left allmulticast mode [ 292.639195][T11858] bridge_slave_0: left promiscuous mode [ 292.650938][T11858] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.767303][T11964] netlink: 'syz.2.2290': attribute type 3 has an invalid length. [ 294.778610][T11964] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2290'. [ 294.819730][T11968] netlink: 'syz.3.2291': attribute type 25 has an invalid length. [ 294.847477][T11968] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2291'. [ 295.096702][T11981] netlink: 'syz.3.2294': attribute type 10 has an invalid length. [ 295.125860][T11981] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2294'. [ 295.150662][T11981] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 295.317377][T11985] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2295'. [ 295.499007][T11988] netlink: 'syz.1.2296': attribute type 4 has an invalid length. [ 295.540783][T11988] netlink: 'syz.1.2296': attribute type 3 has an invalid length. [ 295.557496][T11988] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2296'. [ 296.210496][T12000] netlink: 'syz.2.2300': attribute type 3 has an invalid length. [ 296.229676][T12000] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2300'. [ 296.456792][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 296.469097][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 296.477780][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.493237][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.505548][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 296.513738][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.622881][T12012] netlink: 'syz.2.2313': attribute type 3 has an invalid length. [ 296.630968][T12012] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2313'. [ 296.755332][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.828367][T12019] netlink: 'syz.0.2307': attribute type 10 has an invalid length. [ 296.842197][T12019] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2307'. [ 296.875808][T12019] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 296.944983][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.084142][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.109716][T12029] sit0: left allmulticast mode [ 297.317820][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.888592][T12004] chnl_net:caif_netlink_parms(): no params data found [ 298.177255][T12063] netlink: 'syz.0.2318': attribute type 3 has an invalid length. [ 298.186939][T12063] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2318'. [ 298.418262][T12004] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.428154][T12004] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.436975][T12004] bridge_slave_0: entered allmulticast mode [ 298.445779][T12004] bridge_slave_0: entered promiscuous mode [ 298.542645][ T5792] Bluetooth: hci0: command tx timeout [ 298.592949][T12004] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.600230][T12004] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.622313][T12004] bridge_slave_1: entered allmulticast mode [ 298.633170][T12004] bridge_slave_1: entered promiscuous mode [ 298.799754][T12004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.882421][T12004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.107034][T12004] team0: Port device team_slave_0 added [ 299.129308][T12104] netlink: 'syz.0.2328': attribute type 3 has an invalid length. [ 299.146471][T12104] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2328'. [ 299.175709][T12004] team0: Port device team_slave_1 added [ 299.385599][T12004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.412999][T12004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.440459][T12004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.480996][T12004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.491720][T12004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.518614][T12004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.699702][T12122] lo: entered allmulticast mode [ 299.753417][T12004] hsr_slave_0: entered promiscuous mode [ 299.759884][T12004] hsr_slave_1: entered promiscuous mode [ 299.799167][T12123] lo: entered promiscuous mode [ 299.804580][T12123] lo: left allmulticast mode [ 300.223561][ T11] hsr_slave_0: left promiscuous mode [ 300.294191][ T11] hsr_slave_1: left promiscuous mode [ 300.351335][ T11] bridge_slave_1: left allmulticast mode [ 300.372243][ T11] bridge_slave_1: left promiscuous mode [ 300.386790][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.422080][ T11] bridge_slave_0: left allmulticast mode [ 300.440959][ T11] bridge_slave_0: left promiscuous mode [ 300.455923][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.542410][ T11] veth0_macvtap: left promiscuous mode [ 300.573512][ T11] veth1_vlan: left promiscuous mode [ 300.622841][ T5792] Bluetooth: hci0: command tx timeout [ 300.997525][ T11] team0 (unregistering): Port device geneve0 removed [ 301.390658][ T11] team0 (unregistering): Port device team_slave_1 removed [ 301.438642][ T11] team0 (unregistering): Port device C removed [ 301.474588][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.510300][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.864625][ T11] bond0 (unregistering): Released all slaves [ 301.940208][T12135] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2337'. [ 301.963463][T12152] netlink: 'syz.0.2339': attribute type 3 has an invalid length. [ 301.971280][T12152] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2339'. [ 302.706086][ T5792] Bluetooth: hci0: command tx timeout [ 302.780744][T12190] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.2347'. [ 302.877656][T12193] netlink: 'syz.0.2348': attribute type 3 has an invalid length. [ 302.904348][T12193] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2348'. [ 303.033355][T12004] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 303.062222][T12004] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 303.093921][T12004] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 303.118339][T12004] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 303.291493][T12004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.331761][T12004] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.346518][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.353745][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.389265][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.396506][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.495621][T12210] netlink: 'syz.2.2351': attribute type 29 has an invalid length. [ 303.554638][T12210] netlink: 'syz.2.2351': attribute type 29 has an invalid length. [ 303.575835][T12216] netlink: 'syz.2.2351': attribute type 29 has an invalid length. [ 304.123285][T12004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.141323][T12237] netlink: 'syz.0.2356': attribute type 3 has an invalid length. [ 304.163673][T12237] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2356'. [ 304.270459][T12004] veth0_vlan: entered promiscuous mode [ 304.304063][T12004] veth1_vlan: entered promiscuous mode [ 304.379553][T12004] veth0_macvtap: entered promiscuous mode [ 304.430636][T12004] veth1_macvtap: entered promiscuous mode [ 304.487292][T12004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.516915][T12004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.528220][T12004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.571591][T12004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.594144][T12004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.611500][T12004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.641255][T12249] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2366'. [ 304.783814][ T5792] Bluetooth: hci0: command tx timeout [ 305.002302][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.012085][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.276972][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.304230][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.594715][T12287] C: renamed from team_slave_0 (while UP) [ 305.638803][T12287] netlink: 'syz.1.2368': attribute type 3 has an invalid length. [ 305.658705][T12287] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2368'. [ 306.551095][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.568805][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.576896][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.591420][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.609517][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 306.617068][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.761327][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.005091][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.194808][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.231255][T12330] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2377'. [ 307.242028][T12334] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2377'. [ 307.379547][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.629596][T12346] netlink: 'syz.3.2379': attribute type 3 has an invalid length. [ 307.637827][T12346] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2379'. [ 308.101355][T12310] chnl_net:caif_netlink_parms(): no params data found [ 308.210834][T12357] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2380'. [ 308.796751][ T5795] Bluetooth: hci1: command tx timeout [ 309.087956][T12310] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.106137][T12310] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.135495][T12310] bridge_slave_0: entered allmulticast mode [ 309.168684][T12310] bridge_slave_0: entered promiscuous mode [ 309.202071][T12310] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.230966][T12310] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.258867][T12310] bridge_slave_1: entered allmulticast mode [ 309.290792][T12310] bridge_slave_1: entered promiscuous mode [ 309.315159][T12365] netlink: 'syz.0.2381': attribute type 21 has an invalid length. [ 309.574662][T12310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.623490][T12310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.749378][T12310] team0: Port device team_slave_0 added [ 309.765456][T12383] netlink: 'syz.3.2387': attribute type 3 has an invalid length. [ 309.776152][T12383] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2387'. [ 309.841467][T12310] team0: Port device team_slave_1 added [ 309.970592][T12310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.996628][T12310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.055860][T12310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.110107][T12310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.119410][T12310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.178661][T12310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.282308][ T11] [ 310.284677][ T11] ====================================================== [ 310.291690][ T11] WARNING: possible circular locking dependency detected [ 310.298717][ T11] syzkaller #0 Not tainted [ 310.303118][ T11] ------------------------------------------------------ [ 310.310132][ T11] kworker/u4:0/11 is trying to acquire lock: [ 310.316107][ T11] ffff88805f6e4d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 310.325671][ T11] [ 310.325671][ T11] but task is already holding lock: [ 310.333021][ T11] ffff88801eb68768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 310.343357][ T11] [ 310.343357][ T11] which lock already depends on the new lock. [ 310.343357][ T11] [ 310.353740][ T11] [ 310.353740][ T11] the existing dependency chain (in reverse order) is: [ 310.362731][ T11] [ 310.362731][ T11] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 310.370445][ T11] __mutex_lock+0x129/0xcc0 [ 310.375459][ T11] ieee80211_open+0x144/0x200 [ 310.380639][ T11] __dev_open+0x2bc/0x430 [ 310.385477][ T11] dev_open+0xab/0x170 [ 310.390055][ T11] team_add_slave+0xae7/0x2660 [ 310.395324][ T11] do_setlink+0xe14/0x3fb0 [ 310.400261][ T11] rtnl_newlink+0x175b/0x2020 [ 310.405454][ T11] rtnetlink_rcv_msg+0x7c7/0xf10 [ 310.410904][ T11] netlink_rcv_skb+0x216/0x480 [ 310.416178][ T11] netlink_unicast+0x751/0x8d0 [ 310.421468][ T11] netlink_sendmsg+0x8c1/0xbe0 [ 310.426740][ T11] ____sys_sendmsg+0x5bf/0x950 [ 310.432011][ T11] ___sys_sendmsg+0x220/0x290 [ 310.437194][ T11] __se_sys_sendmsg+0x1a5/0x270 [ 310.442548][ T11] do_syscall_64+0x55/0xb0 [ 310.447473][ T11] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.453875][ T11] [ 310.453875][ T11] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 310.462023][ T11] __lock_acquire+0x2ddb/0x7c80 [ 310.467382][ T11] lock_acquire+0x197/0x410 [ 310.472385][ T11] __mutex_lock+0x129/0xcc0 [ 310.477391][ T11] team_del_slave+0x32/0x1c0 [ 310.482480][ T11] team_device_event+0x28d/0xa20 [ 310.487926][ T11] notifier_call_chain+0x197/0x390 [ 310.493541][ T11] unregister_netdevice_many_notify+0xf36/0x1810 [ 310.500373][ T11] unregister_netdevice_queue+0x324/0x360 [ 310.506596][ T11] _cfg80211_unregister_wdev+0x16b/0x580 [ 310.512735][ T11] ieee80211_remove_interfaces+0x496/0x680 [ 310.519047][ T11] ieee80211_unregister_hw+0x5d/0x2a0 [ 310.524921][ T11] mac80211_hwsim_del_radio+0x274/0x450 [ 310.530978][ T11] hwsim_exit_net+0x585/0x640 [ 310.536160][ T11] cleanup_net+0x6f4/0xb90 [ 310.541080][ T11] process_scheduled_works+0xa45/0x15b0 [ 310.547129][ T11] worker_thread+0xa55/0xfc0 [ 310.552224][ T11] kthread+0x2fa/0x390 [ 310.556801][ T11] ret_from_fork+0x48/0x80 [ 310.561719][ T11] ret_from_fork_asm+0x11/0x20 [ 310.567001][ T11] [ 310.567001][ T11] other info that might help us debug this: [ 310.567001][ T11] [ 310.577209][ T11] Possible unsafe locking scenario: [ 310.577209][ T11] [ 310.584641][ T11] CPU0 CPU1 [ 310.590004][ T11] ---- ---- [ 310.595357][ T11] lock(&rdev->wiphy.mtx); [ 310.599851][ T11] lock(team->team_lock_key#2); [ 310.607301][ T11] lock(&rdev->wiphy.mtx); [ 310.614309][ T11] lock(team->team_lock_key#2); [ 310.619237][ T11] [ 310.619237][ T11] *** DEADLOCK *** [ 310.619237][ T11] [ 310.627360][ T11] 5 locks held by kworker/u4:0/11: [ 310.632470][ T11] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 310.643336][ T11] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 310.653843][ T11] #2: ffffffff8dfafad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 310.663223][ T11] #3: ffffffff8dfbc908 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 310.673038][ T11] #4: ffff88801eb68768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 310.683806][ T11] [ 310.683806][ T11] stack backtrace: [ 310.689675][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 310.697027][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.707066][ T11] Workqueue: netns cleanup_net [ 310.711830][ T11] Call Trace: [ 310.715095][ T11] [ 310.718013][ T11] dump_stack_lvl+0x16c/0x230 [ 310.722677][ T11] ? load_image+0x3b0/0x3b0 [ 310.727163][ T11] ? show_regs_print_info+0x20/0x20 [ 310.732348][ T11] ? print_circular_bug+0x12b/0x1a0 [ 310.737530][ T11] check_noncircular+0x2bd/0x3c0 [ 310.742456][ T11] ? print_deadlock_bug+0x5d0/0x5d0 [ 310.747638][ T11] ? lockdep_lock+0xe0/0x220 [ 310.752208][ T11] ? __lock_acquire+0x1334/0x7c80 [ 310.757218][ T11] ? _find_first_zero_bit+0xd3/0x100 [ 310.762494][ T11] __lock_acquire+0x2ddb/0x7c80 [ 310.767345][ T11] ? verify_lock_unused+0x140/0x140 [ 310.772529][ T11] ? verify_lock_unused+0x140/0x140 [ 310.777713][ T11] lock_acquire+0x197/0x410 [ 310.782201][ T11] ? team_del_slave+0x32/0x1c0 [ 310.786948][ T11] ? __might_sleep+0xe0/0xe0 [ 310.791538][ T11] ? read_lock_is_recursive+0x20/0x20 [ 310.796897][ T11] __mutex_lock+0x129/0xcc0 [ 310.801386][ T11] ? team_del_slave+0x32/0x1c0 [ 310.806130][ T11] ? __lock_acquire+0x7c80/0x7c80 [ 310.811138][ T11] ? rcu_is_watching+0x15/0xb0 [ 310.815886][ T11] ? trace_contention_end+0x39/0xe0 [ 310.821069][ T11] ? __mutex_lock+0x304/0xcc0 [ 310.825729][ T11] ? team_del_slave+0x32/0x1c0 [ 310.830474][ T11] ? mutex_lock_nested+0x20/0x20 [ 310.835395][ T11] ? bond_netdev_event+0xe1/0xef0 [ 310.840410][ T11] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 310.846028][ T11] ? bond_ipsec_offload_ok+0x410/0x410 [ 310.851477][ T11] team_del_slave+0x32/0x1c0 [ 310.856052][ T11] team_device_event+0x28d/0xa20 [ 310.860981][ T11] notifier_call_chain+0x197/0x390 [ 310.866080][ T11] unregister_netdevice_many_notify+0xf36/0x1810 [ 310.872394][ T11] ? lock_chain_count+0x20/0x20 [ 310.877236][ T11] ? unregister_netdevice_many+0x20/0x20 [ 310.882857][ T11] ? kernfs_remove_by_name_ns+0x117/0x150 [ 310.888562][ T11] ? __lock_acquire+0x7c80/0x7c80 [ 310.893572][ T11] unregister_netdevice_queue+0x324/0x360 [ 310.899280][ T11] ? list_netdevice+0x730/0x730 [ 310.904118][ T11] ? kernfs_remove_by_name_ns+0x117/0x150 [ 310.909824][ T11] _cfg80211_unregister_wdev+0x16b/0x580 [ 310.915447][ T11] ieee80211_remove_interfaces+0x496/0x680 [ 310.921245][ T11] ? ieee80211_do_stop+0x1db0/0x1db0 [ 310.926517][ T11] ? rcu_is_watching+0x15/0xb0 [ 310.931270][ T11] ieee80211_unregister_hw+0x5d/0x2a0 [ 310.936630][ T11] mac80211_hwsim_del_radio+0x274/0x450 [ 310.942158][ T11] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 310.947688][ T11] hwsim_exit_net+0x585/0x640 [ 310.952350][ T11] ? hwsim_init_net+0x90/0x90 [ 310.957011][ T11] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 310.962800][ T11] cleanup_net+0x6f4/0xb90 [ 310.967204][ T11] ? ops_free_list+0x3b0/0x3b0 [ 310.971955][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 310.977142][ T11] ? process_scheduled_works+0x957/0x15b0 [ 310.982849][ T11] ? process_scheduled_works+0x957/0x15b0 [ 310.988552][ T11] process_scheduled_works+0xa45/0x15b0 [ 310.994089][ T11] ? assign_work+0x400/0x400 [ 310.998666][ T11] ? assign_work+0x39e/0x400 [ 311.003239][ T11] worker_thread+0xa55/0xfc0 [ 311.007823][ T11] kthread+0x2fa/0x390 [ 311.011872][ T11] ? pr_cont_work+0x560/0x560 [ 311.016532][ T11] ? kthread_blkcg+0xd0/0xd0 [ 311.021102][ T11] ret_from_fork+0x48/0x80 [ 311.025502][ T11] ? kthread_blkcg+0xd0/0xd0 [ 311.030075][ T11] ret_from_fork_asm+0x11/0x20 [ 311.034831][ T11] [ 311.041101][T12398] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 311.043123][ T5795] Bluetooth: hci1: command tx timeout [ 311.056831][ T11] team0: Port device wlan1 removed [ 311.075117][T12310] hsr_slave_0: entered promiscuous mode [ 311.077268][T12397] delete_channel: no stack [ 311.085798][T12397] delete_channel: no stack [ 311.090750][T12310] hsr_slave_1: entered promiscuous mode [ 311.097161][T12310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.107226][T12310] Cannot create hsr debugfs directory [ 311.196666][ T11] hsr_slave_0: left promiscuous mode [ 311.202373][ T11] hsr_slave_1: left promiscuous mode [ 311.210460][ T11] veth1_vlan: left promiscuous mode [ 311.216578][ T11] veth0_vlan: left promiscuous mode [ 311.468839][ T11] team0 (unregistering): Port device team_slave_1 removed [ 311.494823][ T11] team0 (unregistering): Port device C removed [ 311.518338][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.548273][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.711774][ T11] bond0 (unregistering): Released all slaves [ 312.125780][T12310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 312.136316][T12310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 312.147378][T12310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 312.159583][T12310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.249411][T12310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.270217][T12310] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.281713][ T8654] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.288814][ T8654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.308633][ T8654] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.315816][ T8654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.509639][T12310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.549420][T12310] veth0_vlan: entered promiscuous mode [ 312.561697][T12310] veth1_vlan: entered promiscuous mode [ 312.589241][T12310] veth0_macvtap: entered promiscuous mode [ 312.600395][T12310] veth1_macvtap: entered promiscuous mode [ 312.617754][T12310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.629566][T12310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.640645][T12310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.654529][T12310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.665780][T12310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.678035][T12310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.691049][T12310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.700558][T12310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.710260][T12310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.720153][T12310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.755329][T12310] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 312.774347][ T8654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.775917][T12310] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 312.787425][ T8654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.809140][ T8654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.817380][ T8654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.102816][ T5795] Bluetooth: hci1: command tx timeout [ 315.182629][ T5795] Bluetooth: hci1: command tx timeout [ 317.347566][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.353922][ T1288] ieee802154 phy1 wpan1: encryption failed: -22