last executing test programs: 17.527300003s ago: executing program 2 (id=9731): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xf788, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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", &(0x7f0000000000), 0xeb02}, 0x28) 17.340341494s ago: executing program 2 (id=9734): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0xfffffffffffffe26) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000b00)='./file0\x00', 0x0, 0x8}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="04000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB="ad8a5000ffffffff1800000009000000000000000200000018140000", @ANYRES32=r4, @ANYBLOB="00000000000000001d980100f0ffffff1800000072870000000000001000000018000000ffff00000000000001040000"], &(0x7f0000000040)='GPL\x00', 0x4, 0xbb, &(0x7f00000006c0)=""/187, 0x41000, 0x66, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x1, 0xe, 0x1, 0x3}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000940)=[r6, r8], &(0x7f0000000980)=[{0x3, 0x2, 0x1, 0x5}, {0x0, 0x5, 0xc, 0x8}, {0x1, 0x3, 0xb}, {0x2, 0x3, 0x9, 0xc}, {0x0, 0x2, 0x3}, {0x3, 0x5, 0xc, 0x2}, {0x5, 0x4, 0x6, 0x8}, {0x3, 0x3, 0xd}, {0x5, 0x3, 0xf, 0x5}, {0x5, 0x3, 0x4, 0x3}], 0x10, 0x7}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES32, @ANYRESHEX=r6], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x31, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000900000000000000c20c000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r4, @ANYBLOB="00000000000000007f610800fcffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800b70300000e000000850017c37c8c0000182700000000", @ANYRES32=r10, @ANYBLOB="00000000dd040000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186400000e00000000000000010001009500000000000000181b0000", @ANYRES32=r7, @ANYBLOB="000000000000000018220000", @ANYRES32=r10, @ANYBLOB="0000000003000000240b3000ffffffffbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r10}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) sendmsg$inet(r13, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) syz_clone(0xa001000, &(0x7f0000000540)="a20eef6221c66e3d1e2bdaa9214f900c", 0x10, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x5e) 16.819112214s ago: executing program 2 (id=9737): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_config_ext={0xdb, 0x9}, 0xc001, 0x5, 0x43a1bd76, 0x2, 0x9, 0xd9f0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) close(r0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0, 0x0, 0x11000000}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfe33) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, &(0x7f0000000040)="1b17431375620661209ae85f2f090a378b906c7d743215099ad074ac9343a70a38ea0cf9feacb3bef3d4abbe458b9dbcaebfb144dbe7924df22b4a6906bf50803da3d6ec6a23c7136ea4d1b2b44369021e6f8aabaaa1214772ee3a9fd45c82515ecdc60a2fb511c9dff7f0b5330315ff69c17ac0f1f5dc5b7cd9b2f9f00b72fd3084", &(0x7f00000001c0)=""/88}, 0x20) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x5) 14.700511057s ago: executing program 2 (id=9751): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum64={0x2, 0x0, 0x0, 0x13, 0x0, 0xc}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x1, 0xffff, 0x4c00}, 0x28) 14.124909561s ago: executing program 2 (id=9753): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100002010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 13.610539901s ago: executing program 2 (id=9756): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x104, 0x0, &(0x7f0000000400)="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"}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001140)={r2}, 0xc) r3 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x4, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xf, 0x4, 0x2, 0xdc, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xd, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0), 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$inet(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)}], 0x1}, 0x20040000) sendmsg$sock(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840), 0x28}, 0x400c0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000b314fbf6ffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3ff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.762912511s ago: executing program 0 (id=9790): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x0, 0xa}, {0x1, 0x2, 0x8000000, 0xc}]}, 0x94) close(0x3) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="8b8300d665458d8123c124d8e8acc63e7a000000000000000100000000009112d40000000000aebcdb9500000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0xb}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@map, 0x27, 0x1, 0x101, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x81, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x100000002, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r7 = gettid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91324fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$unix(r2, &(0x7f0000000980)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000580)="50f6f72c3d4e69924f6fd2d945b82a35c2f18af56a09ec47cddce27d9b769e6360c93751c71a1f57ec6882f058c72f950c7b6fef54566f1b5e514d907b2b6e0d5fe1d486c826798575fa7551247cc26659daa239fe6d91a8594b0b979dbe32f1a22930a7f889d876b74369d253003c", 0x6f}, {&(0x7f0000000440)="c6f5b19ae25f12d45cb0ff6d4885a7742d2210345dc67d3c92bc1ea66607d661711071b89985d91c5e4c5d038a886f96f3469ba0f7ff0069483965", 0x3b}, {&(0x7f0000000600)="79f46916c65804a8548c8e6e305e3533d23faa66648587cc1a86e5c37885beb2afa4501f67b07b062c6d94f4", 0x2c}, {&(0x7f0000000680)="6f7d90b2e7d0253a44aae6c483e5becc515b2d080e9615fedf2cdfa3d2e1a0b9fb053fce09c625ee5f89b85f43ba92629ed840100c2592796a4584c6f44aee1050d63912bba3f96371e774491c7ddeebde3a9b1b95cc05bb5247235f58e50ed07d5305ac8466b8feca012de5ecbe5a0ddfc6b4bd3e3d8d", 0x77}, {&(0x7f0000000700)}, {&(0x7f0000000740)="73060a92418d85a14b07f7221ab2ec41ffd0324da79f8b3bff29f90a", 0x1c}], 0x6, &(0x7f0000000a40)=[@rights={{0x30, 0x1, 0x1, [r2, r1, r2, 0xffffffffffffffff, r8, r6, r0, r5]}}, @rights={{0x18, 0x1, 0x1, [r4, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee01, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0xf8, 0x4004}, 0x48054) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) socket$kcm(0x10, 0x3, 0x10) 3.424539601s ago: executing program 1 (id=9794): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x4}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x18, 0x5, 0x2000, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x80000004, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)={'a', ' *:* ', 'r\x00'}, 0x8) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000051100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000280)="0e08000000000000b89e08dc86dd73e16a604516d27325aaff9fa061ab5e3cd95913650b09eab0b5", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.810968487s ago: executing program 0 (id=9795): perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008800000b7040000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) 2.806667307s ago: executing program 3 (id=9796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeb6, 0x0, 0x0, 0x0, 0xfffdfffd}, [@printk={@lld, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x0, 0xd0}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x97}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) 2.75583862s ago: executing program 1 (id=9797): r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x5, 0x0, 0x2, 0x3, 0x0, 0x5, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x2000, 0x40, 0xffffffff, 0x3, 0x1, 0x7, 0x7, 0x0, 0x233, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffffffa) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000100), 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8200, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'batadv_slave_1\x00', @multicast}) openat$cgroup_devices(r1, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ringbuf_query, @map_fd={0x18, 0x6, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x3, 0x10001, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x3, 0x3, 0x3}, {0x4, 0x5, 0xd, 0xa}], 0x10, 0x8}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x21, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @ringbuf_query, @ringbuf_query, @jmp={0x5, 0x1, 0x18, 0x1, 0x8, 0x18, 0xffffffffffffffff}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xae}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x1, 0xa, 0x4, 0x1, 0x80, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x51}]}, &(0x7f0000000640)='syzkaller\x00', 0x101, 0x1000, &(0x7f0000000680)=""/4096, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000016c0)={0x3, 0xc, 0x8, 0x126}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001700)=[0x1, 0x1, 0x1], &(0x7f0000001740)=[{0x1, 0x4, 0x0, 0x9}, {0x2, 0x2, 0x1, 0x2}], 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001940)={@cgroup=r1, 0x12, 0x0, 0x1, &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001880)=[0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = openat$cgroup_ro(r1, &(0x7f00000019c0)='memory.events\x00', 0x0, 0x0) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c40)=@bpf_ext={0x1c, 0x10, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001a80)='syzkaller\x00', 0x5, 0x64, &(0x7f0000001ac0)=""/100, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x1, 0xb, 0x7, 0x1}, 0x10, 0x1a9af, 0xffffffffffffffff, 0x1, &(0x7f0000001bc0)=[0x1, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000001c00)=[{0x2, 0x2, 0xd}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001980)={@map=r7, r3, 0x3a, 0x8, r4, @void, @value=r8, @void, @void, r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001dc0)={r7, &(0x7f0000001d00)="26f9b9c6d75018b6ea44e3fc08498a8b856fced345685b933b053091c7ae625ad4b29f3acb4f87f8a13c29a1582b7febf22d261815796b3fddac80728954aaa26b0017f14601354e6aad861b2bf4b25aba0b2da98b586482249c71333e10a99a7c3d77d85c536cd931215e3cf8e43e16acaba5711e4d4da01f08f6ab9d7018fc5883a7a352f11ca5b929e91181f47d8836e18ceab79055a7c59b2c046f3c5cf66ffb"}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000001e00)={0x0, r5}, 0x8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001e40)) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000001e80)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0xa, [@fwd={0x6}, @fwd={0x6}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x10, 0x4}, {0x1, 0x1}, {0x1, 0x3}, {0x5, 0x4}, {0xf, 0x2}, {0x1}, {0xf, 0x2}, {0x6, 0x1}, {0x7, 0x5}, {0x10, 0x1}]}, @volatile={0xc, 0x0, 0x0, 0x9, 0x3}, @restrict={0xe}]}, {0x0, [0x61, 0x2e, 0x2e, 0x5f, 0x61, 0x5f, 0x5f, 0x0]}}, &(0x7f0000001f80)=""/208, 0xae, 0xd0, 0x1, 0x1, 0x10000, @value=r7}, 0x28) (async) close(r7) socket$kcm(0x29, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000020c0)=r3, 0x4) (async) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000002100)={0x0, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @link_local, @multicast]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002140)=@ax25={{0x3, @bcast, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @bcast, @null]}, 0x80, &(0x7f0000002440)=[{&(0x7f00000021c0)="3a1d52bd4db138e2ece6e2cf414dd72d5b620be6a68f171636d787f07ede094a90", 0x21}, {&(0x7f0000002200)="252b5fa01aaba3975d60f214386ee46f00ccd349f761b400606689e56444192b0022d08115af3a5dcf406f24c201cadea17ff6aa158c4ddb84e5b848670fd65966e768f5805b1c816362cd065726349d19446b6d164457b2ee3ea391e559bd9fedb2116083088b67ae2a99", 0x6b}, {&(0x7f0000002280)="cec692a595dcb7addf68cc104aca6670399afb50cc2119de1d3b2a7160a99ccb4fd416d139e7b95ad84c6eb4005b8747667a4853b8b710dda1d90c48c994d8d83b11d64e4a437a088f66f0745a9ed13922f3be9c58117ccb8dc8a86198db771d64f4dea25776bc8de8d5689d5e0acc9c65b741fe54799ba917c95edd07d0d80db61e8af5112712b21db9289f9c2f61945c", 0x91}, {&(0x7f0000002340)="5f1133f7e85bbe5482f19117f8c7ca53f23b3e423571bf1465a7eb3392b5cdb60398bbcb94b8377418f20c221d53a5783ad6f925b2cdba54553e2a0f10cd5391bc146b2eb9142de430373ecaeb772d829246c4d25021e13c950a58ff789f168e892ce74b5536433166be09b92e60847c9b9a81cb5e6096f43f1a8b69dea319d0ba09384b308fd3a9c9d38595e36ea936c5fa930fea1b850b2b15aafcd4eaa507a9066610f4ab16ce78fadc2e51db75fc2b1bd1583e7ed2215364b701f9c8aa5a8250", 0xc2}], 0x4, &(0x7f0000002480)=[{0x58, 0x115, 0x3697, "0065a9818b623827dcf7d93656608fb36ca944a9563d90a7f15e1a05066177d9158b4e3b091fbf78d553bf65f220714c883f4471ef81857f7fe717c2f9107969498d1c3b53"}, {0xe8, 0x6, 0x3, "de6cd65eefe0538960cd69608d909dd57b910c0850f295530f5ee06b04dd5a26bddcf4f41a9181b1a036f5b65d6aa8f3ecf21e38f3372fc19a323510a38c23acf26769ae82d350ce783c6f786ce9d7808e9b4cb59dcc17cb0323e52f8355feb14abb292da00619011c55478023107bcf968627b4748cf131e35cee4955112c4555b0904d7d5211833cde9aed2e1074c04abdc2e2e9ba605e5499ce3e8d865cae235dc0eca86c5568f586c78b6e3f3639fe60f9af9356cc185300843b4503caed89633b8f1ae134fe0376b10eaa6f3d1ae98cb918f9"}], 0x140}, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002880)={&(0x7f0000002600)="71557bef9897059df897b3e72a0eb0359b79dbef2fb8cb8d53bea173a6b31a0a8c45f711357dd42e0355b37cc6b56b45c862c6413efb4dea2026c584ab5fe10a397e925b6ae558c26e60c57c6a6015056dd8da951d93b7c0e345fd09c479bd7bdbebd44edd8c7529c1d892f9006496c861ee28d929c2e87b3c010bf23c2f6f81924b23548329b5bf23ed20768aa8bd2cf8d6fc89e382f64443102d239a12e024e6fd509a5499a5c330fbced41ccbe758f118a5d1728a125d6983b47eb07b", &(0x7f00000026c0)=""/92, &(0x7f0000002740)="061450786a1883fa52bb2921de7a81bd57e1e887e1d1d429e15c29496f852eefcd595d2a52ad366e2d720afd5efc737ec19a46f7defad86156155475a32ade37d0e772a48ef329e9e0a299d88fca93f9c1b9eb6954f9907c92849000b52c5d5ffb316aae543dff97aa4f87c4508daaa092c0e00c55e04d8cb21c15fbf8340c0beb9538de911185df8ab1c159e34e09e1967304173b44b485e25c818652f6181f070d153c3f632d14cbbd8937e42478f08a3018ae7849bfa50ecf6f6ba6cdc586c8091672db096b6c7fcdcc44fd23582ba575bf08ce82ce8b7b6803e3e9d4cbf0a47404a7e57a06e48104bad310d91c888d8cc966", &(0x7f0000002840)="df77a9ef934a5982535445dae1d6a6f22cea995238cbf8585591d32c1b7c8dfdb27da8b9da6b9aa3af5e5dfae9a4371954", 0x7f, r7, 0x4}, 0x38) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000028c0)={0x37}, 0x8) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000002900), 0x4) (async) socket$kcm(0x29, 0x5, 0x0) (async) close(r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000029c0)={{r7}, &(0x7f0000002940), &(0x7f0000002980)=r8}, 0x20) 2.58874008s ago: executing program 3 (id=9798): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03feff00000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.527433083s ago: executing program 0 (id=9799): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, r1, 0x4, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0x14, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) 2.430351439s ago: executing program 1 (id=9800): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0xb, 0x3, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x77}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x103000, 0x4, 0x0, 0x0, 0x0, 0x1000, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x800, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0xfe, 0x0, 0x0, 0x6, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x705dd168, 0x0, @perf_config_ext={0x0, 0x1946}, 0x1001, 0x0, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x3, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xa}, 0x11314, 0x0, 0x8e, 0x8, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0xfd61, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x400, 0x2060, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x0, 0x194a}, 0x2000, 0x0, 0x1, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x108080, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000000)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x8054) close(r2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)="17", 0x0, 0xd00, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40047438, 0x7f7c2739efff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000100"/28], 0x48) 2.292626037s ago: executing program 3 (id=9801): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x4000, 0x0, 0xa, 0x3, {0x0, 0xa000000}}]}}, 0x0, 0x3e}, 0x20) 2.185589783s ago: executing program 0 (id=9802): bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x60, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xda, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0x7, 0x3}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_clone(0x42014100, &(0x7f0000001340)="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", 0x1000, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000280)="534949178f5d56f8e17c02393aa85b86eb60e99faeb0fe5726fd11fb8aa2839082940dd044b5544df73e5db886ca5cb5d39010674c5c83cb49008cd322e68da14c29237be6d6476194e2b6f79a01e8c14f0eacf5a64c0331719d5e7763beb779b2cee6a72ce26020d4fbd59ad3267fc186216b799ee17e5830d2857a68ce911579c3dacd3dc4ae65dca161878daba004a699f9ae205cb8cd4867d29041e54ef2eeab3bd48a4982d09fc4b6aa870adf7212c3d3a5dc2de5849ec10d564118c2a438f743b109ed9cb19bdb0f3c4acc759acab5364646587c0de43a63a0a8c424bc37f072657d288031000bcbda0b2e99f31bae1256523d") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex=r1, 0x1d, 0x1, 0xb4c, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r8, r3, 0x6, 0x0, 0x0, @void, @value=r4, @void, @void, r7}, 0x20) r9 = perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x8b, 0x1, 0x0, 0x2, 0x0, 0xc953, 0x1041b, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x4}, 0x100402, 0x20000000000, 0x7ff, 0x9, 0x941, 0x6, 0x1, 0x0, 0x64, 0x0, 0x8}, 0xffffffffffffffff, 0x3, r6, 0x4) ioctl$PERF_EVENT_IOC_DISABLE(r9, 0x2401, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.123259937s ago: executing program 3 (id=9803): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001b80)={&(0x7f0000000300)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="140000000000000097ff000034"], 0x18}, 0x0) 1.875307321s ago: executing program 3 (id=9804): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8929, &(0x7f0000000080)) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000f00)=""/188, 0xbc}, {&(0x7f0000000780)=""/238, 0xee}, {0x0}, {&(0x7f0000000700)=""/108, 0x6c}], 0x4}, 0x40012100) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000001c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0x2a, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x6}]}, &(0x7f0000000580)='syzkaller\x00', 0xfce4, 0x3, &(0x7f00000005c0)=""/3, 0x41000, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1834a, 0xffffffffffffffff, 0x0, &(0x7f0000001000)=[0xffffffffffffffff], 0x0, 0x10, 0xd}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4000, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r5, &(0x7f0000000740)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20004080) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8913, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB=','], 0x9a) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @random="ed108e5f2b8f"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0xe) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r5}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x93, 0x93, 0x7, [@datasec={0x3, 0x8, 0x0, 0xf, 0x3, [{0x3, 0x7}, {0x5, 0x3, 0x81}, {0x3, 0x0, 0x6}, {0x3, 0x8, 0x81}, {0x3, 0x9, 0x40}, {0x4, 0x902, 0x8}, {0x5, 0x79418652, 0xd}, {0x2, 0x1ff, 0x7fffffff}], "f6090e"}, @enum64={0x4, 0x2, 0x0, 0x13, 0x0, 0x0, [{0x6, 0x1, 0x400}, {0xa, 0x3, 0x81}]}]}, {0x0, [0x30, 0x2e, 0x0, 0x5f, 0x30]}}, &(0x7f0000000000)=""/50, 0xb3, 0x32, 0x0, 0x6, 0x10000, @value=r6}, 0x28) recvmsg(r5, &(0x7f00000004c0)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f0000000240)=""/33, 0x21}], 0x2, &(0x7f0000000400)=""/182, 0xb6}, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)}, 0x8040) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000004000030000000000000008400000001"], 0x50}, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0601000100000044000100fe800e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e618294010000003b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80000) 138.850022ms ago: executing program 3 (id=9808): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x22, 0x1, 0x4, 0x0) 0s ago: executing program 0 (id=9809): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, &(0x7f0000000300)=""/239, &(0x7f0000000400), &(0x7f0000000480), 0x2}, 0x38) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000101000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0xe4a5, 0x2, 0x401, 0x38206, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x51b80, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x807f, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') kernel console output (not intermixed with test programs): 39455][T30999] ? _copy_from_user+0xa5/0xe0 [ 1436.444275][T30999] ? bpf_test_init+0x119/0x140 [ 1436.449090][T30999] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1436.454622][T30999] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1436.460058][T30999] ? dev_put+0x80/0x80 [ 1436.464201][T30999] ? dev_put+0x80/0x80 [ 1436.468323][T30999] bpf_prog_test_run+0x321/0x390 [ 1436.473326][T30999] __sys_bpf+0x49d/0x890 [ 1436.477630][T30999] ? bpf_link_show_fdinfo+0x390/0x390 [ 1436.483072][T30999] ? lock_chain_count+0x20/0x20 [ 1436.487987][T30999] __x64_sys_bpf+0x7c/0x90 [ 1436.492456][T30999] do_syscall_64+0x55/0xa0 [ 1436.496930][T30999] ? clear_bhb_loop+0x40/0x90 [ 1436.501655][T30999] ? clear_bhb_loop+0x40/0x90 [ 1436.506464][T30999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1436.512406][T30999] RIP: 0033:0x7f902839aeb9 [ 1436.516867][T30999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.536611][T30999] RSP: 002b:00007f90292a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1436.545082][T30999] RAX: ffffffffffffffda RBX: 00007f9028616090 RCX: 00007f902839aeb9 [ 1436.553118][T30999] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 1436.561153][T30999] RBP: 00007f90292a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.569180][T30999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.577205][T30999] R13: 00007f9028616128 R14: 00007f9028616090 R15: 00007ffc45048648 [ 1436.585243][T30999] [ 1436.656390][T30999] page_pool_create() gave up with errno -12 [ 1437.650228][T31025] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1437.681375][T31025] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1437.706544][T31025] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1437.736210][T31025] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1437.756802][T31025] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1438.104464][T31035] __nla_validate_parse: 2 callbacks suppressed [ 1438.104485][T31035] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8466'. [ 1438.159694][T31037] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8466'. [ 1440.595551][T31064] syz.0.8474: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1440.612545][T31064] CPU: 0 PID: 31064 Comm: syz.0.8474 Not tainted syzkaller #0 [ 1440.620079][T31064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1440.630275][T31064] Call Trace: [ 1440.633599][T31064] [ 1440.636576][T31064] dump_stack_lvl+0x18c/0x250 [ 1440.641327][T31064] ? show_regs_print_info+0x20/0x20 [ 1440.646578][T31064] ? load_image+0x400/0x400 [ 1440.651168][T31064] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1440.657681][T31064] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1440.664268][T31064] warn_alloc+0x246/0x340 [ 1440.668678][T31064] ? stack_trace_save+0xaa/0x100 [ 1440.673680][T31064] ? zone_watermark_ok_safe+0x230/0x230 [ 1440.679287][T31064] ? kasan_set_track+0x5f/0x70 [ 1440.684092][T31064] ? kasan_set_track+0x4e/0x70 [ 1440.688892][T31064] ? __kasan_kmalloc+0x8f/0xa0 [ 1440.693694][T31064] ? xsk_init_queue+0xad/0x100 [ 1440.698503][T31064] ? xsk_setsockopt+0x4e5/0x760 [ 1440.703392][T31064] ? do_sock_setsockopt+0x175/0x1a0 [ 1440.708658][T31064] ? __x64_sys_setsockopt+0x182/0x200 [ 1440.714099][T31064] __vmalloc_node_range+0x126/0x1330 [ 1440.719475][T31064] ? free_vm_area+0x50/0x50 [ 1440.724041][T31064] vmalloc_user+0x74/0x80 [ 1440.728415][T31064] ? xskq_create+0xbf/0x170 [ 1440.732970][T31064] xskq_create+0xbf/0x170 [ 1440.737346][T31064] xsk_init_queue+0xad/0x100 [ 1440.741976][T31064] xsk_setsockopt+0x4e5/0x760 [ 1440.746689][T31064] ? xsk_poll+0x680/0x680 [ 1440.751066][T31064] ? __fget_files+0x28/0x4b0 [ 1440.755693][T31064] ? __fget_files+0x28/0x4b0 [ 1440.760327][T31064] ? aa_sock_opt_perm+0x74/0x100 [ 1440.765311][T31064] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1440.770898][T31064] ? security_socket_setsockopt+0x7e/0xa0 [ 1440.776655][T31064] ? xsk_poll+0x680/0x680 [ 1440.781027][T31064] do_sock_setsockopt+0x175/0x1a0 [ 1440.786102][T31064] ? __fdget+0x180/0x210 [ 1440.790398][T31064] __x64_sys_setsockopt+0x182/0x200 [ 1440.795647][T31064] do_syscall_64+0x55/0xa0 [ 1440.800101][T31064] ? clear_bhb_loop+0x40/0x90 [ 1440.804808][T31064] ? clear_bhb_loop+0x40/0x90 [ 1440.809519][T31064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1440.815457][T31064] RIP: 0033:0x7f48bb99aeb9 [ 1440.819913][T31064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.839562][T31064] RSP: 002b:00007f48bc7b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1440.848013][T31064] RAX: ffffffffffffffda RBX: 00007f48bbc16180 RCX: 00007f48bb99aeb9 [ 1440.856016][T31064] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e [ 1440.864023][T31064] RBP: 00007f48bba08c1f R08: 0000000000000004 R09: 0000000000000000 [ 1440.872030][T31064] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1440.880039][T31064] R13: 00007f48bbc16218 R14: 00007f48bbc16180 R15: 00007ffc2274b5d8 [ 1440.888056][T31064] [ 1440.977180][T31064] Mem-Info: [ 1440.991098][T31064] active_anon:22226 inactive_anon:0 isolated_anon:0 [ 1440.991098][T31064] active_file:19197 inactive_file:40459 isolated_file:0 [ 1440.991098][T31064] unevictable:768 dirty:98 writeback:0 [ 1440.991098][T31064] slab_reclaimable:10654 slab_unreclaimable:103002 [ 1440.991098][T31064] mapped:37813 shmem:17714 pagetables:615 [ 1440.991098][T31064] sec_pagetables:0 bounce:0 [ 1440.991098][T31064] kernel_misc_reclaimable:0 [ 1440.991098][T31064] free:1301911 free_pcp:12783 free_cma:0 [ 1441.153219][T31064] Node 0 active_anon:82604kB inactive_anon:0kB active_file:76788kB inactive_file:161632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143852kB dirty:392kB writeback:0kB shmem:62920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11336kB pagetables:2360kB sec_pagetables:0kB all_unreclaimable? no [ 1441.226695][T31064] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1441.303814][T31064] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1441.354317][T31064] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1441.366244][T31064] Node 0 DMA32 free:1328560kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:72084kB inactive_anon:0kB active_file:76788kB inactive_file:160816kB unevictable:1536kB writepending:392kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:21368kB local_pcp:14480kB free_cma:0kB [ 1441.414062][T31064] lowmem_reserve[]: 0 0 0 0 0 [ 1441.419272][T31064] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1441.464578][T31064] lowmem_reserve[]: 0 0 0 0 0 [ 1441.474305][T31064] Node 1 Normal free:3887684kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24364kB local_pcp:11012kB free_cma:0kB [ 1441.510309][T31064] lowmem_reserve[]: 0 0 0 0 0 [ 1441.519772][T31064] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1441.555610][T31064] Node 0 DMA32: 2012*4kB (UME) 1162*8kB (UME) 685*16kB (UME) 251*32kB (UME) 144*64kB (UME) 164*128kB (UM) 68*256kB (UM) 34*512kB (UME) 4*1024kB (UME) 5*2048kB (ME) 296*4096kB (UM) = 1328112kB [ 1441.611214][T31064] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1441.651870][T31064] Node 1 Normal: 203*4kB (UE) 65*8kB (UME) 39*16kB (UME) 63*32kB (UME) 25*64kB (UE) 3*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 946*4096kB (M) = 3887684kB [ 1441.708074][T31064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1441.746094][T31064] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1441.771170][T31064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1441.802887][T31064] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1441.837272][T31064] 67423 total pagecache pages [ 1441.842037][T31064] 0 pages in swap cache [ 1441.864960][T31064] Free swap = 124996kB [ 1441.881680][T31064] Total swap = 124996kB [ 1441.885923][T31064] 2097051 pages RAM [ 1441.911888][T31064] 0 pages HighMem/MovableOnly [ 1441.930989][T31064] 416922 pages reserved [ 1441.935235][T31064] 0 pages cma reserved [ 1444.860629][T31035] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8466'. [ 1444.870729][T31037] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8466'. [ 1445.179233][T31075] netlink: 'syz.1.8478': attribute type 10 has an invalid length. [ 1445.194929][T31070] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1445.215423][T31075] team0: Device hsr_slave_0 failed to register rx_handler [ 1445.226380][T31070] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1445.246291][T31070] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1445.277430][T31070] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1445.298035][T31070] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1445.323533][T31070] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1445.476491][T31080] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1445.496418][T31080] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1445.515468][T31080] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1445.526099][T31080] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1445.707425][T31094] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.8485'. [ 1445.720846][T31094] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8485'. [ 1446.874052][T31124] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.8495'. [ 1446.916139][T31124] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8495'. [ 1447.865092][T31147] netlink: 'syz.3.8503': attribute type 10 has an invalid length. [ 1448.871965][T31158] netlink: 'syz.2.8505': attribute type 10 has an invalid length. [ 1448.909016][T31158] team0: Device hsr_slave_0 failed to register rx_handler [ 1449.490264][T31171] netlink: 'syz.0.8511': attribute type 10 has an invalid length. [ 1449.762377][T31178] netlink: 'syz.2.8512': attribute type 39 has an invalid length. [ 1450.712293][T31196] netlink: 'syz.3.8519': attribute type 10 has an invalid length. [ 1450.760660][T31196] team0: Device hsr_slave_0 failed to register rx_handler [ 1452.050294][T31228] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8529'. [ 1452.198388][T31231] net_ratelimit: 1107 callbacks suppressed [ 1452.198410][T31231] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1452.245959][T31231] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1452.277472][T31231] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1452.301018][T31238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8533'. [ 1452.326516][T31231] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1453.017081][T31248] netlink: 'syz.3.8537': attribute type 16 has an invalid length. [ 1453.051019][T31248] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8537'. [ 1454.666694][T31274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1454.696480][T31274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1454.714834][T31274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1454.741171][T31274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1454.764454][T31274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1454.781925][T31274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1456.771856][T31312] FAULT_INJECTION: forcing a failure. [ 1456.771856][T31312] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.837280][T31312] CPU: 1 PID: 31312 Comm: syz.1.8557 Not tainted syzkaller #0 [ 1456.844859][T31312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1456.854977][T31312] Call Trace: [ 1456.858304][T31312] [ 1456.861288][T31312] dump_stack_lvl+0x18c/0x250 [ 1456.866079][T31312] ? show_regs_print_info+0x20/0x20 [ 1456.871346][T31312] ? load_image+0x400/0x400 [ 1456.875913][T31312] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1456.881963][T31312] ? __asan_memset+0x22/0x40 [ 1456.886612][T31312] should_fail_ex+0x39d/0x4d0 [ 1456.891361][T31312] should_failslab+0x9/0x20 [ 1456.895929][T31312] slab_pre_alloc_hook+0x59/0x310 [ 1456.901019][T31312] ? __debug_object_init+0xec/0x450 [ 1456.906298][T31312] kmem_cache_alloc+0x5a/0x2d0 [ 1456.911127][T31312] ? slab_build_skb+0x2b/0x3f0 [ 1456.915955][T31312] slab_build_skb+0x2b/0x3f0 [ 1456.920620][T31312] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 1456.926050][T31312] ? __fget_files+0x28/0x4b0 [ 1456.930791][T31312] ? __fget_files+0x28/0x4b0 [ 1456.935445][T31312] ? __fget_files+0x43d/0x4b0 [ 1456.940197][T31312] ? cpu_online+0x60/0x60 [ 1456.944592][T31312] bpf_prog_test_run+0x321/0x390 [ 1456.949598][T31312] __sys_bpf+0x49d/0x890 [ 1456.953901][T31312] ? bpf_link_show_fdinfo+0x390/0x390 [ 1456.959440][T31312] ? lock_chain_count+0x20/0x20 [ 1456.964361][T31312] __x64_sys_bpf+0x7c/0x90 [ 1456.968854][T31312] do_syscall_64+0x55/0xa0 [ 1456.973331][T31312] ? clear_bhb_loop+0x40/0x90 [ 1456.978154][T31312] ? clear_bhb_loop+0x40/0x90 [ 1456.982978][T31312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1456.988917][T31312] RIP: 0033:0x7f902839aeb9 [ 1456.993378][T31312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1457.013138][T31312] RSP: 002b:00007f90292c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1457.021622][T31312] RAX: ffffffffffffffda RBX: 00007f9028615fa0 RCX: 00007f902839aeb9 [ 1457.029659][T31312] RDX: 0000000000000050 RSI: 0000200000000480 RDI: 000000000000000a [ 1457.037878][T31312] RBP: 00007f90292c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1457.045908][T31312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.053936][T31312] R13: 00007f9028616038 R14: 00007f9028615fa0 R15: 00007ffc45048648 [ 1457.061996][T31312] [ 1457.316819][T31321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8561'. [ 1457.387760][T31319] net_ratelimit: 29 callbacks suppressed [ 1457.387784][T31319] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1457.410457][T31319] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1457.430307][T31319] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1457.451098][T31319] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1457.465580][T31319] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1457.482159][T31319] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1457.508091][T31319] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1457.721073][T31335] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8566'. [ 1457.756143][T31335] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 1458.248189][T31338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8566'. [ 1459.374028][T31356] FAULT_INJECTION: forcing a failure. [ 1459.374028][T31356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1459.413809][T31356] CPU: 1 PID: 31356 Comm: syz.0.8570 Not tainted syzkaller #0 [ 1459.421393][T31356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1459.431670][T31356] Call Trace: [ 1459.435008][T31356] [ 1459.437997][T31356] dump_stack_lvl+0x18c/0x250 [ 1459.442762][T31356] ? show_regs_print_info+0x20/0x20 [ 1459.448073][T31356] ? load_image+0x400/0x400 [ 1459.452654][T31356] ? __might_fault+0xaa/0x120 [ 1459.457414][T31356] ? __lock_acquire+0x7d40/0x7d40 [ 1459.462537][T31356] should_fail_ex+0x39d/0x4d0 [ 1459.467293][T31356] _copy_from_user+0x2f/0xe0 [ 1459.471935][T31356] kstrtouint_from_user+0xde/0x170 [ 1459.477103][T31356] ? kstrtol_from_user+0x190/0x190 [ 1459.482278][T31356] proc_fail_nth_write+0x8f/0x250 [ 1459.487348][T31356] ? proc_fail_nth_read+0x260/0x260 [ 1459.492609][T31356] ? proc_fail_nth_read+0x260/0x260 [ 1459.497857][T31356] vfs_write+0x296/0x990 [ 1459.502158][T31356] ? file_end_write+0x250/0x250 [ 1459.507058][T31356] ? __fget_files+0x28/0x4b0 [ 1459.511704][T31356] ? __fget_files+0x28/0x4b0 [ 1459.516342][T31356] ? __fget_files+0x43d/0x4b0 [ 1459.521083][T31356] ? __fdget_pos+0x2a3/0x330 [ 1459.525717][T31356] ? ksys_write+0x75/0x260 [ 1459.530172][T31356] ksys_write+0x150/0x260 [ 1459.534547][T31356] ? __ia32_sys_read+0x90/0x90 [ 1459.539358][T31356] ? lockdep_hardirqs_on+0x98/0x150 [ 1459.544598][T31356] do_syscall_64+0x55/0xa0 [ 1459.549059][T31356] ? clear_bhb_loop+0x40/0x90 [ 1459.553773][T31356] ? clear_bhb_loop+0x40/0x90 [ 1459.558485][T31356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1459.564410][T31356] RIP: 0033:0x7f48bb95b78e [ 1459.568864][T31356] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1459.588601][T31356] RSP: 002b:00007f48bc7d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1459.597069][T31356] RAX: ffffffffffffffda RBX: 00007f48bc7d66c0 RCX: 00007f48bb95b78e [ 1459.605096][T31356] RDX: 0000000000000001 RSI: 00007f48bc7d60a0 RDI: 0000000000000004 [ 1459.613229][T31356] RBP: 00007f48bc7d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1459.621244][T31356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1459.629255][T31356] R13: 00007f48bbc16128 R14: 00007f48bbc16090 R15: 00007ffc2274b5d8 [ 1459.637277][T31356] [ 1460.788647][T31384] FAULT_INJECTION: forcing a failure. [ 1460.788647][T31384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1460.806302][T31382] netlink: 'syz.1.8577': attribute type 5 has an invalid length. [ 1460.814467][T31384] CPU: 1 PID: 31384 Comm: syz.0.8580 Not tainted syzkaller #0 [ 1460.821999][T31384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1460.832155][T31384] Call Trace: [ 1460.835483][T31384] [ 1460.838463][T31384] dump_stack_lvl+0x18c/0x250 [ 1460.843227][T31384] ? show_regs_print_info+0x20/0x20 [ 1460.848494][T31384] ? load_image+0x400/0x400 [ 1460.853110][T31384] ? __might_fault+0xaa/0x120 [ 1460.857842][T31384] ? __lock_acquire+0x7d40/0x7d40 [ 1460.862934][T31384] should_fail_ex+0x39d/0x4d0 [ 1460.867691][T31384] _copy_from_user+0x2f/0xe0 [ 1460.872337][T31384] generic_map_update_batch+0x59a/0x810 [ 1460.877958][T31384] ? rcu_read_unlock+0xa0/0xa0 [ 1460.882776][T31384] ? __fdget+0x180/0x210 [ 1460.887074][T31384] ? rcu_read_unlock+0xa0/0xa0 [ 1460.891885][T31384] bpf_map_do_batch+0x3d7/0x610 [ 1460.896800][T31384] __sys_bpf+0x381/0x890 [ 1460.901097][T31384] ? bpf_link_show_fdinfo+0x390/0x390 [ 1460.906544][T31384] ? lock_chain_count+0x20/0x20 [ 1460.911468][T31384] __x64_sys_bpf+0x7c/0x90 [ 1460.915932][T31384] do_syscall_64+0x55/0xa0 [ 1460.920397][T31384] ? clear_bhb_loop+0x40/0x90 [ 1460.925107][T31384] ? clear_bhb_loop+0x40/0x90 [ 1460.929822][T31384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1460.935750][T31384] RIP: 0033:0x7f48bb99aeb9 [ 1460.940203][T31384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1460.959846][T31384] RSP: 002b:00007f48bc7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1460.968305][T31384] RAX: ffffffffffffffda RBX: 00007f48bbc15fa0 RCX: 00007f48bb99aeb9 [ 1460.976310][T31384] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1460.984315][T31384] RBP: 00007f48bc7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.992319][T31384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.000334][T31384] R13: 00007f48bbc16038 R14: 00007f48bbc15fa0 R15: 00007ffc2274b5d8 [ 1461.008365][T31384] [ 1462.128745][T31411] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8588'. [ 1462.162956][T31411] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8588'. [ 1462.194719][T31412] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8588'. [ 1462.561369][T31431] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.8595'. [ 1462.582816][T31432] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.8595'. [ 1462.608447][T31431] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.8595'. [ 1462.628291][T31426] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.8595'. [ 1463.257048][T31447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8600'. [ 1463.288034][T31447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8600'. [ 1463.354352][T31444] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8600'. [ 1463.506376][T31448] netlink: 'syz.2.8601': attribute type 8 has an invalid length. [ 1463.616790][T31448] netlink: 'syz.2.8601': attribute type 9 has an invalid length. [ 1463.624626][T31448] netlink: 'syz.2.8601': attribute type 10 has an invalid length. [ 1463.796291][T31448] netlink: 'syz.2.8601': attribute type 11 has an invalid length. [ 1463.946168][T31448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8601'. [ 1464.719908][T31450] netlink: 6 bytes leftover after parsing attributes in process `syz.1.8596'. [ 1465.244425][T31450] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1465.822022][T13543] bridge0: port 3(team0) entered disabled state [ 1468.182245][T31482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8610'. [ 1468.196237][T31482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8610'. [ 1468.216563][T31478] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8610'. [ 1468.573684][T31491] netlink: 6 bytes leftover after parsing attributes in process `syz.0.8615'. [ 1468.611031][T31491] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1469.110848][T31503] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8618'. [ 1469.278486][T31508] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.8620'. [ 1469.307595][T31508] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8620'. [ 1469.978425][T31522] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8625'. [ 1469.996925][T31524] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8633'. [ 1470.006809][T31522] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1470.257866][T31524] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8633'. [ 1471.480458][T31556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1472.495353][T31563] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1472.563653][ T8898] bridge0: port 3(team0) entered disabled state [ 1474.841010][T31597] __nla_validate_parse: 2 callbacks suppressed [ 1474.841030][T31597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8649'. [ 1474.888088][T31597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8649'. [ 1474.977263][T31596] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8649'. [ 1475.299183][T31607] netlink: 'syz.3.8652': attribute type 1 has an invalid length. [ 1475.338534][T31607] netlink: 'syz.3.8652': attribute type 2 has an invalid length. [ 1475.370606][T31607] netlink: 'syz.3.8652': attribute type 2 has an invalid length. [ 1475.397817][T31607] netlink: 'syz.3.8652': attribute type 3 has an invalid length. [ 1475.426278][T31607] netlink: 'syz.3.8652': attribute type 4 has an invalid length. [ 1475.446131][T31607] netlink: 'syz.3.8652': attribute type 5 has an invalid length. [ 1475.463340][T31607] netlink: 'syz.3.8652': attribute type 6 has an invalid length. [ 1475.501892][T31607] netlink: 'syz.3.8652': attribute type 7 has an invalid length. [ 1475.534352][T31607] netlink: 'syz.3.8652': attribute type 9 has an invalid length. [ 1475.556144][T31607] netlink: 'syz.3.8652': attribute type 10 has an invalid length. [ 1475.564160][T31607] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.8652'. [ 1477.587774][T31644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8662'. [ 1477.619510][T31644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8662'. [ 1477.649379][T31641] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8662'. [ 1478.004681][T31653] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.8667'. [ 1479.315730][T31673] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8673'. [ 1479.365596][T31673] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8673'. [ 1480.756911][T31704] __nla_validate_parse: 2 callbacks suppressed [ 1480.756930][T31704] netlink: 196 bytes leftover after parsing attributes in process `syz.3.8686'. [ 1482.937265][T31737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8698'. [ 1484.907988][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.914402][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.854936][T31809] validate_nla: 5 callbacks suppressed [ 1486.854958][T31809] netlink: 'syz.2.8724': attribute type 10 has an invalid length. [ 1486.948971][T31809] mac80211_hwsim hwsim90 wlan1: entered promiscuous mode [ 1486.988379][T31809] mac80211_hwsim hwsim90 wlan1: entered allmulticast mode [ 1487.031507][T31809] team0: Port device wlan1 added [ 1487.132823][T31814] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1487.755524][T31824] FAULT_INJECTION: forcing a failure. [ 1487.755524][T31824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1487.806464][T31824] CPU: 0 PID: 31824 Comm: syz.0.8729 Not tainted syzkaller #0 [ 1487.814039][T31824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1487.824163][T31824] Call Trace: [ 1487.827500][T31824] [ 1487.830474][T31824] dump_stack_lvl+0x18c/0x250 [ 1487.835221][T31824] ? show_regs_print_info+0x20/0x20 [ 1487.840585][T31824] ? load_image+0x400/0x400 [ 1487.845187][T31824] ? __might_fault+0xaa/0x120 [ 1487.849932][T31824] ? __lock_acquire+0x7d40/0x7d40 [ 1487.855025][T31824] should_fail_ex+0x39d/0x4d0 [ 1487.859857][T31824] _copy_to_user+0x2f/0xa0 [ 1487.864340][T31824] bpf_test_finish+0x19f/0x650 [ 1487.869185][T31824] ? convert___skb_to_skb+0x590/0x590 [ 1487.874644][T31824] ? convert_skb_to___skb+0x420/0x420 [ 1487.880076][T31824] ? slab_build_skb+0x25f/0x3f0 [ 1487.884991][T31824] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 1487.890423][T31824] ? cpu_online+0x60/0x60 [ 1487.894926][T31824] bpf_prog_test_run+0x321/0x390 [ 1487.899955][T31824] __sys_bpf+0x49d/0x890 [ 1487.904241][T31824] ? bpf_link_show_fdinfo+0x390/0x390 [ 1487.909671][T31824] ? lock_chain_count+0x20/0x20 [ 1487.914564][T31824] __x64_sys_bpf+0x7c/0x90 [ 1487.919026][T31824] do_syscall_64+0x55/0xa0 [ 1487.923658][T31824] ? clear_bhb_loop+0x40/0x90 [ 1487.928366][T31824] ? clear_bhb_loop+0x40/0x90 [ 1487.933098][T31824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1487.939033][T31824] RIP: 0033:0x7f48bb99aeb9 [ 1487.943574][T31824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.963397][T31824] RSP: 002b:00007f48bc7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1487.971929][T31824] RAX: ffffffffffffffda RBX: 00007f48bbc15fa0 RCX: 00007f48bb99aeb9 [ 1487.979938][T31824] RDX: 0000000000000050 RSI: 0000200000000480 RDI: 000000000000000a [ 1487.987945][T31824] RBP: 00007f48bc7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.995957][T31824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1488.003958][T31824] R13: 00007f48bbc16038 R14: 00007f48bbc15fa0 R15: 00007ffc2274b5d8 [ 1488.011986][T31824] [ 1488.101338][T31829] mac80211_hwsim hwsim90 .3c: renamed from wlan1 (while UP) [ 1488.193845][T31827] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1488.226596][T31827] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1488.255415][T31827] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1488.289577][T31827] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1488.351770][T31827] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1488.404261][T31836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8733'. [ 1488.414374][T31827] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1488.427672][T31827] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1488.438092][T31827] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1488.870525][T31849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1489.088766][T31859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8742'. [ 1489.124008][T31859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8742'. [ 1489.180670][T31866] netlink: 'syz.0.8744': attribute type 39 has an invalid length. [ 1489.265893][T31867] netlink: 'syz.3.8745': attribute type 10 has an invalid length. [ 1489.303382][T31867] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1489.367971][T31874] netlink: 'syz.2.8748': attribute type 10 has an invalid length. [ 1489.386870][T31874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8748'. [ 1489.419094][T31874] bridge0: port 4(ipvlan1) entered blocking state [ 1489.448979][T31874] bridge0: port 4(ipvlan1) entered disabled state [ 1489.667004][T31880] netlink: 'syz.1.8751': attribute type 5 has an invalid length. [ 1489.732217][T31885] FAULT_INJECTION: forcing a failure. [ 1489.732217][T31885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1489.769824][T31885] CPU: 0 PID: 31885 Comm: syz.0.8753 Not tainted syzkaller #0 [ 1489.777384][T31885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1489.787505][T31885] Call Trace: [ 1489.790919][T31885] [ 1489.793908][T31885] dump_stack_lvl+0x18c/0x250 [ 1489.798660][T31885] ? show_regs_print_info+0x20/0x20 [ 1489.803925][T31885] ? load_image+0x400/0x400 [ 1489.808521][T31885] ? __might_fault+0xaa/0x120 [ 1489.813265][T31885] ? __lock_acquire+0x7d40/0x7d40 [ 1489.819281][T31885] should_fail_ex+0x39d/0x4d0 [ 1489.824036][T31885] _copy_from_user+0x2f/0xe0 [ 1489.828685][T31885] generic_map_update_batch+0x54b/0x810 [ 1489.834295][T31885] ? rcu_read_unlock+0xa0/0xa0 [ 1489.839096][T31885] ? __fdget+0x180/0x210 [ 1489.843386][T31885] ? rcu_read_unlock+0xa0/0xa0 [ 1489.848177][T31885] bpf_map_do_batch+0x3d7/0x610 [ 1489.853075][T31885] __sys_bpf+0x381/0x890 [ 1489.857355][T31885] ? bpf_link_show_fdinfo+0x390/0x390 [ 1489.862781][T31885] ? lock_chain_count+0x20/0x20 [ 1489.867679][T31885] __x64_sys_bpf+0x7c/0x90 [ 1489.872128][T31885] do_syscall_64+0x55/0xa0 [ 1489.876580][T31885] ? clear_bhb_loop+0x40/0x90 [ 1489.881316][T31885] ? clear_bhb_loop+0x40/0x90 [ 1489.886030][T31885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1489.891964][T31885] RIP: 0033:0x7f48bb99aeb9 [ 1489.896436][T31885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1489.916084][T31885] RSP: 002b:00007f48bc7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1489.924546][T31885] RAX: ffffffffffffffda RBX: 00007f48bbc15fa0 RCX: 00007f48bb99aeb9 [ 1489.932556][T31885] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1489.940569][T31885] RBP: 00007f48bc7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.948662][T31885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1489.956669][T31885] R13: 00007f48bbc16038 R14: 00007f48bbc15fa0 R15: 00007ffc2274b5d8 [ 1489.964712][T31885] [ 1490.688958][T31894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8756'. [ 1490.721091][T31894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8756'. [ 1490.750949][T31895] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8756'. [ 1491.114028][T31907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8759'. [ 1491.174593][T31907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8759'. [ 1491.208533][T31903] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8759'. [ 1491.238579][T31906] netlink: 'syz.3.8760': attribute type 10 has an invalid length. [ 1492.427948][T31948] netlink: 'syz.3.8772': attribute type 10 has an invalid length. [ 1492.448953][T31948] net_ratelimit: 730 callbacks suppressed [ 1492.448986][T31948] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1492.469026][T31948] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1492.480851][T31948] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1492.517078][T31948] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1492.556647][T31948] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1492.606929][T31948] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1495.795140][T31969] netlink: 'syz.0.8779': attribute type 21 has an invalid length. [ 1495.998613][T31972] netlink: 'syz.1.8781': attribute type 11 has an invalid length. [ 1496.026138][T31972] netlink: 'syz.1.8781': attribute type 1 has an invalid length. [ 1496.040282][T31972] netlink: 'syz.1.8781': attribute type 2 has an invalid length. [ 1496.081257][T31972] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.8781'. [ 1496.865030][T31998] netlink: 'syz.3.8786': attribute type 10 has an invalid length. [ 1496.902214][T31989] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1496.928973][T31989] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1496.962459][T31989] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1496.978501][T31989] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1497.509968][T32023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8801'. [ 1497.697430][T32028] netlink: 'syz.0.8803': attribute type 10 has an invalid length. [ 1497.740129][T32028] net_ratelimit: 187 callbacks suppressed [ 1497.740154][T32028] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1497.780873][T32028] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1497.801593][T32038] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.8807'. [ 1497.816193][T32038] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8807'. [ 1497.826194][T32028] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1497.864137][T32028] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1497.910498][T32028] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1498.211295][T32055] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8810'. [ 1498.236313][T32055] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8810'. [ 1498.277934][T32047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8810'. [ 1498.373774][T32059] netlink: 'syz.0.8815': attribute type 10 has an invalid length. [ 1498.393755][T32059] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.8815'. [ 1498.627616][T32071] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8818'. [ 1498.639367][T32070] netlink: 'syz.0.8820': attribute type 10 has an invalid length. [ 1498.653143][T32070] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1498.664392][T32070] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1498.674913][T32070] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1498.688601][T32070] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1498.698880][T32070] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1498.801909][T32075] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8821'. [ 1499.162984][T32083] netlink: 'syz.3.8822': attribute type 1 has an invalid length. [ 1502.890605][T32082] __nla_validate_parse: 2 callbacks suppressed [ 1502.890624][T32082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8823'. [ 1503.049818][T32107] mac80211_hwsim hwsim82 .3c: renamed from wlan1 [ 1507.764761][T32144] mac80211_hwsim hwsim87 .3c: renamed from wlan1 (while UP) [ 1507.989645][T32154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8855'. [ 1508.032783][T32154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8855'. [ 1508.091232][T32156] netlink: 'syz.0.8849': attribute type 1 has an invalid length. [ 1508.107334][T32156] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.8849'. [ 1508.252225][T32158] netlink: 'syz.1.8851': attribute type 16 has an invalid length. [ 1508.268397][T32158] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8851'. [ 1508.288986][T32158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.920252][T32186] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8860'. [ 1508.920597][T32183] netlink: 'syz.2.8859': attribute type 39 has an invalid length. [ 1508.946314][T32186] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8860'. [ 1512.643983][T32212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8868'. [ 1512.938093][T32220] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8870'. [ 1512.958233][T32220] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8870'. [ 1514.535834][T32259] netlink: 'syz.3.8885': attribute type 21 has an invalid length. [ 1514.547331][T32259] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8885'. [ 1516.429348][T32302] netlink: 'syz.0.8900': attribute type 19 has an invalid length. [ 1516.470821][T32302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8900'. [ 1516.733798][T32302] net_ratelimit: 599 callbacks suppressed [ 1516.733826][T32302] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1517.000903][T32315] FAULT_INJECTION: forcing a failure. [ 1517.000903][T32315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1517.014715][T32315] CPU: 1 PID: 32315 Comm: syz.2.8902 Not tainted syzkaller #0 [ 1517.022344][T32315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1517.032634][T32315] Call Trace: [ 1517.036492][T32315] [ 1517.039566][T32315] dump_stack_lvl+0x18c/0x250 [ 1517.044310][T32315] ? show_regs_print_info+0x20/0x20 [ 1517.049580][T32315] ? load_image+0x400/0x400 [ 1517.054322][T32315] ? __might_fault+0xaa/0x120 [ 1517.059059][T32315] ? __lock_acquire+0x7d40/0x7d40 [ 1517.064160][T32315] should_fail_ex+0x39d/0x4d0 [ 1517.069005][T32315] _copy_to_user+0x2f/0xa0 [ 1517.073492][T32315] bpf_test_finish+0x25a/0x650 [ 1517.078421][T32315] ? convert___skb_to_skb+0x590/0x590 [ 1517.084037][T32315] ? convert_skb_to___skb+0x420/0x420 [ 1517.089655][T32315] ? slab_build_skb+0x25f/0x3f0 [ 1517.094707][T32315] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 1517.100162][T32315] ? cpu_online+0x60/0x60 [ 1517.104584][T32315] bpf_prog_test_run+0x321/0x390 [ 1517.109625][T32315] __sys_bpf+0x49d/0x890 [ 1517.114016][T32315] ? bpf_link_show_fdinfo+0x390/0x390 [ 1517.119556][T32315] ? lock_chain_count+0x20/0x20 [ 1517.124470][T32315] __x64_sys_bpf+0x7c/0x90 [ 1517.128926][T32315] do_syscall_64+0x55/0xa0 [ 1517.133589][T32315] ? clear_bhb_loop+0x40/0x90 [ 1517.138624][T32315] ? clear_bhb_loop+0x40/0x90 [ 1517.143459][T32315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1517.149530][T32315] RIP: 0033:0x7fc896b9aeb9 [ 1517.154112][T32315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1517.173876][T32315] RSP: 002b:00007fc897b44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1517.182547][T32315] RAX: ffffffffffffffda RBX: 00007fc896e15fa0 RCX: 00007fc896b9aeb9 [ 1517.190577][T32315] RDX: 0000000000000050 RSI: 0000200000000480 RDI: 000000000000000a [ 1517.198620][T32315] RBP: 00007fc897b44090 R08: 0000000000000000 R09: 0000000000000000 [ 1517.206847][T32315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1517.215088][T32315] R13: 00007fc896e16038 R14: 00007fc896e15fa0 R15: 00007ffd188dff98 [ 1517.223495][T32315] [ 1517.243650][T32313] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8901'. [ 1518.110464][T32325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8906'. [ 1518.395566][T32339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1518.880604][T32356] netlink: 'syz.0.8915': attribute type 1 has an invalid length. [ 1518.907552][T32356] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.8915'. [ 1519.136626][T32367] netlink: 'syz.2.8918': attribute type 10 has an invalid length. [ 1519.164094][T32367] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8918'. [ 1519.174097][T32367] bridge0: port 4(ipvlan1) entered blocking state [ 1519.182126][T32367] bridge0: port 4(ipvlan1) entered disabled state [ 1519.192589][T32367] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1519.319492][T32371] netlink: 'syz.3.8920': attribute type 5 has an invalid length. [ 1519.397109][T32373] FAULT_INJECTION: forcing a failure. [ 1519.397109][T32373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1519.426288][T32373] CPU: 1 PID: 32373 Comm: syz.2.8921 Not tainted syzkaller #0 [ 1519.434642][T32373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1519.445042][T32373] Call Trace: [ 1519.448393][T32373] [ 1519.451391][T32373] dump_stack_lvl+0x18c/0x250 [ 1519.456134][T32373] ? show_regs_print_info+0x20/0x20 [ 1519.461397][T32373] ? load_image+0x400/0x400 [ 1519.466070][T32373] ? __might_fault+0xaa/0x120 [ 1519.470818][T32373] ? __lock_acquire+0x7d40/0x7d40 [ 1519.475907][T32373] should_fail_ex+0x39d/0x4d0 [ 1519.480664][T32373] _copy_from_user+0x2f/0xe0 [ 1519.485317][T32373] generic_map_update_batch+0x59a/0x810 [ 1519.490918][T32373] ? rcu_read_unlock+0xa0/0xa0 [ 1519.495721][T32373] ? __fdget+0x180/0x210 [ 1519.500015][T32373] ? rcu_read_unlock+0xa0/0xa0 [ 1519.504899][T32373] bpf_map_do_batch+0x3d7/0x610 [ 1519.509816][T32373] __sys_bpf+0x381/0x890 [ 1519.514206][T32373] ? bpf_link_show_fdinfo+0x390/0x390 [ 1519.519732][T32373] ? lock_chain_count+0x20/0x20 [ 1519.524895][T32373] __x64_sys_bpf+0x7c/0x90 [ 1519.529449][T32373] do_syscall_64+0x55/0xa0 [ 1519.533918][T32373] ? clear_bhb_loop+0x40/0x90 [ 1519.538897][T32373] ? clear_bhb_loop+0x40/0x90 [ 1519.543792][T32373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1519.549842][T32373] RIP: 0033:0x7fc896b9aeb9 [ 1519.554335][T32373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1519.574001][T32373] RSP: 002b:00007fc897b44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1519.582646][T32373] RAX: ffffffffffffffda RBX: 00007fc896e15fa0 RCX: 00007fc896b9aeb9 [ 1519.590855][T32373] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1519.599048][T32373] RBP: 00007fc897b44090 R08: 0000000000000000 R09: 0000000000000000 [ 1519.607143][T32373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1519.615155][T32373] R13: 00007fc896e16038 R14: 00007fc896e15fa0 R15: 00007ffd188dff98 [ 1519.623272][T32373] [ 1520.144742][T32393] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8927'. [ 1520.186496][T32391] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8927'. [ 1520.612125][T32395] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8928'. [ 1520.635092][T32395] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8928'. [ 1520.656804][T32396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8928'. [ 1521.059068][T32416] netlink: 'syz.1.8937': attribute type 17 has an invalid length. [ 1521.067172][T32416] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8937'. [ 1521.088231][T32416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1523.051741][T32441] FAULT_INJECTION: forcing a failure. [ 1523.051741][T32441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1523.089133][T32441] CPU: 0 PID: 32441 Comm: syz.2.8944 Not tainted syzkaller #0 [ 1523.096880][T32441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1523.107098][T32441] Call Trace: [ 1523.113913][T32441] [ 1523.116895][T32441] dump_stack_lvl+0x18c/0x250 [ 1523.121910][T32441] ? show_regs_print_info+0x20/0x20 [ 1523.127374][T32441] ? load_image+0x400/0x400 [ 1523.131958][T32441] ? __might_fault+0xaa/0x120 [ 1523.136798][T32441] ? __lock_acquire+0x7d40/0x7d40 [ 1523.143020][T32441] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1523.148804][T32441] ? _local_bh_enable+0xa0/0xa0 [ 1523.153726][T32441] should_fail_ex+0x39d/0x4d0 [ 1523.158501][T32441] copy_fpstate_to_sigframe+0xa05/0xc60 [ 1523.164471][T32441] ? kmem_cache_free+0xf8/0x270 [ 1523.169495][T32441] ? __dequeue_signal+0x52b/0x680 [ 1523.174591][T32441] ? dequeue_signal+0xe9/0x4b0 [ 1523.179436][T32441] ? copy_fpstate_to_sigframe+0x191/0xc60 [ 1523.185241][T32441] ? fpregs_set+0x370/0x370 [ 1523.189845][T32441] ? fpu__alloc_mathframe+0xa7/0x120 [ 1523.195382][T32441] get_sigframe+0x5e2/0x7d0 [ 1523.199962][T32441] ? load_gs_index+0x1a0/0x1a0 [ 1523.204811][T32441] ? lockdep_hardirqs_on+0x98/0x150 [ 1523.210511][T32441] ? asm_sysvec_irq_work+0x1a/0x20 [ 1523.215687][T32441] x64_setup_rt_frame+0x15e/0xc40 [ 1523.220788][T32441] ? _raw_spin_unlock_irq+0x29/0x50 [ 1523.226050][T32441] ? perf_trace_preemptirq_template+0xac/0x330 [ 1523.232277][T32441] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1523.238347][T32441] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 1523.244152][T32441] ? arch_do_signal_or_restart+0x3b1/0x800 [ 1523.250036][T32441] arch_do_signal_or_restart+0x42c/0x800 [ 1523.255754][T32441] ? get_sigframe_size+0x20/0x20 [ 1523.261010][T32441] ? perf_trace_preemptirq_template+0xac/0x330 [ 1523.267241][T32441] ? ksys_write+0x1fb/0x260 [ 1523.271804][T32441] ? exit_to_user_mode_loop+0x3b/0x110 [ 1523.277338][T32441] exit_to_user_mode_loop+0x70/0x110 [ 1523.282704][T32441] exit_to_user_mode_prepare+0xee/0x180 [ 1523.288339][T32441] syscall_exit_to_user_mode+0x1a/0x50 [ 1523.293877][T32441] do_syscall_64+0x61/0xa0 [ 1523.298370][T32441] ? clear_bhb_loop+0x40/0x90 [ 1523.303114][T32441] ? clear_bhb_loop+0x40/0x90 [ 1523.307957][T32441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1523.314007][T32441] RIP: 0033:0x7fc896b5b78e [ 1523.318578][T32441] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1523.338502][T32441] RSP: 002b:00007fc897b43fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1523.347255][T32441] RAX: 0000000000000001 RBX: 00007fc897b446c0 RCX: 00007fc896b5b78e [ 1523.355580][T32441] RDX: 0000000000000001 RSI: 00007fc897b44090 RDI: 0000000000000006 [ 1523.363702][T32441] RBP: 00007fc897b44090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.371846][T32441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1523.388229][T32441] R13: 00007fc896e16038 R14: 00007fc896e15fa0 R15: 00007ffd188dff98 [ 1523.396373][T32441] [ 1524.080024][T32458] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8951'. [ 1524.798608][T32475] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.8959'. [ 1524.814995][T32475] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8959'. [ 1525.521245][T32490] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1525.558896][T32490] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1525.591497][T32495] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1525.836107][T32509] netlink: 'syz.3.8971': attribute type 10 has an invalid length. [ 1525.845772][T32509] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8971'. [ 1525.855577][T32509] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1531.478796][T32592] netlink: 'syz.1.8997': attribute type 10 has an invalid length. [ 1531.494930][T32592] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8997'. [ 1532.299164][T32616] netlink: 'syz.0.9006': attribute type 10 has an invalid length. [ 1532.347926][T32616] bond0: (slave .3c): Releasing backup interface [ 1532.368328][T32616] team0: Device .3c is of different type [ 1532.484347][T32622] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.9008'. [ 1532.568240][T32626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9009'. [ 1532.773879][T32635] netlink: 'syz.1.9012': attribute type 21 has an invalid length. [ 1532.782135][T32635] netlink: 'syz.1.9012': attribute type 19 has an invalid length. [ 1532.790880][T32635] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.9012'. [ 1533.748240][T32667] sctp: [Deprecated]: syz.3.9023 (pid 32667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1533.748240][T32667] Use struct sctp_sack_info instead [ 1534.619107][T32682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9028'. [ 1534.764333][T32688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9031'. [ 1535.742609][T32686] netlink: 'syz.1.9030': attribute type 1 has an invalid length. [ 1535.760814][T32686] netlink: 'syz.1.9030': attribute type 4 has an invalid length. [ 1535.772486][T32686] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.9030'. [ 1535.852772][T32701] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.9034'. [ 1535.886206][T32701] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.9034'. [ 1535.906342][T32700] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.9034'. [ 1535.954002][T32703] netlink: 'syz.0.9037': attribute type 21 has an invalid length. [ 1535.972699][T32703] netlink: 'syz.0.9037': attribute type 4 has an invalid length. [ 1536.299710][T32722] netlink: 'syz.1.9044': attribute type 3 has an invalid length. [ 1537.222488][T32745] __nla_validate_parse: 4 callbacks suppressed [ 1537.222529][T32745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9049'. [ 1537.818011][T32760] syzkaller0: entered promiscuous mode [ 1537.824042][T32760] syzkaller0: entered allmulticast mode [ 1541.690453][ T309] netlink: 'syz.3.9061': attribute type 10 has an invalid length. [ 1541.699225][ T309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9061'. [ 1541.710953][ T309] bridge0: port 3(ipvlan1) entered blocking state [ 1541.719093][ T309] bridge0: port 3(ipvlan1) entered disabled state [ 1541.728180][ T309] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1541.756388][ T311] netlink: 'syz.0.9063': attribute type 5 has an invalid length. [ 1541.893452][ T327] FAULT_INJECTION: forcing a failure. [ 1541.893452][ T327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1541.911474][ T327] CPU: 1 PID: 327 Comm: syz.3.9069 Not tainted syzkaller #0 [ 1541.918967][ T327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1541.929164][ T327] Call Trace: [ 1541.932805][ T327] [ 1541.935870][ T327] dump_stack_lvl+0x18c/0x250 [ 1541.940790][ T327] ? show_regs_print_info+0x20/0x20 [ 1541.946079][ T327] ? load_image+0x400/0x400 [ 1541.950638][ T327] ? __might_fault+0xaa/0x120 [ 1541.955371][ T327] ? __lock_acquire+0x7d40/0x7d40 [ 1541.960464][ T327] should_fail_ex+0x39d/0x4d0 [ 1541.965204][ T327] _copy_from_user+0x2f/0xe0 [ 1541.970037][ T327] generic_map_update_batch+0x54b/0x810 [ 1541.975657][ T327] ? rcu_read_unlock+0xa0/0xa0 [ 1541.980586][ T327] ? __fdget+0x180/0x210 [ 1541.984894][ T327] ? rcu_read_unlock+0xa0/0xa0 [ 1541.989709][ T327] bpf_map_do_batch+0x3d7/0x610 [ 1541.994629][ T327] __sys_bpf+0x381/0x890 [ 1541.998965][ T327] ? bpf_link_show_fdinfo+0x390/0x390 [ 1542.004416][ T327] ? lock_chain_count+0x20/0x20 [ 1542.009338][ T327] __x64_sys_bpf+0x7c/0x90 [ 1542.013908][ T327] do_syscall_64+0x55/0xa0 [ 1542.018743][ T327] ? clear_bhb_loop+0x40/0x90 [ 1542.023744][ T327] ? clear_bhb_loop+0x40/0x90 [ 1542.028516][ T327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1542.034475][ T327] RIP: 0033:0x7f612dd9aeb9 [ 1542.039306][ T327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.059601][ T327] RSP: 002b:00007f612ed0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1542.068086][ T327] RAX: ffffffffffffffda RBX: 00007f612e015fa0 RCX: 00007f612dd9aeb9 [ 1542.076121][ T327] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1542.084173][ T327] RBP: 00007f612ed0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.092218][ T327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1542.100257][ T327] R13: 00007f612e016038 R14: 00007f612e015fa0 R15: 00007ffe08f8d998 [ 1542.108320][ T327] [ 1542.159939][ T331] netlink: 'syz.2.9070': attribute type 39 has an invalid length. [ 1542.549548][ T352] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9075'. [ 1542.563669][ T352] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9075'. [ 1542.592095][ T347] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9075'. [ 1543.001971][ T372] delete_channel: no stack [ 1543.027258][ T372] delete_channel: no stack [ 1544.112321][ T372] mac80211_hwsim hwsim91 wlan0: left promiscuous mode [ 1544.176297][ T374] mac80211_hwsim hwsim91 wlan0: entered promiscuous mode [ 1544.775662][ T396] netlink: set zone limit has 8 unknown bytes [ 1545.576720][ T421] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9110'. [ 1545.873028][ T431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9112'. [ 1546.063237][ T447] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.9118'. [ 1546.076176][ T447] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.9118'. [ 1546.349772][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.358966][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.758769][ T468] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9125'. [ 1546.778109][ T468] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9125'. [ 1546.820561][ T462] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9125'. [ 1547.213888][ T482] netlink: 'syz.1.9130': attribute type 10 has an invalid length. [ 1547.237017][ T482] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1547.339390][ T484] netlink: 'syz.0.9131': attribute type 21 has an invalid length. [ 1547.534183][ T493] C: renamed from team_slave_0 (while UP) [ 1547.558152][ T493] netlink: 'syz.1.9135': attribute type 1 has an invalid length. [ 1547.581784][ T493] __nla_validate_parse: 1 callbacks suppressed [ 1547.581804][ T493] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9135'. [ 1547.999707][ T508] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9139'. [ 1548.659588][ T516] IPv6: Can't replace route, no match found [ 1548.691782][ T516] net veth1_virt_wifi : renamed from virt_wifi0 [ 1548.748037][ T521] netlink: 'syz.2.9143': attribute type 29 has an invalid length. [ 1548.786174][ T521] netlink: 'syz.2.9143': attribute type 3 has an invalid length. [ 1548.808563][ T523] netlink: 'syz.0.9145': attribute type 1 has an invalid length. [ 1548.824576][ T523] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.9145'. [ 1548.830833][ T521] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9143'. [ 1548.844990][ T523] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9145'. [ 1548.892836][ T527] netlink: 'syz.1.9146': attribute type 21 has an invalid length. [ 1548.927671][ T525] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.9145'. [ 1549.143388][ T532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9147'. [ 1549.153059][ T532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9147'. [ 1549.172155][ T530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9147'. [ 1549.305116][ T534] sock: sock_timestamping_bind_phc: sock not bind to device [ 1552.016673][ T549] netlink: 'syz.0.9154': attribute type 10 has an invalid length. [ 1552.028517][ T549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1552.040202][ T549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1552.054201][ T549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1552.065115][ T549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1552.076016][ T549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1552.101431][ T549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1552.126151][ T549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1552.145253][ T549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1552.156082][ T549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1552.968148][ T560] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9157'. [ 1553.046965][ T560] net_ratelimit: 75 callbacks suppressed [ 1553.046993][ T560] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 1554.422629][ T585] netlink: 'syz.2.9166': attribute type 10 has an invalid length. [ 1554.460721][ T585] bond0: (slave dummy0): Releasing backup interface [ 1554.480859][ T585] dummy0: left promiscuous mode [ 1554.493049][ T585] dummy0: left allmulticast mode [ 1554.518783][ T593] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1554.553349][ T593] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1554.563949][ T593] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1554.576800][ T593] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1554.588793][ T593] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1554.603499][ T593] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1554.614089][ T593] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1554.625361][ T593] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1554.639216][ T593] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1557.747148][ T622] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9177'. [ 1557.964944][ T633] netlink: 'syz.2.9182': attribute type 10 has an invalid length. [ 1558.052759][ T5786] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 1558.057481][ T633] net_ratelimit: 25359 callbacks suppressed [ 1558.057504][ T633] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1558.086159][ T633] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1558.106259][ T633] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1558.460867][ T657] netlink: 'syz.1.9189': attribute type 10 has an invalid length. [ 1558.500797][ T657] mac80211_hwsim hwsim92 wlan1: entered promiscuous mode [ 1558.520941][ T657] mac80211_hwsim hwsim92 wlan1: entered allmulticast mode [ 1558.535457][ T657] team0: Port device wlan1 added [ 1558.725041][ T662] netlink: 'syz.1.9193': attribute type 10 has an invalid length. [ 1558.745778][ T666] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.9192'. [ 1558.760045][ T662] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1558.779952][ T662] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1558.816778][ T662] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1558.845882][ T662] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1558.886186][ T662] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1560.496954][ T715] netlink: 'syz.2.9205': attribute type 10 has an invalid length. [ 1560.549744][ T715] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1560.599725][ T715] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1560.917068][ T731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9210'. [ 1562.096237][ T5786] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1562.116079][ T5786] Bluetooth: hci2: Injecting HCI hardware error event [ 1562.125784][ T5786] Bluetooth: hci2: hardware error 0x00 [ 1562.247019][ T754] netlink: 'syz.2.9219': attribute type 10 has an invalid length. [ 1562.484119][ T765] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9221'. [ 1563.823726][ T775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9224'. [ 1564.176275][ T5786] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1565.147358][ T785] FAULT_INJECTION: forcing a failure. [ 1565.147358][ T785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1565.176109][ T785] CPU: 0 PID: 785 Comm: syz.1.9227 Not tainted syzkaller #0 [ 1565.183593][ T785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1565.193714][ T785] Call Trace: [ 1565.197394][ T785] [ 1565.200477][ T785] dump_stack_lvl+0x18c/0x250 [ 1565.205846][ T785] ? show_regs_print_info+0x20/0x20 [ 1565.211112][ T785] ? load_image+0x400/0x400 [ 1565.215670][ T785] ? __lock_acquire+0x7d40/0x7d40 [ 1565.221324][ T785] ? snprintf+0xe9/0x140 [ 1565.225805][ T785] should_fail_ex+0x39d/0x4d0 [ 1565.230626][ T785] _copy_to_user+0x2f/0xa0 [ 1565.235096][ T785] simple_read_from_buffer+0xe7/0x150 [ 1565.240613][ T785] proc_fail_nth_read+0x1e8/0x260 [ 1565.245944][ T785] ? proc_fault_inject_write+0x360/0x360 [ 1565.251681][ T785] ? fsnotify_perm+0x271/0x5e0 [ 1565.256507][ T785] ? proc_fault_inject_write+0x360/0x360 [ 1565.262271][ T785] vfs_read+0x28b/0x970 [ 1565.266500][ T785] ? kernel_read+0x1e0/0x1e0 [ 1565.271206][ T785] ? __fget_files+0x28/0x4b0 [ 1565.276047][ T785] ? __fget_files+0x28/0x4b0 [ 1565.280695][ T785] ? __fget_files+0x43d/0x4b0 [ 1565.285507][ T785] ? __fdget_pos+0x2a3/0x330 [ 1565.290134][ T785] ? ksys_read+0x75/0x260 [ 1565.294570][ T785] ksys_read+0x150/0x260 [ 1565.298862][ T785] ? vfs_write+0x990/0x990 [ 1565.303417][ T785] ? lockdep_hardirqs_on+0x98/0x150 [ 1565.308684][ T785] do_syscall_64+0x55/0xa0 [ 1565.313375][ T785] ? clear_bhb_loop+0x40/0x90 [ 1565.318113][ T785] ? clear_bhb_loop+0x40/0x90 [ 1565.323015][ T785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1565.329183][ T785] RIP: 0033:0x7f902835b78e [ 1565.333933][ T785] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1565.355827][ T785] RSP: 002b:00007f90292c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1565.364458][ T785] RAX: ffffffffffffffda RBX: 00007f90292c16c0 RCX: 00007f902835b78e [ 1565.372732][ T785] RDX: 000000000000000f RSI: 00007f90292c10a0 RDI: 0000000000000005 [ 1565.380745][ T785] RBP: 00007f90292c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1565.388869][ T785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1565.396900][ T785] R13: 00007f9028616038 R14: 00007f9028615fa0 R15: 00007ffc45048648 [ 1565.404955][ T785] [ 1565.618646][ T793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9231'. [ 1565.803787][ T795] netlink: 'syz.0.9232': attribute type 10 has an invalid length. [ 1565.816966][ T795] net_ratelimit: 329 callbacks suppressed [ 1565.817009][ T795] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1565.863126][ T795] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1565.876666][ T795] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1565.893970][ T795] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1565.927260][ T795] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1566.024654][ T795] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1566.210517][ T808] netlink: 'syz.1.9245': attribute type 39 has an invalid length. [ 1566.744369][ T821] netlink: 'syz.0.9242': attribute type 5 has an invalid length. [ 1566.773412][ T825] netlink: 'syz.3.9244': attribute type 10 has an invalid length. [ 1566.783556][ T825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9244'. [ 1566.806506][ T825] bridge0: port 3(ipvlan1) entered blocking state [ 1566.813804][ T825] bridge0: port 3(ipvlan1) entered disabled state [ 1566.841293][ T825] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1567.044907][ T829] netlink: 'syz.2.9247': attribute type 10 has an invalid length. [ 1567.072090][ T829] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1567.096814][ T829] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1567.121507][ T829] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1567.141162][ T837] FAULT_INJECTION: forcing a failure. [ 1567.141162][ T837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1567.167365][ T837] CPU: 1 PID: 837 Comm: syz.0.9249 Not tainted syzkaller #0 [ 1567.175200][ T837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1567.185661][ T837] Call Trace: [ 1567.188997][ T837] [ 1567.192020][ T837] dump_stack_lvl+0x18c/0x250 [ 1567.196824][ T837] ? show_regs_print_info+0x20/0x20 [ 1567.202185][ T837] ? load_image+0x400/0x400 [ 1567.206774][ T837] ? __might_fault+0xaa/0x120 [ 1567.211533][ T837] ? __lock_acquire+0x7d40/0x7d40 [ 1567.216675][ T837] should_fail_ex+0x39d/0x4d0 [ 1567.221438][ T837] _copy_from_user+0x2f/0xe0 [ 1567.226198][ T837] generic_map_update_batch+0x59a/0x810 [ 1567.232006][ T837] ? rcu_read_unlock+0xa0/0xa0 [ 1567.236837][ T837] ? __fdget+0x180/0x210 [ 1567.241164][ T837] ? rcu_read_unlock+0xa0/0xa0 [ 1567.245967][ T837] bpf_map_do_batch+0x3d7/0x610 [ 1567.250881][ T837] __sys_bpf+0x381/0x890 [ 1567.255280][ T837] ? bpf_link_show_fdinfo+0x390/0x390 [ 1567.260712][ T837] ? lock_chain_count+0x20/0x20 [ 1567.265611][ T837] __x64_sys_bpf+0x7c/0x90 [ 1567.270115][ T837] do_syscall_64+0x55/0xa0 [ 1567.274704][ T837] ? clear_bhb_loop+0x40/0x90 [ 1567.280488][ T837] ? clear_bhb_loop+0x40/0x90 [ 1567.285210][ T837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1567.291254][ T837] RIP: 0033:0x7f48bb99aeb9 [ 1567.295717][ T837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1567.315996][ T837] RSP: 002b:00007f48bc7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1567.324475][ T837] RAX: ffffffffffffffda RBX: 00007f48bbc15fa0 RCX: 00007f48bb99aeb9 [ 1567.332778][ T837] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1567.341196][ T837] RBP: 00007f48bc7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1567.349225][ T837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1567.357365][ T837] R13: 00007f48bbc16038 R14: 00007f48bbc15fa0 R15: 00007ffc2274b5d8 [ 1567.365427][ T837] [ 1567.709511][ T849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9252'. [ 1567.756303][ T849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9252'. [ 1567.800705][ T848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9252'. [ 1568.062884][ T865] netlink: 'syz.2.9260': attribute type 10 has an invalid length. [ 1568.341267][ T872] netlink: 'syz.3.9259': attribute type 1 has an invalid length. [ 1568.360091][ T872] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9259'. [ 1568.390575][ T872] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9259'. [ 1568.860347][ T882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9265'. [ 1569.778152][ T906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9273'. [ 1572.194772][ T945] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9284'. [ 1572.725406][ T956] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.9289'. [ 1572.736284][ T956] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9289'. [ 1573.435461][ T983] netlink: 184 bytes leftover after parsing attributes in process `syz.1.9305'. [ 1574.562191][ T1012] netlink: 'syz.0.9308': attribute type 21 has an invalid length. [ 1574.820956][ T1023] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9312'. [ 1574.843752][ T1023] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9312'. [ 1574.871405][ T1023] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9312'. [ 1574.912351][ T1023] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9312'. [ 1575.941509][ T1052] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9321'. [ 1581.119778][ T1115] net_ratelimit: 359 callbacks suppressed [ 1581.119802][ T1115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1581.137542][ T1115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1581.148064][ T1115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1581.159130][ T1115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1581.169898][ T1115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1581.180970][ T1115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1581.191730][ T1115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1581.212341][ T1115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1581.222959][ T1115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1581.241194][ T1115] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1586.575065][ T1113] netlink: 'syz.0.9345': attribute type 10 has an invalid length. [ 1587.030257][ T1145] netlink: 'syz.2.9356': attribute type 39 has an invalid length. [ 1587.171478][ T1150] netlink: 'syz.1.9359': attribute type 10 has an invalid length. [ 1587.188585][ T1152] sit0: entered allmulticast mode [ 1587.194561][ T1150] net_ratelimit: 29238 callbacks suppressed [ 1587.194580][ T1150] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1587.238303][ T1150] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1587.273579][ T1150] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1587.316241][ T1150] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1587.356146][ T1150] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1587.856482][ T1173] nr0: port 1(hsr0) entered blocking state [ 1587.862973][ T1173] nr0: port 1(hsr0) entered disabled state [ 1587.889553][ T1173] hsr0: entered allmulticast mode [ 1587.903036][ T1173] hsr_slave_0: entered allmulticast mode [ 1587.924215][ T1173] hsr_slave_1: entered allmulticast mode [ 1587.962287][ T1173] hsr0: entered promiscuous mode [ 1588.071569][ T1180] netlink: 'syz.3.9368': attribute type 39 has an invalid length. [ 1588.449203][ T1180] veth0_macvtap: left promiscuous mode [ 1588.608746][ T1182] netlink: 'syz.0.9369': attribute type 10 has an invalid length. [ 1588.621507][ T1182] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1588.632198][ T1182] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1588.652577][ T1182] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1588.673615][ T1182] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1588.684463][ T1182] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1588.885119][ T1193] netlink: 'syz.1.9373': attribute type 29 has an invalid length. [ 1588.914229][ T1193] netlink: 'syz.1.9373': attribute type 29 has an invalid length. [ 1588.924873][ T1192] netlink: 'syz.1.9373': attribute type 29 has an invalid length. [ 1588.963362][ T1192] netlink: 'syz.1.9373': attribute type 23 has an invalid length. [ 1588.984568][ T1192] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9373'. [ 1589.337382][ T1202] netlink: 'syz.2.9376': attribute type 10 has an invalid length. [ 1589.404512][ T1202] mac80211_hwsim hwsim90 .3c: left promiscuous mode [ 1589.431677][ T1202] mac80211_hwsim hwsim90 .3c: left allmulticast mode [ 1589.478542][ T1202] team0: Port device .3c removed [ 1589.724897][ T1217] FAULT_INJECTION: forcing a failure. [ 1589.724897][ T1217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1589.776272][ T1217] CPU: 1 PID: 1217 Comm: syz.2.9379 Not tainted syzkaller #0 [ 1589.783947][ T1217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1589.794239][ T1217] Call Trace: [ 1589.797595][ T1217] [ 1589.800594][ T1217] dump_stack_lvl+0x18c/0x250 [ 1589.805633][ T1217] ? show_regs_print_info+0x20/0x20 [ 1589.810933][ T1217] ? load_image+0x400/0x400 [ 1589.815508][ T1217] ? __might_fault+0xaa/0x120 [ 1589.820257][ T1217] ? __lock_acquire+0x7d40/0x7d40 [ 1589.825477][ T1217] should_fail_ex+0x39d/0x4d0 [ 1589.830236][ T1217] _copy_from_user+0x2f/0xe0 [ 1589.834903][ T1217] generic_map_update_batch+0x54b/0x810 [ 1589.840571][ T1217] ? rcu_read_unlock+0xa0/0xa0 [ 1589.845566][ T1217] ? __fdget+0x180/0x210 [ 1589.849904][ T1217] ? rcu_read_unlock+0xa0/0xa0 [ 1589.854756][ T1217] bpf_map_do_batch+0x3d7/0x610 [ 1589.859961][ T1217] __sys_bpf+0x381/0x890 [ 1589.864409][ T1217] ? bpf_link_show_fdinfo+0x390/0x390 [ 1589.869869][ T1217] ? lock_chain_count+0x20/0x20 [ 1589.874774][ T1217] __x64_sys_bpf+0x7c/0x90 [ 1589.879257][ T1217] do_syscall_64+0x55/0xa0 [ 1589.884241][ T1217] ? clear_bhb_loop+0x40/0x90 [ 1589.889149][ T1217] ? clear_bhb_loop+0x40/0x90 [ 1589.894070][ T1217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1589.900011][ T1217] RIP: 0033:0x7fc896b9aeb9 [ 1589.904484][ T1217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.924319][ T1217] RSP: 002b:00007fc897b44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1589.933579][ T1217] RAX: ffffffffffffffda RBX: 00007fc896e15fa0 RCX: 00007fc896b9aeb9 [ 1589.941610][ T1217] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1589.949620][ T1217] RBP: 00007fc897b44090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.957633][ T1217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1589.965912][ T1217] R13: 00007fc896e16038 R14: 00007fc896e15fa0 R15: 00007ffd188dff98 [ 1589.974221][ T1217] [ 1590.457360][ T1234] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9384'. [ 1590.515255][ T1234] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9384'. [ 1590.540517][ T1232] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9384'. [ 1591.821926][ T1263] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9393'. [ 1593.155375][ T1290] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9404'. [ 1598.384096][ T1358] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.9426'. [ 1598.416733][ T1358] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.9426'. [ 1598.447103][ T1355] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.9426'. [ 1598.464273][ T1358] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.9426'. [ 1603.013384][ T1425] netlink: 'syz.0.9448': attribute type 2 has an invalid length. [ 1603.027931][ T1425] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9448'. [ 1603.077548][ T1428] netlink: 'syz.2.9450': attribute type 4 has an invalid length. [ 1603.099026][ T1428] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9450'. [ 1603.112739][ T1428] net_ratelimit: 119 callbacks suppressed [ 1603.112761][ T1428] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1603.358381][ T1433] netlink: 'syz.2.9452': attribute type 10 has an invalid length. [ 1603.386774][ T1433] mac80211_hwsim hwsim90 .3c: entered promiscuous mode [ 1603.414334][ T1433] mac80211_hwsim hwsim90 .3c: entered allmulticast mode [ 1603.443275][ T1433] team0: Port device .3c added [ 1605.650944][ T1501] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.9469'. [ 1606.270769][ T1518] netlink: 'syz.1.9475': attribute type 10 has an invalid length. [ 1606.484747][ T1518] hsr_slave_0 (unregistering): left promiscuous mode [ 1607.074619][ T1524] netlink: 'syz.0.9476': attribute type 10 has an invalid length. [ 1607.103849][ T1524] geneve0: entered promiscuous mode [ 1607.149187][ T1524] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1607.245633][ T1535] netlink: 'syz.2.9481': attribute type 39 has an invalid length. [ 1607.744175][ T1552] Q6\bY4: renamed from lo (while UP) [ 1607.800804][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.810184][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.550297][ T1564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9492'. [ 1608.695452][ T1563] netlink: 'syz.3.9493': attribute type 5 has an invalid length. [ 1608.712616][ T1567] netlink: 'syz.0.9494': attribute type 10 has an invalid length. [ 1608.722555][ T1563] netlink: 'syz.3.9493': attribute type 1 has an invalid length. [ 1608.756304][ T1563] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.9493'. [ 1608.762850][ T1567] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1608.806256][ T1567] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1608.841634][ T1563] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1608.848279][ T1567] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1608.853500][ T1563] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1608.904001][ T1567] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1608.932229][ T1567] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1609.911380][ T1598] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9503'. [ 1609.944638][ T1598] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9503'. [ 1609.954735][ T1592] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9503'. [ 1610.403803][ T1601] netlink: 'syz.2.9506': attribute type 10 has an invalid length. [ 1610.476808][ T1601] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1610.552923][ T1601] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1610.597366][ T1601] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1610.873044][ T1608] syz.1.9509: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1610.968817][ T1608] CPU: 0 PID: 1608 Comm: syz.1.9509 Not tainted syzkaller #0 [ 1610.976773][ T1608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1610.987610][ T1608] Call Trace: [ 1610.991062][ T1608] [ 1610.994078][ T1608] dump_stack_lvl+0x18c/0x250 [ 1610.998843][ T1608] ? show_regs_print_info+0x20/0x20 [ 1611.004257][ T1608] ? load_image+0x400/0x400 [ 1611.008835][ T1608] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1611.015523][ T1608] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1611.022263][ T1608] warn_alloc+0x246/0x340 [ 1611.027210][ T1608] ? stack_trace_save+0xaa/0x100 [ 1611.032333][ T1608] ? zone_watermark_ok_safe+0x230/0x230 [ 1611.038333][ T1608] ? kasan_set_track+0x5f/0x70 [ 1611.043174][ T1608] ? kasan_set_track+0x4e/0x70 [ 1611.048312][ T1608] ? __kasan_kmalloc+0x8f/0xa0 [ 1611.053335][ T1608] ? xsk_init_queue+0xad/0x100 [ 1611.059404][ T1608] ? xsk_setsockopt+0x4e5/0x760 [ 1611.064650][ T1608] ? do_sock_setsockopt+0x175/0x1a0 [ 1611.070974][ T1608] ? __x64_sys_setsockopt+0x182/0x200 [ 1611.077132][ T1608] __vmalloc_node_range+0x126/0x1330 [ 1611.082875][ T1608] ? free_vm_area+0x50/0x50 [ 1611.087923][ T1608] vmalloc_user+0x74/0x80 [ 1611.092705][ T1608] ? xskq_create+0xbf/0x170 [ 1611.097359][ T1608] xskq_create+0xbf/0x170 [ 1611.102020][ T1608] xsk_init_queue+0xad/0x100 [ 1611.107055][ T1608] xsk_setsockopt+0x4e5/0x760 [ 1611.111992][ T1608] ? xsk_poll+0x680/0x680 [ 1611.116686][ T1608] ? __fget_files+0x28/0x4b0 [ 1611.121357][ T1608] ? __fget_files+0x28/0x4b0 [ 1611.126499][ T1608] ? aa_sock_opt_perm+0x74/0x100 [ 1611.131802][ T1608] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1611.137753][ T1608] ? security_socket_setsockopt+0x7e/0xa0 [ 1611.143733][ T1608] ? xsk_poll+0x680/0x680 [ 1611.148458][ T1608] do_sock_setsockopt+0x175/0x1a0 [ 1611.154242][ T1608] ? __fdget+0x180/0x210 [ 1611.158844][ T1608] __x64_sys_setsockopt+0x182/0x200 [ 1611.164216][ T1608] do_syscall_64+0x55/0xa0 [ 1611.168739][ T1608] ? clear_bhb_loop+0x40/0x90 [ 1611.173663][ T1608] ? clear_bhb_loop+0x40/0x90 [ 1611.178516][ T1608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1611.184710][ T1608] RIP: 0033:0x7f902839aeb9 [ 1611.189224][ T1608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1611.209252][ T1608] RSP: 002b:00007f90292a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1611.218212][ T1608] RAX: ffffffffffffffda RBX: 00007f9028616090 RCX: 00007f902839aeb9 [ 1611.226353][ T1608] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1611.234571][ T1608] RBP: 00007f9028408c1f R08: 0000000000000004 R09: 0000000000000000 [ 1611.243090][ T1608] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1611.251341][ T1608] R13: 00007f9028616128 R14: 00007f9028616090 R15: 00007ffc45048648 [ 1611.259524][ T1608] [ 1611.314152][ T755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1611.338997][ T755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1611.353291][ T755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1611.372670][ T755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1611.383293][ T1608] Mem-Info: [ 1611.392138][ T755] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1611.396330][ T1608] active_anon:24490 inactive_anon:0 isolated_anon:0 [ 1611.396330][ T1608] active_file:19197 inactive_file:40524 isolated_file:0 [ 1611.396330][ T1608] unevictable:768 dirty:127 writeback:0 [ 1611.396330][ T1608] slab_reclaimable:10913 slab_unreclaimable:101669 [ 1611.396330][ T1608] mapped:29794 shmem:14889 pagetables:558 [ 1611.396330][ T1608] sec_pagetables:0 bounce:0 [ 1611.396330][ T1608] kernel_misc_reclaimable:0 [ 1611.396330][ T1608] free:1300432 free_pcp:12650 free_cma:0 [ 1611.455639][ T755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1611.463689][ T1608] Node 0 active_anon:95260kB inactive_anon:0kB active_file:76788kB inactive_file:161892kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119176kB dirty:508kB writeback:0kB shmem:55320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12012kB pagetables:2232kB sec_pagetables:0kB all_unreclaimable? no [ 1611.542844][ T1608] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1611.606180][ T1608] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1611.666052][ T1608] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1611.671973][ T1608] Node 0 DMA32 free:1307280kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:86524kB inactive_anon:0kB active_file:76788kB inactive_file:161076kB unevictable:1536kB writepending:508kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:26828kB local_pcp:5740kB free_cma:0kB [ 1611.747502][ T1608] lowmem_reserve[]: 0 0 0 0 0 [ 1611.752457][ T1608] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1611.816102][ T1608] lowmem_reserve[]: 0 0 0 0 0 [ 1611.827729][ T1608] Node 1 Normal free:3887684kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24364kB local_pcp:11012kB free_cma:0kB [ 1611.900187][ T1608] lowmem_reserve[]: 0 0 0 0 0 [ 1611.905065][ T1608] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1611.946038][ T1608] Node 0 DMA32: 917*4kB (UME) 312*8kB (UME) 613*16kB (UME) 887*32kB (UME) 371*64kB (UME) 92*128kB (UM) 46*256kB (UM) 40*512kB (UME) 14*1024kB (ME) 15*2048kB (UME) 285*4096kB (UM) = 1324548kB [ 1611.985995][ T1608] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1612.016216][ T1608] Node 1 Normal: 203*4kB (UE) 65*8kB (UME) 39*16kB (UME) 63*32kB (UME) 25*64kB (UE) 3*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 946*4096kB (M) = 3887684kB [ 1612.056081][ T1608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1612.093107][ T1608] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1612.134201][ T1608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1612.165533][ T1608] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1612.202219][ T1608] 64835 total pagecache pages [ 1612.207734][ T1608] 0 pages in swap cache [ 1612.212334][ T1608] Free swap = 124996kB [ 1612.236305][ T1608] Total swap = 124996kB [ 1612.252254][ T1608] 2097051 pages RAM [ 1612.265462][ T1608] 0 pages HighMem/MovableOnly [ 1612.276195][ T1608] 416922 pages reserved [ 1612.280533][ T1608] 0 pages cma reserved [ 1612.694605][ T1470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.918425][ T1470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.048861][ T1470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.187452][ T1470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.354745][ T1611] chnl_net:caif_netlink_parms(): no params data found [ 1613.481940][ T1637] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9517'. [ 1613.546791][ T5786] Bluetooth: hci2: command tx timeout [ 1613.586454][ T1637] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9517'. [ 1613.888441][ T1647] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9519'. [ 1613.910478][ T1611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.922538][ T1611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.942124][ T1611] bridge_slave_0: entered allmulticast mode [ 1613.967795][ T1611] bridge_slave_0: entered promiscuous mode [ 1614.002287][ T1611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.022615][ T1611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.030946][ T1611] bridge_slave_1: entered allmulticast mode [ 1614.039864][ T1611] bridge_slave_1: entered promiscuous mode [ 1614.221595][ T1659] netlink: 'syz.1.9522': attribute type 5 has an invalid length. [ 1614.429229][ T1611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.507638][ T1611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.538212][ T1672] netlink: 'syz.2.9523': attribute type 5 has an invalid length. [ 1614.609275][ T1672] netlink: 'syz.2.9523': attribute type 1 has an invalid length. [ 1614.666160][ T1672] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.9523'. [ 1614.928968][ T1683] net_ratelimit: 1 callbacks suppressed [ 1614.928993][ T1683] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1614.943325][ T1683] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1615.083133][ T1673] netlink: 'syz.3.9524': attribute type 10 has an invalid length. [ 1615.249873][ T1673] hsr_slave_0 (unregistering): left promiscuous mode [ 1615.398117][ T1611] team0: Port device team_slave_0 added [ 1615.435903][ T1611] team0: Port device team_slave_1 added [ 1615.480283][ T1611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.516177][ T1611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1615.563817][ T1611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1615.632196][ T5786] Bluetooth: hci2: command tx timeout [ 1615.651490][ T1689] netlink: 'syz.2.9528': attribute type 10 has an invalid length. [ 1615.670754][ T1689] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9528'. [ 1615.723693][ T1689] bridge0: port 4(ipvlan1) entered blocking state [ 1615.746378][ T1689] bridge0: port 4(ipvlan1) entered disabled state [ 1615.763412][ T1689] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1615.791377][ T1611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1615.805261][ T1611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1615.841053][ T1611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1616.214030][ T1611] hsr_slave_0: entered promiscuous mode [ 1616.231532][ T1611] hsr_slave_1: entered promiscuous mode [ 1616.252271][ T1611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1616.268626][ T1611] Cannot create hsr debugfs directory [ 1616.485143][ T1699] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9533'. [ 1617.205704][ T1722] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9544'. [ 1617.339019][ T1728] netlink: 'syz.1.9536': attribute type 5 has an invalid length. [ 1617.355476][ T1728] netlink: 'syz.1.9536': attribute type 1 has an invalid length. [ 1617.376202][ T1728] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.9536'. [ 1617.696964][ T5786] Bluetooth: hci2: command tx timeout [ 1618.049597][ T1735] netlink: 'syz.2.9538': attribute type 10 has an invalid length. [ 1618.336619][ T1735] hsr_slave_0 (unregistering): left promiscuous mode [ 1619.248986][ T1750] netlink: 'syz.3.9546': attribute type 10 has an invalid length. [ 1619.293103][ T1750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9546'. [ 1619.311371][ T1750] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1619.521612][ T1751] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.9545'. [ 1619.777284][ T5786] Bluetooth: hci2: command tx timeout [ 1619.856674][ T1470] hsr0: left allmulticast mode [ 1619.861562][ T1470] hsr_slave_0: left allmulticast mode [ 1619.876290][ T1470] hsr_slave_1: left allmulticast mode [ 1619.881889][ T1470] hsr0: left promiscuous mode [ 1619.895035][ T1470] nr0: port 1(hsr0) entered disabled state [ 1619.905624][ T1470] vlan0: left allmulticast mode [ 1619.916035][ T1470] vlan0: left promiscuous mode [ 1619.924367][ T1470] : port 1(vlan0) entered disabled state [ 1619.953118][ T1470] hsr_slave_0: left promiscuous mode [ 1619.964947][ T1470] hsr_slave_1: left promiscuous mode [ 1619.973587][ T1470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1619.982222][ T1470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1619.995219][ T1470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1620.004044][ T1470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1620.055783][ T1470] veth1_macvtap: left promiscuous mode [ 1620.070007][ T1470] veth0_macvtap: left promiscuous mode [ 1620.078837][ T1762] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9549'. [ 1620.080426][ T1470] veth1_vlan: left promiscuous mode [ 1620.091082][ T1762] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 1620.105644][ T1470] veth0_vlan: left promiscuous mode [ 1620.374737][ T1470] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1621.107337][ T1470] team0 (unregistering): Port device team_slave_1 removed [ 1621.176041][ T1470] team0 (unregistering): Port device team_slave_0 removed [ 1621.234455][ T1470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1621.304502][ T1470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1621.804067][ T1470] bond0 (unregistering): Released all slaves [ 1621.863839][ T1611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1621.885592][ T1762] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9549'. [ 1621.925219][ T1611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1621.967774][ T1611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1621.990874][ T1611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1622.391864][ T1611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1622.475852][ T1611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1622.599096][T32545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.606479][T32545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1622.764234][ T1469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.771866][ T1469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1623.752376][ T1804] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.9558'. [ 1623.801022][ T1804] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.9558'. [ 1623.861738][ T1807] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.9558'. [ 1624.535270][ T1611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1624.679439][ T1815] wg2: entered promiscuous mode [ 1624.684853][ T1815] wg2: entered allmulticast mode [ 1624.752261][ T1611] veth0_vlan: entered promiscuous mode [ 1624.794216][ T1611] veth1_vlan: entered promiscuous mode [ 1624.887101][ T1611] veth0_macvtap: entered promiscuous mode [ 1624.910338][ T1611] veth1_macvtap: entered promiscuous mode [ 1624.968570][ T1611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1624.996170][ T1611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.015796][ T1611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.047420][ T1611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.072926][ T1611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.106064][ T1611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.136964][ T1611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.161413][ T1611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.184821][ T1611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1625.233816][ T1611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.260030][ T1611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.303812][ T1611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.333822][ T1611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.350505][ T1611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.363960][ T1611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.390307][ T1611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.409273][ T1611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.425367][ T1611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1625.468264][ T1611] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.491616][ T1611] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.519376][ T1611] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.544486][ T1611] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.829614][ T1481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1625.867513][ T1481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1625.898088][ T1840] netlink: 'syz.1.9564': attribute type 9 has an invalid length. [ 1625.905915][ T1840] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.9564'. [ 1625.920546][T32545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1625.940001][T32545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1626.106836][ T1849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9565'. [ 1626.195599][ T1853] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9566'. [ 1626.205405][ T1849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9565'. [ 1626.324390][ T1853] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9566'. [ 1626.412182][ T1843] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9565'. [ 1626.474269][ T1848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9566'. [ 1627.159856][ T1886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9575'. [ 1627.869913][ T755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1627.882698][ T755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1627.894283][ T755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1627.968532][ T755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1627.981050][ T755] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1627.991664][ T755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1630.096309][ T5786] Bluetooth: hci1: command tx timeout [ 1630.901447][ T1486] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.073882][ T1486] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.133431][ T1922] netlink: 'syz.0.9585': attribute type 10 has an invalid length. [ 1631.209282][ T1922] team0: Port device wlan1 added [ 1631.329052][ T1486] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.579401][ T1486] bond0: (slave netdevsim0): Releasing backup interface [ 1631.608972][ T1486] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.172531][ T1901] chnl_net:caif_netlink_parms(): no params data found [ 1632.177963][ T5786] Bluetooth: hci1: command tx timeout [ 1632.509441][ T1901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.543511][ T1901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.576261][ T1901] bridge_slave_0: entered allmulticast mode [ 1632.584189][ T1901] bridge_slave_0: entered promiscuous mode [ 1632.813762][ T1901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.846361][ T1901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.867545][ T1901] bridge_slave_1: entered allmulticast mode [ 1632.887529][ T1901] bridge_slave_1: entered promiscuous mode [ 1633.040967][ T1901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.087434][ T1901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1633.319606][ T1901] team0: Port device team_slave_0 added [ 1633.410321][ T1901] team0: Port device team_slave_1 added [ 1633.417260][ T1999] netlink: 'syz.2.9607': attribute type 39 has an invalid length. [ 1633.545042][ T2004] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.9608'. [ 1633.741816][ T1901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1633.749226][ T1901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1633.776921][ T1901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1633.790444][ T1901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1633.807307][ T1901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1633.834195][ T1901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1634.256586][ T5786] Bluetooth: hci1: command tx timeout [ 1634.268339][ T1901] hsr_slave_0: entered promiscuous mode [ 1634.296421][ T1901] hsr_slave_1: entered promiscuous mode [ 1634.320118][ T1901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1634.346395][ T1901] Cannot create hsr debugfs directory [ 1634.940926][ T1486] bond0: (slave .3c): Releasing backup interface [ 1635.034569][ T2047] netlink: 'syz.0.9615': attribute type 10 has an invalid length. [ 1635.060819][ T2047] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9615'. [ 1635.077164][ T2047] team0: entered promiscuous mode [ 1635.082521][ T2047] team_slave_0: entered promiscuous mode [ 1635.093249][ T2047] team_slave_1: entered promiscuous mode [ 1635.100339][ T2047] mac80211_hwsim hwsim112 wlan1: entered promiscuous mode [ 1635.111434][ T2047] team0: entered allmulticast mode [ 1635.125091][ T2047] team_slave_0: entered allmulticast mode [ 1635.133835][ T2047] team_slave_1: entered allmulticast mode [ 1635.141118][ T2047] mac80211_hwsim hwsim112 wlan1: entered allmulticast mode [ 1635.151575][ T2047] bridge0: port 3(team0) entered blocking state [ 1635.159326][ T2047] bridge0: port 3(team0) entered disabled state [ 1635.173382][ T2047] bridge0: port 3(team0) entered blocking state [ 1635.180176][ T2047] bridge0: port 3(team0) entered forwarding state [ 1635.539795][ T1486] vlan0: left allmulticast mode [ 1635.545308][ T1486] vlan0: left promiscuous mode [ 1635.560465][ T1486] : port 1(vlan0) entered disabled state [ 1635.666420][ T1486] hsr_slave_1: left promiscuous mode [ 1635.705777][ T1486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1635.717580][ T1486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1635.744560][ T1486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1635.753102][ T1486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1635.763510][ T1486] bridge_slave_1: left allmulticast mode [ 1635.769858][ T1486] bridge_slave_1: left promiscuous mode [ 1635.776026][ T1486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.788661][ T1486] bridge_slave_0: left promiscuous mode [ 1635.801384][ T1486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.934720][ T1486] veth1_macvtap: left promiscuous mode [ 1635.954112][ T1486] veth1_vlan: left promiscuous mode [ 1635.965320][ T1486] veth0_vlan: left promiscuous mode [ 1636.336886][ T5786] Bluetooth: hci1: command tx timeout [ 1636.690129][ T2082] sctp: [Deprecated]: syz.1.9627 (pid 2082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1636.690129][ T2082] Use struct sctp_sack_info instead [ 1637.415504][ T1486] team0 (unregistering): Port device team_slave_1 removed [ 1637.512811][ T1486] team0 (unregistering): Port device team_slave_0 removed [ 1637.595191][ T1486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1637.687937][ T1486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1638.209715][ T1486] bond0 (unregistering): Released all slaves [ 1638.339982][ T2086] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9630'. [ 1639.551509][ T1901] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1639.581608][ T1901] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1639.604891][ T1901] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1639.638143][ T1901] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1639.904063][ T1901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1639.959144][ T1901] 8021q: adding VLAN 0 to HW filter on device team0 [ 1639.999777][ T1483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.007106][ T1483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1640.018207][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.025838][ T1483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1640.114788][ T1901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1640.167002][ T1901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1640.215643][ T2141] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9642'. [ 1640.275611][ T2146] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9643'. [ 1640.333507][ T2146] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9643'. [ 1641.126998][ T2165] netlink: 'syz.2.9648': attribute type 39 has an invalid length. [ 1641.402539][ T2176] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9652'. [ 1641.438147][ T1901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1641.639449][ T1901] veth0_vlan: entered promiscuous mode [ 1641.684401][ T1901] veth1_vlan: entered promiscuous mode [ 1641.821552][ T1901] veth0_macvtap: entered promiscuous mode [ 1641.941656][ T1901] veth1_macvtap: entered promiscuous mode [ 1642.174463][ T1901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.192919][ T1901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.249489][ T1901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.336784][ T1901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.394057][ T1901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.447938][ T1901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.480544][ T1901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.526261][ T1901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.554073][ T1901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1642.628991][ T1901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.642261][ T1901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.662709][ T1901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.688790][ T1901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.726087][ T1901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.748630][ T1901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.776027][ T1901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.800579][ T1901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.840901][ T1901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1642.920298][ T1901] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.960479][ T1901] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.991969][ T1901] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.023998][ T1901] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.155039][ T2216] netlink: 'syz.0.9659': attribute type 10 has an invalid length. [ 1643.174002][ T2216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9659'. [ 1643.184112][ T2216] ipvlan1: entered promiscuous mode [ 1643.194261][ T2216] ipvlan1: entered allmulticast mode [ 1643.205035][ T2216] veth0_vlan: entered allmulticast mode [ 1643.222267][ T2216] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1643.288886][ T2218] netlink: 'syz.1.9660': attribute type 33 has an invalid length. [ 1643.307482][ T2218] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9660'. [ 1643.396291][ T2218] `: renamed from team0 (while UP) [ 1643.464250][ T1470] bridge0: port 3(`) entered blocking state [ 1643.470912][ T1470] bridge0: port 3(`) entered forwarding state [ 1643.523067][ T2230] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9662'. [ 1643.644595][ T1481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.683589][ T1481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.939369][T32545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.982337][T32545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.267413][ T2248] netlink: 'syz.1.9667': attribute type 10 has an invalid length. [ 1644.275651][ T2248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9667'. [ 1644.609908][ T2262] netlink: 'syz.0.9670': attribute type 10 has an invalid length. [ 1644.788175][ T2262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1644.844321][ T2262] bond0: entered promiscuous mode [ 1644.865074][ T2262] bond_slave_0: entered promiscuous mode [ 1644.896298][ T2262] bond_slave_1: entered promiscuous mode [ 1644.933025][ T2262] bond0: entered allmulticast mode [ 1644.966185][ T2262] bond_slave_0: entered allmulticast mode [ 1644.972037][ T2262] bond_slave_1: entered allmulticast mode [ 1645.035786][ T2262] team0: Port device bond0 added [ 1645.409557][ T2285] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.9676'. [ 1646.541799][ T2297] netlink: 'syz.2.9680': attribute type 21 has an invalid length. [ 1649.764014][ T2399] netlink: 'syz.1.9705': attribute type 2 has an invalid length. [ 1649.775541][ T2399] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9705'. [ 1650.377737][ T2406] @: renamed from bond_slave_0 (while UP) [ 1650.429294][ T2411] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9706'. [ 1650.438880][ T2411] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9706'. [ 1650.449788][ T2401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9706'. [ 1650.612867][ T2413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9710'. [ 1650.805111][ T2424] netlink: 'syz.1.9712': attribute type 39 has an invalid length. [ 1650.963186][ T2433] raw_sendmsg: syz.2.9715 forgot to set AF_INET. Fix it! [ 1651.320862][ T2428] netlink: 'syz.2.9715': attribute type 10 has an invalid length. [ 1651.965828][ T2470] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.9724'. [ 1652.392353][ T2477] netlink: 'syz.0.9726': attribute type 15 has an invalid length. [ 1653.803091][ T2528] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.9737'. [ 1654.221473][ T2542] netlink: 'syz.3.9746': attribute type 13 has an invalid length. [ 1654.265875][ T2542] netlink: 160 bytes leftover after parsing attributes in process `syz.3.9746'. [ 1654.978152][ T2542] erspan0: refused to change device tx_queue_len [ 1654.984824][ T2542] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1655.420521][ T2557] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.9749'. [ 1655.470913][ T2559] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9749'. [ 1656.389497][ T2574] netlink: 'syz.2.9753': attribute type 39 has an invalid length. [ 1656.908115][ T2590] netlink: 'syz.0.9757': attribute type 29 has an invalid length. [ 1656.918052][ T2590] netlink: 'syz.0.9757': attribute type 29 has an invalid length. [ 1656.943644][ T2590] netlink: 'syz.0.9757': attribute type 29 has an invalid length. [ 1658.685609][ T2617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9765'. [ 1658.778071][ T755] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1658.793190][ T755] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1658.802717][ T755] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1658.831039][ T755] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1658.843088][ T755] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1658.850923][ T755] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1660.313284][ T1481] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.720203][ T1481] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.924883][ T5786] Bluetooth: hci5: command tx timeout [ 1661.034667][ T1481] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.072298][ T2620] chnl_net:caif_netlink_parms(): no params data found [ 1661.228683][ T1481] bond0: (slave netdevsim0): Releasing backup interface [ 1661.247568][ T1481] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1661.270989][ T1481] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.413824][ T2620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.454573][ T2620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.521936][ T2620] bridge_slave_0: entered allmulticast mode [ 1661.581914][ T2620] bridge_slave_0: entered promiscuous mode [ 1661.621359][ T2620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.648647][ T2620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.663562][ T2620] bridge_slave_1: entered allmulticast mode [ 1661.672107][ T2620] bridge_slave_1: entered promiscuous mode [ 1661.812132][ T2686] mac80211_hwsim hwsim113 wlan0: entered promiscuous mode [ 1661.846187][ T2686] mac80211_hwsim hwsim113 wlan0: entered allmulticast mode [ 1662.007330][ T2620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1662.032546][ T2620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1662.166710][ T2620] team0: Port device team_slave_0 added [ 1662.185028][ T2620] team0: Port device team_slave_1 added [ 1662.591567][ T2620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1662.613783][ T2620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1662.708989][ T2620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1662.945650][ T2620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1662.976200][ T5786] Bluetooth: hci5: command tx timeout [ 1662.982373][ T2620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.046018][ T2620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1663.073452][ T2718] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9784'. [ 1665.041384][ T2718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1665.066629][ T5786] Bluetooth: hci5: command tx timeout [ 1665.541590][ T2718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1665.809385][ T2718] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1665.995595][ T2718] bond0 (unregistering): Released all slaves [ 1666.191710][ T2731] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.9784'. [ 1666.673659][ T2753] netlink: 'syz.0.9790': attribute type 39 has an invalid length. [ 1666.737160][ T2752] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9790'. [ 1666.850118][ T2765] FAULT_INJECTION: forcing a failure. [ 1666.850118][ T2765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1666.867394][ T2765] CPU: 1 PID: 2765 Comm: syz.3.9793 Not tainted syzkaller #0 [ 1666.874860][ T2765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1666.885243][ T2765] Call Trace: [ 1666.888743][ T2765] [ 1666.891721][ T2765] dump_stack_lvl+0x18c/0x250 [ 1666.896473][ T2765] ? show_regs_print_info+0x20/0x20 [ 1666.901828][ T2765] ? load_image+0x400/0x400 [ 1666.906406][ T2765] ? __might_fault+0xaa/0x120 [ 1666.911139][ T2765] ? __lock_acquire+0x7d40/0x7d40 [ 1666.916235][ T2765] should_fail_ex+0x39d/0x4d0 [ 1666.920986][ T2765] _copy_from_user+0x2f/0xe0 [ 1666.925648][ T2765] generic_map_update_batch+0x59a/0x810 [ 1666.931270][ T2765] ? rcu_read_unlock+0xa0/0xa0 [ 1666.936177][ T2765] ? __fdget+0x180/0x210 [ 1666.940480][ T2765] ? rcu_read_unlock+0xa0/0xa0 [ 1666.945303][ T2765] bpf_map_do_batch+0x3d7/0x610 [ 1666.950217][ T2765] __sys_bpf+0x381/0x890 [ 1666.954522][ T2765] ? bpf_link_show_fdinfo+0x390/0x390 [ 1666.959969][ T2765] ? lock_chain_count+0x20/0x20 [ 1666.964885][ T2765] __x64_sys_bpf+0x7c/0x90 [ 1666.969352][ T2765] do_syscall_64+0x55/0xa0 [ 1666.973830][ T2765] ? clear_bhb_loop+0x40/0x90 [ 1666.978577][ T2765] ? clear_bhb_loop+0x40/0x90 [ 1666.983333][ T2765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1666.989321][ T2765] RIP: 0033:0x7fc1e039aeb9 [ 1666.993784][ T2765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1667.013571][ T2765] RSP: 002b:00007fc1e11ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1667.022048][ T2765] RAX: ffffffffffffffda RBX: 00007fc1e0615fa0 RCX: 00007fc1e039aeb9 [ 1667.030167][ T2765] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1667.038188][ T2765] RBP: 00007fc1e11ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1667.046477][ T2765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1667.054506][ T2765] R13: 00007fc1e0616038 R14: 00007fc1e0615fa0 R15: 00007ffff49e9de8 [ 1667.062557][ T2765] [ 1667.142013][ T5786] Bluetooth: hci5: command tx timeout [ 1667.384323][ T2620] hsr_slave_0: entered promiscuous mode [ 1667.407396][ T2620] hsr_slave_1: entered promiscuous mode [ 1667.416271][ T2620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1667.424397][ T2620] Cannot create hsr debugfs directory [ 1667.688750][ T2788] netlink: 'syz.3.9798': attribute type 10 has an invalid length. [ 1667.697534][ T2788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9798'. [ 1667.708054][ T2788] ipvlan1: entered promiscuous mode [ 1667.713696][ T2788] ipvlan1: entered allmulticast mode [ 1667.719790][ T2788] veth0_vlan: entered allmulticast mode [ 1667.729141][ T2788] bridge0: port 3(ipvlan1) entered blocking state [ 1667.736418][ T2788] bridge0: port 3(ipvlan1) entered disabled state [ 1667.746559][ T2788] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1669.233216][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.240518][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.963241][ T1481] [ 1670.965669][ T1481] ====================================================== [ 1670.972724][ T1481] WARNING: possible circular locking dependency detected [ 1670.979802][ T1481] syzkaller #0 Not tainted [ 1670.984254][ T1481] ------------------------------------------------------ [ 1670.991489][ T1481] kworker/u4:21/1481 is trying to acquire lock: [ 1670.997773][ T1481] ffff888078234d00 (team->team_lock_key#15){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 1671.007605][ T1481] [ 1671.007605][ T1481] but task is already holding lock: [ 1671.015016][ T1481] ffff88802e3b0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1671.025440][ T1481] [ 1671.025440][ T1481] which lock already depends on the new lock. [ 1671.025440][ T1481] [ 1671.035887][ T1481] [ 1671.035887][ T1481] the existing dependency chain (in reverse order) is: [ 1671.044955][ T1481] [ 1671.044955][ T1481] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1671.052918][ T1481] __mutex_lock+0x136/0xcc0 [ 1671.058088][ T1481] ieee80211_open+0x144/0x200 [ 1671.063335][ T1481] __dev_open+0x2cb/0x430 [ 1671.068325][ T1481] dev_open+0xab/0x190 [ 1671.073073][ T1481] team_add_slave+0xaf8/0x26d0 [ 1671.078505][ T1481] do_setlink+0xdfe/0x4130 [ 1671.083492][ T1481] rtnl_newlink+0x17da/0x20a0 [ 1671.088747][ T1481] rtnetlink_rcv_msg+0x869/0xfa0 [ 1671.094347][ T1481] netlink_rcv_skb+0x241/0x4d0 [ 1671.099775][ T1481] netlink_unicast+0x751/0x8d0 [ 1671.105201][ T1481] netlink_sendmsg+0x8d0/0xbf0 [ 1671.110584][ T1481] ____sys_sendmsg+0x5ba/0x960 [ 1671.115945][ T1481] ___sys_sendmsg+0x2a6/0x360 [ 1671.121289][ T1481] __se_sys_sendmsg+0x1c2/0x2b0 [ 1671.126717][ T1481] do_syscall_64+0x55/0xa0 [ 1671.131709][ T1481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1671.138185][ T1481] [ 1671.138185][ T1481] -> #0 (team->team_lock_key#15){+.+.}-{3:3}: [ 1671.146517][ T1481] __lock_acquire+0x2df1/0x7d40 [ 1671.151945][ T1481] lock_acquire+0x19e/0x420 [ 1671.157027][ T1481] __mutex_lock+0x136/0xcc0 [ 1671.162113][ T1481] team_del_slave+0x32/0x1c0 [ 1671.167288][ T1481] team_device_event+0x28d/0xa20 [ 1671.172801][ T1481] notifier_call_chain+0x197/0x380 [ 1671.178521][ T1481] unregister_netdevice_many_notify+0x100d/0x1900 [ 1671.185528][ T1481] unregister_netdevice_queue+0x32c/0x370 [ 1671.191936][ T1481] _cfg80211_unregister_wdev+0x16b/0x580 [ 1671.198153][ T1481] ieee80211_remove_interfaces+0x49e/0x690 [ 1671.204536][ T1481] ieee80211_unregister_hw+0x5d/0x2a0 [ 1671.210497][ T1481] mac80211_hwsim_del_radio+0x289/0x480 [ 1671.216672][ T1481] hwsim_exit_net+0x58d/0x650 [ 1671.221962][ T1481] cleanup_net+0x70a/0xbb0 [ 1671.226989][ T1481] process_scheduled_works+0xa5d/0x15d0 [ 1671.233113][ T1481] worker_thread+0xa55/0xfc0 [ 1671.238377][ T1481] kthread+0x2fa/0x390 [ 1671.243025][ T1481] ret_from_fork+0x48/0x80 [ 1671.248010][ T1481] ret_from_fork_asm+0x11/0x20 [ 1671.253346][ T1481] [ 1671.253346][ T1481] other info that might help us debug this: [ 1671.253346][ T1481] [ 1671.263789][ T1481] Possible unsafe locking scenario: [ 1671.263789][ T1481] [ 1671.271415][ T1481] CPU0 CPU1 [ 1671.277512][ T1481] ---- ---- [ 1671.283026][ T1481] lock(&rdev->wiphy.mtx); [ 1671.287583][ T1481] lock(team->team_lock_key#15); [ 1671.295301][ T1481] lock(&rdev->wiphy.mtx); [ 1671.302399][ T1481] lock(team->team_lock_key#15); [ 1671.307665][ T1481] [ 1671.307665][ T1481] *** DEADLOCK *** [ 1671.307665][ T1481] [ 1671.316030][ T1481] 5 locks held by kworker/u4:21/1481: [ 1671.321532][ T1481] #0: ffff888017c73938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1671.332498][ T1481] #1: ffffc9001739fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1671.343370][ T1481] #2: ffffffff8e3b3150 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1671.352953][ T1481] #3: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1671.362874][ T1481] #4: ffff88802e3b0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1671.373757][ T1481] [ 1671.373757][ T1481] stack backtrace: [ 1671.379772][ T1481] CPU: 1 PID: 1481 Comm: kworker/u4:21 Not tainted syzkaller #0 [ 1671.387547][ T1481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1671.397652][ T1481] Workqueue: netns cleanup_net [ 1671.402486][ T1481] Call Trace: [ 1671.405809][ T1481] [ 1671.408785][ T1481] dump_stack_lvl+0x18c/0x250 [ 1671.413532][ T1481] ? load_image+0x400/0x400 [ 1671.418211][ T1481] ? show_regs_print_info+0x20/0x20 [ 1671.423480][ T1481] ? print_circular_bug+0x12b/0x1a0 [ 1671.428733][ T1481] check_noncircular+0x2fc/0x400 [ 1671.433739][ T1481] ? print_deadlock_bug+0x5d0/0x5d0 [ 1671.438991][ T1481] ? lockdep_lock+0xf5/0x230 [ 1671.443648][ T1481] ? __lock_acquire+0x1347/0x7d40 [ 1671.448781][ T1481] ? _find_first_zero_bit+0xd3/0x100 [ 1671.454151][ T1481] __lock_acquire+0x2df1/0x7d40 [ 1671.459070][ T1481] ? verify_lock_unused+0x140/0x140 [ 1671.464331][ T1481] ? verify_lock_unused+0x140/0x140 [ 1671.469769][ T1481] lock_acquire+0x19e/0x420 [ 1671.474336][ T1481] ? team_del_slave+0x32/0x1c0 [ 1671.479170][ T1481] ? __might_sleep+0xe0/0xe0 [ 1671.483812][ T1481] ? read_lock_is_recursive+0x20/0x20 [ 1671.489244][ T1481] __mutex_lock+0x136/0xcc0 [ 1671.493831][ T1481] ? team_del_slave+0x32/0x1c0 [ 1671.498667][ T1481] ? __lock_acquire+0x7d40/0x7d40 [ 1671.503750][ T1481] ? rcu_is_watching+0x15/0xb0 [ 1671.508668][ T1481] ? trace_contention_end+0x39/0xe0 [ 1671.513921][ T1481] ? __mutex_lock+0x315/0xcc0 [ 1671.518750][ T1481] ? team_del_slave+0x32/0x1c0 [ 1671.523574][ T1481] ? mutex_lock_nested+0x20/0x20 [ 1671.528578][ T1481] ? bond_netdev_event+0xeb/0xf30 [ 1671.533665][ T1481] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1671.539364][ T1481] team_del_slave+0x32/0x1c0 [ 1671.544033][ T1481] team_device_event+0x28d/0xa20 [ 1671.549023][ T1481] notifier_call_chain+0x197/0x380 [ 1671.554193][ T1481] unregister_netdevice_many_notify+0x100d/0x1900 [ 1671.560695][ T1481] ? lock_chain_count+0x20/0x20 [ 1671.565663][ T1481] ? unregister_netdevice_many+0x20/0x20 [ 1671.571477][ T1481] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1671.577272][ T1481] ? __lock_acquire+0x7d40/0x7d40 [ 1671.582361][ T1481] unregister_netdevice_queue+0x32c/0x370 [ 1671.588172][ T1481] ? list_netdevice+0x730/0x730 [ 1671.593182][ T1481] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1671.598976][ T1481] _cfg80211_unregister_wdev+0x16b/0x580 [ 1671.604862][ T1481] ieee80211_remove_interfaces+0x49e/0x690 [ 1671.610732][ T1481] ? ieee80211_do_stop+0x1e20/0x1e20 [ 1671.616160][ T1481] ? rcu_is_watching+0x15/0xb0 [ 1671.621063][ T1481] ieee80211_unregister_hw+0x5d/0x2a0 [ 1671.626599][ T1481] mac80211_hwsim_del_radio+0x289/0x480 [ 1671.632311][ T1481] ? rhashtable_remove_fast+0xc00/0xc00 [ 1671.637939][ T1481] hwsim_exit_net+0x58d/0x650 [ 1671.642712][ T1481] ? hwsim_init_net+0x90/0x90 [ 1671.647444][ T1481] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1671.653320][ T1481] cleanup_net+0x70a/0xbb0 [ 1671.657810][ T1481] ? ops_free_list+0x3b0/0x3b0 [ 1671.662658][ T1481] ? _raw_spin_unlock_irq+0x23/0x50 [ 1671.668007][ T1481] ? process_scheduled_works+0x96f/0x15d0 [ 1671.673782][ T1481] ? process_scheduled_works+0x96f/0x15d0 [ 1671.679568][ T1481] process_scheduled_works+0xa5d/0x15d0 [ 1671.685196][ T1481] ? assign_work+0x430/0x430 [ 1671.689860][ T1481] ? assign_work+0x3d0/0x430 [ 1671.694693][ T1481] worker_thread+0xa55/0xfc0 [ 1671.699372][ T1481] kthread+0x2fa/0x390 [ 1671.703508][ T1481] ? pr_cont_work+0x560/0x560 [ 1671.708335][ T1481] ? kthread_blkcg+0xd0/0xd0 [ 1671.713006][ T1481] ret_from_fork+0x48/0x80 [ 1671.717496][ T1481] ? kthread_blkcg+0xd0/0xd0 [ 1671.722141][ T1481] ret_from_fork_asm+0x11/0x20 [ 1671.726977][ T1481] [ 1671.783070][ T1481] mac80211_hwsim hwsim90 .3c (unregistering): left promiscuous mode [ 1671.792728][ T1481] mac80211_hwsim hwsim90 .3c (unregistering): left allmulticast mode [ 1671.806925][ T1481] team0: Port device .3c removed [ 1671.920359][ T2620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1671.931693][ T2620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1671.942991][ T2620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1671.955395][ T2620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1671.984647][ T1481] vlan0: left allmulticast mode [ 1672.006670][ T1481] vlan0: left promiscuous mode [ 1672.011889][ T1481] : port 1(vlan0) entered disabled state [ 1672.025676][ T1481] hsr_slave_1: left promiscuous mode [ 1672.034211][ T1481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1672.041826][ T1481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1672.052435][ T1481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1672.061795][ T1481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1672.072265][ T1481] bridge0: port 3(team0) entered disabled state [ 1672.081373][ T1481] bridge_slave_1: left allmulticast mode [ 1672.088293][ T1481] bridge_slave_1: left promiscuous mode [ 1672.094600][ T1481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.107819][ T1481] bridge_slave_0: left allmulticast mode [ 1672.113625][ T1481] bridge_slave_0: left promiscuous mode [ 1672.136583][ T1481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.159674][ T1481] veth1_macvtap: left promiscuous mode [ 1672.165451][ T1481] veth1_vlan: left promiscuous mode [ 1672.172554][ T1481] veth0_vlan: left promiscuous mode [ 1672.556729][ T1481] team_slave_1 (unregistering): left promiscuous mode [ 1672.563654][ T1481] team_slave_1 (unregistering): left allmulticast mode [ 1672.571987][ T1481] team0 (unregistering): Port device team_slave_1 removed [ 1672.658439][ T1481] bond0 (unregistering): (slave 4@0): Releasing backup interface [ 1672.668949][ T1481] @0 (unregistering): left promiscuous mode [ 1672.675120][ T1481] @0 (unregistering): left allmulticast mode [ 1672.712490][ T1481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1672.723480][ T1481] bond_slave_0 (unregistering): left promiscuous mode [ 1672.730439][ T1481] bond_slave_0 (unregistering): left allmulticast mode [ 1672.904809][ T1481] bond0 (unregistering): left promiscuous mode [ 1672.911740][ T1481] bond0 (unregistering): left allmulticast mode [ 1672.919243][ T1481] team0 (unregistering): Port device bond0 removed [ 1672.958658][ T1481] bond0 (unregistering): Released all slaves [ 1673.170119][ T2620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1673.207263][ T2620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1673.242038][T13545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.249436][T13545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1673.287012][ T1469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.294467][ T1469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1673.660995][ T2620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1673.732074][ T2620] veth0_vlan: entered promiscuous mode [ 1673.752024][ T2620] veth1_vlan: entered promiscuous mode [ 1673.792231][ T2620] veth0_macvtap: entered promiscuous mode [ 1673.804020][ T2620] veth1_macvtap: entered promiscuous mode [ 1673.830378][ T2620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.843824][ T2620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.856497][ T2620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.874585][ T2620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.885937][ T2620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.898682][ T2620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.908954][ T2620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.921849][ T2620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.933736][ T2620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1673.950591][ T2620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1673.963505][ T2620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.975787][ T2620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1673.991981][ T2620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.002279][ T2620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1674.014920][ T2620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.025534][ T2620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1674.038903][ T2620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.051035][ T2620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1674.071000][ T2620] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.083910][ T2620] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.094102][ T2620] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.108085][ T2620] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.159860][ T2620] ieee80211 phy116: Selected rate control algorithm 'minstrel_ht' [ 1674.200320][ T1469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.211004][ T1469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.224108][ T2620] ieee80211 phy117: Selected rate control algorithm 'minstrel_ht' [ 1674.265400][ T1481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.273613][ T1481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50