last executing test programs: 4.632617794s ago: executing program 1 (id=2154): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0x7, 0x9, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000006b00000095000000000000000dc8a091d872ca6cdd98911cdb6d13403a086b9728836b7eecdf5a31853cd1ecd4e34af44a"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100feff000037153e370248018080351700d1", 0x2d}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0xd, &(0x7f0000002080)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x2a}, 0x28) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000009"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, 0x8000, r4, 0x4}, 0x38) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) 4.289035593s ago: executing program 2 (id=2158): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec840ef402000000e3bd6efb0105000000000a00"/46, 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan0\x00'}) 3.245365729s ago: executing program 1 (id=2162): r0 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (fail_nth: 1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000"], 0x28}, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 3.235894589s ago: executing program 2 (id=2163): socket$kcm(0x11, 0x6, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x20040d4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800001811000000000000000000000000020000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) close(r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xf, &(0x7f0000000ac0)=@framed={{}, [@alu={0x7, 0x1, 0xc, 0x8, 0x1, 0x6, 0x1}, @exit, @generic={0x42, 0x8, 0x0, 0x401, 0x54}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000b80)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x5, 0xf, 0xc9f, 0xfffffff7}, 0x10, 0xffffffffffffffff, r7, 0x1, 0x0, &(0x7f0000000c80)=[{0x4, 0x2, 0x5, 0xb}], 0x10, 0x3}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000340)}, {&(0x7f0000000200)}, {&(0x7f0000000040)="df3b46a13300000000000000", 0xc}, {&(0x7f0000001480)="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", 0x46c}], 0x4}, 0x40000) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x23, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x14, &(0x7f0000000640)=""/20, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0xe, 0x3, 0x9}, 0x10, 0x1e442, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r3, r3, r3, r3, r3, r3], &(0x7f0000000700)=[{0x2, 0x4, 0xa, 0x4}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@fallback=r1, 0x1f, 0x0, 0xafa4, &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0), 0x0}, 0x40) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@fallback, r9, 0x32, 0x4, r10, @void, @value=r12, @void, @void, r11}, 0x20) 3.109349892s ago: executing program 0 (id=2166): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x400}, 0x94) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x12, 0x3, 0xff, 0xf8, 0x0, 0x6, 0x200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x2001, 0x8, 0x5, 0x1, 0x8, 0x9, 0x3, 0x0, 0x80000000, 0x0, 0x100000001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x108492, 0xac5d, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x10000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1fffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000800000000000000000008510000002000000d6000000000000009500007b000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000840)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() getpid() sendmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0xc000}, 0x40000c1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000034000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a7479"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xb, 0x0, &(0x7f00000004c0)="878b0d151f8218e3c73697", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x4) sendmsg(r4, &(0x7f0000000640)={&(0x7f0000000040)=@isdn={0x22, 0x4, 0x40, 0x0, 0xb}, 0x80, 0x0}, 0x400c040) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) 3.016797004s ago: executing program 2 (id=2167): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x11}, 0x8884, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900004100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000300000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000000ffff850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x99}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0x6, 0x0, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000008000000020000000000000c02000000000000000000000d0000000000005f5b"], 0x0, 0x38}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r4, &(0x7f00000000c0)="a227897a3dadb60992f037a7010283b2a1eacd7c3c92ae867f76733b8fe8c46d48e89c26e18f5671af2c57a8c6ee0f3d6dd5745a0e1142978f71358b6e1d330eebb3b6fd7254d517523f5381ca6ec4b0252b92dce960db56ee12c7a99d3860bd0de33e31a56311cdc4affefaa85c9512bc0ef759ec20bb292513c5530f7c128c2dadbf69d9073c9447814312ec6a42d696d6447a6e01607e406d0eb297dc6e57beff5e45c5114f9fd13f04a88195634561bbe9db2c6165916435d388cb1b0ecc3b49af01030531b0a82c505ba712e763435c39459ac1b325fb3fe9cf732b2242e05ae7931fbd0a0ef5e6fbd6224e03b39873a51ae961e670", &(0x7f0000000540)=""/154}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a630182700008"], 0xffdd) 2.680533493s ago: executing program 4 (id=2168): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) r0 = socket$kcm(0x10, 0x7, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1b0018000000000000000c0000000c0000000200000000000000000091ed000000000000"], 0x0, 0x26}, 0x28) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c5e83c4e230109fc85ca80725521e3bcff67042d4c8d5eb1871e743a69b16171317fbd371c813e0af09544d"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0xf9, 0x66, 0x7, 0x3, 0x0, 0x2, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x7}, 0x910, 0x8, 0xae3343a, 0x9, 0x981, 0x40, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffffff8}, r6, 0x2, r2, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r6, 0x12) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) r9 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="c88d437a77dc8ad766bab54784c9dd83492a8b78c6ad30d55dde20b212771693", @ANYRESOCT=r1], &(0x7f0000000280)='GPL\x00', 0x405, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4}, 0x10}, 0x94) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.557258226s ago: executing program 0 (id=2169): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.552919626s ago: executing program 3 (id=2170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000440)={0x1, 0x1, [@empty]}) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x76, &(0x7f0000000000)=r3, 0x8) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={0x0, r4, 0x4000, r5}, 0x18) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000200)={'veth1_to_team\x00', @remote}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r8, 0x88, 0x67, &(0x7f00000002c0)=r9, 0x4) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}, @ip_retopts={{0x10}}], 0x30}, 0x844) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xb90, 0x0, &(0x7f0000000300)="557a657b35ea1d3760c52858576f", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 2.360885951s ago: executing program 0 (id=2171): r0 = socket$kcm(0x11, 0x7, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x880040001, 0x1430, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xd61, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x29, 0x4, 0x0) close(r5) recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r9 = getpid() write$cgroup_pid(r8, &(0x7f00000000c0)=r9, 0x12) r10 = syz_clone(0x1006200, &(0x7f0000000680)="3d6b0701a192ca87395c7b90bc91e6043a3040ed24652d2148abbc114f96222257379cd0748ed5980f551e9ca0d31c1af9cad7f611d75de6047a8c8afdce3a74349750093314f92688af396480a42b3365bd07f1", 0x54, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="ec69fa96aedaddfcce41bd8cf6e76e2b903692c322c8a376e0773d7a65d0ef18296f30001ccc8e52ddbd17177be6aad3bb534788dcf6d3658e3bfe530fd61af8eae7f49b49463d147f86f59515d85a08902b1d10f0df863702e59c11920c1625fadf91f28831282b04108b9aa701d22e3a2af08ac86164d26502d014d35f195df36d3648d52087ba9d432fc85fcc47c13421a7a3675a1e2f") r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001b80)=""/4118, 0x1016}, {&(0x7f00000039c0)=""/4083, 0xff3}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000001a80)=""/219, 0xdb}], 0x5}, 0x22) recvmsg$kcm(r11, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) r12 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r14}, &(0x7f00000006c0), &(0x7f0000000700)=r13, 0x1000000}, 0x20) r15 = openat$cgroup_subtree(r7, &(0x7f0000000840), 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000000a00)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000100)="8505b33f54112643bd4d1ce9933003e1a0787c73359ea8e293573f88cdfdb364f3cf7a049d0977810ba4444aba47bf9efff7a755e123069b30ce92c282caf5fdf9db4efe4627201fd5d79e0518506d7deb1c65db2d0ebddb5dc32c8bc999ae72c4100a2915f59951b445c2f8a94e3448c7aad14a31b4ad91ac2609bd59896280717700d2850cc546bded990429094664fbeda73d91b762105953e8b130f9794cc9f02fa03870c1ff559d40dabc4927d2a7d72bc6adc90609aa0e54c7447145464b16e470b3aa16ebd9c6e05c85", 0xcd}, {&(0x7f0000000300)="162bacf87b15b2ba1343dc9c2a66f1a7000c97535709b1fe967dab", 0x1b}, {&(0x7f0000000440)="8b895ad584e1a95990e826046538869cce220a354a58448c358934a5f0cb6b2a4aa5b108d16b6601cd26bce1b8dbe40ac9b3049cd15956a9e84dfc852172b1b36b", 0x41}, {&(0x7f00000004c0)="9079e5fb9ed08f91ef69ed425952a9a05778af1d662df1d930471a319dd1f85202ea6b3fa65d34458c45cf50028a31fdcb53512e5cd67064b9347ed99608236d6bdae9a20a37a14d3255a0a356ecd52fc2593462211314ef738ca5abf01ca19d2b74766218a4795564b890fb2ff04a99d7c4c5fcbb6446c8e55da41258a287827b922bc4f6fbbb7ba1be0e3171211ba4db937247df1686bfe7c9abc916bf07437561f354b3ccf7180678d0fe71a7656f5264579375e18768fb29260009db44558158754653f0f6f853b1ae040f3808f99443b8eb", 0xd4}], 0x4, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r4, r13, r6, r6, r3, r1, r6, r6, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r0, r5, r15]}}], 0xf0, 0x14}, 0x4) 2.36063568s ago: executing program 1 (id=2172): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001340)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x3, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffed968ef4}, 0x10c280, 0xac5d, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x7, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64) socket$kcm(0x2, 0x3, 0x84) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001300)=ANY=[@ANYBLOB="9fe9010018000000000000001800000002321fdb"], &(0x7f00000000c0)=""/209, 0x32, 0xd1, 0x1}, 0x28) (async, rerun: 32) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) (async) r1 = socket$kcm(0xa, 0x6, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r1, 0x29, 0x22, &(0x7f0000000100)=r2, 0x120) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="b90000000044268cb89e14f086dd65e0ffff01032c00631177fbac141416e000030a44079f030000000000000000000000222f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111960500000000000000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) 2.359400561s ago: executing program 4 (id=2173): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec840ef402000000e3bd6efb0105000000000a00"/46, 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan0\x00'}) 2.173367405s ago: executing program 2 (id=2174): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000000), 0x8) (async) sendmsg$inet(r1, &(0x7f0000000d80)={&(0x7f0000000b40)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b80)="e0", 0x1}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.173054196s ago: executing program 1 (id=2175): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e3900421803001825000a001400000002800000121f", 0x2e}, {&(0x7f0000000000)="2d61204e4bcdc62db4d748e2802dfe2788ebfda6038c6379335bfdf70353f0ebd77150ac4cbaf7bf1f41cf451585928d3b1d50f6", 0x34}], 0x2}, 0x4008014) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) getpid() getpid() sendmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0xc000}, 0x40000c1) write$cgroup_subtree(r2, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000a40)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2e0a4, 0xffffffffffffffff, 0x0, &(0x7f0000001000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xfffffff7}, 0x94) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.171364936s ago: executing program 4 (id=2176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={&(0x7f0000000000)="e0394c24cc55779d80975d1e7edd2218e37c1475c64d8f112088df332403bc43c7885f3df650c5e8d7150cfb9bbf285abf173f48dcc82946958c0b95d7d18bc35c17b60425db427fa083747321189c3359d8c52546cf3b6698cc8a96", &(0x7f0000000080)=""/22, &(0x7f00000000c0)="bcf2ccd9f9b86458b7c373d82943db7de199231d3536468d477ed6d55861dd4bba193d6bc864e182df1a298815749d41614e4322b5b6b44d5150702570b6b689a74376209520026f3678249893359471e9ecf9ebf973b68c", &(0x7f0000000140)="527de3b505097506984cad307d20617a5eaaf9d999d41207ad8763fc6b7e0b9b0e811229201f074719698f90916225a3de1fa0ec85f97c7796e5bd390812523119", 0x4, r0}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 1.320376417s ago: executing program 0 (id=2177): r0 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000"], 0x28}, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.319786267s ago: executing program 4 (id=2178): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async, rerun: 64) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0xbe, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0x2) (async, rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 1.277716138s ago: executing program 2 (id=2179): socket$kcm(0x2, 0x3, 0x84) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xd, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000a4000000a400000004000000020000000400000f04000000040000000300000004000000bf0000000c0000000f0000000e0000000a0000000100000002000004020000000c00000001000000010000001000000000000000230600000500000002000000a30500000c00000004000000160000000a00000004000000dd0a00000f0000000300000078000000010000000000000c0500000000000000000000030000000002000000040000000000000000005f"], 0x0, 0xc0}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) 1.102482882s ago: executing program 4 (id=2180): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tm'], 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x74}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext, 0x100188, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x0, 0x27, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000041) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f61006100"], 0x0, 0x58}, 0x28) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a92fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) 1.101320332s ago: executing program 1 (id=2181): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.045233324s ago: executing program 3 (id=2182): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000000004000000f03af2000056af6b91435c1af9d2ebff4e1ec0839c1bb92ede08d942320b346c9f9b3f58aef07171d2e747a7ec39c1db60be0d995e8136b4f31ab07cbb3523b214e96786a1ccc0c5b26b8774e13ead62b808c2da7ef67c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r1}, 0x38) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x100, 0x0, 0x4c2ba, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200420014000300002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000440)="cb4e88a8af3288a8", 0x8}], 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x4}]}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e32, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x45) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000240)={'netdevsim0\x00', @remote}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r11}, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70510000800000085000000a50000009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) close(r7) 1.043360073s ago: executing program 0 (id=2183): r0 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (fail_nth: 2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000"], 0x28}, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 665.162413ms ago: executing program 2 (id=2184): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x11}, 0x8884, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900004100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000300000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000000ffff850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x99}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0x6, 0x0, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000008000000020000000000000c02000000000000000000000d0000000000005f5b"], 0x0, 0x38}, 0x28) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a630182700008"], 0xffdd) 649.579803ms ago: executing program 3 (id=2185): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) r0 = socket$kcm(0x10, 0x7, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1b0018000000000000000c0000000c0000000200000000000000000091ed000000000000"], 0x0, 0x26}, 0x28) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c5e83c4e230109fc85ca80725521e3bcff67042d4c8d5eb1871e743a69b16171317fbd371c813e0af09544d"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0xf9, 0x66, 0x7, 0x3, 0x0, 0x2, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x7}, 0x910, 0x8, 0xae3343a, 0x9, 0x981, 0x40, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffffff8}, r6, 0x2, r2, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r6, 0x12) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) r9 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="c88d437a77dc8ad766bab54784c9dd83492a8b78c6ad30d55dde20b212771693", @ANYRESOCT=r1], &(0x7f0000000280)='GPL\x00', 0x405, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4}, 0x10}, 0x94) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 497.983187ms ago: executing program 0 (id=2186): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec840ef402000000e3bd6efb0105000000000a00"/46, 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan0\x00'}) 496.805747ms ago: executing program 1 (id=2187): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)}], 0x1}, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x46}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x7, 0x772}, 0x18000, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfc2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 496.397037ms ago: executing program 4 (id=2188): r0 = socket$kcm(0x11, 0x7, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x880040001, 0x1430, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xd61, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x29, 0x4, 0x0) close(r5) recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r9 = getpid() write$cgroup_pid(r8, &(0x7f00000000c0)=r9, 0x12) r10 = syz_clone(0x1006200, &(0x7f0000000680)="3d6b0701a192ca87395c7b90bc91e6043a3040ed24652d2148abbc114f96222257379cd0748ed5980f551e9ca0d31c1af9cad7f611d75de6047a8c8afdce3a74349750093314f92688af396480a42b3365bd07f1", 0x54, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="ec69fa96aedaddfcce41bd8cf6e76e2b903692c322c8a376e0773d7a65d0ef18296f30001ccc8e52ddbd17177be6aad3bb534788dcf6d3658e3bfe530fd61af8eae7f49b49463d147f86f59515d85a08902b1d10f0df863702e59c11920c1625fadf91f28831282b04108b9aa701d22e3a2af08ac86164d26502d014d35f195df36d3648d52087ba9d432fc85fcc47c13421a7a3675a1e2f") r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001b80)=""/4118, 0x1016}, {&(0x7f00000039c0)=""/4083, 0xff3}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000001a80)=""/219, 0xdb}], 0x5}, 0x22) recvmsg$kcm(r11, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) r12 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r14}, &(0x7f00000006c0), &(0x7f0000000700)=r13, 0x1000000}, 0x20) r15 = openat$cgroup_subtree(r7, &(0x7f0000000840), 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000000a00)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000100)="8505b33f54112643bd4d1ce9933003e1a0787c73359ea8e293573f88cdfdb364f3cf7a049d0977810ba4444aba47bf9efff7a755e123069b30ce92c282caf5fdf9db4efe4627201fd5d79e0518506d7deb1c65db2d0ebddb5dc32c8bc999ae72c4100a2915f59951b445c2f8a94e3448c7aad14a31b4ad91ac2609bd59896280717700d2850cc546bded990429094664fbeda73d91b762105953e8b130f9794cc9f02fa03870c1ff559d40dabc4927d2a7d72bc6adc90609aa0e54c7447145464b16e470b3aa16ebd9c6e05c85", 0xcd}, {&(0x7f0000000300)="162bacf87b15b2ba1343dc9c2a66f1a7000c97535709b1fe967dab", 0x1b}, {&(0x7f0000000440)="8b895ad584e1a95990e826046538869cce220a354a58448c358934a5f0cb6b2a4aa5b108d16b6601cd26bce1b8dbe40ac9b3049cd15956a9e84dfc852172b1b36b", 0x41}, {&(0x7f00000004c0)="9079e5fb9ed08f91ef69ed425952a9a05778af1d662df1d930471a319dd1f85202ea6b3fa65d34458c45cf50028a31fdcb53512e5cd67064b9347ed99608236d6bdae9a20a37a14d3255a0a356ecd52fc2593462211314ef738ca5abf01ca19d2b74766218a4795564b890fb2ff04a99d7c4c5fcbb6446c8e55da41258a287827b922bc4f6fbbb7ba1be0e3171211ba4db937247df1686bfe7c9abc916bf07437561f354b3ccf7180678d0fe71a7656f5264579375e18768fb29260009db44558158754653f0f6f853b1ae040f3808f99443b8eb", 0xd4}], 0x4, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r4, r13, r6, r6, r3, r1, r6, r6, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r0, r5, r15]}}], 0xf0, 0x14}, 0x4) 230.965434ms ago: executing program 3 (id=2189): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x10, &(0x7f00000000c0), &(0x7f0000000140)=""/16, 0x7, 0x0, 0x21, 0xfc, &(0x7f0000000180)="e3c1bf9a7d551f6df6a69646688e543dc124f9f81cf1e88de597896b53bc7ab847", &(0x7f00000001c0)="c6e2e7c7221d92c960ae056db1f9fccb25d9eb312fb9798972a5dca79ad71460615d7472033fe8f3c7d409d4aaa077d971cac7b71ef1747d623ff4982d21f4472cdf5396d456ccb95e1583a2c1af455152954d8dea18b409b3970964d0ea83b1079373e1d3ab143403b1ee4840e838c1674a771bde03b08f8a960dd146ec2de1e563e4ad4e3b143c6932ccea7f0f844bb0b92ef118261bbfd5c5601510edc61dc8315fd9b90d10583989cc5e4e80b4d04c751bde74d259c767c1e5e40ecdfe4be9afee84ba15b337f2986c5e8057f7fc9ddf0426414e64bbbadf13a49e2d2ae0d021b0240468c2d7872117f2b7971374f917dbf05e69847bfce89a82", 0x7, 0x0, 0xf0000000}, 0x50) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="3400000036000b635f98b38c0287fca20a0c0e0421da4bab17dfed727f05bf373a5cebf5b6a70bd6f7b36f4f0a943db2a3ed919e", 0x34}], 0x1}, 0x24000010) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x120) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) 17.943959ms ago: executing program 3 (id=2190): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x18) 0s ago: executing program 3 (id=2191): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xb7, 0xff, 0x6, 0x30, 0x0, 0x25, 0x50060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x8400, 0xfffffffffffffff8, 0x6, 0x7, 0x3, 0xffffffff, 0x10, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x10000000000802, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12, 0x4, 0x8, 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x4, 0x4}, {0x0, 0x1000, 0x3}, {0x0, 0x4}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 60.681577][ T4258] cgroup: Unknown subsys name 'net' [ 60.779060][ T4258] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.971512][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.164972][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.185653][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.193678][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.201457][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.210076][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.218363][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.225984][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.226643][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.233574][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.241173][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.247726][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.254584][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.261318][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.268554][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.275123][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.283394][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.289212][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.296710][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.310432][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.310676][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.324560][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.325442][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.333408][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.339537][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.353161][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.360748][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.367813][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.375496][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.375737][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.406088][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.717452][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 63.860819][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.882757][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.891955][ T4275] device bridge_slave_0 entered promiscuous mode [ 63.900954][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 63.910409][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 63.934230][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.941316][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.949121][ T4275] device bridge_slave_1 entered promiscuous mode [ 63.969459][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 63.979815][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 64.030072][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.043623][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.107215][ T4275] team0: Port device team_slave_0 added [ 64.131348][ T4275] team0: Port device team_slave_1 added [ 64.140048][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.149952][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.157816][ T4276] device bridge_slave_0 entered promiscuous mode [ 64.166381][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.173589][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.181224][ T4276] device bridge_slave_1 entered promiscuous mode [ 64.238798][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.246241][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.254160][ T4277] device bridge_slave_0 entered promiscuous mode [ 64.261310][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.268594][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.277491][ T4284] device bridge_slave_0 entered promiscuous mode [ 64.291105][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.298299][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.306108][ T4284] device bridge_slave_1 entered promiscuous mode [ 64.319073][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.326468][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.352465][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.365001][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.372080][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.380151][ T4277] device bridge_slave_1 entered promiscuous mode [ 64.396587][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.413644][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.420723][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.429246][ T4271] device bridge_slave_0 entered promiscuous mode [ 64.436878][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.446500][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.475293][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.492927][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.507050][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.514492][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.522114][ T4271] device bridge_slave_1 entered promiscuous mode [ 64.535284][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.550594][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.571299][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.590224][ T4276] team0: Port device team_slave_0 added [ 64.597713][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.608651][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.650966][ T4276] team0: Port device team_slave_1 added [ 64.658029][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.675709][ T4277] team0: Port device team_slave_0 added [ 64.689042][ T4277] team0: Port device team_slave_1 added [ 64.716517][ T4275] device hsr_slave_0 entered promiscuous mode [ 64.723485][ T4275] device hsr_slave_1 entered promiscuous mode [ 64.737574][ T4284] team0: Port device team_slave_0 added [ 64.751656][ T4271] team0: Port device team_slave_0 added [ 64.764383][ T4271] team0: Port device team_slave_1 added [ 64.771160][ T4284] team0: Port device team_slave_1 added [ 64.783755][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.790702][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.822169][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.834467][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.841412][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.867621][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.878950][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.886437][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.912641][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.925077][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.932022][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.958240][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.010286][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.017293][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.043371][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.054848][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.061800][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.088197][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.100365][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.107606][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.133693][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.158271][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.165410][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.191674][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.219463][ T4277] device hsr_slave_0 entered promiscuous mode [ 65.226731][ T4277] device hsr_slave_1 entered promiscuous mode [ 65.233452][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.241269][ T4277] Cannot create hsr debugfs directory [ 65.284761][ T4276] device hsr_slave_0 entered promiscuous mode [ 65.291685][ T4276] device hsr_slave_1 entered promiscuous mode [ 65.298404][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.306018][ T4276] Cannot create hsr debugfs directory [ 65.322809][ T4271] device hsr_slave_0 entered promiscuous mode [ 65.330029][ T4271] device hsr_slave_1 entered promiscuous mode [ 65.336798][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.344563][ T4271] Cannot create hsr debugfs directory [ 65.372508][ T4284] device hsr_slave_0 entered promiscuous mode [ 65.379450][ T4284] device hsr_slave_1 entered promiscuous mode [ 65.386013][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.393617][ T4284] Cannot create hsr debugfs directory [ 65.443511][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 65.443520][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 65.443677][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 65.449702][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 65.456283][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 65.707908][ T4275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.722105][ T4275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.731618][ T4275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.740645][ T4275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.796540][ T4284] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.805877][ T4284] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.819268][ T4284] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.832211][ T4284] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.919922][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.947424][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.959207][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.980096][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.987350][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.001924][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.017163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.026357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.034973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.044143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.054107][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.061292][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.070001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.110109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.122099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.131007][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.138123][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.146233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.160715][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.175116][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.184497][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.193736][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.202000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.221870][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.238101][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.250004][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.259128][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.268795][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.278782][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.314214][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.322487][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.331638][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.340625][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.347769][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.357477][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.366504][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.374975][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.382017][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.389658][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.398835][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.407724][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.416210][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.446039][ T4271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.460139][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.470014][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.479548][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.493497][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.505101][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.531652][ T4271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.541332][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.550463][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.561720][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.573092][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.581605][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.590416][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.606438][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.614520][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.625057][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.635283][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.644209][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.656146][ T4271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.673666][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.692194][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.704210][ T4271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.736466][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.754244][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.774885][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.837668][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.863780][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.872224][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.879371][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.895702][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.904859][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.913764][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.920866][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.929488][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.957779][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.977845][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.986005][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.996154][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.004980][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.014239][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.022824][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.037978][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.046032][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.054074][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.069906][ T4276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.094298][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.116640][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.126409][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.136328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.146787][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.159078][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.171021][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.180921][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.196363][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.213675][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.221661][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.231428][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.240467][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.247596][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.255867][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.265164][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.274055][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.281148][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.296069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.358120][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.367747][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.378317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.386070][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.396557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.405814][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.417575][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.434282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.447584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.461788][ T4275] device veth0_vlan entered promiscuous mode [ 67.474001][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.491227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.505321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.517140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.527651][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 67.527672][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 67.533942][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 67.539687][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 67.545740][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 67.554082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.566682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.576090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.587634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.596380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.608776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.623311][ T4275] device veth1_vlan entered promiscuous mode [ 67.650332][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.665874][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.674102][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.682269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.691366][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.721562][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.730775][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.744386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.755574][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.783804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.791262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.806449][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.818061][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.831599][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.841247][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.856038][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.870135][ T4275] device veth0_macvtap entered promiscuous mode [ 67.886127][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.895743][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.906055][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.914740][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.921801][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.930819][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.941307][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.950319][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.957463][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.965639][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.984469][ T4275] device veth1_macvtap entered promiscuous mode [ 68.008829][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.026256][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.065078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.080276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.092431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.106361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.118074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.127017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.137851][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.146942][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.156305][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.170133][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.177716][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.197240][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.212455][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.221750][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.231049][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.240259][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.250976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.259940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.268926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.277208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.287245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.296252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.305129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.313193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.324299][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.334519][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.353529][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.365086][ T4284] device veth0_vlan entered promiscuous mode [ 68.381453][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.393432][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.410523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.419492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.427935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.436350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.450632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.459037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.467120][ T4276] device veth0_vlan entered promiscuous mode [ 68.486439][ T4284] device veth1_vlan entered promiscuous mode [ 68.509316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.518403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.537040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.559240][ T4276] device veth1_vlan entered promiscuous mode [ 68.621748][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.631407][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.650743][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.664862][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.674043][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.689863][ T4284] device veth0_macvtap entered promiscuous mode [ 68.700581][ T4284] device veth1_macvtap entered promiscuous mode [ 68.723869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.740267][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.764578][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.778060][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.791827][ T4277] device veth0_vlan entered promiscuous mode [ 68.806187][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.815538][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.831526][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.840621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.850304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.860687][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.869026][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.884056][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.896491][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.908328][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.929733][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.940294][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.951098][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.959002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.968291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.978742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.988098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.004343][ T4276] device veth0_macvtap entered promiscuous mode [ 69.020277][ T4277] device veth1_vlan entered promiscuous mode [ 69.032514][ T4284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.041954][ T4284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.052208][ T4284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.062051][ T4284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.082824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.090967][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.100002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.108715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.117718][ T4276] device veth1_macvtap entered promiscuous mode [ 69.140682][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.149514][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.158619][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.176624][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.187925][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.199779][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.210762][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.224821][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.233393][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.243088][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.251227][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.260428][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.269512][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.295985][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.314399][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.329347][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.340002][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.359342][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.387198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.399218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.408744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.417491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.429336][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.439598][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.448854][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.458060][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.485056][ T4277] device veth0_macvtap entered promiscuous mode [ 69.541877][ T4277] device veth1_macvtap entered promiscuous mode [ 69.603418][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 69.603451][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 69.609433][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 69.615545][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 69.621452][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 69.639581][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.660018][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.661080][ C1] hrtimer: interrupt took 31738 ns [ 69.690838][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.754052][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.794739][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.805732][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.815907][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.826656][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.841859][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.851512][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.866790][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.875605][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.883811][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.903293][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.970644][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.981984][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.992551][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.004323][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.014972][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.031346][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.044036][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.063459][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.076818][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.096878][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.106165][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.115308][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.126562][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.135766][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.176249][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.184586][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.194153][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.203539][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.211899][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.230738][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.240733][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.250425][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.262055][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.331279][ T4271] device veth0_vlan entered promiscuous mode [ 70.343544][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.351873][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.377122][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.387023][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.399333][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.454510][ T4271] device veth1_vlan entered promiscuous mode [ 70.576438][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.586524][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.677919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.708048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.741050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.824814][ T4368] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4'. [ 71.213783][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.220287][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.295691][ T4271] device veth0_macvtap entered promiscuous mode [ 71.307023][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.319047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.347986][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.356302][ T4386] netlink: 'syz.0.6': attribute type 21 has an invalid length. [ 71.365883][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.393594][ T4271] device veth1_macvtap entered promiscuous mode [ 71.409158][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.421954][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.539395][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.555730][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.567961][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.582344][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.599482][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.618562][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.628862][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.646645][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.661684][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.683703][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 71.689780][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 71.696448][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 71.702479][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 71.708891][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 71.839834][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.870605][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.897607][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.918811][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.950150][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.970270][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.980846][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.994977][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.005319][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.015790][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.027277][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.066754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.096298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.149548][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.161222][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.177676][ T4397] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 72.203436][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.212162][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.260218][ T4397] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 72.268503][ T4399] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 72.312206][ T4397] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 72.358634][ T4397] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 72.443693][ T4397] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 72.538349][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.562633][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.583593][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.671228][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.695659][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.739164][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.306393][ T4422] netlink: 'syz.1.15': attribute type 10 has an invalid length. [ 73.540788][ T4432] Zero length message leads to an empty skb [ 73.559254][ T4422] team0: Port device wlan1 added [ 73.683975][ T4422] syz.1.15 (4422) used greatest stack depth: 20240 bytes left [ 73.843991][ T4440] syz.2.20 (4440) used obsolete PPPIOCDETACH ioctl [ 73.904961][ T4442] sctp: [Deprecated]: syz.4.19 (pid 4442) Use of int in maxseg socket option. [ 73.904961][ T4442] Use struct sctp_assoc_value instead [ 73.939232][ T4440] netlink: 'syz.2.20': attribute type 11 has an invalid length. [ 74.001834][ T4440] netlink: 'syz.2.20': attribute type 11 has an invalid length. [ 74.031047][ T4448] netlink: 10 bytes leftover after parsing attributes in process `syz.3.23'. [ 74.068734][ T4440] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.20'. [ 74.831904][ T4464] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.25'. [ 74.842385][ T4464] netlink: zone id is out of range [ 74.848146][ T4464] netlink: zone id is out of range [ 74.854086][ T4464] netlink: zone id is out of range [ 74.859212][ T4464] netlink: zone id is out of range [ 74.927108][ T4464] netlink: zone id is out of range [ 74.933394][ T4464] netlink: zone id is out of range [ 74.946458][ T4464] netlink: zone id is out of range [ 74.970997][ T4468] netlink: 'syz.2.30': attribute type 29 has an invalid length. [ 74.983203][ T4464] netlink: zone id is out of range [ 74.992515][ T4464] netlink: zone id is out of range [ 75.011240][ T4464] netlink: zone id is out of range [ 75.016936][ T4468] netlink: 'syz.2.30': attribute type 29 has an invalid length. [ 75.540081][ T4484] netlink: 17023 bytes leftover after parsing attributes in process `syz.1.34'. [ 76.324234][ T7] cfg80211: failed to load regulatory.db [ 77.755645][ T4545] tap0: tun_chr_ioctl cmd 1074025677 [ 77.777857][ T4545] tap0: linktype set to 804 [ 77.856497][ T4548] netlink: 17023 bytes leftover after parsing attributes in process `syz.1.49'. [ 78.088463][ T4557] netlink: 10 bytes leftover after parsing attributes in process `syz.0.64'. [ 78.183772][ T4561] validate_nla: 4 callbacks suppressed [ 78.183806][ T4561] netlink: 'syz.4.51': attribute type 21 has an invalid length. [ 78.376241][ T4566] netlink: 17023 bytes leftover after parsing attributes in process `syz.0.54'. [ 78.758551][ T4578] netlink: 64799 bytes leftover after parsing attributes in process `syz.0.71'. [ 78.783821][ T4582] netlink: 132 bytes leftover after parsing attributes in process `syz.3.61'. [ 79.594895][ T4599] netlink: 'syz.0.65': attribute type 11 has an invalid length. [ 79.625342][ T4599] netlink: 'syz.0.65': attribute type 11 has an invalid length. [ 79.650352][ T4599] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.65'. [ 79.690710][ T4601] netlink: 64799 bytes leftover after parsing attributes in process `syz.4.76'. [ 80.048916][ T4604] sctp: [Deprecated]: syz.1.66 (pid 4604) Use of int in maxseg socket option. [ 80.048916][ T4604] Use struct sctp_assoc_value instead [ 80.116806][ T4606] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.67'. [ 80.179854][ T4610] netlink: 'syz.2.68': attribute type 29 has an invalid length. [ 80.206688][ T4610] netlink: 'syz.2.68': attribute type 29 has an invalid length. [ 80.244758][ T4610] netlink: 60 bytes leftover after parsing attributes in process `syz.2.68'. [ 80.392326][ T4617] netlink: 'syz.1.70': attribute type 21 has an invalid length. [ 81.038324][ T4647] netlink: 64799 bytes leftover after parsing attributes in process `syz.1.81'. [ 81.168870][ T4650] netlink: 'syz.4.82': attribute type 11 has an invalid length. [ 81.207878][ T4650] netlink: 'syz.4.82': attribute type 11 has an invalid length. [ 81.848217][ T4655] net_ratelimit: 3 callbacks suppressed [ 81.848308][ T4655] netlink: zone id is out of range [ 81.883662][ T4655] netlink: zone id is out of range [ 81.917830][ T4655] netlink: zone id is out of range [ 81.941840][ T4655] netlink: zone id is out of range [ 81.959641][ T4655] netlink: zone id is out of range [ 81.973556][ T4655] netlink: zone id is out of range [ 81.992968][ T4655] netlink: zone id is out of range [ 82.005159][ T4655] netlink: zone id is out of range [ 82.011640][ T4655] netlink: zone id is out of range [ 82.094174][ T4655] netlink: zone id is out of range [ 82.377667][ T4687] syz.0.97 uses obsolete (PF_INET,SOCK_PACKET) [ 82.850028][ T4704] device wlan1 entered promiscuous mode [ 84.058332][ T4737] __nla_validate_parse: 5 callbacks suppressed [ 84.058375][ T4737] netlink: 64799 bytes leftover after parsing attributes in process `syz.1.109'. [ 84.360414][ T4756] netlink: 'syz.4.117': attribute type 10 has an invalid length. [ 84.430267][ T4756] netlink: 40 bytes leftover after parsing attributes in process `syz.4.117'. [ 84.527008][ T4766] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.120'. [ 85.414357][ T4796] netlink: 'syz.2.128': attribute type 3 has an invalid length. [ 85.422382][ T4796] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 85.469680][ T4796] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.128'. [ 85.556264][ T4801] netlink: 64799 bytes leftover after parsing attributes in process `syz.0.130'. [ 85.807579][ T4814] netlink: 152 bytes leftover after parsing attributes in process `syz.2.134'. [ 85.860426][ T4820] netlink: 'syz.4.132': attribute type 27 has an invalid length. [ 85.868382][ T4820] netlink: 'syz.4.132': attribute type 25 has an invalid length. [ 85.878545][ T4814] netlink: 'syz.2.134': attribute type 10 has an invalid length. [ 85.896771][ T4817] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.135'. [ 85.982402][ T4815] netlink: 'syz.4.132': attribute type 4 has an invalid length. [ 86.000533][ T4815] netlink: 134728 bytes leftover after parsing attributes in process `syz.4.132'. [ 86.187092][ T4814] team0 (unregistering): Port device team_slave_0 removed [ 86.245081][ T4814] team0 (unregistering): Port device team_slave_1 removed [ 86.281629][ T4821] netlink: 'syz.2.134': attribute type 25 has an invalid length. [ 86.289669][ T4821] netlink: 'syz.2.134': attribute type 25 has an invalid length. [ 86.300873][ T4827] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.138'. [ 87.436837][ T4842] netlink: 'syz.1.143': attribute type 25 has an invalid length. [ 87.527352][ T4845] netlink: 5 bytes leftover after parsing attributes in process `syz.1.143'. [ 87.893824][ T4863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.904942][ T4863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.916144][ T4863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.930603][ T4863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.941801][ T4863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.963341][ T4863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.985274][ T4863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.997287][ T4863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.018294][ T4863] device batadv_slave_1 entered promiscuous mode [ 89.194151][ T4893] __nla_validate_parse: 5 callbacks suppressed [ 89.194188][ T4893] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.159'. [ 89.295172][ T4901] netlink: 63579 bytes leftover after parsing attributes in process `syz.0.162'. [ 89.367027][ T4906] validate_nla: 3 callbacks suppressed [ 89.367042][ T4906] netlink: 'syz.1.161': attribute type 27 has an invalid length. [ 89.442702][ T4906] netlink: 'syz.1.161': attribute type 25 has an invalid length. [ 89.739182][ T4898] netlink: 'syz.1.161': attribute type 4 has an invalid length. [ 89.762849][ T4898] netlink: 134728 bytes leftover after parsing attributes in process `syz.1.161'. [ 90.686330][ T4933] netlink: 'syz.2.168': attribute type 7 has an invalid length. [ 90.721062][ T4933] netlink: 'syz.2.168': attribute type 6 has an invalid length. [ 91.514149][ T4939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.173'. [ 91.621383][ T4946] netlink: 63579 bytes leftover after parsing attributes in process `syz.1.175'. [ 91.896417][ T4958] netlink: 'syz.3.179': attribute type 27 has an invalid length. [ 91.926898][ T4958] netlink: 'syz.3.179': attribute type 25 has an invalid length. [ 91.982385][ T4957] netlink: 'syz.2.177': attribute type 10 has an invalid length. [ 92.027468][ T4957] netlink: 55 bytes leftover after parsing attributes in process `syz.2.177'. [ 93.647639][ T4994] netlink: 132 bytes leftover after parsing attributes in process `syz.0.189'. [ 93.714701][ T4990] netlink: 'syz.2.187': attribute type 2 has an invalid length. [ 93.739545][ T4997] netlink: 63579 bytes leftover after parsing attributes in process `syz.1.190'. [ 93.891432][ T4290] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 93.891492][ T4290] Bluetooth: hci0: Malformed LE Event: 0x02 [ 95.319820][ T5038] netlink: 'syz.0.199': attribute type 21 has an invalid length. [ 95.363447][ T5038] netlink: 100 bytes leftover after parsing attributes in process `syz.0.199'. [ 95.712263][ T5043] netlink: 132 bytes leftover after parsing attributes in process `syz.2.211'. [ 95.730224][ T5047] netlink: 'syz.4.201': attribute type 29 has an invalid length. [ 95.753887][ T5047] netlink: 'syz.4.201': attribute type 29 has an invalid length. [ 95.797017][ T5047] netlink: 'syz.4.201': attribute type 29 has an invalid length. [ 95.828883][ T5047] netlink: 'syz.4.201': attribute type 29 has an invalid length. [ 95.859757][ T5047] netlink: 'syz.4.201': attribute type 29 has an invalid length. [ 95.871892][ T5053] netlink: 63579 bytes leftover after parsing attributes in process `syz.0.203'. [ 95.902345][ T5047] netlink: 'syz.4.201': attribute type 29 has an invalid length. [ 95.994461][ T5056] netlink: 'syz.2.205': attribute type 27 has an invalid length. [ 96.018352][ T5056] netlink: 164 bytes leftover after parsing attributes in process `syz.2.205'. [ 96.070569][ T5060] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.207'. [ 96.923037][ T5088] netlink: 'syz.4.213': attribute type 21 has an invalid length. [ 97.738581][ T5096] netlink: 63579 bytes leftover after parsing attributes in process `syz.2.217'. [ 97.924136][ T5104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.220'. [ 97.966781][ T5104] netlink: 'syz.3.220': attribute type 12 has an invalid length. [ 98.034153][ T5104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.220'. [ 99.344873][ T5144] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.231'. [ 99.888943][ T5152] FAULT_INJECTION: forcing a failure. [ 99.888943][ T5152] name failslab, interval 1, probability 0, space 0, times 1 [ 99.912448][ T5152] CPU: 1 PID: 5152 Comm: syz.1.235 Not tainted syzkaller #0 [ 99.919774][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.929855][ T5152] Call Trace: [ 99.933143][ T5152] [ 99.936076][ T5152] dump_stack_lvl+0x188/0x24e [ 99.940778][ T5152] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 99.946944][ T5152] ? show_regs_print_info+0x12/0x12 [ 99.952157][ T5152] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 99.958335][ T5152] should_fail_ex+0x390/0x4c0 [ 99.963025][ T5152] should_failslab+0x5/0x20 [ 99.967537][ T5152] slab_pre_alloc_hook+0x59/0x300 [ 99.972574][ T5152] ? __get_vm_area_node+0x122/0x330 [ 99.977813][ T5152] __kmem_cache_alloc_node+0x4f/0x270 [ 99.983204][ T5152] ? __get_vm_area_node+0x122/0x330 [ 99.988409][ T5152] kmalloc_node_trace+0x22/0xe0 [ 99.993273][ T5152] __get_vm_area_node+0x122/0x330 [ 99.998299][ T5152] ? __local_bh_enable_ip+0x136/0x1c0 [ 100.003681][ T5152] __vmalloc_node_range+0x357/0x1380 [ 100.008969][ T5152] ? netlink_sendmsg+0x5ec/0xbd0 [ 100.013922][ T5152] ? netlink_insert+0x28d/0x13b0 [ 100.018871][ T5152] ? free_vm_area+0x50/0x50 [ 100.023387][ T5152] ? netlink_sendmsg+0x5ec/0xbd0 [ 100.028332][ T5152] vmalloc+0x75/0x80 [ 100.032228][ T5152] ? netlink_sendmsg+0x5ec/0xbd0 [ 100.037169][ T5152] netlink_sendmsg+0x5ec/0xbd0 [ 100.041953][ T5152] ? netlink_getsockopt+0x550/0x550 [ 100.047159][ T5152] ? apparmor_socket_sendmsg+0x8a/0x330 [ 100.052710][ T5152] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 100.058010][ T5152] ? security_socket_sendmsg+0x7c/0xa0 [ 100.063488][ T5152] sock_write_iter+0x2d5/0x3e0 [ 100.068262][ T5152] ? sock_read_iter+0x3a0/0x3a0 [ 100.073132][ T5152] vfs_write+0x482/0x9a0 [ 100.077390][ T5152] ? file_end_write+0x250/0x250 [ 100.082250][ T5152] ? __fget_files+0x3fc/0x460 [ 100.086937][ T5152] ? __fdget_pos+0x1d4/0x360 [ 100.091528][ T5152] ? ksys_write+0x70/0x260 [ 100.095957][ T5152] ksys_write+0x14d/0x260 [ 100.100309][ T5152] ? __ia32_sys_read+0x80/0x80 [ 100.105098][ T5152] ? lockdep_hardirqs_on+0x94/0x140 [ 100.110308][ T5152] do_syscall_64+0x4c/0xa0 [ 100.114735][ T5152] ? clear_bhb_loop+0x60/0xb0 [ 100.119421][ T5152] ? clear_bhb_loop+0x60/0xb0 [ 100.124100][ T5152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.129993][ T5152] RIP: 0033:0x7f507b59e0d9 [ 100.134426][ T5152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.154033][ T5152] RSP: 002b:00007f507c3fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.162457][ T5152] RAX: ffffffffffffffda RBX: 00007f507b825fa0 RCX: 00007f507b59e0d9 [ 100.170436][ T5152] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000008 [ 100.178415][ T5152] RBP: 00007f507c3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 100.186389][ T5152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.194364][ T5152] R13: 00007f507b826038 R14: 00007f507b825fa0 R15: 00007fffaab1bcf8 [ 100.202349][ T5152] [ 100.254720][ T5152] syz.1.235: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 100.317410][ T5152] CPU: 0 PID: 5152 Comm: syz.1.235 Not tainted syzkaller #0 [ 100.324739][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.334802][ T5152] Call Trace: [ 100.338096][ T5152] [ 100.341042][ T5152] dump_stack_lvl+0x188/0x24e [ 100.345740][ T5152] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 100.352154][ T5152] ? show_regs_print_info+0x12/0x12 [ 100.357347][ T5152] ? load_image+0x410/0x410 [ 100.361851][ T5152] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 100.368258][ T5152] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 100.374750][ T5152] warn_alloc+0x242/0x330 [ 100.379071][ T5152] ? __get_vm_area_node+0x122/0x330 [ 100.384263][ T5152] ? zone_watermark_ok_safe+0x270/0x270 [ 100.389802][ T5152] ? rcu_is_watching+0x11/0xa0 [ 100.394562][ T5152] ? __get_vm_area_node+0x318/0x330 [ 100.399750][ T5152] ? __local_bh_enable_ip+0x136/0x1c0 [ 100.405118][ T5152] __vmalloc_node_range+0x37c/0x1380 [ 100.410408][ T5152] ? netlink_insert+0x28d/0x13b0 [ 100.415346][ T5152] ? free_vm_area+0x50/0x50 [ 100.419847][ T5152] ? netlink_sendmsg+0x5ec/0xbd0 [ 100.424777][ T5152] vmalloc+0x75/0x80 [ 100.428671][ T5152] ? netlink_sendmsg+0x5ec/0xbd0 [ 100.433604][ T5152] netlink_sendmsg+0x5ec/0xbd0 [ 100.438371][ T5152] ? netlink_getsockopt+0x550/0x550 [ 100.443566][ T5152] ? apparmor_socket_sendmsg+0x8a/0x330 [ 100.449103][ T5152] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 100.454381][ T5152] ? security_socket_sendmsg+0x7c/0xa0 [ 100.459832][ T5152] sock_write_iter+0x2d5/0x3e0 [ 100.464586][ T5152] ? sock_read_iter+0x3a0/0x3a0 [ 100.469438][ T5152] vfs_write+0x482/0x9a0 [ 100.473681][ T5152] ? file_end_write+0x250/0x250 [ 100.478527][ T5152] ? __fget_files+0x3fc/0x460 [ 100.483202][ T5152] ? __fdget_pos+0x1d4/0x360 [ 100.487785][ T5152] ? ksys_write+0x70/0x260 [ 100.492196][ T5152] ksys_write+0x14d/0x260 [ 100.496519][ T5152] ? __ia32_sys_read+0x80/0x80 [ 100.501290][ T5152] ? lockdep_hardirqs_on+0x94/0x140 [ 100.506478][ T5152] do_syscall_64+0x4c/0xa0 [ 100.510887][ T5152] ? clear_bhb_loop+0x60/0xb0 [ 100.515555][ T5152] ? clear_bhb_loop+0x60/0xb0 [ 100.520225][ T5152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.526106][ T5152] RIP: 0033:0x7f507b59e0d9 [ 100.530514][ T5152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.550109][ T5152] RSP: 002b:00007f507c3fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.558515][ T5152] RAX: ffffffffffffffda RBX: 00007f507b825fa0 RCX: 00007f507b59e0d9 [ 100.566476][ T5152] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000008 [ 100.574436][ T5152] RBP: 00007f507c3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 100.582394][ T5152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.590354][ T5152] R13: 00007f507b826038 R14: 00007f507b825fa0 R15: 00007fffaab1bcf8 [ 100.598330][ T5152] [ 100.644455][ T5160] netlink: 63579 bytes leftover after parsing attributes in process `syz.0.237'. [ 100.686183][ T5152] Mem-Info: [ 100.689695][ T5152] active_anon:5959 inactive_anon:0 isolated_anon:0 [ 100.689695][ T5152] active_file:10280 inactive_file:39962 isolated_file:0 [ 100.689695][ T5152] unevictable:768 dirty:186 writeback:0 [ 100.689695][ T5152] slab_reclaimable:20852 slab_unreclaimable:95881 [ 100.689695][ T5152] mapped:29369 shmem:1361 pagetables:609 [ 100.689695][ T5152] sec_pagetables:0 bounce:0 [ 100.689695][ T5152] kernel_misc_reclaimable:0 [ 100.689695][ T5152] free:1332758 free_pcp:8432 free_cma:0 [ 100.744787][ T5152] Node 0 active_anon:24056kB inactive_anon:0kB active_file:41120kB inactive_file:159644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117560kB dirty:756kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10652kB pagetables:2624kB sec_pagetables:0kB all_unreclaimable? no [ 100.794047][ T5166] netlink: 132 bytes leftover after parsing attributes in process `syz.2.239'. [ 100.822553][ T5152] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 100.823637][ T5164] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.238'. [ 100.855016][ T5152] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.909669][ T5169] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.238'. [ 100.951013][ T5168] netlink: 'syz.2.239': attribute type 12 has an invalid length. [ 100.968683][ T5168] netlink: 132 bytes leftover after parsing attributes in process `syz.2.239'. [ 100.979925][ T5152] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 100.988000][ T5152] Node 0 DMA32 free:1419960kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23856kB inactive_anon:0kB active_file:41120kB inactive_file:159644kB unevictable:1536kB writepending:756kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:14088kB local_pcp:7068kB free_cma:0kB [ 101.078486][ T5175] netlink: 63579 bytes leftover after parsing attributes in process `syz.0.240'. [ 101.110061][ T5152] lowmem_reserve[]: 0 0 1 1 1 [ 101.124534][ T5152] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.169182][ T5152] lowmem_reserve[]: 0 0 0 0 0 [ 101.174347][ T5152] Node 1 Normal free:3895460kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20164kB local_pcp:11716kB free_cma:0kB [ 101.207421][ T5152] lowmem_reserve[]: 0 0 0 0 0 [ 101.222766][ T5152] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 101.276295][ T5152] Node 0 DMA32: 345*4kB (ME) 405*8kB (UM) 1086*16kB (UM) 715*32kB (UME) 356*64kB (UME) 49*128kB (UME) 14*256kB (UME) 13*512kB (UME) 2*1024kB (M) 5*2048kB (UM) 323*4096kB (UM) = 1419468kB [ 101.395063][ T5152] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 101.437172][ T5152] Node 1 Normal: 219*4kB (UE) 51*8kB (UE) 32*16kB (UME) 29*32kB (UME) 14*64kB (UME) 11*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (U) 2*2048kB (UE) 948*4096kB (M) = 3895460kB [ 101.606826][ T5152] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.675193][ T5152] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.724758][ T5152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.757797][ T5152] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.793753][ T5152] 51609 total pagecache pages [ 101.812415][ T5152] 0 pages in swap cache [ 101.867414][ T5152] Free swap = 124996kB [ 101.902769][ T5152] Total swap = 124996kB [ 101.925134][ T5152] 2097051 pages RAM [ 101.931255][ T5152] 0 pages HighMem/MovableOnly [ 101.942731][ T5152] 415222 pages reserved [ 101.952058][ T5152] 0 pages cma reserved [ 102.005689][ T5198] netlink: 152 bytes leftover after parsing attributes in process `syz.4.247'. [ 102.313613][ T5201] netlink: 'syz.4.247': attribute type 10 has an invalid length. [ 102.332659][ T5201] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 102.621202][ T5212] netlink: 'syz.1.253': attribute type 21 has an invalid length. [ 102.644037][ T5212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.253'. [ 102.668606][ T5212] netlink: 'syz.1.253': attribute type 1 has an invalid length. [ 102.739788][ T5215] netlink: 63579 bytes leftover after parsing attributes in process `syz.2.252'. [ 102.947829][ T5221] netlink: 132 bytes leftover after parsing attributes in process `syz.4.254'. [ 102.968298][ T5224] netlink: 'syz.4.254': attribute type 12 has an invalid length. [ 104.452861][ T5267] netlink: 'syz.3.268': attribute type 1 has an invalid length. [ 104.613587][ T5253] syz.0.263 (5253) used greatest stack depth: 16016 bytes left [ 104.725173][ T5282] netlink: 'syz.3.272': attribute type 27 has an invalid length. [ 105.600940][ T5315] Driver unsupported XDP return value 0 on prog (id 173) dev N/A, expect packet loss! [ 105.864683][ T5320] __nla_validate_parse: 5 callbacks suppressed [ 105.864699][ T5320] netlink: 188 bytes leftover after parsing attributes in process `syz.3.281'. [ 106.353940][ T5332] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.287'. [ 107.721648][ T5364] netlink: 'syz.0.298': attribute type 11 has an invalid length. [ 107.752505][ T5364] netlink: 184220 bytes leftover after parsing attributes in process `syz.0.298'. [ 107.794499][ T5362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.278573][ T5380] netlink: 14 bytes leftover after parsing attributes in process `syz.4.302'. [ 109.216792][ T5380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.359312][ T5380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.442194][ T5380] bond0 (unregistering): Released all slaves [ 109.456228][ T5413] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.310'. [ 110.853981][ T5448] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.320'. [ 111.011959][ T5455] pimreg: tun_chr_ioctl cmd 2147767511 [ 111.488658][ T5480] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.328'. [ 112.411971][ T5501] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 112.493993][ T5501] team0: Device ipvlan1 failed to register rx_handler [ 113.196593][ T5503] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 113.223554][ T5503] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 113.241498][ T5503] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 113.326092][ T5516] netlink: 192432 bytes leftover after parsing attributes in process `syz.1.339'. [ 113.372765][ T5516] net_ratelimit: 3 callbacks suppressed [ 113.372778][ T5516] netlink: get zone limit has 4 unknown bytes [ 113.496992][ T5520] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.341'. [ 114.219222][ T5537] netlink: 14 bytes leftover after parsing attributes in process `syz.1.346'. [ 114.593064][ T5537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.777720][ T5537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.907581][ T5537] bond0 (unregistering): Released all slaves [ 115.095611][ T5541] netlink: 188 bytes leftover after parsing attributes in process `syz.2.347'. [ 115.134462][ T5545] netlink: 'syz.0.348': attribute type 10 has an invalid length. [ 115.201666][ T5545] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.463019][ T5557] netlink: 'syz.2.351': attribute type 27 has an invalid length. [ 115.768382][ T5557] bond0: (slave bond_slave_0): Releasing backup interface [ 115.849675][ T4290] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 115.992770][ T5570] netlink: 14 bytes leftover after parsing attributes in process `syz.0.356'. [ 116.335165][ T5590] netlink: 'syz.0.363': attribute type 21 has an invalid length. [ 116.389908][ T5590] netlink: 128 bytes leftover after parsing attributes in process `syz.0.363'. [ 116.523343][ T5590] netlink: 'syz.0.363': attribute type 4 has an invalid length. [ 116.684840][ T5604] pimreg: tun_chr_ioctl cmd 2147767511 [ 116.936642][ T5609] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 116.988661][ T5585] device syzkaller0 entered promiscuous mode [ 116.998527][ T5609] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.366'. [ 117.538734][ T5626] netlink: 68 bytes leftover after parsing attributes in process `syz.0.371'. [ 117.642713][ T5633] netlink: 128 bytes leftover after parsing attributes in process `syz.4.373'. [ 117.654631][ T5633] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 117.669309][ T5633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.848381][ T5641] netlink: 'syz.0.374': attribute type 49 has an invalid length. [ 117.934332][ T4290] Bluetooth: hci0: command 0x2016 tx timeout [ 118.236518][ T5654] netlink: 14 bytes leftover after parsing attributes in process `syz.3.376'. [ 118.246154][ T5654] openvswitch: netlink: Message has 6 unknown bytes. [ 119.636937][ T4286] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 121.683282][ T4286] Bluetooth: hci1: command 0x2016 tx timeout [ 123.399043][ T5670] pimreg: tun_chr_ioctl cmd 2147767511 [ 123.764834][ T5698] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 123.772962][ T5698] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.392'. [ 123.835636][ T5705] sctp: [Deprecated]: syz.2.392 (pid 5705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.835636][ T5705] Use struct sctp_sack_info instead [ 123.976273][ T5695] netlink: 'syz.3.391': attribute type 39 has an invalid length. [ 124.407091][ T4290] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 125.097600][ T5736] netlink: 14 bytes leftover after parsing attributes in process `syz.1.400'. [ 125.204503][ T5736] openvswitch: netlink: Message has 6 unknown bytes. [ 126.498386][ T4290] Bluetooth: hci2: command 0x2016 tx timeout [ 127.210668][ T5785] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.414'. [ 127.232909][ T5785] netlink: zone id is out of range [ 127.239634][ T5785] netlink: zone id is out of range [ 127.258547][ T5785] netlink: zone id is out of range [ 127.326423][ T5785] netlink: zone id is out of range [ 127.356065][ T5785] netlink: zone id is out of range [ 127.398435][ T5785] netlink: zone id is out of range [ 127.451045][ T5785] netlink: zone id is out of range [ 127.467743][ T5792] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 127.469008][ T5796] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.416'. [ 127.482050][ T5785] netlink: zone id is out of range [ 127.514911][ T5785] netlink: zone id is out of range [ 127.668076][ T5798] netlink: 63579 bytes leftover after parsing attributes in process `syz.1.418'. [ 128.278734][ T5810] netlink: 14 bytes leftover after parsing attributes in process `syz.0.422'. [ 130.204237][ T5866] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.439'. [ 130.256768][ T5866] netlink: 'syz.1.439': attribute type 10 has an invalid length. [ 130.328795][ T5866] batman_adv: batadv0: Adding interface: netdevsim0 [ 130.359156][ T5866] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.395330][ T5874] syz.3.441[5874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.395709][ T5874] syz.3.441[5874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.414127][ T5866] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 130.456101][ T5871] netlink: 'syz.1.439': attribute type 5 has an invalid length. [ 130.472879][ T5871] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 130.481624][ T5871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.865725][ T5881] netlink: 14 bytes leftover after parsing attributes in process `syz.4.443'. [ 130.959498][ T5881] net_ratelimit: 12 callbacks suppressed [ 130.959514][ T5881] openvswitch: netlink: Message has 6 unknown bytes. [ 131.314077][ T5891] netlink: 'syz.3.447': attribute type 27 has an invalid length. [ 131.342733][ T5891] netlink: 164 bytes leftover after parsing attributes in process `syz.3.447'. [ 131.405793][ T4286] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 131.458326][ T5902] netlink: 128 bytes leftover after parsing attributes in process `syz.1.451'. [ 131.472841][ T5902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.911294][ T5919] netlink: 'syz.1.456': attribute type 10 has an invalid length. [ 131.967437][ T5919] team0: Port device wlan1 removed [ 132.885063][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.891465][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.939035][ T5948] netlink: 14 bytes leftover after parsing attributes in process `syz.2.459'. [ 132.997131][ T5948] openvswitch: netlink: Message has 6 unknown bytes. [ 133.758969][ T5968] netlink: 'syz.1.470': attribute type 7 has an invalid length. [ 134.110987][ T5982] netlink: 'syz.2.473': attribute type 11 has an invalid length. [ 134.192145][ T5982] netlink: 191644 bytes leftover after parsing attributes in process `syz.2.473'. [ 134.252328][ T5983] netlink: 3 bytes leftover after parsing attributes in process `syz.3.474'. [ 134.711018][ T5998] netlink: 14 bytes leftover after parsing attributes in process `syz.1.477'. [ 134.774315][ T5998] openvswitch: netlink: Message has 6 unknown bytes. [ 135.324366][ T6019] netlink: 14 bytes leftover after parsing attributes in process `syz.0.480'. [ 135.404964][ T6019] openvswitch: netlink: Message has 6 unknown bytes. [ 135.613761][ T6027] netlink: 'syz.2.488': attribute type 3 has an invalid length. [ 135.651880][ T6027] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.488'. [ 135.904978][ T6043] netlink: 'syz.1.491': attribute type 11 has an invalid length. [ 135.972976][ T6043] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.491'. [ 136.000769][ T6051] netlink: 14 bytes leftover after parsing attributes in process `syz.0.493'. [ 136.040762][ T6051] openvswitch: netlink: Message has 6 unknown bytes. [ 136.100788][ T6043] netlink: 'syz.1.491': attribute type 10 has an invalid length. [ 136.172721][ T6042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.355819][ T6060] netlink: 'syz.3.494': attribute type 10 has an invalid length. [ 136.579108][ T6060] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 136.788890][ T6075] netlink: 'syz.2.498': attribute type 7 has an invalid length. [ 136.954766][ T6084] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.502'. [ 137.139701][ T6091] netlink: 15119 bytes leftover after parsing attributes in process `syz.4.504'. [ 137.345616][ T6092] netlink: 14 bytes leftover after parsing attributes in process `syz.3.500'. [ 137.401852][ T6098] netlink: 14 bytes leftover after parsing attributes in process `syz.0.505'. [ 137.445220][ T6092] openvswitch: netlink: Message has 6 unknown bytes. [ 137.468576][ T6098] openvswitch: netlink: Message has 6 unknown bytes. [ 138.513199][ T6128] FAULT_INJECTION: forcing a failure. [ 138.513199][ T6128] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 138.579585][ T6128] CPU: 0 PID: 6128 Comm: syz.0.512 Not tainted syzkaller #0 [ 138.586912][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.596997][ T6128] Call Trace: [ 138.600282][ T6128] [ 138.603221][ T6128] dump_stack_lvl+0x188/0x24e [ 138.607935][ T6128] ? show_regs_print_info+0x12/0x12 [ 138.613150][ T6128] ? load_image+0x410/0x410 [ 138.617669][ T6128] ? __lock_acquire+0x7c40/0x7c40 [ 138.622714][ T6128] should_fail_ex+0x390/0x4c0 [ 138.627407][ T6128] _copy_from_user+0x2c/0x170 [ 138.632099][ T6128] __sys_bpf+0x2ea/0x780 [ 138.636359][ T6128] ? bpf_link_show_fdinfo+0x380/0x380 [ 138.641759][ T6128] ? lock_chain_count+0x20/0x20 [ 138.646635][ T6128] __x64_sys_bpf+0x78/0x90 [ 138.651068][ T6128] do_syscall_64+0x4c/0xa0 [ 138.655498][ T6128] ? clear_bhb_loop+0x60/0xb0 [ 138.660192][ T6128] ? clear_bhb_loop+0x60/0xb0 [ 138.664887][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.670815][ T6128] RIP: 0033:0x7fdc7699e0d9 [ 138.675246][ T6128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.694874][ T6128] RSP: 002b:00007fdc778a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.703314][ T6128] RAX: ffffffffffffffda RBX: 00007fdc76c26180 RCX: 00007fdc7699e0d9 [ 138.711297][ T6128] RDX: 0000000000000005 RSI: 0000200000000200 RDI: 000000000000001d [ 138.719277][ T6128] RBP: 00007fdc778a7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.727261][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.735244][ T6128] R13: 00007fdc76c26218 R14: 00007fdc76c26180 R15: 00007ffef4384778 [ 138.743234][ T6128] [ 138.893585][ T6136] syz.2.517[6136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.893802][ T6136] syz.2.517[6136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.064271][ T6143] netlink: 14 bytes leftover after parsing attributes in process `syz.0.519'. [ 139.149263][ T6143] openvswitch: netlink: Message has 6 unknown bytes. [ 139.177879][ T6149] netlink: 'syz.1.518': attribute type 10 has an invalid length. [ 139.203187][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.296817][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.407241][ T6156] sctp: [Deprecated]: syz.4.523 (pid 6156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.407241][ T6156] Use struct sctp_sack_info instead [ 139.461233][ T6159] netlink: 63579 bytes leftover after parsing attributes in process `syz.3.524'. [ 139.597730][ T6164] raw_sendmsg: syz.2.525 forgot to set AF_INET. Fix it! [ 139.720662][ T6167] delete_channel: no stack [ 139.958253][ T6178] FAULT_INJECTION: forcing a failure. [ 139.958253][ T6178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.972669][ T6178] CPU: 1 PID: 6178 Comm: syz.2.529 Not tainted syzkaller #0 [ 139.979985][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.990090][ T6178] Call Trace: [ 139.993383][ T6178] [ 139.996323][ T6178] dump_stack_lvl+0x188/0x24e [ 140.001022][ T6178] ? show_regs_print_info+0x12/0x12 [ 140.006254][ T6178] ? load_image+0x410/0x410 [ 140.010777][ T6178] ? __lock_acquire+0x7c40/0x7c40 [ 140.015827][ T6178] ? snprintf+0xe5/0x140 [ 140.020075][ T6178] should_fail_ex+0x390/0x4c0 [ 140.024771][ T6178] _copy_to_user+0x2c/0x130 [ 140.029291][ T6178] simple_read_from_buffer+0xe3/0x150 [ 140.034676][ T6178] proc_fail_nth_read+0x1a6/0x220 [ 140.039696][ T6178] ? proc_fault_inject_write+0x310/0x310 [ 140.045325][ T6178] ? fsnotify_perm+0x248/0x550 [ 140.050084][ T6178] ? proc_fault_inject_write+0x310/0x310 [ 140.055748][ T6178] vfs_read+0x2db/0x960 [ 140.059920][ T6178] ? kernel_read+0x1e0/0x1e0 [ 140.064515][ T6178] ? __fget_files+0x28/0x460 [ 140.069109][ T6178] ? __fget_files+0x3fc/0x460 [ 140.073791][ T6178] ? __fdget_pos+0x2ae/0x360 [ 140.078377][ T6178] ? ksys_read+0x70/0x260 [ 140.082705][ T6178] ksys_read+0x14d/0x260 [ 140.086948][ T6178] ? vfs_write+0x9a0/0x9a0 [ 140.091364][ T6178] ? lockdep_hardirqs_on+0x94/0x140 [ 140.096565][ T6178] do_syscall_64+0x4c/0xa0 [ 140.100977][ T6178] ? clear_bhb_loop+0x60/0xb0 [ 140.105646][ T6178] ? clear_bhb_loop+0x60/0xb0 [ 140.110318][ T6178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.116204][ T6178] RIP: 0033:0x7f1a4f35e90e [ 140.120612][ T6178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.140205][ T6178] RSP: 002b:00007f1a50244fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.148609][ T6178] RAX: ffffffffffffffda RBX: 00007f1a502456c0 RCX: 00007f1a4f35e90e [ 140.156576][ T6178] RDX: 000000000000000f RSI: 00007f1a502450a0 RDI: 0000000000000009 [ 140.164536][ T6178] RBP: 00007f1a50245090 R08: 0000000000000000 R09: 0000000000000000 [ 140.172499][ T6178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.180457][ T6178] R13: 00007f1a4f626128 R14: 00007f1a4f626090 R15: 00007ffcca5c8de8 [ 140.188434][ T6178] [ 140.780756][ T6189] __nla_validate_parse: 1 callbacks suppressed [ 140.780845][ T6189] netlink: 14 bytes leftover after parsing attributes in process `syz.0.532'. [ 140.803896][ T6189] openvswitch: netlink: Message has 6 unknown bytes. [ 141.176133][ T6193] netlink: 'syz.3.535': attribute type 10 has an invalid length. [ 141.231880][ T6193] netlink: 2 bytes leftover after parsing attributes in process `syz.3.535'. [ 141.350068][ T6193] device hsr0 entered promiscuous mode [ 141.383151][ T6193] bridge0: port 3(hsr0) entered blocking state [ 141.452776][ T6193] bridge0: port 3(hsr0) entered disabled state [ 141.501693][ T6193] bridge0: port 3(hsr0) entered blocking state [ 141.508020][ T6193] bridge0: port 3(hsr0) entered forwarding state [ 141.878769][ T6218] netlink: 'syz.3.539': attribute type 11 has an invalid length. [ 141.906021][ T6218] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.539'. [ 142.660134][ T6217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.149889][ T6224] netlink: 'syz.3.539': attribute type 10 has an invalid length. [ 144.167256][ T6224] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.633515][ T6250] netlink: 14 bytes leftover after parsing attributes in process `syz.1.548'. [ 144.743942][ T6250] openvswitch: netlink: Message has 6 unknown bytes. [ 145.069475][ T6261] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 145.119934][ T6261] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 145.152130][ T6261] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 145.600654][ T6278] netlink: 144 bytes leftover after parsing attributes in process `syz.3.556'. [ 145.678379][ T6283] netlink: 'syz.0.558': attribute type 11 has an invalid length. [ 145.716872][ T6283] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.558'. [ 145.856840][ T6283] netlink: 'syz.0.558': attribute type 10 has an invalid length. [ 146.544737][ T6281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.558203][ T6283] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 147.233138][ T6311] netlink: 'syz.1.566': attribute type 29 has an invalid length. [ 147.241054][ T6311] netlink: 'syz.1.566': attribute type 29 has an invalid length. [ 147.569310][ T6323] netlink: 14 bytes leftover after parsing attributes in process `syz.3.567'. [ 147.623512][ T6323] openvswitch: netlink: Message has 6 unknown bytes. [ 148.686304][ T6355] netlink: 'syz.1.576': attribute type 10 has an invalid length. [ 148.755398][ T6355] team0: Device hsr_slave_0 failed to register rx_handler [ 152.007770][ T6380] netlink: 3 bytes leftover after parsing attributes in process `syz.4.585'. [ 152.346490][ T6395] netlink: 14 bytes leftover after parsing attributes in process `syz.1.583'. [ 152.365172][ T6395] openvswitch: netlink: Message has 6 unknown bytes. [ 152.894585][ T6397] netlink: 'syz.2.584': attribute type 12 has an invalid length. [ 152.902374][ T6397] netlink: 164 bytes leftover after parsing attributes in process `syz.2.584'. [ 153.602879][ T6420] netlink: 'syz.4.592': attribute type 4 has an invalid length. [ 153.621391][ T6420] netlink: 168 bytes leftover after parsing attributes in process `syz.4.592'. [ 153.958502][ T6437] device syzkaller0 entered promiscuous mode [ 154.243918][ T6462] netlink: 14 bytes leftover after parsing attributes in process `syz.4.601'. [ 154.323929][ T6462] openvswitch: netlink: Message has 6 unknown bytes. [ 156.082124][ T6465] netlink: 'syz.2.603': attribute type 15 has an invalid length. [ 156.095156][ T6465] netlink: 'syz.2.603': attribute type 7 has an invalid length. [ 156.103772][ T6465] netlink: 52 bytes leftover after parsing attributes in process `syz.2.603'. [ 156.502521][ T6494] netlink: 'syz.0.610': attribute type 4 has an invalid length. [ 156.523181][ T6494] netlink: 168 bytes leftover after parsing attributes in process `syz.0.610'. [ 156.597730][ T6496] netlink: 144 bytes leftover after parsing attributes in process `syz.3.611'. [ 156.788608][ T6502] netlink: 'syz.4.613': attribute type 3 has an invalid length. [ 156.810205][ T6502] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.613'. [ 157.173938][ T6514] netlink: 14 bytes leftover after parsing attributes in process `syz.3.615'. [ 157.319903][ T6514] openvswitch: netlink: Message has 6 unknown bytes. [ 158.016950][ T6531] netlink: 'syz.0.620': attribute type 12 has an invalid length. [ 158.052917][ T6531] netlink: 164 bytes leftover after parsing attributes in process `syz.0.620'. [ 158.130490][ T6534] FAULT_INJECTION: forcing a failure. [ 158.130490][ T6534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.160944][ T6534] CPU: 1 PID: 6534 Comm: syz.1.631 Not tainted syzkaller #0 [ 158.168272][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.178339][ T6534] Call Trace: [ 158.181631][ T6534] [ 158.184573][ T6534] dump_stack_lvl+0x188/0x24e [ 158.189273][ T6534] ? show_regs_print_info+0x12/0x12 [ 158.194480][ T6534] ? load_image+0x410/0x410 [ 158.198989][ T6534] ? __lock_acquire+0x7c40/0x7c40 [ 158.204019][ T6534] should_fail_ex+0x390/0x4c0 [ 158.208701][ T6534] _copy_from_user+0x2c/0x170 [ 158.213378][ T6534] iovec_from_user+0x143/0x360 [ 158.218151][ T6534] __import_iovec+0x6c/0x510 [ 158.222745][ T6534] import_iovec+0x6f/0xa0 [ 158.227072][ T6534] ___sys_sendmsg+0x252/0x360 [ 158.231748][ T6534] ? __sys_sendmsg+0x2a0/0x2a0 [ 158.236521][ T6534] ? __lock_acquire+0x7c40/0x7c40 [ 158.241557][ T6534] __se_sys_sendmsg+0x1c3/0x2b0 [ 158.246404][ T6534] ? __x64_sys_sendmsg+0x80/0x80 [ 158.251349][ T6534] ? lockdep_hardirqs_on+0x94/0x140 [ 158.256539][ T6534] do_syscall_64+0x4c/0xa0 [ 158.260949][ T6534] ? clear_bhb_loop+0x60/0xb0 [ 158.265618][ T6534] ? clear_bhb_loop+0x60/0xb0 [ 158.270287][ T6534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.276171][ T6534] RIP: 0033:0x7f507b59e0d9 [ 158.280579][ T6534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.300174][ T6534] RSP: 002b:00007f507c3fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.308576][ T6534] RAX: ffffffffffffffda RBX: 00007f507b825fa0 RCX: 00007f507b59e0d9 [ 158.316537][ T6534] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 158.324498][ T6534] RBP: 00007f507c3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 158.332458][ T6534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.340416][ T6534] R13: 00007f507b826038 R14: 00007f507b825fa0 R15: 00007fffaab1bcf8 [ 158.348390][ T6534] [ 158.515677][ T6542] netlink: 'syz.3.623': attribute type 1 has an invalid length. [ 158.583672][ T6542] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.623'. [ 158.810869][ T6554] netlink: 'syz.2.627': attribute type 4 has an invalid length. [ 158.852825][ T6554] netlink: 168 bytes leftover after parsing attributes in process `syz.2.627'. [ 158.873174][ T6561] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.629'. [ 159.353590][ T6578] FAULT_INJECTION: forcing a failure. [ 159.353590][ T6578] name failslab, interval 1, probability 0, space 0, times 0 [ 159.391541][ T6575] netlink: 'syz.2.634': attribute type 3 has an invalid length. [ 159.430263][ T6578] CPU: 1 PID: 6578 Comm: syz.1.636 Not tainted syzkaller #0 [ 159.437593][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.447664][ T6578] Call Trace: [ 159.450955][ T6578] [ 159.453907][ T6578] dump_stack_lvl+0x188/0x24e [ 159.458611][ T6578] ? ip6_string+0x1a20/0x1a20 [ 159.463306][ T6578] ? show_regs_print_info+0x12/0x12 [ 159.468534][ T6578] ? load_image+0x410/0x410 [ 159.473066][ T6578] should_fail_ex+0x390/0x4c0 [ 159.473314][ T6575] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.634'. [ 159.477756][ T6578] should_failslab+0x5/0x20 [ 159.477785][ T6578] slab_pre_alloc_hook+0x59/0x300 [ 159.477810][ T6578] kmem_cache_alloc+0x56/0x2f0 [ 159.477826][ T6578] ? dst_alloc+0x101/0x160 [ 159.505688][ T6578] dst_alloc+0x101/0x160 [ 159.509979][ T6578] ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 159.516063][ T6578] ? ip_route_output_key_hash_rcu+0x12e1/0x23f0 [ 159.522330][ T6578] ? ip_route_output_key_hash+0x139/0x330 [ 159.528066][ T6578] ip_route_output_key_hash+0x1ef/0x330 [ 159.533632][ T6578] ? ip_route_input_rcu+0x30a0/0x30a0 [ 159.539019][ T6578] ? __lock_acquire+0x7c40/0x7c40 [ 159.544062][ T6578] ? tomoyo_check_acl+0x378/0x3f0 [ 159.549113][ T6578] ip_route_output_flow+0x26/0x150 [ 159.554228][ T6578] ? security_sk_classify_flow+0x77/0x90 [ 159.559879][ T6578] raw_sendmsg+0xf7c/0x1940 [ 159.564403][ T6578] ? compat_raw_ioctl+0x60/0x60 [ 159.569266][ T6578] ? aa_sk_perm+0x81f/0x950 [ 159.573795][ T6578] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 159.580220][ T6578] ? aa_sock_msg_perm+0x94/0x150 [ 159.585169][ T6578] ? sock_rps_record_flow+0x19/0x3f0 [ 159.590459][ T6578] ? inet_sendmsg+0x7a/0x2a0 [ 159.595051][ T6578] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 159.600343][ T6578] ? inet_send_prepare+0x250/0x250 [ 159.605459][ T6578] ____sys_sendmsg+0x5ed/0x9a0 [ 159.610243][ T6578] ? __sys_sendmsg_sock+0x30/0x30 [ 159.615309][ T6578] ? __import_iovec+0x306/0x510 [ 159.620181][ T6578] ? import_iovec+0x6f/0xa0 [ 159.624702][ T6578] ___sys_sendmsg+0x2a2/0x360 [ 159.629401][ T6578] ? __sys_sendmsg+0x2a0/0x2a0 [ 159.634198][ T6578] ? __lock_acquire+0x7c40/0x7c40 [ 159.639275][ T6578] __se_sys_sendmsg+0x1c3/0x2b0 [ 159.644137][ T6578] ? ct_nmi_exit+0x145/0x1c0 [ 159.648735][ T6578] ? __x64_sys_sendmsg+0x80/0x80 [ 159.653701][ T6578] ? lockdep_hardirqs_on+0x94/0x140 [ 159.658909][ T6578] do_syscall_64+0x4c/0xa0 [ 159.663337][ T6578] ? clear_bhb_loop+0x60/0xb0 [ 159.668026][ T6578] ? clear_bhb_loop+0x60/0xb0 [ 159.672717][ T6578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.678625][ T6578] RIP: 0033:0x7f507b59e0d9 [ 159.683051][ T6578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.702670][ T6578] RSP: 002b:00007f507c3fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.711100][ T6578] RAX: ffffffffffffffda RBX: 00007f507b825fa0 RCX: 00007f507b59e0d9 [ 159.719089][ T6578] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 159.727075][ T6578] RBP: 00007f507c3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 159.735059][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.743039][ T6578] R13: 00007f507b826038 R14: 00007f507b825fa0 R15: 00007fffaab1bcf8 [ 159.751042][ T6578] [ 159.783063][ T6583] netlink: 14 bytes leftover after parsing attributes in process `syz.3.635'. [ 159.804429][ T6583] openvswitch: netlink: Message has 6 unknown bytes. [ 160.449508][ T6588] netlink: 'syz.2.639': attribute type 10 has an invalid length. [ 160.641807][ T6594] netlink: 'syz.0.648': attribute type 3 has an invalid length. [ 160.667121][ T6594] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.648'. [ 160.920598][ T6598] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.640'. [ 160.933213][ T6601] netlink: 'syz.1.638': attribute type 12 has an invalid length. [ 160.981062][ T6601] netlink: 164 bytes leftover after parsing attributes in process `syz.1.638'. [ 161.189466][ T6614] ¥: port 1(team0) entered blocking state [ 161.200914][ T6614] ¥: port 1(team0) entered disabled state [ 161.216797][ T6608] cgroup: fork rejected by pids controller in /syz4 [ 161.218337][ T6614] device team0 entered promiscuous mode [ 161.230498][ T6614] device team_slave_0 entered promiscuous mode [ 161.237935][ T6614] device team_slave_1 entered promiscuous mode [ 162.039161][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.190303][ T6634] netlink: 14 bytes leftover after parsing attributes in process `syz.1.652'. [ 162.203963][ T6634] openvswitch: netlink: Message has 6 unknown bytes. [ 162.248188][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.360691][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.478410][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.049371][ T6653] netlink: 'syz.2.658': attribute type 10 has an invalid length. [ 163.090108][ T6653] __nla_validate_parse: 1 callbacks suppressed [ 163.090197][ T6653] netlink: 2 bytes leftover after parsing attributes in process `syz.2.658'. [ 163.160516][ T6653] device hsr0 entered promiscuous mode [ 163.200113][ T6653] bridge0: port 3(hsr0) entered blocking state [ 163.221775][ T6653] bridge0: port 3(hsr0) entered disabled state [ 163.261459][ T6653] bridge0: port 3(hsr0) entered blocking state [ 163.267907][ T6653] bridge0: port 3(hsr0) entered forwarding state [ 163.551268][ T6676] FAULT_INJECTION: forcing a failure. [ 163.551268][ T6676] name failslab, interval 1, probability 0, space 0, times 0 [ 163.567922][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.577000][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.586015][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.596098][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.604078][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.611313][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.655238][ T6676] CPU: 0 PID: 6676 Comm: syz.2.664 Not tainted syzkaller #0 [ 163.662564][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.672629][ T6676] Call Trace: [ 163.675917][ T6676] [ 163.678857][ T6676] dump_stack_lvl+0x188/0x24e [ 163.683558][ T6676] ? show_regs_print_info+0x12/0x12 [ 163.688776][ T6676] ? load_image+0x410/0x410 [ 163.693279][ T6676] ? __might_sleep+0xd0/0xd0 [ 163.697860][ T6676] ? __lock_acquire+0x7c40/0x7c40 [ 163.702883][ T6676] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 163.708854][ T6676] ? is_dynamic_key+0x260/0x260 [ 163.713700][ T6676] should_fail_ex+0x390/0x4c0 [ 163.718375][ T6676] should_failslab+0x5/0x20 [ 163.722868][ T6676] slab_pre_alloc_hook+0x59/0x300 [ 163.727885][ T6676] kmem_cache_alloc_node+0x5a/0x310 [ 163.733078][ T6676] ? __alloc_skb+0xf9/0x7d0 [ 163.737575][ T6676] __alloc_skb+0xf9/0x7d0 [ 163.741898][ T6676] __ip_append_data+0x26d7/0x38d0 [ 163.746931][ T6676] ? ip_route_output_key_hash+0x139/0x330 [ 163.752652][ T6676] ? raw_send_hdrinc+0x1130/0x1130 [ 163.757757][ T6676] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 163.763733][ T6676] ? ip_setup_cork+0x850/0x850 [ 163.768492][ T6676] ? ipv4_mtu+0x30c/0x420 [ 163.772813][ T6676] ? ip_setup_cork+0x528/0x850 [ 163.777569][ T6676] ip_append_data+0x132/0x1a0 [ 163.782242][ T6676] ? raw_send_hdrinc+0x1130/0x1130 [ 163.787347][ T6676] raw_sendmsg+0x12c8/0x1940 [ 163.791938][ T6676] ? compat_raw_ioctl+0x60/0x60 [ 163.796780][ T6676] ? aa_sk_perm+0x81f/0x950 [ 163.801282][ T6676] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 163.807686][ T6676] ? aa_sock_msg_perm+0x94/0x150 [ 163.812618][ T6676] ? sock_rps_record_flow+0x19/0x3f0 [ 163.817894][ T6676] ? inet_sendmsg+0x7a/0x2a0 [ 163.822469][ T6676] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 163.827744][ T6676] ? inet_send_prepare+0x250/0x250 [ 163.832848][ T6676] ____sys_sendmsg+0x5ed/0x9a0 [ 163.837620][ T6676] ? __sys_sendmsg_sock+0x30/0x30 [ 163.842637][ T6676] ? __import_iovec+0x306/0x510 [ 163.847513][ T6676] ? import_iovec+0x6f/0xa0 [ 163.852021][ T6676] ___sys_sendmsg+0x2a2/0x360 [ 163.856700][ T6676] ? __sys_sendmsg+0x2a0/0x2a0 [ 163.861492][ T6676] ? __lock_acquire+0x7c40/0x7c40 [ 163.866531][ T6676] __se_sys_sendmsg+0x1c3/0x2b0 [ 163.871392][ T6676] ? __x64_sys_sendmsg+0x80/0x80 [ 163.876339][ T6676] ? lockdep_hardirqs_on+0x94/0x140 [ 163.881526][ T6676] do_syscall_64+0x4c/0xa0 [ 163.885935][ T6676] ? clear_bhb_loop+0x60/0xb0 [ 163.890602][ T6676] ? clear_bhb_loop+0x60/0xb0 [ 163.895271][ T6676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.901153][ T6676] RIP: 0033:0x7f1a4f39e0d9 [ 163.905560][ T6676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.925157][ T6676] RSP: 002b:00007f1a50266028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.933564][ T6676] RAX: ffffffffffffffda RBX: 00007f1a4f625fa0 RCX: 00007f1a4f39e0d9 [ 163.941523][ T6676] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 163.949483][ T6676] RBP: 00007f1a50266090 R08: 0000000000000000 R09: 0000000000000000 [ 163.957443][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.965409][ T6676] R13: 00007f1a4f626038 R14: 00007f1a4f625fa0 R15: 00007ffcca5c8de8 [ 163.973385][ T6676] [ 164.069059][ T6683] device wlan1 entered promiscuous mode [ 164.366142][ T6694] netlink: 'syz.1.668': attribute type 27 has an invalid length. [ 164.529320][ T6707] netlink: 14 bytes leftover after parsing attributes in process `syz.3.667'. [ 164.552680][ T6707] openvswitch: netlink: Message has 6 unknown bytes. [ 164.677696][ T6674] chnl_net:caif_netlink_parms(): no params data found [ 165.340816][ T6719] netlink: 'syz.0.673': attribute type 21 has an invalid length. [ 165.393862][ T6674] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.401075][ T6674] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.444068][ T6674] device bridge_slave_0 entered promiscuous mode [ 165.544102][ T11] device hsr_slave_0 left promiscuous mode [ 165.565813][ T11] device hsr_slave_1 left promiscuous mode [ 165.613202][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.620678][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.682765][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 165.733733][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.741180][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.781926][ T11] device bridge_slave_1 left promiscuous mode [ 165.801162][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.830017][ T11] device bridge_slave_0 left promiscuous mode [ 165.842810][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.902220][ T11] device veth1_macvtap left promiscuous mode [ 165.928406][ T11] device veth0_macvtap left promiscuous mode [ 165.949345][ T11] device veth1_vlan left promiscuous mode [ 165.983060][ T11] device veth0_vlan left promiscuous mode [ 166.198366][ T6768] netlink: 'syz.1.681': attribute type 29 has an invalid length. [ 167.259811][ T11] team0 (unregistering): Port device team_slave_1 removed [ 167.319516][ T11] team0 (unregistering): Port device team_slave_0 removed [ 167.766077][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 167.809827][ T6674] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.817722][ T6674] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.826241][ T6674] device bridge_slave_1 entered promiscuous mode [ 167.846922][ T6756] device wlan1 entered promiscuous mode [ 167.853981][ T6768] netlink: 'syz.1.681': attribute type 29 has an invalid length. [ 167.882206][ T6787] netlink: 'syz.2.689': attribute type 3 has an invalid length. [ 167.902934][ T6787] netlink: 148 bytes leftover after parsing attributes in process `syz.2.689'. [ 167.919170][ T6674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.020989][ T6674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.154948][ T6674] team0: Port device team_slave_0 added [ 168.184253][ T6674] team0: Port device team_slave_1 added [ 168.285950][ T6674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.328903][ T6674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.408897][ T6674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.514431][ T6674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.521418][ T6674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.587003][ T6674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.702739][ T6818] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 168.709427][ T6818] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 168.777574][ T6674] device hsr_slave_0 entered promiscuous mode [ 168.803110][ T6674] device hsr_slave_1 entered promiscuous mode [ 168.812159][ T6674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.825696][ T6674] Cannot create hsr debugfs directory [ 169.543086][ T6859] delete_channel: no stack [ 169.583512][ T6859] delete_channel: no stack [ 169.827149][ T6674] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.842641][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 169.880751][ T6876] netlink: 'syz.2.712': attribute type 29 has an invalid length. [ 169.929377][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 170.001490][ T6674] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.045981][ T6876] netlink: 'syz.2.712': attribute type 29 has an invalid length. [ 170.112916][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 170.164163][ T6674] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.208457][ T6674] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.456513][ T6884] netlink: 14 bytes leftover after parsing attributes in process `syz.0.714'. [ 170.520606][ T6884] openvswitch: netlink: Message has 6 unknown bytes. [ 170.898428][ T6674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.960941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.970650][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.988404][ T6674] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.026411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.066312][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.105425][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.112629][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.151227][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.204888][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.231972][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.262231][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.269972][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.295209][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.310885][ T6915] netlink: 'syz.0.722': attribute type 3 has an invalid length. [ 171.334791][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.343205][ T6915] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.722'. [ 171.376755][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.401194][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.418304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.441167][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.457992][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.483639][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.510684][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.545944][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.588933][ T6920] netlink: 128 bytes leftover after parsing attributes in process `syz.0.722'. [ 171.612182][ T6920] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 171.627463][ T6920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.646283][ T6674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.666034][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.690357][ T6932] netlink: 132 bytes leftover after parsing attributes in process `syz.1.724'. [ 171.922698][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 172.008434][ T6941] netlink: 'syz.0.727': attribute type 29 has an invalid length. [ 172.053596][ T6941] netlink: 'syz.0.727': attribute type 29 has an invalid length. [ 172.429235][ T6952] netlink: 'syz.0.730': attribute type 1 has an invalid length. [ 172.478229][ T6952] netlink: 152 bytes leftover after parsing attributes in process `syz.0.730'. [ 172.567447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.583193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.603640][ T6674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.893833][ T6972] netlink: 14 bytes leftover after parsing attributes in process `syz.2.732'. [ 172.994199][ T6972] openvswitch: netlink: Message has 6 unknown bytes. [ 173.449007][ T6983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.478687][ T6983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.549460][ T6983] batman_adv: batadv0: Removing interface: netdevsim0 [ 174.388767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.415416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.489865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.510330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.520315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.533087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.607216][ T6674] device veth0_vlan entered promiscuous mode [ 174.720041][ T6674] device veth1_vlan entered promiscuous mode [ 175.068823][ T6674] device veth0_macvtap entered promiscuous mode [ 175.136104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.156966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.183606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.212911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.318112][ T7022] device syzkaller0 entered promiscuous mode [ 175.356656][ T6674] device veth1_macvtap entered promiscuous mode [ 175.437191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.451966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.614185][ T7047] netlink: 'syz.1.750': attribute type 10 has an invalid length. [ 175.632759][ T7047] netlink: 55 bytes leftover after parsing attributes in process `syz.1.750'. [ 177.540312][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.551227][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.561289][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.572629][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.584792][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.595356][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.608699][ T6674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.629390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.649305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.674393][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.698866][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.709123][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.719877][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.750274][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.766888][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.788420][ T6674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.812989][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.838586][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.888691][ T6674] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.913301][ T6674] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.922044][ T6674] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.935872][ T6674] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.946469][ T7067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.964524][ T7067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.988673][ T7067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.000891][ T7067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.023339][ T7076] netlink: 4991 bytes leftover after parsing attributes in process `syz.2.754'. [ 178.229407][ T7075] netlink: 14 bytes leftover after parsing attributes in process `syz.3.756'. [ 178.315668][ T7075] openvswitch: netlink: Message has 6 unknown bytes. [ 178.586579][ T7072] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.755'. [ 178.973279][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.998799][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.028122][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.063500][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.071379][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.100736][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.280802][ T7088] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.654'. [ 179.395529][ T7094] netlink: 'syz.0.761': attribute type 2 has an invalid length. [ 179.457884][ T7094] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.761'. [ 179.694755][ T7104] netlink: 'syz.1.763': attribute type 27 has an invalid length. [ 179.792735][ T7104] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.763'. [ 179.818193][ T7101] netlink: 'syz.2.762': attribute type 10 has an invalid length. [ 179.838942][ T7101] netlink: 2 bytes leftover after parsing attributes in process `syz.2.762'. [ 179.862372][ T7106] netlink: 'syz.0.764': attribute type 2 has an invalid length. [ 179.886697][ T7106] netlink: 'syz.0.764': attribute type 8 has an invalid length. [ 179.903809][ T7106] netlink: 132 bytes leftover after parsing attributes in process `syz.0.764'. [ 179.986967][ T7107] netlink: 'syz.0.764': attribute type 17 has an invalid length. [ 180.010873][ T7107] netlink: 'syz.0.764': attribute type 16 has an invalid length. [ 180.032158][ T7107] netlink: 152 bytes leftover after parsing attributes in process `syz.0.764'. [ 180.286564][ T7120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.308307][ T7120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.365270][ T7120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.391260][ T7120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.708735][ T7135] netlink: 14 bytes leftover after parsing attributes in process `syz.4.774'. [ 181.476908][ T7135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.511966][ T7135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.540289][ T7135] bond0 (unregistering): Released all slaves [ 181.847206][ T7162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.781'. [ 181.989513][ T7162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.781'. [ 182.069324][ T7173] syz.1.782[7173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.180199][ T7174] netlink: 188 bytes leftover after parsing attributes in process `syz.4.783'. [ 183.018123][ T7197] tap0: tun_chr_ioctl cmd 1074025677 [ 183.045688][ T7197] tap0: linktype set to 773 [ 183.083852][ T7198] tap0: tun_chr_ioctl cmd 1074025677 [ 183.089375][ T7198] tap0: linktype set to 773 [ 183.197482][ T7199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.268473][ T7199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.429018][ T7199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.463712][ T7199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.794838][ T7223] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.795'. [ 183.921246][ T7206] netlink: 76 bytes leftover after parsing attributes in process `syz.1.792'. [ 183.949532][ T7207] netlink: 76 bytes leftover after parsing attributes in process `syz.1.792'. [ 184.000311][ T7211] netlink: 'syz.3.793': attribute type 39 has an invalid length. [ 184.255402][ T7233] netlink: 463 bytes leftover after parsing attributes in process `syz.0.796'. [ 185.041182][ T7245] netlink: 'syz.3.801': attribute type 10 has an invalid length. [ 185.071736][ T7242] netlink: 14 bytes leftover after parsing attributes in process `syz.4.799'. [ 185.071814][ T7242] openvswitch: netlink: Message has 6 unknown bytes. [ 185.879222][ T7245] device wg1 entered promiscuous mode [ 185.893173][ T7245] team0: Device wg1 is of different type [ 185.923746][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 185.929787][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 185.935931][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 185.937680][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 186.430327][ T7247] netlink: 'syz.0.803': attribute type 10 has an invalid length. [ 186.463844][ T7247] netlink: 2 bytes leftover after parsing attributes in process `syz.0.803'. [ 186.512784][ T7247] device hsr0 entered promiscuous mode [ 186.518513][ T7247] bridge0: port 3(hsr0) entered blocking state [ 186.568329][ T7264] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.806'. [ 186.573989][ T7247] bridge0: port 3(hsr0) entered disabled state [ 186.601221][ T7264] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 186.634493][ T7247] bridge0: port 3(hsr0) entered blocking state [ 186.638717][ T7266] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 186.640733][ T7247] bridge0: port 3(hsr0) entered forwarding state [ 186.682632][ T7266] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.807'. [ 186.855916][ T7270] netlink: 'syz.3.809': attribute type 3 has an invalid length. [ 186.894395][ T7270] netlink: 'syz.3.809': attribute type 8 has an invalid length. [ 186.929778][ T7270] netlink: 'syz.3.809': attribute type 7 has an invalid length. [ 187.014856][ T7275] netlink: 'syz.4.808': attribute type 29 has an invalid length. [ 187.015585][ T7281] netlink: 'syz.4.808': attribute type 29 has an invalid length. [ 187.022759][ T7270] netlink: 194740 bytes leftover after parsing attributes in process `syz.3.809'. [ 187.046764][ T7278] netlink: 72 bytes leftover after parsing attributes in process `syz.0.810'. [ 187.314351][ T7281] netlink: 'syz.4.808': attribute type 29 has an invalid length. [ 187.473744][ T7289] netlink: 55 bytes leftover after parsing attributes in process `syz.3.813'. [ 188.286154][ T7308] netlink: 14 bytes leftover after parsing attributes in process `syz.4.819'. [ 188.423463][ T7308] openvswitch: netlink: Message has 6 unknown bytes. [ 188.741499][ T7303] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 188.797184][ T7303] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 188.848782][ T7303] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 189.924583][ T7341] validate_nla: 1 callbacks suppressed [ 189.924601][ T7341] netlink: 'syz.4.828': attribute type 2 has an invalid length. [ 190.042976][ T7341] netlink: 'syz.4.828': attribute type 8 has an invalid length. [ 190.050778][ T7341] netlink: 132 bytes leftover after parsing attributes in process `syz.4.828'. [ 190.642429][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 190.829588][ T7379] netlink: 14 bytes leftover after parsing attributes in process `syz.0.838'. [ 190.846205][ T7379] openvswitch: netlink: Message has 6 unknown bytes. [ 192.088063][ T7410] netlink: 'syz.3.851': attribute type 16 has an invalid length. [ 192.105745][ T7410] netlink: 'syz.3.851': attribute type 25 has an invalid length. [ 192.123490][ T7410] netlink: 132 bytes leftover after parsing attributes in process `syz.3.851'. [ 192.584106][ T7428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.855'. [ 193.017271][ T7430] netlink: 14 bytes leftover after parsing attributes in process `syz.1.857'. [ 193.078276][ T7430] openvswitch: netlink: Message has 6 unknown bytes. [ 194.220949][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.227306][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.982850][ T7514] netlink: 14 bytes leftover after parsing attributes in process `syz.4.880'. [ 196.643336][ T7521] netlink: 'syz.1.882': attribute type 27 has an invalid length. [ 196.691856][ T7521] netlink: 164 bytes leftover after parsing attributes in process `syz.1.882'. [ 196.740496][ T7546] netlink: 'syz.1.882': attribute type 39 has an invalid length. [ 197.021491][ T7546] device hsr_slave_1 left promiscuous mode [ 197.286945][ T7548] netlink: 'syz.1.882': attribute type 4 has an invalid length. [ 197.333200][ T7548] netlink: 152 bytes leftover after parsing attributes in process `syz.1.882'. [ 197.365465][ T7563] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 197.418907][ T7551] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.893'. [ 197.458771][ T7563] netlink: 'syz.2.895': attribute type 12 has an invalid length. [ 197.476468][ T7563] netlink: 132 bytes leftover after parsing attributes in process `syz.2.895'. [ 198.111334][ T7573] netlink: 'syz.0.899': attribute type 39 has an invalid length. [ 198.667383][ T7587] netlink: 128 bytes leftover after parsing attributes in process `syz.4.903'. [ 198.713804][ T7587] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 198.738706][ T7587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.857692][ T7588] netlink: 128 bytes leftover after parsing attributes in process `syz.4.903'. [ 198.874493][ T7588] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 198.918811][ T7588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.585011][ T7618] device veth1_macvtap left promiscuous mode [ 199.625742][ T7615] device veth1_macvtap entered promiscuous mode [ 199.646566][ T7615] device macsec0 entered promiscuous mode [ 199.789948][ T7612] device syzkaller0 entered promiscuous mode [ 202.127523][ T7641] netlink: 'syz.3.919': attribute type 39 has an invalid length. [ 202.555355][ T7663] netlink: 'syz.4.924': attribute type 3 has an invalid length. [ 202.573274][ T7663] netlink: 'syz.4.924': attribute type 8 has an invalid length. [ 202.582157][ T7663] netlink: 'syz.4.924': attribute type 7 has an invalid length. [ 202.590130][ T7663] netlink: 194740 bytes leftover after parsing attributes in process `syz.4.924'. [ 203.635575][ T7703] netlink: 14 bytes leftover after parsing attributes in process `syz.3.934'. [ 203.722009][ T7703] openvswitch: netlink: Message has 6 unknown bytes. [ 203.994510][ T7716] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.943'. [ 204.556463][ T7728] netlink: 'syz.1.946': attribute type 3 has an invalid length. [ 204.615087][ T7728] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.946'. [ 205.809097][ T7758] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.950'. [ 208.624661][ T7775] tap0: tun_chr_ioctl cmd 1074025677 [ 208.631096][ T7775] tap0: linktype set to 776 [ 208.831802][ T7789] netlink: 'syz.2.961': attribute type 13 has an invalid length. [ 208.840305][ T7789] netlink: 172 bytes leftover after parsing attributes in process `syz.2.961'. [ 208.868994][ T7789] erspan0: refused to change device tx_queue_len [ 208.933599][ T7795] netlink: 168 bytes leftover after parsing attributes in process `syz.3.962'. [ 209.321669][ T7806] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.966'. [ 210.124569][ T7841] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.976'. [ 210.524598][ T7853] netlink: 168 bytes leftover after parsing attributes in process `syz.0.979'. [ 210.920455][ T7869] netlink: 'syz.0.987': attribute type 2 has an invalid length. [ 210.938889][ T7869] netlink: 'syz.0.987': attribute type 1 has an invalid length. [ 210.961587][ T7869] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.987'. [ 210.977291][ T7870] delete_channel: no stack [ 211.092866][ T7877] netlink: 'syz.3.988': attribute type 11 has an invalid length. [ 211.100951][ T7869] netlink: 'syz.0.987': attribute type 10 has an invalid length. [ 211.111165][ T7877] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.988'. [ 211.127097][ T7869] netlink: 2 bytes leftover after parsing attributes in process `syz.0.987'. [ 211.152614][ T7869] bridge0: port 3(hsr0) entered disabled state [ 211.159482][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.168218][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.218122][ T7869] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 211.239627][ T7869] bridge0: port 3(hsr0) entered blocking state [ 211.246529][ T7869] bridge0: port 3(hsr0) entered forwarding state [ 211.254816][ T7869] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.262270][ T7869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.270198][ T7869] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.277729][ T7869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.309411][ T7869] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 211.482688][ T7876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.755882][ T7888] netlink: 168 bytes leftover after parsing attributes in process `syz.2.992'. [ 212.510448][ T7911] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 212.559877][ T7911] device syzkaller0 entered promiscuous mode [ 214.901366][ T7940] netlink: 'syz.4.1011': attribute type 23 has an invalid length. [ 215.010886][ T7953] FAULT_INJECTION: forcing a failure. [ 215.010886][ T7953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.073718][ T7953] CPU: 1 PID: 7953 Comm: syz.1.1014 Not tainted syzkaller #0 [ 215.081136][ T7953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.091201][ T7953] Call Trace: [ 215.094487][ T7953] [ 215.097430][ T7953] dump_stack_lvl+0x188/0x24e [ 215.102137][ T7953] ? show_regs_print_info+0x12/0x12 [ 215.107352][ T7953] ? load_image+0x410/0x410 [ 215.111867][ T7953] ? __lock_acquire+0x7c40/0x7c40 [ 215.116919][ T7953] should_fail_ex+0x390/0x4c0 [ 215.121619][ T7953] _copy_from_user+0x2c/0x170 [ 215.126298][ T7953] ___sys_sendmsg+0x1c3/0x360 [ 215.130983][ T7953] ? __sys_sendmsg+0x2a0/0x2a0 [ 215.135764][ T7953] ? __lock_acquire+0x7c40/0x7c40 [ 215.140805][ T7953] __se_sys_sendmsg+0x1c3/0x2b0 [ 215.145658][ T7953] ? __x64_sys_sendmsg+0x80/0x80 [ 215.150605][ T7953] ? lockdep_hardirqs_on+0x94/0x140 [ 215.155796][ T7953] do_syscall_64+0x4c/0xa0 [ 215.160202][ T7953] ? clear_bhb_loop+0x60/0xb0 [ 215.164885][ T7953] ? clear_bhb_loop+0x60/0xb0 [ 215.169553][ T7953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.175455][ T7953] RIP: 0033:0x7f507b59e0d9 [ 215.179867][ T7953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.199460][ T7953] RSP: 002b:00007f507c3fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.207865][ T7953] RAX: ffffffffffffffda RBX: 00007f507b825fa0 RCX: 00007f507b59e0d9 [ 215.215828][ T7953] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000003 [ 215.223792][ T7953] RBP: 00007f507c3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 215.231755][ T7953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.239720][ T7953] R13: 00007f507b826038 R14: 00007f507b825fa0 R15: 00007fffaab1bcf8 [ 215.247690][ T7953] [ 215.280620][ T7958] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1016'. [ 215.463334][ T7972] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.1020'. [ 215.497102][ T7972] netlink: zone id is out of range [ 215.522476][ T7972] netlink: zone id is out of range [ 215.553013][ T7972] netlink: zone id is out of range [ 215.628091][ T7972] netlink: get zone limit has 8 unknown bytes [ 215.883652][ T7985] netlink: 'syz.4.1024': attribute type 10 has an invalid length. [ 215.894157][ T7986] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1023'. [ 215.920543][ T7985] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1024'. [ 215.973981][ T7985] netlink: 'syz.4.1024': attribute type 2 has an invalid length. [ 216.002613][ T7985] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1024'. [ 216.242342][ T7990] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 216.273242][ T7990] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1026'. [ 216.473688][ T7995] netlink: 'syz.3.1027': attribute type 3 has an invalid length. [ 216.505651][ T7995] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.1027'. [ 217.761914][ T8049] netlink: 'syz.4.1049': attribute type 12 has an invalid length. [ 217.790380][ T8049] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1049'. [ 217.979648][ T8062] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1048'. [ 218.115025][ T8068] netlink: 'syz.4.1051': attribute type 21 has an invalid length. [ 221.221237][ T8099] FAULT_INJECTION: forcing a failure. [ 221.221237][ T8099] name failslab, interval 1, probability 0, space 0, times 0 [ 221.241817][ T8100] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1057'. [ 221.270979][ T8099] CPU: 1 PID: 8099 Comm: syz.4.1060 Not tainted syzkaller #0 [ 221.278395][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.288464][ T8099] Call Trace: [ 221.291754][ T8099] [ 221.294699][ T8099] dump_stack_lvl+0x188/0x24e [ 221.299407][ T8099] ? show_regs_print_info+0x12/0x12 [ 221.304626][ T8099] ? load_image+0x410/0x410 [ 221.309148][ T8099] ? __might_sleep+0xd0/0xd0 [ 221.313750][ T8099] ? __lock_acquire+0x7c40/0x7c40 [ 221.318803][ T8099] should_fail_ex+0x390/0x4c0 [ 221.323592][ T8099] should_failslab+0x5/0x20 [ 221.328115][ T8099] slab_pre_alloc_hook+0x59/0x300 [ 221.333164][ T8099] kmem_cache_alloc_node+0x5a/0x310 [ 221.333190][ T8100] openvswitch: netlink: Message has 6 unknown bytes. [ 221.338361][ T8099] ? __alloc_skb+0xf9/0x7d0 [ 221.349539][ T8099] __alloc_skb+0xf9/0x7d0 [ 221.353892][ T8099] netlink_sendmsg+0x654/0xbd0 [ 221.358690][ T8099] ? netlink_getsockopt+0x550/0x550 [ 221.363918][ T8099] ? apparmor_socket_sendmsg+0x8a/0x330 [ 221.369486][ T8099] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 221.374786][ T8099] ? security_socket_sendmsg+0x7c/0xa0 [ 221.380243][ T8099] ? netlink_getsockopt+0x550/0x550 [ 221.385443][ T8099] ____sys_sendmsg+0x5ed/0x9a0 [ 221.390208][ T8099] ? __sys_sendmsg_sock+0x30/0x30 [ 221.395225][ T8099] ? __import_iovec+0x306/0x510 [ 221.400085][ T8099] ? import_iovec+0x6f/0xa0 [ 221.404584][ T8099] ___sys_sendmsg+0x2a2/0x360 [ 221.409260][ T8099] ? __sys_sendmsg+0x2a0/0x2a0 [ 221.414034][ T8099] ? __lock_acquire+0x7c40/0x7c40 [ 221.419071][ T8099] __se_sys_sendmsg+0x1c3/0x2b0 [ 221.423918][ T8099] ? __x64_sys_sendmsg+0x80/0x80 [ 221.428862][ T8099] ? lockdep_hardirqs_on+0x94/0x140 [ 221.434057][ T8099] do_syscall_64+0x4c/0xa0 [ 221.438469][ T8099] ? clear_bhb_loop+0x60/0xb0 [ 221.443141][ T8099] ? clear_bhb_loop+0x60/0xb0 [ 221.447812][ T8099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.453695][ T8099] RIP: 0033:0x7f2ea7d9e0d9 [ 221.458104][ T8099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.477702][ T8099] RSP: 002b:00007f2ea8ca9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.486107][ T8099] RAX: ffffffffffffffda RBX: 00007f2ea8025fa0 RCX: 00007f2ea7d9e0d9 [ 221.494071][ T8099] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000003 [ 221.502030][ T8099] RBP: 00007f2ea8ca9090 R08: 0000000000000000 R09: 0000000000000000 [ 221.509994][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.517954][ T8099] R13: 00007f2ea8026038 R14: 00007f2ea8025fa0 R15: 00007ffedcd16b88 [ 221.525929][ T8099] [ 221.815451][ T8119] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1065'. [ 222.039893][ T8104] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1062'. [ 224.345738][ T8165] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.1078'. [ 224.589168][ T8168] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1079'. [ 224.633493][ T8168] openvswitch: netlink: Message has 6 unknown bytes. [ 225.009606][ T8175] device syzkaller0 entered promiscuous mode [ 225.033075][ T8178] netlink: 'syz.1.1083': attribute type 10 has an invalid length. [ 226.019858][ T8210] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1088'. [ 227.316544][ T8209] netlink: 'syz.2.1092': attribute type 10 has an invalid length. [ 227.320541][ T4277] cgroup: fork rejected by pids controller in /syz1 [ 227.624671][ T8233] netlink: 'syz.0.1099': attribute type 29 has an invalid length. [ 227.684948][ T8233] netlink: 'syz.0.1099': attribute type 29 has an invalid length. [ 227.857214][ T4383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.053467][ T4383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.203371][ T4383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.261749][ T8255] netlink: 'syz.0.1102': attribute type 10 has an invalid length. [ 229.099672][ T8264] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1107'. [ 229.203828][ T8264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.250282][ T8264] bond0 (unregistering): Released all slaves [ 229.312152][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.324013][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.336006][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.353658][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.362320][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 229.370084][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.465109][ T4383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.490063][ T8279] netlink: 'syz.0.1109': attribute type 3 has an invalid length. [ 229.498236][ T8279] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1109'. [ 230.289833][ T8309] netlink: 'syz.0.1118': attribute type 39 has an invalid length. [ 230.378173][ T8273] chnl_net:caif_netlink_parms(): no params data found [ 230.570078][ T8321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1121'. [ 230.593381][ T8316] netlink: 'syz.2.1119': attribute type 10 has an invalid length. [ 231.046329][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.076494][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.113700][ T8273] device bridge_slave_0 entered promiscuous mode [ 231.134405][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.165046][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.201752][ T8273] device bridge_slave_1 entered promiscuous mode [ 231.278723][ T8351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1127'. [ 231.422209][ T8273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.443694][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 231.485277][ T8351] netlink: 'syz.0.1127': attribute type 12 has an invalid length. [ 231.502701][ T8351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1127'. [ 231.607746][ T8273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.805893][ T8273] team0: Port device team_slave_0 added [ 231.840858][ T8273] team0: Port device team_slave_1 added [ 232.298207][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.310587][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.385387][ T4289] Bluetooth: hci1: ISO packet for unknown connection handle 3152 [ 232.426859][ T8273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.535441][ T4383] device hsr_slave_0 left promiscuous mode [ 232.710549][ T4383] device bridge_slave_1 left promiscuous mode [ 232.727455][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.760465][ T4383] device bridge_slave_0 left promiscuous mode [ 232.779429][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.522699][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 233.790239][ T4383] team0 (unregistering): Port device team_slave_1 removed [ 233.861583][ T4383] team0 (unregistering): Port device team_slave_0 removed [ 234.345771][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.352922][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.379068][ T8273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.397907][ T8401] netlink: 'syz.4.1136': attribute type 10 has an invalid length. [ 234.671822][ T8423] netlink: 'syz.3.1150': attribute type 2 has an invalid length. [ 234.697240][ T8423] netlink: 'syz.3.1150': attribute type 1 has an invalid length. [ 234.708388][ T8273] device hsr_slave_0 entered promiscuous mode [ 234.721022][ T8273] device hsr_slave_1 entered promiscuous mode [ 234.734043][ T8273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.742487][ T8273] Cannot create hsr debugfs directory [ 235.602690][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 235.938686][ T8273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 235.994154][ T8273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 236.026651][ T8273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 236.061533][ T8273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 236.502876][ T8273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.552220][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.566251][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.596580][ T8273] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.628615][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.683611][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.696971][ T8492] netlink: 'syz.3.1154': attribute type 4 has an invalid length. [ 236.756426][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.763630][ T4376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.804768][ T8491] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1155'. [ 236.812192][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.821384][ T8492] netlink: 'syz.3.1154': attribute type 8 has an invalid length. [ 236.838621][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.860295][ T8492] netlink: 109560 bytes leftover after parsing attributes in process `syz.3.1154'. [ 236.894633][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.903330][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.910436][ T4376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.943029][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.022338][ T8487] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1153'. [ 237.074156][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.095593][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.113994][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.140901][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.150293][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.161248][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.207134][ T8273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.243653][ T8273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.315366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.338775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.366938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.403492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.422317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.682829][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 237.877070][ T8545] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1164'. [ 238.242015][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.274057][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.287764][ T8273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.394491][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.416345][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.489587][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.519068][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.544632][ T8273] device veth0_vlan entered promiscuous mode [ 238.567995][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.605470][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.641130][ T8273] device veth1_vlan entered promiscuous mode [ 238.694475][ T8564] netlink: 'syz.0.1171': attribute type 21 has an invalid length. [ 238.767192][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 238.816207][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 238.853388][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.882374][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.944051][ T8273] device veth0_macvtap entered promiscuous mode [ 238.979721][ T8567] can: request_module (can-proto-0) failed. [ 238.981733][ T8273] device veth1_macvtap entered promiscuous mode [ 239.057124][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.105825][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.117375][ T8273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.129017][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.143435][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.189370][ T8588] netlink: 'syz.2.1176': attribute type 3 has an invalid length. [ 239.193481][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.231736][ T8588] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1176'. [ 239.252342][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.295148][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.318419][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.341686][ T8273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.361905][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.376441][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.423770][ T8273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.452616][ T8273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.485791][ T8273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.512822][ T8273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.784481][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.802296][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.829869][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 239.872991][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.880859][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.928441][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.537224][ T8645] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.1188'. [ 241.042741][ T8666] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1194'. [ 243.081339][ T8722] netlink: 'syz.1.1202': attribute type 10 has an invalid length. [ 243.100409][ T8722] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1202'. [ 244.102403][ T8722] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.109889][ T8722] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.126134][ T8722] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.133347][ T8722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.140759][ T8722] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.147912][ T8722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.183204][ T8722] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 244.445010][ T8745] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1204'. [ 244.980042][ T8775] bridge0: port 3(batadv0) entered blocking state [ 245.011388][ T8775] bridge0: port 3(batadv0) entered disabled state [ 245.035832][ T8775] device batadv0 entered promiscuous mode [ 245.071957][ T8775] bridge0: port 3(batadv0) entered blocking state [ 245.078846][ T8775] bridge0: port 3(batadv0) entered forwarding state [ 245.212699][ T46] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 245.222315][ T46] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 245.293237][ T8779] netlink: 'syz.2.1214': attribute type 10 has an invalid length. [ 245.322764][ T8779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1214'. [ 245.497362][ T8784] bridge0: port 3(hsr0) entered disabled state [ 245.503797][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.511289][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.538942][ T8786] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.1216'. [ 245.567537][ T8786] netlink: zone id is out of range [ 245.584120][ T8786] netlink: zone id is out of range [ 245.619951][ T8786] netlink: zone id is out of range [ 245.633067][ T8786] netlink: zone id is out of range [ 245.638951][ T8790] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1217'. [ 245.653778][ T8786] netlink: zone id is out of range [ 245.673792][ T8786] netlink: get zone limit has 8 unknown bytes [ 246.510842][ T8791] device syzkaller0 entered promiscuous mode [ 250.128694][ T8812] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.1222'. [ 250.145576][ T8812] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.1222'. [ 250.161670][ T8812] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.1222'. [ 250.193930][ T8826] netlink: 'syz.4.1225': attribute type 21 has an invalid length. [ 250.626725][ T8868] can: request_module (can-proto-0) failed. [ 254.345541][ T8951] device pim6reg1 entered promiscuous mode [ 254.634992][ T8967] netlink: 'syz.4.1265': attribute type 3 has an invalid length. [ 254.663797][ T8967] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1265'. [ 255.524368][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.530795][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.262794][ T9006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1275'. [ 257.420708][ T9011] netlink: 'syz.2.1277': attribute type 33 has an invalid length. [ 257.450640][ T9011] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1277'. [ 257.703853][ T9018] netlink: 'syz.4.1279': attribute type 10 has an invalid length. [ 257.732167][ T9018] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1279'. [ 257.983758][ T9027] netlink: 'syz.2.1281': attribute type 29 has an invalid length. [ 258.345291][ T9027] netlink: 'syz.2.1281': attribute type 29 has an invalid length. [ 260.798407][ T9075] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 260.807263][ T9075] syzkaller1: linktype set to 823 [ 261.160644][ T9084] mac80211_hwsim hwsim4 ªªªªªª: renamed from wlan0 [ 261.263926][ T9086] netlink: 'syz.0.1300': attribute type 29 has an invalid length. [ 261.295280][ T9083] device syzkaller0 entered promiscuous mode [ 261.304288][ T9086] netlink: 'syz.0.1300': attribute type 29 has an invalid length. [ 261.316754][ T9088] netlink: 'syz.0.1300': attribute type 29 has an invalid length. [ 261.695866][ T9107] FAULT_INJECTION: forcing a failure. [ 261.695866][ T9107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.728121][ T9107] CPU: 1 PID: 9107 Comm: syz.1.1306 Not tainted syzkaller #0 [ 261.735520][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.745581][ T9107] Call Trace: [ 261.748851][ T9107] [ 261.751778][ T9107] dump_stack_lvl+0x188/0x24e [ 261.756562][ T9107] ? show_regs_print_info+0x12/0x12 [ 261.761750][ T9107] ? load_image+0x410/0x410 [ 261.766256][ T9107] ? __lock_acquire+0x7c40/0x7c40 [ 261.771283][ T9107] should_fail_ex+0x390/0x4c0 [ 261.776045][ T9107] _copy_from_user+0x2c/0x170 [ 261.780798][ T9107] __sys_bpf+0x2ea/0x780 [ 261.785117][ T9107] ? bpf_link_show_fdinfo+0x380/0x380 [ 261.790503][ T9107] ? lock_chain_count+0x20/0x20 [ 261.795391][ T9107] __x64_sys_bpf+0x78/0x90 [ 261.799801][ T9107] do_syscall_64+0x4c/0xa0 [ 261.804211][ T9107] ? clear_bhb_loop+0x60/0xb0 [ 261.808953][ T9107] ? clear_bhb_loop+0x60/0xb0 [ 261.813621][ T9107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.819502][ T9107] RIP: 0033:0x7f911019e0d9 [ 261.823919][ T9107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.843555][ T9107] RSP: 002b:00007f9111123028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.851963][ T9107] RAX: ffffffffffffffda RBX: 00007f9110425fa0 RCX: 00007f911019e0d9 [ 261.859928][ T9107] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 261.867891][ T9107] RBP: 00007f9111123090 R08: 0000000000000000 R09: 0000000000000000 [ 261.875853][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.883813][ T9107] R13: 00007f9110426038 R14: 00007f9110425fa0 R15: 00007ffc4007d238 [ 261.891789][ T9107] [ 263.317887][ T9121] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1309'. [ 263.327529][ T9117] device syzkaller0 entered promiscuous mode [ 263.915655][ T9150] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1317'. [ 264.326701][ T9164] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1322'. [ 264.541574][ T9167] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1323'. [ 266.738135][ T9214] netlink: 'syz.4.1339': attribute type 7 has an invalid length. [ 266.926248][ T9224] netlink: 125520 bytes leftover after parsing attributes in process `syz.3.1342'. [ 266.977398][ T9226] netlink: 'syz.4.1343': attribute type 10 has an invalid length. [ 266.993005][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 271.582867][ T9254] netlink: 'syz.0.1352': attribute type 21 has an invalid length. [ 271.591194][ T9254] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.1352'. [ 272.139178][ T9269] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1355'. [ 272.704980][ T9281] tap0: tun_chr_ioctl cmd 1074025688 [ 272.998978][ T9283] FAULT_INJECTION: forcing a failure. [ 272.998978][ T9283] name failslab, interval 1, probability 0, space 0, times 0 [ 273.021434][ T9283] CPU: 0 PID: 9283 Comm: syz.1.1360 Not tainted syzkaller #0 [ 273.028868][ T9283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.038964][ T9283] Call Trace: [ 273.042272][ T9283] [ 273.045232][ T9283] dump_stack_lvl+0x188/0x24e [ 273.049965][ T9283] ? show_regs_print_info+0x12/0x12 [ 273.055205][ T9283] ? load_image+0x410/0x410 [ 273.059758][ T9283] ? __might_sleep+0xd0/0xd0 [ 273.064475][ T9283] ? __lock_acquire+0x7c40/0x7c40 [ 273.069554][ T9283] should_fail_ex+0x390/0x4c0 [ 273.074287][ T9283] should_failslab+0x5/0x20 [ 273.078924][ T9283] slab_pre_alloc_hook+0x59/0x300 [ 273.084020][ T9283] ? kvmalloc_node+0x6c/0x180 [ 273.088795][ T9283] __kmem_cache_alloc_node+0x4f/0x270 [ 273.094218][ T9283] ? kvmalloc_node+0x6c/0x180 [ 273.098935][ T9283] __kmalloc_node+0xa2/0x240 [ 273.103584][ T9283] kvmalloc_node+0x6c/0x180 [ 273.108129][ T9283] bpf_test_run_xdp_live+0x206/0x1a90 [ 273.113611][ T9283] ? 0xffffffffa0004440 [ 273.117803][ T9283] ? text_poke_copy+0x7b/0x90 [ 273.122575][ T9283] ? 0xffffffffa0004440 [ 273.126774][ T9283] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 273.132808][ T9283] ? xdp_convert_md_to_buff+0x330/0x330 [ 273.138474][ T9283] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 273.144771][ T9283] ? bpf_test_init+0x119/0x140 [ 273.149564][ T9283] ? xdp_convert_md_to_buff+0x5b/0x330 [ 273.155062][ T9283] bpf_prog_test_run_xdp+0x757/0xf80 [ 273.160380][ T9283] ? __lock_acquire+0x7c40/0x7c40 [ 273.165476][ T9283] ? dev_put+0x80/0x80 [ 273.169615][ T9283] ? dev_put+0x80/0x80 [ 273.173716][ T9283] bpf_prog_test_run+0x31c/0x390 [ 273.178697][ T9283] __sys_bpf+0x62b/0x780 [ 273.182986][ T9283] ? bpf_link_show_fdinfo+0x380/0x380 [ 273.188437][ T9283] ? lock_chain_count+0x20/0x20 [ 273.193349][ T9283] __x64_sys_bpf+0x78/0x90 [ 273.197804][ T9283] do_syscall_64+0x4c/0xa0 [ 273.202249][ T9283] ? clear_bhb_loop+0x60/0xb0 [ 273.206963][ T9283] ? clear_bhb_loop+0x60/0xb0 [ 273.211678][ T9283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.217605][ T9283] RIP: 0033:0x7f911019e0d9 [ 273.222051][ T9283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.241691][ T9283] RSP: 002b:00007f9111123028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.250139][ T9283] RAX: ffffffffffffffda RBX: 00007f9110425fa0 RCX: 00007f911019e0d9 [ 273.258145][ T9283] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 273.266148][ T9283] RBP: 00007f9111123090 R08: 0000000000000000 R09: 0000000000000000 [ 273.274152][ T9283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.282151][ T9283] R13: 00007f9110426038 R14: 00007f9110425fa0 R15: 00007ffc4007d238 [ 273.290196][ T9283] [ 273.391467][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'. [ 273.992184][ T9300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1366'. [ 274.092163][ T9302] netlink: 'syz.2.1366': attribute type 12 has an invalid length. [ 274.195740][ T9302] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1366'. [ 276.916271][ T9339] netlink: 'syz.3.1375': attribute type 16 has an invalid length. [ 276.956846][ T9339] netlink: 'syz.3.1375': attribute type 3 has an invalid length. [ 277.024996][ T9339] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1375'. [ 277.066960][ T9344] FAULT_INJECTION: forcing a failure. [ 277.066960][ T9344] name failslab, interval 1, probability 0, space 0, times 0 [ 277.090233][ T9344] CPU: 1 PID: 9344 Comm: syz.2.1378 Not tainted syzkaller #0 [ 277.097669][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.107757][ T9344] Call Trace: [ 277.111067][ T9344] [ 277.114034][ T9344] dump_stack_lvl+0x188/0x24e [ 277.118767][ T9344] ? show_regs_print_info+0x12/0x12 [ 277.124009][ T9344] ? load_image+0x410/0x410 [ 277.128558][ T9344] ? __might_sleep+0xd0/0xd0 [ 277.133183][ T9344] ? __lock_acquire+0x7c40/0x7c40 [ 277.138265][ T9344] should_fail_ex+0x390/0x4c0 [ 277.143014][ T9344] should_failslab+0x5/0x20 [ 277.147549][ T9344] slab_pre_alloc_hook+0x59/0x300 [ 277.152620][ T9344] ? page_pool_create+0x6d/0x5c0 [ 277.157687][ T9344] __kmem_cache_alloc_node+0x4f/0x270 [ 277.163110][ T9344] ? page_pool_create+0x6d/0x5c0 [ 277.168084][ T9344] kmalloc_node_trace+0x22/0xe0 [ 277.172994][ T9344] page_pool_create+0x6d/0x5c0 [ 277.177798][ T9344] bpf_test_run_xdp_live+0x220/0x1a90 [ 277.183195][ T9344] ? 0xffffffffa0004440 [ 277.187377][ T9344] ? text_poke_copy+0x7b/0x90 [ 277.192077][ T9344] ? 0xffffffffa0004440 [ 277.196254][ T9344] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 277.202192][ T9344] ? xdp_convert_md_to_buff+0x330/0x330 [ 277.207851][ T9344] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 277.214124][ T9344] ? bpf_test_init+0x119/0x140 [ 277.218900][ T9344] ? xdp_convert_md_to_buff+0x5b/0x330 [ 277.224381][ T9344] bpf_prog_test_run_xdp+0x757/0xf80 [ 277.229676][ T9344] ? __lock_acquire+0x7c40/0x7c40 [ 277.234740][ T9344] ? dev_put+0x80/0x80 [ 277.238846][ T9344] ? dev_put+0x80/0x80 [ 277.242929][ T9344] bpf_prog_test_run+0x31c/0x390 [ 277.247886][ T9344] __sys_bpf+0x62b/0x780 [ 277.252152][ T9344] ? bpf_link_show_fdinfo+0x380/0x380 [ 277.257572][ T9344] ? lock_chain_count+0x20/0x20 [ 277.262453][ T9344] __x64_sys_bpf+0x78/0x90 [ 277.266886][ T9344] do_syscall_64+0x4c/0xa0 [ 277.271310][ T9344] ? clear_bhb_loop+0x60/0xb0 [ 277.275997][ T9344] ? clear_bhb_loop+0x60/0xb0 [ 277.280691][ T9344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.286590][ T9344] RIP: 0033:0x7f1a4f39e0d9 [ 277.291011][ T9344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.310623][ T9344] RSP: 002b:00007f1a50266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.319050][ T9344] RAX: ffffffffffffffda RBX: 00007f1a4f625fa0 RCX: 00007f1a4f39e0d9 [ 277.327034][ T9344] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 277.335009][ T9344] RBP: 00007f1a50266090 R08: 0000000000000000 R09: 0000000000000000 [ 277.342982][ T9344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.350956][ T9344] R13: 00007f1a4f626038 R14: 00007f1a4f625fa0 R15: 00007ffcca5c8de8 [ 277.358964][ T9344] [ 280.831730][ T9396] FAULT_INJECTION: forcing a failure. [ 280.831730][ T9396] name failslab, interval 1, probability 0, space 0, times 0 [ 280.920924][ T9396] CPU: 1 PID: 9396 Comm: syz.0.1391 Not tainted syzkaller #0 [ 280.928366][ T9396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.938464][ T9396] Call Trace: [ 280.941772][ T9396] [ 280.944773][ T9396] dump_stack_lvl+0x188/0x24e [ 280.949505][ T9396] ? show_regs_print_info+0x12/0x12 [ 280.954748][ T9396] ? load_image+0x410/0x410 [ 280.959298][ T9396] ? __might_sleep+0xd0/0xd0 [ 280.963925][ T9396] ? __lock_acquire+0x7c40/0x7c40 [ 280.969010][ T9396] should_fail_ex+0x390/0x4c0 [ 280.973748][ T9396] should_failslab+0x5/0x20 [ 280.978281][ T9396] slab_pre_alloc_hook+0x59/0x300 [ 280.983343][ T9396] ? kvmalloc_node+0x6c/0x180 [ 280.988065][ T9396] __kmem_cache_alloc_node+0x4f/0x270 [ 280.993489][ T9396] ? kvmalloc_node+0x6c/0x180 [ 280.998210][ T9396] __kmalloc_node+0xa2/0x240 [ 281.002845][ T9396] kvmalloc_node+0x6c/0x180 [ 281.007389][ T9396] page_pool_create+0x1e7/0x5c0 [ 281.012272][ T9396] bpf_test_run_xdp_live+0x220/0x1a90 [ 281.017668][ T9396] ? 0xffffffffa0004440 [ 281.021844][ T9396] ? text_poke_copy+0x7b/0x90 [ 281.026536][ T9396] ? 0xffffffffa0004440 [ 281.030705][ T9396] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 281.036633][ T9396] ? xdp_convert_md_to_buff+0x330/0x330 [ 281.042271][ T9396] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 281.048546][ T9396] ? bpf_test_init+0x119/0x140 [ 281.053316][ T9396] ? xdp_convert_md_to_buff+0x5b/0x330 [ 281.058793][ T9396] bpf_prog_test_run_xdp+0x757/0xf80 [ 281.064087][ T9396] ? __lock_acquire+0x7c40/0x7c40 [ 281.069151][ T9396] ? dev_put+0x80/0x80 [ 281.073256][ T9396] ? dev_put+0x80/0x80 [ 281.077337][ T9396] bpf_prog_test_run+0x31c/0x390 [ 281.082294][ T9396] __sys_bpf+0x62b/0x780 [ 281.086553][ T9396] ? bpf_link_show_fdinfo+0x380/0x380 [ 281.091965][ T9396] ? lock_chain_count+0x20/0x20 [ 281.096851][ T9396] __x64_sys_bpf+0x78/0x90 [ 281.101287][ T9396] do_syscall_64+0x4c/0xa0 [ 281.105716][ T9396] ? clear_bhb_loop+0x60/0xb0 [ 281.110397][ T9396] ? clear_bhb_loop+0x60/0xb0 [ 281.115087][ T9396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.120994][ T9396] RIP: 0033:0x7fdc7699e0d9 [ 281.125417][ T9396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.145046][ T9396] RSP: 002b:00007fdc778e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.153469][ T9396] RAX: ffffffffffffffda RBX: 00007fdc76c25fa0 RCX: 00007fdc7699e0d9 [ 281.161444][ T9396] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 281.169420][ T9396] RBP: 00007fdc778e9090 R08: 0000000000000000 R09: 0000000000000000 [ 281.177394][ T9396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.185368][ T9396] R13: 00007fdc76c26038 R14: 00007fdc76c25fa0 R15: 00007ffef4384778 [ 281.193376][ T9396] [ 281.253088][ T9396] page_pool_create() gave up with errno -12 [ 281.671414][ T9402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.679083][ T9402] IPv6: NLM_F_CREATE should be set when creating new route [ 281.686476][ T9402] IPv6: NLM_F_CREATE should be set when creating new route [ 281.693809][ T9402] IPv6: NLM_F_CREATE should be set when creating new route [ 281.998649][ T9409] netlink: 'syz.3.1396': attribute type 21 has an invalid length. [ 282.969434][ T9432] tun0: tun_chr_ioctl cmd 2147767519 [ 283.125342][ T9436] delete_channel: no stack [ 283.347517][ T9449] netlink: 'syz.4.1409': attribute type 27 has an invalid length. [ 283.384187][ T9449] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1409'. [ 283.425473][ T9449] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 283.505144][ T9458] netlink: 'syz.2.1411': attribute type 21 has an invalid length. [ 283.542730][ T9458] netlink: 'syz.2.1411': attribute type 1 has an invalid length. [ 283.645411][ T9462] FAULT_INJECTION: forcing a failure. [ 283.645411][ T9462] name failslab, interval 1, probability 0, space 0, times 0 [ 283.679723][ T9462] CPU: 0 PID: 9462 Comm: syz.0.1412 Not tainted syzkaller #0 [ 283.687147][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.697220][ T9462] Call Trace: [ 283.700507][ T9462] [ 283.703448][ T9462] dump_stack_lvl+0x188/0x24e [ 283.708149][ T9462] ? show_regs_print_info+0x12/0x12 [ 283.713354][ T9462] ? load_image+0x410/0x410 [ 283.717854][ T9462] ? __might_sleep+0xd0/0xd0 [ 283.722437][ T9462] ? __lock_acquire+0x7c40/0x7c40 [ 283.727462][ T9462] should_fail_ex+0x390/0x4c0 [ 283.732140][ T9462] should_failslab+0x5/0x20 [ 283.736636][ T9462] slab_pre_alloc_hook+0x59/0x300 [ 283.742090][ T9462] ? __xdp_reg_mem_model+0x1df/0x5a0 [ 283.747456][ T9462] __kmem_cache_alloc_node+0x4f/0x270 [ 283.752827][ T9462] ? memset+0x1e/0x40 [ 283.756857][ T9462] ? __xdp_reg_mem_model+0x1df/0x5a0 [ 283.762140][ T9462] kmalloc_trace+0x26/0xe0 [ 283.766555][ T9462] __xdp_reg_mem_model+0x1df/0x5a0 [ 283.771663][ T9462] ? kvmalloc_node+0x6c/0x180 [ 283.776339][ T9462] ? kvmalloc_node+0x6c/0x180 [ 283.781008][ T9462] ? xdp_reg_mem_model+0x30/0x30 [ 283.785944][ T9462] xdp_reg_mem_model+0x1e/0x30 [ 283.790708][ T9462] bpf_test_run_xdp_live+0x296/0x1a90 [ 283.796078][ T9462] ? 0xffffffffa0004440 [ 283.800226][ T9462] ? text_poke_copy+0x7b/0x90 [ 283.804899][ T9462] ? 0xffffffffa0004440 [ 283.809046][ T9462] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 283.814942][ T9462] ? xdp_convert_md_to_buff+0x330/0x330 [ 283.820504][ T9462] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 283.826741][ T9462] ? bpf_test_init+0x119/0x140 [ 283.831499][ T9462] ? xdp_convert_md_to_buff+0x5b/0x330 [ 283.836952][ T9462] bpf_prog_test_run_xdp+0x757/0xf80 [ 283.842264][ T9462] ? __lock_acquire+0x7c40/0x7c40 [ 283.847314][ T9462] ? dev_put+0x80/0x80 [ 283.851392][ T9462] ? dev_put+0x80/0x80 [ 283.855465][ T9462] bpf_prog_test_run+0x31c/0x390 [ 283.860408][ T9462] __sys_bpf+0x62b/0x780 [ 283.864655][ T9462] ? bpf_link_show_fdinfo+0x380/0x380 [ 283.870043][ T9462] ? lock_chain_count+0x20/0x20 [ 283.874910][ T9462] __x64_sys_bpf+0x78/0x90 [ 283.879336][ T9462] do_syscall_64+0x4c/0xa0 [ 283.883755][ T9462] ? clear_bhb_loop+0x60/0xb0 [ 283.888430][ T9462] ? clear_bhb_loop+0x60/0xb0 [ 283.893106][ T9462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.898996][ T9462] RIP: 0033:0x7fdc7699e0d9 [ 283.903405][ T9462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.923006][ T9462] RSP: 002b:00007fdc778e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.931412][ T9462] RAX: ffffffffffffffda RBX: 00007fdc76c25fa0 RCX: 00007fdc7699e0d9 [ 283.939375][ T9462] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 283.947339][ T9462] RBP: 00007fdc778e9090 R08: 0000000000000000 R09: 0000000000000000 [ 283.955300][ T9462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.963266][ T9462] R13: 00007fdc76c26038 R14: 00007fdc76c25fa0 R15: 00007ffef4384778 [ 283.971257][ T9462] [ 284.496934][ T9483] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.509064][ T9483] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1419'. [ 284.648247][ T9490] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1421'. [ 284.703911][ T4289] Bluetooth: hci2: ISO packet for unknown connection handle 3084 [ 285.498531][ T9526] device syzkaller0 entered promiscuous mode [ 285.739602][ T9538] netlink: 'syz.4.1436': attribute type 3 has an invalid length. [ 285.761492][ T9538] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1436'. [ 285.816351][ T9538] netlink: 'syz.4.1436': attribute type 3 has an invalid length. [ 285.852903][ T9538] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1436'. [ 286.329936][ T9544] netlink: 'syz.0.1438': attribute type 3 has an invalid length. [ 286.403655][ T9544] netlink: 'syz.0.1438': attribute type 8 has an invalid length. [ 286.465075][ T9552] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.1441'. [ 286.474892][ T9544] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.1438'. [ 286.484918][ T9552] netlink: zone id is out of range [ 286.490310][ T9552] netlink: zone id is out of range [ 286.615294][ T9552] netlink: zone id is out of range [ 286.731565][ T9552] netlink: zone id is out of range [ 286.809320][ T9552] netlink: zone id is out of range [ 286.900845][ T9552] netlink: zone id is out of range [ 286.944984][ T9552] netlink: zone id is out of range [ 286.953249][ T9552] netlink: zone id is out of range [ 286.960612][ T9552] netlink: zone id is out of range [ 287.006677][ T9575] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 287.321998][ T9578] netlink: 'syz.0.1447': attribute type 21 has an invalid length. [ 288.323054][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 288.491405][ T9622] can: request_module (can-proto-0) failed. [ 289.092396][ T9645] netlink: 'syz.3.1466': attribute type 13 has an invalid length. [ 289.104654][ T9645] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1466'. [ 289.122105][ T9645] erspan0: refused to change device tx_queue_len [ 289.132531][ T9645] net_ratelimit: 3546 callbacks suppressed [ 289.138853][ T9645] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 289.158813][ T9641] netlink: 'syz.1.1464': attribute type 21 has an invalid length. [ 289.478719][ T9652] tap0: tun_chr_ioctl cmd 1074025675 [ 289.500248][ T9652] tap0: persist disabled [ 289.724640][ T9679] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1476'. [ 289.762186][ T9679] netlink: 'syz.4.1476': attribute type 41 has an invalid length. [ 290.013187][ T9692] netlink: 'syz.4.1478': attribute type 21 has an invalid length. [ 290.032899][ T9692] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1478'. [ 291.139879][ T9727] netlink: 'syz.2.1486': attribute type 1 has an invalid length. [ 295.645988][ T9780] device syzkaller0 entered promiscuous mode [ 295.716939][ T9787] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1501'. [ 295.794099][ T9795] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 298.383926][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 298.802296][ T9832] device syzkaller0 entered promiscuous mode [ 299.378539][ T9860] netlink: 'syz.1.1521': attribute type 27 has an invalid length. [ 299.390278][ T9860] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1521'. [ 300.910505][ T9871] netlink: 'syz.3.1522': attribute type 29 has an invalid length. [ 300.939413][ T9871] netlink: 'syz.3.1522': attribute type 29 has an invalid length. [ 301.004883][ T9868] netlink: 'syz.3.1522': attribute type 29 has an invalid length. [ 302.545970][ T9930] netlink: 'syz.2.1543': attribute type 29 has an invalid length. [ 302.595593][ T9930] netlink: 'syz.2.1543': attribute type 29 has an invalid length. [ 302.640086][ T9930] netlink: 'syz.2.1543': attribute type 29 has an invalid length. [ 303.252862][ T4290] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 303.438937][ T9959] netlink: 'syz.3.1552': attribute type 13 has an invalid length. [ 303.449378][ T9959] netlink: 'syz.3.1552': attribute type 58 has an invalid length. [ 303.461142][ T9959] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1552'. [ 303.892194][ T9974] netlink: 'syz.4.1556': attribute type 10 has an invalid length. [ 303.927320][ T9974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1556'. [ 303.992949][ T9974] device team0 entered promiscuous mode [ 303.998632][ T9974] device team_slave_0 entered promiscuous mode [ 304.059302][ T9974] device team_slave_1 entered promiscuous mode [ 304.105881][ T9974] bridge0: port 3(team0) entered blocking state [ 304.160631][ T9974] bridge0: port 3(team0) entered disabled state [ 304.194346][ T9974] bridge0: port 3(team0) entered blocking state [ 304.200706][ T9974] bridge0: port 3(team0) entered forwarding state [ 304.247312][ T9980] netlink: 'syz.2.1559': attribute type 21 has an invalid length. [ 304.272800][ T9980] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1559'. [ 305.214251][T10030] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1571'. [ 305.233137][T10030] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1571'. [ 305.279817][T10034] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1574'. [ 307.711147][T10089] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1592'. [ 308.447665][T10109] sctp: [Deprecated]: syz.0.1598 (pid 10109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.447665][T10109] Use struct sctp_sack_info instead [ 308.794958][T10124] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 308.832855][T10124] pim6reg0: linktype set to 780 [ 309.953408][T10165] validate_nla: 7 callbacks suppressed [ 309.953443][T10165] netlink: 'syz.4.1613': attribute type 39 has an invalid length. [ 310.542819][T10174] netlink: 'syz.2.1615': attribute type 10 has an invalid length. [ 310.559958][T10174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1615'. [ 310.811476][T10183] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1617'. [ 310.861741][T10183] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 310.889544][T10183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.455737][T10214] netlink: 'syz.3.1626': attribute type 27 has an invalid length. [ 311.469612][T10214] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1626'. [ 313.157069][T10258] netlink: 'syz.0.1635': attribute type 3 has an invalid length. [ 313.222757][T10258] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1635'. [ 313.299373][T10265] device syzkaller0 entered promiscuous mode [ 313.315076][T10265] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 313.465736][T10271] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.1639'. [ 313.570639][T10280] netlink: 'syz.4.1643': attribute type 29 has an invalid length. [ 313.589010][T10280] netlink: 'syz.4.1643': attribute type 29 has an invalid length. [ 313.619803][T10281] netlink: 'syz.3.1641': attribute type 21 has an invalid length. [ 313.641594][T10281] netlink: 'syz.3.1641': attribute type 7 has an invalid length. [ 313.686312][T10280] netlink: 'syz.4.1643': attribute type 29 has an invalid length. [ 313.932319][T10291] netlink: 'syz.2.1644': attribute type 27 has an invalid length. [ 315.098024][T10339] netlink: 'syz.2.1656': attribute type 2 has an invalid length. [ 315.122150][T10339] netlink: 'syz.2.1656': attribute type 8 has an invalid length. [ 315.140630][T10339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1656'. [ 315.160542][T10339] netlink: 'syz.2.1656': attribute type 2 has an invalid length. [ 315.177685][T10339] netlink: 'syz.2.1656': attribute type 8 has an invalid length. [ 315.188204][T10339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1656'. [ 315.204674][T10339] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1656'. [ 316.221198][T10389] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1668'. [ 316.784425][T10409] netlink: 'syz.2.1672': attribute type 10 has an invalid length. [ 316.812882][T10409] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1672'. [ 316.874645][T10409] netlink: 'syz.2.1672': attribute type 10 has an invalid length. [ 316.964653][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.971017][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.646829][T10409] device wlan1 left promiscuous mode [ 319.185677][T10439] netlink: 'syz.2.1683': attribute type 19 has an invalid length. [ 319.975374][T10464] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1688'. [ 320.302295][T10478] tap0: tun_chr_ioctl cmd 1074025675 [ 320.322624][T10478] tap0: persist disabled [ 320.461917][T10482] netlink: 'syz.3.1691': attribute type 5 has an invalid length. [ 320.558556][T10485] netlink: 'syz.3.1691': attribute type 1 has an invalid length. [ 320.567375][T10485] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1691'. [ 321.257970][T10495] netlink: 'syz.1.1696': attribute type 29 has an invalid length. [ 321.548842][T10495] netlink: 'syz.1.1696': attribute type 29 has an invalid length. [ 321.659119][T10505] netlink: 'syz.3.1698': attribute type 3 has an invalid length. [ 321.699982][T10505] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1698'. [ 321.719073][T10503] netlink: 'syz.1.1696': attribute type 29 has an invalid length. [ 323.173309][T10556] netlink: 'syz.1.1711': attribute type 22 has an invalid length. [ 323.750171][T10571] netlink: 61955 bytes leftover after parsing attributes in process `syz.0.1719'. [ 323.795630][T10571] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1719'. [ 324.109016][T10589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.116318][T10589] IPv6: NLM_F_CREATE should be set when creating new route [ 324.123659][T10589] IPv6: NLM_F_CREATE should be set when creating new route [ 324.130893][T10589] IPv6: NLM_F_CREATE should be set when creating new route [ 324.450297][T10600] netlink: 'syz.2.1725': attribute type 15 has an invalid length. [ 324.503757][T10600] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1725'. [ 325.071706][T10612] device aaaaaaaaaaaaaaa entered promiscuous mode [ 325.219680][T10606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.491710][T10646] netlink: 'syz.1.1737': attribute type 10 has an invalid length. [ 326.523535][T10646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1737'. [ 326.862138][T10646] batman_adv: batadv0: Adding interface: vlan1 [ 326.943772][T10646] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.127610][T10646] batman_adv: batadv0: Interface activated: vlan1 [ 329.637478][T10694] netlink: 'syz.0.1750': attribute type 29 has an invalid length. [ 329.678006][T10694] netlink: 'syz.0.1750': attribute type 29 has an invalid length. [ 329.746967][T10707] netlink: 'syz.3.1752': attribute type 39 has an invalid length. [ 330.014995][T10702] netlink: 'syz.0.1750': attribute type 29 has an invalid length. [ 330.865220][T10737] netlink: 'syz.2.1762': attribute type 1 has an invalid length. [ 330.922853][T10737] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1762'. [ 333.237387][T10734] netlink: 'syz.2.1762': attribute type 41 has an invalid length. [ 333.458953][T10750] netlink: 'syz.4.1765': attribute type 10 has an invalid length. [ 333.501929][T10750] device virt_wifi0 entered promiscuous mode [ 333.538554][T10750] team0: Port device virt_wifi0 added [ 333.588845][T10749] netlink: 'syz.4.1765': attribute type 10 has an invalid length. [ 333.706278][T10761] netlink: 'syz.0.1768': attribute type 29 has an invalid length. [ 333.756108][T10770] netlink: 'syz.2.1770': attribute type 29 has an invalid length. [ 333.775578][T10761] netlink: 'syz.0.1768': attribute type 29 has an invalid length. [ 333.835237][T10770] netlink: 'syz.2.1770': attribute type 29 has an invalid length. [ 333.914456][T10769] netlink: 'syz.3.1769': attribute type 21 has an invalid length. [ 333.933126][T10769] netlink: 'syz.3.1769': attribute type 3 has an invalid length. [ 333.951708][T10769] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1769'. [ 333.987012][T10772] netlink: 'syz.0.1768': attribute type 29 has an invalid length. [ 334.135535][T10761] can: request_module (can-proto-0) failed. [ 334.637511][T10802] sctp: [Deprecated]: syz.4.1779 (pid 10802) Use of int in max_burst socket option deprecated. [ 334.637511][T10802] Use struct sctp_assoc_value instead [ 334.956032][T10808] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.1781'. [ 335.183479][T10812] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1782'. [ 335.512840][T10825] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1786'. [ 336.070107][T10854] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.1790'. [ 336.464947][T10871] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1793'. [ 338.441713][T10850] validate_nla: 7 callbacks suppressed [ 338.441728][T10850] netlink: 'syz.4.1787': attribute type 29 has an invalid length. [ 338.639997][T10874] netlink: 'syz.2.1795': attribute type 39 has an invalid length. [ 338.690051][T10874] device macvlan0 entered promiscuous mode [ 338.791574][T10887] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1800'. [ 338.823659][T10887] netlink: 'syz.0.1800': attribute type 12 has an invalid length. [ 338.837458][T10887] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1800'. [ 338.854843][T10887] netlink: 'syz.0.1800': attribute type 21 has an invalid length. [ 338.933287][T10893] netlink: 'syz.0.1800': attribute type 10 has an invalid length. [ 338.945923][T10891] netlink: 'syz.2.1802': attribute type 13 has an invalid length. [ 338.973496][T10891] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1802'. [ 339.018049][T10896] netlink: 'syz.2.1802': attribute type 13 has an invalid length. [ 339.054144][T10896] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1802'. [ 339.138974][T10901] netlink: 'syz.1.1804': attribute type 5 has an invalid length. [ 339.147565][T10901] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1804'. [ 339.366763][T10905] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1794'. [ 339.613026][T10921] netlink: 'syz.4.1809': attribute type 4 has an invalid length. [ 340.698097][T10939] delete_channel: no stack [ 341.056411][T10977] netlink: 'syz.3.1822': attribute type 29 has an invalid length. [ 342.147925][T10957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1818'. [ 342.168255][T10984] pimreg: tun_chr_ioctl cmd 2147767511 [ 342.173945][T10988] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1822'. [ 342.203727][T10998] netlink: 822 bytes leftover after parsing attributes in process `syz.4.1826'. [ 342.386875][T11003] bond0: (slave bridge0): Error: Slave device does not support XDP [ 342.571894][T11016] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.1831'. [ 342.728522][T11023] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1833'. [ 343.077780][T11048] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1841'. [ 344.140535][T11066] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1847'. [ 344.198884][T11066] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1847'. [ 344.214855][T11066] netlink: zone id is out of range [ 344.221251][T11066] netlink: zone id is out of range [ 344.229497][T11066] netlink: zone id is out of range [ 344.238050][T11066] netlink: zone id is out of range [ 344.252185][T11066] netlink: zone id is out of range [ 344.260606][T11066] netlink: zone id is out of range [ 344.276835][T11066] netlink: zone id is out of range [ 344.300866][T11066] netlink: zone id is out of range [ 344.318709][T11066] netlink: zone id is out of range [ 344.333277][T11066] netlink: zone id is out of range [ 345.749813][T11065] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1847'. [ 345.764199][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1852'. [ 346.388155][T11123] validate_nla: 7 callbacks suppressed [ 346.388190][T11123] netlink: 'syz.1.1864': attribute type 10 has an invalid length. [ 347.531601][T11176] netlink: 'syz.0.1876': attribute type 9 has an invalid length. [ 347.545328][T11176] __nla_validate_parse: 4 callbacks suppressed [ 347.545338][T11176] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1876'. [ 347.730778][T11182] netlink: 'syz.0.1879': attribute type 16 has an invalid length. [ 347.739148][T11182] netlink: 'syz.0.1879': attribute type 4 has an invalid length. [ 347.747749][T11182] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1879'. [ 348.529674][T11193] netlink: 'syz.4.1883': attribute type 10 has an invalid length. [ 348.613317][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.672850][T11193] device bridge_slave_1 left promiscuous mode [ 348.702274][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.736221][T11238] netlink: 'syz.4.1897': attribute type 17 has an invalid length. [ 349.762782][T11238] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1897'. [ 352.628725][T11251] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1900'. [ 352.661807][T11248] netlink: 'syz.4.1900': attribute type 12 has an invalid length. [ 352.684413][T11248] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1900'. [ 354.578614][T11305] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.1916'. [ 354.882786][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 355.887752][T11350] netlink: 'syz.3.1932': attribute type 4 has an invalid length. [ 356.339618][T11375] netlink: 'syz.1.1938': attribute type 3 has an invalid length. [ 356.347969][T11375] netlink: 'syz.1.1938': attribute type 4 has an invalid length. [ 356.358393][T11375] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.1938'. [ 356.375870][T11373] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.1937'. [ 356.414123][T11373] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.1937'. [ 357.345554][T11406] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1947'. [ 357.372333][T11406] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1947'. [ 357.393640][T11406] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1947'. [ 357.425200][T11406] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1947'. [ 357.489829][ T4289] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 357.650715][T11416] netlink: 'syz.3.1950': attribute type 21 has an invalid length. [ 357.716255][T11416] netlink: 'syz.3.1950': attribute type 3 has an invalid length. [ 357.796175][T11416] __nla_validate_parse: 1 callbacks suppressed [ 357.796192][T11416] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1950'. [ 357.862704][T11417] netlink: 'syz.0.1949': attribute type 13 has an invalid length. [ 357.887258][T11417] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1949'. [ 358.399680][T11448] netlink: 'syz.3.1958': attribute type 21 has an invalid length. [ 358.475758][T11448] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1958'. [ 359.267019][T11483] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1966'. [ 359.299503][T11485] netlink: 121989 bytes leftover after parsing attributes in process `syz.2.1965'. [ 359.559885][T11494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1969'. [ 359.616936][T11493] delete_channel: no stack [ 360.798489][T11532] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 360.834197][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'. [ 361.636423][T11567] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1988'. [ 361.743673][T11567] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.1988'. [ 362.974940][T11609] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 363.032692][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1996'. [ 363.389202][T11618] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1999'. [ 363.560457][T11625] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2002'. [ 364.051727][T11636] netlink: 'syz.1.2005': attribute type 21 has an invalid length. [ 364.101938][T11635] netlink: 'syz.1.2005': attribute type 21 has an invalid length. [ 364.735430][T11662] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.2010'. [ 365.283866][T11677] netlink: 'syz.1.2013': attribute type 2 has an invalid length. [ 365.344568][T11679] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 365.448663][T11677] device 0 entered promiscuous mode [ 365.517590][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2014'. [ 366.260575][T11695] netlink: 'syz.0.2019': attribute type 10 has an invalid length. [ 366.696995][T11702] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2021'. [ 366.908739][T11698] netlink: 463 bytes leftover after parsing attributes in process `syz.3.2021'. [ 368.406554][T11735] netlink: 'syz.2.2030': attribute type 5 has an invalid length. [ 369.684305][T11770] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2039'. [ 371.731597][T11817] netlink: 'syz.1.2049': attribute type 21 has an invalid length. [ 371.789339][T11817] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2049'. [ 372.078111][T11833] netlink: 'syz.4.2052': attribute type 21 has an invalid length. [ 372.140786][T11833] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2052'. [ 372.258772][T11831] netlink: 'syz.0.2053': attribute type 10 has an invalid length. [ 372.363199][T11831] netlink: 'syz.0.2053': attribute type 19 has an invalid length. [ 372.522565][T11831] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2053'. [ 373.225648][T11862] netlink: 'syz.0.2060': attribute type 3 has an invalid length. [ 373.308088][T11862] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.2060'. [ 373.465567][T11870] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2064'. [ 373.543118][T11876] netlink: 'syz.1.2064': attribute type 21 has an invalid length. [ 374.314516][T11901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2074'. [ 374.552775][T11909] netlink: 'syz.4.2077': attribute type 10 has an invalid length. [ 374.592623][T11909] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2077'. [ 374.742749][T11915] netlink: 'syz.3.2078': attribute type 13 has an invalid length. [ 374.825189][T11915] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.2078'. [ 376.167445][T11966] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2091'. [ 378.404805][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.411209][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 Stopping sshd: stopped /usr/sbin/sshd (pid 4025) OK Stopping crond: stopped /usr/sbin/crond (pid 4010) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3932) Stopping network: [ 379.771280][T12012] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2105'. [ 379.780931][T12012] device hsr_slave_0 left promiscuous mode [ 379.787361][T12012] device hsr_slave_1 left promiscuous mode [ 379.832572][T12026] netlink: 'syz.3.2108': attribute type 10 has an invalid length. [ 379.948717][T12026] device team0 left promiscuous mode [ 379.956870][T12026] device team_slave_0 left promiscuous mode [ 379.975020][T12026] device team_slave_1 left promiscuous mode [ 379.981255][T12026] ¥: port 1(team0) entered disabled state [ 380.042783][T12026] team0 (unregistering): Port device team_slave_0 removed [ 380.072806][T12026] team0 (unregistering): Port device team_slave_1 removed [ 380.111748][T12055] netlink: 'syz.4.2111': attribute type 3 has an invalid length. [ 380.154754][T12055] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2111'. [ 380.227338][T12047] netlink: 'syz.4.2111': attribute type 1 has an invalid length. [ 380.260624][T12047] netlink: 63743 bytes leftover after parsing attributes in process `syz.4.2111'. [ 380.308438][T12057] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2111'. [ 380.333016][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 380.382893][T12057] net_ratelimit: 343 callbacks suppressed [ 380.382908][T12057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.450824][T12067] netlink: 'syz.2.2116': attribute type 29 has an invalid length. [ 380.482156][T12067] netlink: 'syz.2.2116': attribute type 29 has an invalid length. OK [ 381.260385][T12103] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 381.267215][T12103] hsr_slave_1: hsr_addr_subst_dest: Unknown node Stopping iptables: [ 381.493578][T12116] netlink: 'syz.4.2128': attribute type 16 has an invalid length. [ 381.526561][T12116] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2128'. [ 381.635899][T12112] netlink: 'syz.3.2126': attribute type 10 has an invalid length. OK [ 381.797628][T12124] netlink: 'syz.4.2128': attribute type 2 has an invalid length. [ 381.835219][T12112] device hsr0 left promiscuous mode [ 381.837504][T12124] netlink: 'syz.4.2128': attribute type 1 has an invalid length. [ 381.852826][T12112] bridge0: port 3(hsr0) entered disabled state [ 381.902018][T12124] netlink: 'syz.4.2128': attribute type 4 has an invalid length. [ 381.948077][T12124] netlink: 208312 bytes leftover after parsing attributes in process `syz.4.2128'. Stopping system message bus: [ 382.845717][T12160] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2136'. [ 383.040935][T12170] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2138'. done [ 383.940991][T12199] delete_channel: no stack [ 384.008880][T12199] delete_channel: no stack [ 384.119240][T12215] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2147'. [ 384.865584][T12233] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2153'. [ 385.135655][T12240] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2155'. killall: can't kill pid 10698: No such process Stopping klogd: [ 386.038544][T12240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface OK [ 386.145096][T12240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.173004][T12240] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 386.206672][T12240] bond0 (unregistering): (slave wlan1): Releasing backup interface Stopping acpid: [ 386.222148][T12240] bond0 (unregistering): Released all slaves [ 386.232092][T12256] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2158'. [ 386.258811][T12264] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2160'. [ 386.501794][T12282] FAULT_INJECTION: forcing a failure. [ 386.501794][T12282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.509227][T12280] validate_nla: 2 callbacks suppressed [ 386.509268][T12280] netlink: 'syz.3.2164': attribute type 21 has an invalid length. [ 386.577489][T12280] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2164'. [ 386.605773][T12282] CPU: 1 PID: 12282 Comm: syz.1.2162 Not tainted syzkaller #0 [ 386.613277][T12282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.623344][T12282] Call Trace: [ 386.626634][T12282] [ 386.629568][T12282] dump_stack_lvl+0x188/0x24e [ 386.634259][T12282] ? show_regs_print_info+0x12/0x12 [ 386.639467][T12282] ? load_image+0x410/0x410 [ 386.643979][T12282] ? __lock_acquire+0x7c40/0x7c40 [ 386.649016][T12282] should_fail_ex+0x390/0x4c0 [ 386.653703][T12282] _copy_from_user+0x2c/0x170 [ 386.658389][T12282] __sys_bpf+0x2ea/0x780 [ 386.662648][T12282] ? bpf_link_show_fdinfo+0x380/0x380 [ 386.668048][T12282] ? lock_chain_count+0x20/0x20 [ 386.672917][T12282] __x64_sys_bpf+0x78/0x90 [ 386.677339][T12282] do_syscall_64+0x4c/0xa0 [ 386.681759][T12282] ? clear_bhb_loop+0x60/0xb0 [ 386.686443][T12282] ? clear_bhb_loop+0x60/0xb0 [ 386.691125][T12282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.697018][T12282] RIP: 0033:0x7f911019e0d9 [ 386.701431][T12282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.721039][T12282] RSP: 002b:00007f9111123028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 386.729455][T12282] RAX: ffffffffffffffda RBX: 00007f9110425fa0 RCX: 00007f911019e0d9 [ 386.737432][T12282] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 386.745403][T12282] RBP: 00007f9111123090 R08: 0000000000000000 R09: 0000000000000000 [ 386.753375][T12282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.761342][T12282] R13: 00007f9110426038 R14: 00007f9110425fa0 R15: 00007ffc4007d238 [ 386.769324][T12282] [ 386.779214][T12280] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2164'. [ 386.804297][T12289] netlink: 'syz.0.2166': attribute type 10 has an invalid length. [ 386.812262][T12289] netlink: 'syz.0.2166': attribute type 4 has an invalid length. [ 386.843729][T12289] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2166'. [ 386.880691][T12289] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 387.305299][T12310] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2173'. [ 387.434759][T12308] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2171'. [ 387.451275][T12308] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2171'. [ 387.484071][T12325] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2175'. OK Stopping syslogd: stopped /sbin/syslogd (pid 3620) [ 387.825535][T12325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface OK [ 387.905308][T12325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.965939][T12325] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 387.989896][T12325] bridge0: port 3(batadv0) entered disabled state [ 387.999095][T12325] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.007651][T12325] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.056878][T12325] bond0 (unregistering): Released all slaves [ 388.124075][T12308] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2171'. [ 388.134520][T12324] netlink: 'syz.4.2176': attribute type 10 has an invalid length. [ 388.170885][T12324] team0: Device hsr_slave_0 failed to register rx_handler [ 388.368852][T12342] netlink: 'syz.2.2179': attribute type 3 has an invalid length. [ 388.403688][T12342] netlink: 'syz.2.2179': attribute type 1 has an invalid length. umount: can't remount debugfs read-only [ 388.467545][T12342] sctp: [Deprecated]: syz.2.2179 (pid 12342) Use of int in maxseg socket option. [ 388.467545][T12342] Use struct sctp_assoc_value instead [ 388.658057][T12352] FAULT_INJECTION: forcing a failure. [ 388.658057][T12352] name failslab, interval 1, probability 0, space 0, times 0 [ 388.691580][T12352] CPU: 1 PID: 12352 Comm: syz.0.2183 Not tainted syzkaller #0 [ 388.699088][T12352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.709151][T12352] Call Trace: [ 388.712434][T12352] [ 388.715368][T12352] dump_stack_lvl+0x188/0x24e [ 388.720066][T12352] ? show_regs_print_info+0x12/0x12 [ 388.725276][T12352] ? load_image+0x410/0x410 [ 388.729793][T12352] ? __lock_acquire+0x7c40/0x7c40 [ 388.734843][T12352] should_fail_ex+0x390/0x4c0 [ 388.739534][T12352] should_failslab+0x5/0x20 [ 388.744045][T12352] slab_pre_alloc_hook+0x59/0x300 [ 388.749078][T12352] ? verify_lock_unused+0x140/0x140 [ 388.754289][T12352] ? bpf_test_init+0x9f/0x140 [ 388.758975][T12352] __kmem_cache_alloc_node+0x4f/0x270 [ 388.764356][T12352] ? bpf_test_init+0x9f/0x140 [ 388.769033][T12352] __kmalloc+0xa3/0x240 [ 388.773202][T12352] bpf_test_init+0x9f/0x140 [ 388.777722][T12352] bpf_prog_test_run_xdp+0x488/0xf80 [ 388.783014][T12352] ? __lock_acquire+0x7c40/0x7c40 [ 388.788054][T12352] ? dev_put+0x80/0x80 [ 388.792138][T12352] ? dev_put+0x80/0x80 [ 388.796204][T12352] bpf_prog_test_run+0x31c/0x390 [ 388.801160][T12352] __sys_bpf+0x62b/0x780 [ 388.805421][T12352] ? bpf_link_show_fdinfo+0x380/0x380 [ 388.810814][T12352] ? lock_chain_count+0x20/0x20 [ 388.815675][T12352] __x64_sys_bpf+0x78/0x90 [ 388.820121][T12352] do_syscall_64+0x4c/0xa0 [ 388.824548][T12352] ? clear_bhb_loop+0x60/0xb0 [ 388.829239][T12352] ? clear_bhb_loop+0x60/0xb0 [ 388.833928][T12352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.839828][T12352] RIP: 0033:0x7fdc7699e0d9 [ 388.844256][T12352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.863875][T12352] RSP: 002b:00007fdc778e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.872297][T12352] RAX: ffffffffffffffda RBX: 00007fdc76c25fa0 RCX: 00007fdc7699e0d9 [ 388.880274][T12352] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 388.888252][T12352] RBP: 00007fdc778e9090 R08: 0000000000000000 R09: 0000000000000000 [ 388.896228][T12352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.904209][T12352] R13: 00007fdc76c26038 R14: 00007fdc76c25fa0 R15: 00007ffef4384778 [ 388.912207][T12352] umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.131 closed by remote host. [ 391.232575][T12382] __nla_validate_parse: 5 callbacks suppressed [ 391.232590][T12382] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2191'. Sent SIGKILL to all processes Requesting system poweroff [ 391.789973][ T4303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.958270][ T4303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.115720][ T4303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.228111][ T4303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.687577][T12383] kvm: exiting hardware virtualization [ 392.700667][T12383] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 392.710307][T12383] ACPI: PM: Preparing to enter system sleep state S5 [ 392.719143][T12383] reboot: Power down serialport: VM disconnected.