last executing test programs: 2.334147193s ago: executing program 3 (id=637): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 2.257254167s ago: executing program 3 (id=639): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.121598485s ago: executing program 3 (id=641): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000a00000006000000000000100c000000006161305f2e30616100"], 0x0, 0x2e, 0x0, 0x1, 0x7fffffff}, 0x1f) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x9d, 0x0, &(0x7f0000000500)="4f7ea3d3ee59e1c42f298b08d4e7d59bca92030c6652057388ba3289c91453e701410a76be1647a3cbeae9fc446a111984d8282aa2977fd135bf7cb95ce4e85dc2bdf08cdfb779e0ced9b15eee4b9962c7b4b8ba3b97b5b36205c82b500f8ced3a965d28b9b290f5807241706ebc3420d50cdceab4de460d2b1186980006b540b0a80c0f384f3f09f5f625271f7875866177b4e2b1dbc99f318831a7c5", 0x0, 0x80000000, 0x0, 0x3f, 0x0, &(0x7f00000001c0)="65af519e1309c6ebe7c466007563424304143f2700af72f6d4e72b6fd38e96a239d4f5543664472eeed813d1f20d6e8d19d2d9f0b4511968cdfbf215cb2f9f", 0x0, 0x2, 0x0, 0x5}, 0x50) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0x4788, 0x2}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x6}, 0x8100, 0xc8, 0xffffffff, 0x0, 0x0, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = getpid() sendmsg$unix(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000740)="2c25af744e8dd6e1a3f0844e2ce918febc2e6b9509b3b8a3e329a1123f6a734feb1b88ce8bd625ecf3eb6372ca00390f31afb54f02", 0x35}, {&(0x7f0000000780)="a992d4328b9ffffbcbade502849ad4a5d637c54df2f50a", 0x17}, {&(0x7f0000000840)="bf0a159e90b0e1bad8d510d482f5cdc9c3b35399d3331e61a1c2aac3c965674d77a215a1a2523b5aa03eff1a0249269e5552b2c0f591b13abe327124b140235558ff1ea048106a6494bc2e09037ce80eeac7c130ed4c897a35b8c2845ecbd0834b7e94ff6e75df5a263968cb3840d8343c3fbdd929e80d49f4e6d1eb86847ebf20", 0x81}, {&(0x7f0000000900)="b0ebdfd4d3d19674ae40bee1498d92d80387e74edf06cb547416fe903a59c4126ff98eacaad3e701ade7de676cb73956017a8a9b090f4c84b768cd2d2c65b5fe35e3f1dc40c45821e03e25dba6e01c6b2a6c8695056bb271f2a5f7b17385441a17c270b1feddfaeaa5", 0x69}, {&(0x7f0000000980)="13818f686b2cb6bd9c9a1d726465fb4011284688af13ccd7e73744c6dd369ca90f55ad4e738505171f1f03ffac96c7c0d631406c6cad24d2b3ba2b77bfbb7b327d17e940e985f39968d3a8bba38cc6d2ba9bee97dcb2dce84ee2821d45ca6714d8a601825a9e34536f5652ccd9c4e03ecaf2d18d43bcc4a1b61677d9e7a9ca0ae3cb810ffeff0b470d2ac6dff5b30a3bc538baafba0c5bb3b6933e545b9f9dd8367293f8002626ba3eadab8754e743af07afe8db55176a9a9edbaa639b2e4d293d38872f7a0c0a8070a9213edc9db90c0bc108", 0xd3}, {&(0x7f0000000a80)="d7f29bbfd653491aa4ae5bd358b05129ff4991e698e781d33b180cb62feb993eb4d7adf7da004432d0c4884b5ee07f0abbb3a47e18a0589e2b73ec94762d0852577ffbf540fea8908babb55fb51d6a5304512513215cc49a64073e190965f257afa62a5f8a774f98b14f8f62086659609987457ebb6587f16b318280d4c4579217c8cbf472a7b76e39abd53e36c33cb3eaa23540d88d4a1b4c271fed4591333b590d28802bd5c2a7", 0xa8}, {&(0x7f0000000b40)="1d8ba5c0621e656461da403e4ff642adf86d23623a59ab860c44c9281c515f8e78f8af406b4619e628b7ef947ff5f6d85512db096b8abb766cb6ae043cf52d77c8dfd628df929f526060092e6cb198a8d237f6a45a6730b9d8745a7eb4d1f64bc89b31e246f2cbd86dab5dd8c7d9c577e63c089c30fed21b275a46283fb585a59f8f3273808d94dd784b4f1743c20a1e4c5dceda0eb666878b7fc6883705982a26ea78a893ee618e4779f86776bdb8106a5eea005b2f44157d35019bea760ae85b8534d278edb412ddd07d1c464a25d4d37c1f29c91197653f6861e178c47eb311e840f00d4fb362e867d60db3ae4bd41b", 0xf1}], 0x7, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xffffffffffffffff}}}], 0x20, 0xc000}, 0x4004000) write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) syz_clone(0x100, &(0x7f00000003c0)="0164b95624e80bc2969ecfc16355bb0709cb13cf77183be1bf16634aff396080027bff909668b3038c772a7aca6391fb7af1e0e372a66c9e5782701818597751c96d97753bda6ad9d9f1df3902", 0x4d, &(0x7f0000000200), &(0x7f0000000340), &(0x7f00000005c0)="7d14e2b24ffca49847b9362badfe2d6a689c10f2c4ff4e56dbefd12da35551c0e2a75c67ffb6c707c5623ce02da6f3fb52f41c58b5a6d48f5ff3fdf330104ecf2d13485017f16f4dd2") socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}, 0x300080c1) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)=""/146, 0x92}], 0x1, 0x0, 0xfffffd82}, 0x40) 1.506423711s ago: executing program 3 (id=646): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e1208001e0000000401a8001215fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 1.278810465s ago: executing program 0 (id=652): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x35, 0x0, &(0x7f0000000100)="b9ff030711a5268c019e14f088a847e0ffff00124000632177fbac141416e000030a94029f020301800013ca6aab840000008100a8", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.243766907s ago: executing program 3 (id=653): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0xb, 0x0, 0x0, 0x0, 0x1ff, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x10000, 0x7fff}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0xd03, 0x400, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x9, 0x6, 0x812, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x4, @perf_config_ext={0x0, 0xe}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r1], 0x20) 1.224660869s ago: executing program 0 (id=654): socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000bc0)}, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 947.269234ms ago: executing program 2 (id=657): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x29, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000002, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 835.570971ms ago: executing program 1 (id=658): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 784.106694ms ago: executing program 0 (id=659): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe73}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x2, 0x2481}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40047452, &(0x7f0000001200)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r3, 0x35, 0x0, 0x9, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x4}, 0x8) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x4}, 0x8) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000700)=r7, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="080000001420000000000000", @ANYRES32=r7, @ANYBLOB="f6766ad7126e1e4af81e348e988070dad7aa78067a569c0bb38b7775bb09ab4bcd0ef5f44384b2e4037f06afad96c455d5f263c52a7befd8fcce016e637be7ec1ebca442e218d060caa129c58324021751e9348f080162db8c27c6ce375030ad17385b90e69f952b748fb811ab5004489011fdc56c08dd1fa68fa2c4deeab7f8beb26efe73cadb06bd5a312f08fdd0a3682dc8744a3fb61b0504cd79649f6994b4355ff005531eaf29ca32a1d258110b5fda54bfb8688d14c9a1ff1a1cd7d3eb89884bb1c56e9c2b73a71996d08df25d4a837c9fc0ea10eb616d058f9eba567a25f1e6de666bb000e861da0efd", @ANYRES64=r5], 0x20) 769.822345ms ago: executing program 2 (id=660): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRESOCT=r1, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gretap0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) openat$cgroup_devices(r0, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000040)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 729.877577ms ago: executing program 1 (id=661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x18}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 628.200923ms ago: executing program 1 (id=662): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x35, 0x0, &(0x7f0000000100)="b9ff030711a5268c019e14f088a847e0ffff00124000632177fbac141416e000030a94029f020301800013ca6aab840000008100a8", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 627.381603ms ago: executing program 3 (id=663): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000004000000000000000006110000000000000620002000000000095000000000000005ad63d160b8b9a1b0dfc457ab176e94f34964ce1875fcb8949fd3a22d3699b91ee1927d02dcfccb4d0b19ed87a0b84389815da7e03d95a9716926532d2a78d460d138b2cd198061a21ca0f078af6ea4a2c7961c5c2f7eb2014ae349a8b2720bdeaff3db00297aa039a3228aece5ff0e1b1c2c623ec801bc02a68d127352c0c16d0833638e23dd64dbd3e0834ab26129c782618f4dc5b781d56e3172c17f6fe98717e6642f416b4a606048c"], &(0x7f0000000100)='GPL\x00', 0x5, 0x124, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd9d}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x14181, 0x4, 0x81, 0x2, 0x1000, 0x0, 0x1, 0x0, 0x73e}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb00000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f2, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7fff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0x7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8000000000000020, 0x3bd5}, 0x2003, 0x32, 0x1843, 0x3, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0xab}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000b40)=""/246, 0xf6}], 0x2, &(0x7f0000000580)=""/123, 0x7b}, 0x2100) 548.374318ms ago: executing program 2 (id=664): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x50, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f030000ff000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) 547.917028ms ago: executing program 0 (id=665): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000819c4d9adafd0000000000000000040000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0xb, 0x0, 0x0, 0x0, 0x1ff, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x10000, 0x7fff}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0xd03, 0x400, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x9, 0x6, 0x812, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x4, @perf_config_ext={0x0, 0xe}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r1], 0x20) 546.855158ms ago: executing program 1 (id=666): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r3 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x3}}, 0x80, 0x0}, 0x20008044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES32=r4], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000f2ff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d0200000000000000000000000000000000000004"], &(0x7f0000000080)=""/230, 0x3a, 0xe6, 0x1}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x100002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001000000800000007ee40c6b701b006937e710f0d62bed7d55c191257aeff455b2ebfbc7b95dde5c1dcbac461b70ce041364045be2797bf9ca72a25c1ef90414b84b78eefdbce68019aa7cf90e6f80f0ee5018cccfed77f4f23f703fe403", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000900)="1334cb553d2db2443d64609e818491682c281905d690bccf1fe3aaa7f010ae3051c91cd65721188d3521ebb968ad8166743abceac1dfcee7b1f6deadf6fd57a70adc51f81d84b378313f9d71e16320bd0f15d915a54a4358a479a11e3398b14b2b2b51ecf455fecdd4f77ace3cd2b747422a72395056813429949bdf46074d9a6b5052b7ab040000000000000098888424bd1b41cd8c7e4c069cb77945c6430fc8c14efa70339ad2bc532f793166350430c6f3ee4f2661d722032bf95fca22a5", &(0x7f0000000040)=""/73}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r11, &(0x7f0000000300)=ANY=[], 0xfdef) 375.021619ms ago: executing program 2 (id=667): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x2000, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) 308.259022ms ago: executing program 0 (id=668): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffc48, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 176.24441ms ago: executing program 2 (id=669): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 172.07989ms ago: executing program 1 (id=670): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x18}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 56.020437ms ago: executing program 0 (id=671): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000f7a87105cf6d7dd16c321dc63c4b51a234cfa017f248a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000300"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ed1}, [@call={0x85, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xefeb, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) 51.695198ms ago: executing program 1 (id=672): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2002) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="a0a3213c0b", 0x0, 0x1, 0x2000000, 0xf7fffffc}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x810) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000180)='./file0\x00', r3, 0x4000, r2}, 0x18) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="e2978296329cdae664315115bd5dc53136264f16bc9e986a0e5dceec59de7e11990f8a302c2e6213818896e645050f5ce1b2ca9d22974a534e44de0f4f8bf31a58aa3459b182446beffb012fe653e8f25231ec1dbcae747a0382ef6fe4cfebe503e66db579db5d1efc0320590830f84ace48ffd45830fa5bdd8b2bc388e531228a82c04592f02bfe7a0fd0a1dd14ecb46820661cb5bc7c9b260f2f542438cec3eafe5f22ec92201d0c60d8f8cba72921", 0xb0}], 0x1}, 0x81) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) 0s ago: executing program 2 (id=673): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002200000000000000000080071107500000000009500000000000000c4"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xf14b) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x5, 0x8000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000006"], 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000200)={r3, 0x58, &(0x7f0000000080)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r1}, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000600)="ed", 0x1}], 0x1}, 0xe0) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x200100, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000380)={'ip6gretap0\x00'}) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}]}, &(0x7f0000000300)='GPL\x00', 0xc, 0xff6, &(0x7f0000001e00)=""/4086, 0x41100, 0x6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002200000000000000000080071107500000000009500000000000000c4"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xf14b) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x5, 0x8000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000006"], 0x48) (async) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000200)={r3, 0x58, &(0x7f0000000080)}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async) socket$kcm(0x2, 0x5, 0x84) (async) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000600)="ed", 0x1}], 0x1}, 0xe0) (async) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) (async) close(r4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x200100, 0x0) (async) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000380)={'ip6gretap0\x00'}) (async) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}]}, &(0x7f0000000300)='GPL\x00', 0xc, 0xff6, &(0x7f0000001e00)=""/4086, 0x41100, 0x6}, 0x94) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. [ 63.616813][ T5755] cgroup: Unknown subsys name 'net' [ 63.751057][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.203382][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.536593][ T5767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.564013][ T5767] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.583153][ T5767] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.593782][ T5767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.608111][ T5767] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.617800][ T5767] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.636463][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.661791][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.698520][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.710078][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.719893][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.728489][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.738135][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.740244][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.748919][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.757480][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.768146][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.777119][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.789240][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.800363][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.800709][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.819980][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.828840][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.839296][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.189215][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 67.292069][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 67.330081][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 67.340519][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 67.428709][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.438186][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.446757][ T5769] bridge_slave_0: entered allmulticast mode [ 67.454163][ T5769] bridge_slave_0: entered promiscuous mode [ 67.493145][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.506220][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.516571][ T5769] bridge_slave_1: entered allmulticast mode [ 67.525051][ T5769] bridge_slave_1: entered promiscuous mode [ 67.600537][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.628559][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.636378][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.644068][ T5770] bridge_slave_0: entered allmulticast mode [ 67.650979][ T5770] bridge_slave_0: entered promiscuous mode [ 67.660135][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.667519][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.675003][ T5770] bridge_slave_1: entered allmulticast mode [ 67.682408][ T5770] bridge_slave_1: entered promiscuous mode [ 67.691179][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.718574][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.728966][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.737276][ T5771] bridge_slave_0: entered allmulticast mode [ 67.745187][ T5771] bridge_slave_0: entered promiscuous mode [ 67.780598][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.790060][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.798488][ T5766] bridge_slave_0: entered allmulticast mode [ 67.806489][ T5766] bridge_slave_0: entered promiscuous mode [ 67.816822][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.824728][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.832541][ T5766] bridge_slave_1: entered allmulticast mode [ 67.840139][ T5766] bridge_slave_1: entered promiscuous mode [ 67.847957][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.855616][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.862996][ T5771] bridge_slave_1: entered allmulticast mode [ 67.870494][ T5771] bridge_slave_1: entered promiscuous mode [ 67.880405][ T5769] team0: Port device team_slave_0 added [ 67.889750][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.919178][ T5769] team0: Port device team_slave_1 added [ 67.926939][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.988225][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.002144][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.014355][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.027100][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.050999][ T5770] team0: Port device team_slave_0 added [ 68.085599][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.092753][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.119508][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.133287][ T5770] team0: Port device team_slave_1 added [ 68.160442][ T5771] team0: Port device team_slave_0 added [ 68.175175][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.182583][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.209566][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.238277][ T5766] team0: Port device team_slave_0 added [ 68.248479][ T5771] team0: Port device team_slave_1 added [ 68.271004][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.278929][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.306924][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.330886][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.338600][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.365800][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.379138][ T5766] team0: Port device team_slave_1 added [ 68.388344][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.396298][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.426479][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.448157][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.456103][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.486286][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.522242][ T5769] hsr_slave_0: entered promiscuous mode [ 68.529866][ T5769] hsr_slave_1: entered promiscuous mode [ 68.576019][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.583840][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.613647][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.651793][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.659764][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.688199][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.688307][ T5776] Bluetooth: hci0: command tx timeout [ 68.719302][ T5770] hsr_slave_0: entered promiscuous mode [ 68.727789][ T5770] hsr_slave_1: entered promiscuous mode [ 68.735418][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.744748][ T5770] Cannot create hsr debugfs directory [ 68.800176][ T5771] hsr_slave_0: entered promiscuous mode [ 68.806972][ T5771] hsr_slave_1: entered promiscuous mode [ 68.816037][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.824330][ T5771] Cannot create hsr debugfs directory [ 68.843986][ T5776] Bluetooth: hci1: command tx timeout [ 68.907510][ T5766] hsr_slave_0: entered promiscuous mode [ 68.915409][ T5766] hsr_slave_1: entered promiscuous mode [ 68.922417][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.932021][ T5766] Cannot create hsr debugfs directory [ 68.933853][ T5778] Bluetooth: hci2: command tx timeout [ 68.949107][ T5776] Bluetooth: hci3: command tx timeout [ 69.210567][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.239183][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.250681][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.281200][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.348944][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.359786][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.370455][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.380337][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.487854][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.497658][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.512434][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.537252][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.596766][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.617509][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.628389][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.645883][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.708332][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.757914][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.789150][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.796801][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.809079][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.816625][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.842670][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.902620][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.937190][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.971522][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.978919][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.005612][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.012968][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.029158][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.056375][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.063978][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.100374][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.124570][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.132408][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.257506][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.280184][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.288237][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.307079][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.314524][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.481256][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.635627][ T5769] veth0_vlan: entered promiscuous mode [ 70.680983][ T5769] veth1_vlan: entered promiscuous mode [ 70.770792][ T5776] Bluetooth: hci0: command tx timeout [ 70.819475][ T5769] veth0_macvtap: entered promiscuous mode [ 70.881025][ T5769] veth1_macvtap: entered promiscuous mode [ 70.923923][ T5776] Bluetooth: hci1: command tx timeout [ 70.947681][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.962110][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.977361][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.986513][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.997962][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.007816][ T5776] Bluetooth: hci3: command tx timeout [ 71.013427][ T5776] Bluetooth: hci2: command tx timeout [ 71.018356][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.028279][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.050963][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.090942][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.213462][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.231167][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.278388][ T4394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.289239][ T4394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.293494][ T5766] veth0_vlan: entered promiscuous mode [ 71.332345][ T5766] veth1_vlan: entered promiscuous mode [ 71.349956][ T5770] veth0_vlan: entered promiscuous mode [ 71.358535][ T5771] veth0_vlan: entered promiscuous mode [ 71.446043][ T5770] veth1_vlan: entered promiscuous mode [ 71.461278][ T5771] veth1_vlan: entered promiscuous mode [ 71.547222][ T5766] veth0_macvtap: entered promiscuous mode [ 71.587555][ T5766] veth1_macvtap: entered promiscuous mode [ 71.607215][ T5771] veth0_macvtap: entered promiscuous mode [ 71.639778][ T5771] veth1_macvtap: entered promiscuous mode [ 71.656418][ T5770] veth0_macvtap: entered promiscuous mode [ 71.691028][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.703269][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.715826][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.727872][ T5851] Zero length message leads to an empty skb [ 71.736726][ T5770] veth1_macvtap: entered promiscuous mode [ 71.755300][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.767845][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.780704][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.793203][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.807736][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.820533][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.832696][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.849166][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.868682][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.882043][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.896023][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.909081][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.921875][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.931567][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.945193][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.955777][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.970773][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.972377][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.977907][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.003054][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.015694][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.026946][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.038061][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.049214][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.062938][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.080925][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.094246][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.105091][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.116101][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.127469][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.146032][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.157272][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.167782][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.178451][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.189032][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.200583][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.214773][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.228258][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.237939][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.248783][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.259551][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.464181][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.485417][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.581211][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.622537][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.670671][ T4394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.679508][ T4394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.731203][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.747437][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.814536][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.826418][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.835611][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.846695][ T5776] Bluetooth: hci0: command tx timeout [ 72.884100][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.014176][ T5776] Bluetooth: hci1: command tx timeout [ 73.083829][ T5776] Bluetooth: hci3: command tx timeout [ 73.083840][ T5778] Bluetooth: hci2: command tx timeout [ 73.143587][ C0] hrtimer: interrupt took 69632 ns [ 73.391865][ T5866] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 73.457942][ T5866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7'. [ 73.518150][ T5866] vlan1: entered promiscuous mode [ 73.525214][ T5866] batman_adv: batadv0: Adding interface: vlan1 [ 73.532133][ T5866] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.578297][ T5866] batman_adv: batadv0: Interface activated: vlan1 [ 74.109111][ T5869] delete_channel: no stack [ 74.380731][ T5875] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 74.572743][ T5878] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.712408][ T5884] can: request_module (can-proto-0) failed. [ 74.742484][ T5890] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14'. [ 74.934813][ T5776] Bluetooth: hci0: command tx timeout [ 75.082807][ T5875] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 75.093973][ T5776] Bluetooth: hci1: command tx timeout [ 75.163845][ T5776] Bluetooth: hci2: command tx timeout [ 75.174312][ T5776] Bluetooth: hci3: command tx timeout [ 75.661437][ T5875] bond0: (slave bond_slave_0): Releasing backup interface [ 80.003437][ T5875] syz.3.10 (5875) used greatest stack depth: 19560 bytes left [ 81.296605][ T5874] delete_channel: no stack [ 82.225449][ T787] cfg80211: failed to load regulatory.db [ 82.424348][ T5918] netlink: 180 bytes leftover after parsing attributes in process `syz.0.22'. [ 83.470143][ T5938] netlink: 'syz.2.28': attribute type 8 has an invalid length. [ 83.513207][ T5938] netlink: 156 bytes leftover after parsing attributes in process `syz.2.28'. [ 83.594829][ T5939] netlink: 'syz.1.26': attribute type 39 has an invalid length. [ 83.907277][ T5943] warning: `syz.0.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.954207][ T5945] netlink: 'syz.3.29': attribute type 8 has an invalid length. [ 84.043685][ T5945] netlink: 156 bytes leftover after parsing attributes in process `syz.3.29'. [ 85.678804][ T5966] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.36'. [ 86.268080][ T5970] can: request_module (can-proto-0) failed. [ 87.220057][ T5983] netlink: 'syz.0.41': attribute type 8 has an invalid length. [ 87.263206][ T5983] netlink: 156 bytes leftover after parsing attributes in process `syz.0.41'. [ 87.506091][ T5977] netlink: 'syz.1.40': attribute type 8 has an invalid length. [ 87.604725][ T5977] netlink: 156 bytes leftover after parsing attributes in process `syz.1.40'. [ 89.267617][ T6012] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.48'. [ 90.746656][ T6019] can: request_module (can-proto-0) failed. [ 91.330078][ T6025] netlink: 'syz.2.54': attribute type 10 has an invalid length. [ 91.736759][ T6025] bond0: (slave bond_slave_0): Releasing backup interface [ 92.336756][ T6024] delete_channel: no stack [ 93.954505][ T6041] delete_channel: no stack [ 97.546313][ T6086] netlink: 'syz.1.68': attribute type 10 has an invalid length. [ 97.815418][ T6086] bond0: (slave bond_slave_0): Releasing backup interface [ 97.854715][ T6078] delete_channel: no stack [ 98.039196][ T6091] netlink: 'syz.3.74': attribute type 10 has an invalid length. [ 98.063670][ T6091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.74'. [ 98.123630][ T6091] vlan1: entered promiscuous mode [ 98.151721][ T6091] batman_adv: batadv0: Adding interface: vlan1 [ 98.182846][ T6081] delete_channel: no stack [ 98.213752][ T6091] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.295378][ T6091] batman_adv: batadv0: Interface activated: vlan1 [ 102.569049][ T5776] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 102.662420][ T6146] netlink: 'syz.1.91': attribute type 29 has an invalid length. [ 102.765217][ T6146] netlink: 'syz.1.91': attribute type 29 has an invalid length. [ 102.803961][ T6147] netlink: 'syz.1.91': attribute type 29 has an invalid length. [ 102.863929][ T6150] netlink: 'syz.1.91': attribute type 29 has an invalid length. [ 102.953813][ T6146] netlink: 'syz.1.91': attribute type 29 has an invalid length. [ 104.103366][ T6155] netlink: 2 bytes leftover after parsing attributes in process `syz.3.96'. [ 104.112961][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.137549][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.163040][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.183688][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.210740][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.243967][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.259929][ T6155] batadv_slave_1: entered promiscuous mode [ 104.894430][ T6169] FAULT_INJECTION: forcing a failure. [ 104.894430][ T6169] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.908325][ T6169] CPU: 1 PID: 6169 Comm: syz.1.99 Not tainted syzkaller #0 [ 104.916249][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.927315][ T6169] Call Trace: [ 104.931269][ T6169] [ 104.935208][ T6169] dump_stack_lvl+0x18c/0x250 [ 104.940225][ T6169] ? show_regs_print_info+0x20/0x20 [ 104.945996][ T6169] ? load_image+0x400/0x400 [ 104.951423][ T6169] ? __might_fault+0xaa/0x120 [ 104.956621][ T6169] ? __lock_acquire+0x7d40/0x7d40 [ 104.962945][ T6169] should_fail_ex+0x39d/0x4d0 [ 104.968099][ T6169] _copy_from_user+0x2f/0xe0 [ 104.974117][ T6169] __sys_bpf+0x23e/0x890 [ 104.978777][ T6169] ? bpf_link_show_fdinfo+0x390/0x390 [ 104.984800][ T6169] ? lock_chain_count+0x20/0x20 [ 104.990013][ T6169] __x64_sys_bpf+0x7c/0x90 [ 104.995067][ T6169] do_syscall_64+0x55/0xa0 [ 105.000390][ T6169] ? clear_bhb_loop+0x40/0x90 [ 105.005533][ T6169] ? clear_bhb_loop+0x40/0x90 [ 105.010789][ T6169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.017628][ T6169] RIP: 0033:0x7fd114d9acb9 [ 105.022359][ T6169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.044156][ T6169] RSP: 002b:00007fd115be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.053142][ T6169] RAX: ffffffffffffffda RBX: 00007fd115015fa0 RCX: 00007fd114d9acb9 [ 105.061770][ T6169] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 105.070589][ T6169] RBP: 00007fd115be6090 R08: 0000000000000000 R09: 0000000000000000 [ 105.078999][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.087851][ T6169] R13: 00007fd115016038 R14: 00007fd115015fa0 R15: 00007ffd2f799e28 [ 105.096461][ T6169] [ 107.409624][ T6193] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.108'. [ 108.165261][ T6214] FAULT_INJECTION: forcing a failure. [ 108.165261][ T6214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.263870][ T6214] CPU: 0 PID: 6214 Comm: syz.0.114 Not tainted syzkaller #0 [ 108.271487][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.281756][ T6214] Call Trace: [ 108.285290][ T6214] [ 108.288773][ T6214] dump_stack_lvl+0x18c/0x250 [ 108.294092][ T6214] ? show_regs_print_info+0x20/0x20 [ 108.299558][ T6214] ? load_image+0x400/0x400 [ 108.304175][ T6214] ? __might_fault+0xaa/0x120 [ 108.308872][ T6214] ? __lock_acquire+0x7d40/0x7d40 [ 108.313924][ T6214] should_fail_ex+0x39d/0x4d0 [ 108.318896][ T6214] _copy_from_user+0x2f/0xe0 [ 108.323775][ T6214] ___sys_sendmsg+0x1c7/0x360 [ 108.328572][ T6214] ? get_pid_task+0x20/0x1e0 [ 108.333477][ T6214] ? __sys_sendmsg+0x2a0/0x2a0 [ 108.338460][ T6214] ? __lock_acquire+0x7d40/0x7d40 [ 108.343713][ T6214] __se_sys_sendmsg+0x1c2/0x2b0 [ 108.348763][ T6214] ? __x64_sys_sendmsg+0x80/0x80 [ 108.353831][ T6214] ? lockdep_hardirqs_on+0x98/0x150 [ 108.359150][ T6214] do_syscall_64+0x55/0xa0 [ 108.363763][ T6214] ? clear_bhb_loop+0x40/0x90 [ 108.368463][ T6214] ? clear_bhb_loop+0x40/0x90 [ 108.373425][ T6214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.379349][ T6214] RIP: 0033:0x7f98c7f9acb9 [ 108.384220][ T6214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.405844][ T6214] RSP: 002b:00007f98c8dea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.414557][ T6214] RAX: ffffffffffffffda RBX: 00007f98c8216090 RCX: 00007f98c7f9acb9 [ 108.423749][ T6214] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 108.432462][ T6214] RBP: 00007f98c8dea090 R08: 0000000000000000 R09: 0000000000000000 [ 108.440712][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.448747][ T6214] R13: 00007f98c8216128 R14: 00007f98c8216090 R15: 00007fffb24f6d98 [ 108.457079][ T6214] [ 110.967562][ T6242] netlink: 830 bytes leftover after parsing attributes in process `syz.3.124'. [ 111.307465][ T6248] bridge_slave_1: left allmulticast mode [ 111.343279][ T6248] bridge_slave_1: left promiscuous mode [ 111.369473][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.652727][ T6248] bridge_slave_0: left allmulticast mode [ 111.674043][ T6248] bridge_slave_0: left promiscuous mode [ 111.712660][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.278748][ T6252] netlink: 'syz.0.127': attribute type 10 has an invalid length. [ 112.344273][ T6252] team0: Device ipvlan1 failed to register rx_handler [ 113.276005][ T6277] Dead loop on virtual device ip6_vti0, fix it urgently! [ 114.208571][ T6293] netlink: 6 bytes leftover after parsing attributes in process `syz.1.139'. [ 114.244836][ T6293] openvswitch: netlink: Flow actions attr not present in new flow. [ 114.245477][ T6294] netlink: 112 bytes leftover after parsing attributes in process `syz.0.138'. [ 114.450155][ T6298] FAULT_INJECTION: forcing a failure. [ 114.450155][ T6298] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 114.481949][ T6298] CPU: 1 PID: 6298 Comm: syz.3.142 Not tainted syzkaller #0 [ 114.490170][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.501038][ T6298] Call Trace: [ 114.504723][ T6298] [ 114.508108][ T6298] dump_stack_lvl+0x18c/0x250 [ 114.513092][ T6298] ? show_regs_print_info+0x20/0x20 [ 114.518425][ T6298] ? load_image+0x400/0x400 [ 114.523381][ T6298] ? __lock_acquire+0x7d40/0x7d40 [ 114.528861][ T6298] ? _copy_from_iter+0x201/0x12e0 [ 114.534180][ T6298] should_fail_ex+0x39d/0x4d0 [ 114.540039][ T6298] prepare_alloc_pages+0x1e2/0x5f0 [ 114.546243][ T6298] __alloc_pages+0x134/0x460 [ 114.551024][ T6298] ? zone_statistics+0x170/0x170 [ 114.557322][ T6298] ? _raw_spin_lock_irqsave+0x100/0x100 [ 114.563567][ T6298] ? copy_page_from_iter+0xe8/0x100 [ 114.568961][ T6298] pipe_write+0x62b/0x1b10 [ 114.573510][ T6298] ? pipe_read+0x1310/0x1310 [ 114.578284][ T6298] ? end_current_label_crit_section+0x149/0x170 [ 114.584709][ T6298] ? common_file_perm+0x198/0x1f0 [ 114.589737][ T6298] vfs_write+0x46c/0x990 [ 114.594000][ T6298] ? file_end_write+0x250/0x250 [ 114.598852][ T6298] ? __fget_files+0x43d/0x4b0 [ 114.603628][ T6298] ? __fdget_pos+0x1d8/0x330 [ 114.608241][ T6298] ? ksys_write+0x75/0x260 [ 114.612863][ T6298] ksys_write+0x150/0x260 [ 114.617198][ T6298] ? __ia32_sys_read+0x90/0x90 [ 114.622061][ T6298] ? lockdep_hardirqs_on+0x98/0x150 [ 114.627620][ T6298] do_syscall_64+0x55/0xa0 [ 114.632128][ T6298] ? clear_bhb_loop+0x40/0x90 [ 114.636890][ T6298] ? clear_bhb_loop+0x40/0x90 [ 114.641649][ T6298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.647621][ T6298] RIP: 0033:0x7f7bdb99acb9 [ 114.652031][ T6298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.672301][ T6298] RSP: 002b:00007f7bdc8dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.681189][ T6298] RAX: ffffffffffffffda RBX: 00007f7bdbc15fa0 RCX: 00007f7bdb99acb9 [ 114.689342][ T6298] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000000 [ 114.697657][ T6298] RBP: 00007f7bdc8dd090 R08: 0000000000000000 R09: 0000000000000000 [ 114.705622][ T6298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.713691][ T6298] R13: 00007f7bdbc16038 R14: 00007f7bdbc15fa0 R15: 00007ffd2e019918 [ 114.721784][ T6298] [ 118.617436][ T6372] netlink: 132 bytes leftover after parsing attributes in process `syz.3.168'. [ 119.676078][ T6391] FAULT_INJECTION: forcing a failure. [ 119.676078][ T6391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.843669][ T6391] CPU: 0 PID: 6391 Comm: syz.3.176 Not tainted syzkaller #0 [ 119.851189][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.861564][ T6391] Call Trace: [ 119.864882][ T6391] [ 119.867927][ T6391] dump_stack_lvl+0x18c/0x250 [ 119.872698][ T6391] ? show_regs_print_info+0x20/0x20 [ 119.877964][ T6391] ? load_image+0x400/0x400 [ 119.882611][ T6391] ? __might_fault+0xaa/0x120 [ 119.887341][ T6391] ? __lock_acquire+0x7d40/0x7d40 [ 119.892589][ T6391] should_fail_ex+0x39d/0x4d0 [ 119.897324][ T6391] _copy_from_iter+0x1d9/0x12e0 [ 119.902223][ T6391] ? __virt_addr_valid+0x18c/0x540 [ 119.907700][ T6391] ? __lock_acquire+0x7d40/0x7d40 [ 119.912944][ T6391] ? __alloc_skb+0x138/0x2c0 [ 119.917831][ T6391] ? copyout_mc+0x70/0x70 [ 119.922198][ T6391] ? __virt_addr_valid+0x18c/0x540 [ 119.927534][ T6391] ? __virt_addr_valid+0x18c/0x540 [ 119.932705][ T6391] ? __virt_addr_valid+0x469/0x540 [ 119.938004][ T6391] ? __phys_addr_symbol+0x2f/0x70 [ 119.943237][ T6391] ? __check_object_size+0x506/0xa20 [ 119.948686][ T6391] udplite_getfrag+0x4d/0xa0 [ 119.953509][ T6391] __ip_append_data+0x2f11/0x3d40 [ 119.958784][ T6391] ? udp_sendmsg+0x23b0/0x23b0 [ 119.963608][ T6391] ? ip_setup_cork+0x860/0x860 [ 119.968426][ T6391] ? __local_bh_enable_ip+0x13a/0x1c0 [ 119.973924][ T6391] ? lockdep_hardirqs_on+0x98/0x150 [ 119.979346][ T6391] ip_append_data+0x10d/0x180 [ 119.984247][ T6391] ? udp_sendmsg+0x23b0/0x23b0 [ 119.989241][ T6391] udp_sendmsg+0x438/0x23b0 [ 119.994147][ T6391] ? mark_lock+0x94/0x320 [ 119.998616][ T6391] ? udp_sendmsg+0x23b0/0x23b0 [ 120.003520][ T6391] ? udp_cmsg_send+0x350/0x350 [ 120.008413][ T6391] ? __lock_acquire+0x1273/0x7d40 [ 120.013674][ T6391] ? verify_lock_unused+0x140/0x140 [ 120.018992][ T6391] ? aa_label_sk_perm+0x463/0x5c0 [ 120.024106][ T6391] udpv6_sendmsg+0x93d/0x2390 [ 120.029013][ T6391] ? udpv6_sendmsg+0x2390/0x2390 [ 120.034000][ T6391] ? udp_v6_early_demux+0xf80/0xf80 [ 120.039349][ T6391] ? __lock_acquire+0x1273/0x7d40 [ 120.044465][ T6391] ? inet_send_prepare+0x5c/0x260 [ 120.049637][ T6391] ? inet6_sendmsg+0x5f/0xd0 [ 120.054298][ T6391] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 120.059543][ T6391] ____sys_sendmsg+0x5ba/0x960 [ 120.064415][ T6391] ? __asan_memset+0x22/0x40 [ 120.069159][ T6391] ? __sys_sendmsg_sock+0x30/0x30 [ 120.074265][ T6391] ? __import_iovec+0x5f2/0x850 [ 120.079242][ T6391] ? import_iovec+0x73/0xa0 [ 120.083772][ T6391] ___sys_sendmsg+0x2a6/0x360 [ 120.088474][ T6391] ? __sys_sendmsg+0x2a0/0x2a0 [ 120.093255][ T6391] ? __lock_acquire+0x7d40/0x7d40 [ 120.098300][ T6391] __se_sys_sendmsg+0x1c2/0x2b0 [ 120.103156][ T6391] ? __x64_sys_sendmsg+0x80/0x80 [ 120.108132][ T6391] ? lockdep_hardirqs_on+0x98/0x150 [ 120.113437][ T6391] do_syscall_64+0x55/0xa0 [ 120.117847][ T6391] ? clear_bhb_loop+0x40/0x90 [ 120.122959][ T6391] ? clear_bhb_loop+0x40/0x90 [ 120.127727][ T6391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.133716][ T6391] RIP: 0033:0x7f7bdb99acb9 [ 120.138139][ T6391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.158101][ T6391] RSP: 002b:00007f7bdc8dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.166514][ T6391] RAX: ffffffffffffffda RBX: 00007f7bdbc15fa0 RCX: 00007f7bdb99acb9 [ 120.174600][ T6391] RDX: 0000000000048800 RSI: 0000200000000880 RDI: 0000000000000004 [ 120.182586][ T6391] RBP: 00007f7bdc8dd090 R08: 0000000000000000 R09: 0000000000000000 [ 120.190571][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.198554][ T6391] R13: 00007f7bdbc16038 R14: 00007f7bdbc15fa0 R15: 00007ffd2e019918 [ 120.206648][ T6391] [ 120.473430][ T6386] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 121.075954][ T6385] delete_channel: no stack [ 122.002480][ T6417] netlink: 192440 bytes leftover after parsing attributes in process `syz.0.187'. [ 122.113996][ T6417] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 122.634054][ T6425] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 122.641873][ T6425] netlink: 55 bytes leftover after parsing attributes in process `syz.3.190'. [ 122.748763][ T6425] veth0_macvtap: left promiscuous mode [ 125.004369][ T6468] netlink: 188 bytes leftover after parsing attributes in process `syz.1.203'. [ 128.250453][ T6475] netlink: 14 bytes leftover after parsing attributes in process `syz.0.208'. [ 128.312201][ T6479] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.209'. [ 128.328573][ T6479] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 128.353720][ T6479] openvswitch: netlink: Message has 1 unknown bytes. [ 128.415553][ T6480] netlink: 'syz.1.206': attribute type 29 has an invalid length. [ 130.056110][ T6480] netlink: 'syz.1.206': attribute type 29 has an invalid length. [ 131.408114][ T6504] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 131.536153][ T6518] netlink: 'syz.3.218': attribute type 29 has an invalid length. [ 131.547585][ T6505] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 131.596992][ T6516] netlink: 132 bytes leftover after parsing attributes in process `syz.3.218'. [ 131.630626][ T6518] netlink: 'syz.3.218': attribute type 29 has an invalid length. [ 132.024952][ T6522] FAULT_INJECTION: forcing a failure. [ 132.024952][ T6522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.163954][ T6522] CPU: 1 PID: 6522 Comm: syz.1.219 Not tainted syzkaller #0 [ 132.171306][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.181653][ T6522] Call Trace: [ 132.184931][ T6522] [ 132.187965][ T6522] dump_stack_lvl+0x18c/0x250 [ 132.192666][ T6522] ? show_regs_print_info+0x20/0x20 [ 132.197969][ T6522] ? load_image+0x400/0x400 [ 132.202560][ T6522] ? __lock_acquire+0x7d40/0x7d40 [ 132.207708][ T6522] ? snprintf+0xe9/0x140 [ 132.211948][ T6522] should_fail_ex+0x39d/0x4d0 [ 132.216726][ T6522] _copy_to_user+0x2f/0xa0 [ 132.221434][ T6522] simple_read_from_buffer+0xe7/0x150 [ 132.226904][ T6522] proc_fail_nth_read+0x1e8/0x260 [ 132.231936][ T6522] ? proc_fault_inject_write+0x360/0x360 [ 132.237566][ T6522] ? fsnotify_perm+0x271/0x5e0 [ 132.242330][ T6522] ? proc_fault_inject_write+0x360/0x360 [ 132.247997][ T6522] vfs_read+0x28b/0x970 [ 132.252240][ T6522] ? kernel_read+0x1e0/0x1e0 [ 132.257005][ T6522] ? __fget_files+0x28/0x4b0 [ 132.261675][ T6522] ? __fget_files+0x28/0x4b0 [ 132.266345][ T6522] ? __fget_files+0x43d/0x4b0 [ 132.271133][ T6522] ? __fdget_pos+0x2a3/0x330 [ 132.275835][ T6522] ? ksys_read+0x75/0x260 [ 132.280164][ T6522] ksys_read+0x150/0x260 [ 132.284423][ T6522] ? vfs_write+0x990/0x990 [ 132.289099][ T6522] ? lockdep_hardirqs_on+0x98/0x150 [ 132.294553][ T6522] do_syscall_64+0x55/0xa0 [ 132.299058][ T6522] ? clear_bhb_loop+0x40/0x90 [ 132.303732][ T6522] ? clear_bhb_loop+0x40/0x90 [ 132.308420][ T6522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.314396][ T6522] RIP: 0033:0x7fd114d5b58e [ 132.318992][ T6522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.338816][ T6522] RSP: 002b:00007fd115be5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.347227][ T6522] RAX: ffffffffffffffda RBX: 00007fd115be66c0 RCX: 00007fd114d5b58e [ 132.355284][ T6522] RDX: 000000000000000f RSI: 00007fd115be60a0 RDI: 0000000000000005 [ 132.363287][ T6522] RBP: 00007fd115be6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.371428][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.379475][ T6522] R13: 00007fd115016038 R14: 00007fd115015fa0 R15: 00007ffd2f799e28 [ 132.387624][ T6522] [ 132.540711][ T6529] netlink: 132 bytes leftover after parsing attributes in process `syz.2.221'. [ 132.666653][ T6534] netlink: 'syz.3.224': attribute type 10 has an invalid length. [ 132.704417][ T6534] batman_adv: batadv0: Adding interface: wlan0 [ 132.716411][ T6534] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.826404][ T6534] batman_adv: batadv0: Interface activated: wlan0 [ 133.409212][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.423650][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.869040][ T6552] syzkaller0: entered promiscuous mode [ 133.907428][ T6552] syzkaller0: entered allmulticast mode [ 138.087137][ T6574] syzkaller0: entered promiscuous mode [ 138.092862][ T6574] syzkaller0: entered allmulticast mode [ 140.467469][ T6603] netlink: 'syz.2.246': attribute type 9 has an invalid length. [ 140.529797][ T6603] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.246'. [ 142.840787][ T6678] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1125 [ 142.904589][ T6681] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.282'. [ 143.330121][ T6691] syz.0.284 (6691) used greatest stack depth: 19176 bytes left [ 143.449946][ T6697] netlink: 'syz.2.289': attribute type 10 has an invalid length. [ 144.078095][ T6718] netlink: 830 bytes leftover after parsing attributes in process `syz.1.296'. [ 144.232069][ T6713] ref_ctr_offset mismatch. inode: 0x1d0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 144.494021][ T6726] netlink: 'syz.1.298': attribute type 10 has an invalid length. [ 144.533562][ T6726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.298'. [ 144.576256][ T6726] batman_adv: batadv0: Adding interface: vlan1 [ 144.583001][ T6726] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.669775][ T6726] batman_adv: batadv0: Interface activated: vlan1 [ 147.124872][ T5776] Bluetooth: hci2: ISO packet for unknown connection handle 3849 [ 147.908313][ T6794] ref_ctr_offset mismatch. inode: 0x1f7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 148.298719][ T6807] FAULT_INJECTION: forcing a failure. [ 148.298719][ T6807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.344022][ T6807] CPU: 1 PID: 6807 Comm: syz.0.329 Not tainted syzkaller #0 [ 148.351568][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.361740][ T6807] Call Trace: [ 148.365040][ T6807] [ 148.367995][ T6807] dump_stack_lvl+0x18c/0x250 [ 148.372975][ T6807] ? show_regs_print_info+0x20/0x20 [ 148.378377][ T6807] ? load_image+0x400/0x400 [ 148.383324][ T6807] ? __might_fault+0xaa/0x120 [ 148.388139][ T6807] ? __lock_acquire+0x7d40/0x7d40 [ 148.393324][ T6807] should_fail_ex+0x39d/0x4d0 [ 148.398738][ T6807] _copy_from_user+0x2f/0xe0 [ 148.403445][ T6807] __sys_bpf+0x23e/0x890 [ 148.407783][ T6807] ? bpf_link_show_fdinfo+0x390/0x390 [ 148.414117][ T6807] ? lock_chain_count+0x20/0x20 [ 148.418969][ T6807] __x64_sys_bpf+0x7c/0x90 [ 148.423385][ T6807] do_syscall_64+0x55/0xa0 [ 148.427970][ T6807] ? clear_bhb_loop+0x40/0x90 [ 148.432803][ T6807] ? clear_bhb_loop+0x40/0x90 [ 148.437700][ T6807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.444138][ T6807] RIP: 0033:0x7f98c7f9acb9 [ 148.448639][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.468626][ T6807] RSP: 002b:00007f98c8e0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.477549][ T6807] RAX: ffffffffffffffda RBX: 00007f98c8215fa0 RCX: 00007f98c7f9acb9 [ 148.485955][ T6807] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 2000000000000000 [ 148.494092][ T6807] RBP: 00007f98c8e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 148.503355][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.511592][ T6807] R13: 00007f98c8216038 R14: 00007f98c8215fa0 R15: 00007fffb24f6d98 [ 148.519688][ T6807] [ 149.837225][ T6840] netlink: 149628 bytes leftover after parsing attributes in process `syz.1.339'. [ 150.176360][ T6846] FAULT_INJECTION: forcing a failure. [ 150.176360][ T6846] name failslab, interval 1, probability 0, space 0, times 1 [ 150.274741][ T6846] CPU: 1 PID: 6846 Comm: syz.1.342 Not tainted syzkaller #0 [ 150.282355][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.292968][ T6846] Call Trace: [ 150.296340][ T6846] [ 150.299362][ T6846] dump_stack_lvl+0x18c/0x250 [ 150.304057][ T6846] ? sctp_sendmsg+0x1575/0x28c0 [ 150.309095][ T6846] ? ___sys_sendmsg+0x2a6/0x360 [ 150.314049][ T6846] ? show_regs_print_info+0x20/0x20 [ 150.319361][ T6846] ? load_image+0x400/0x400 [ 150.324180][ T6846] should_fail_ex+0x39d/0x4d0 [ 150.329071][ T6846] should_failslab+0x9/0x20 [ 150.334053][ T6846] slab_pre_alloc_hook+0x59/0x310 [ 150.339385][ T6846] ? sctp_add_bind_addr+0x8c/0x360 [ 150.344613][ T6846] __kmem_cache_alloc_node+0x53/0x250 [ 150.350322][ T6846] ? sctp_add_bind_addr+0x8c/0x360 [ 150.355657][ T6846] kmalloc_trace+0x2a/0xe0 [ 150.360296][ T6846] sctp_add_bind_addr+0x8c/0x360 [ 150.365371][ T6846] sctp_copy_local_addr_list+0x315/0x4f0 [ 150.371026][ T6846] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 150.376768][ T6846] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 150.383060][ T6846] ? sctp_v6_is_any+0x64/0x70 [ 150.387936][ T6846] ? sctp_copy_one_addr+0x8c/0x350 [ 150.393049][ T6846] sctp_bind_addr_copy+0xb3/0x3c0 [ 150.399014][ T6846] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 150.407039][ T6846] sctp_connect_new_asoc+0x2f9/0x6a0 [ 150.413033][ T6846] ? __sctp_connect+0xd80/0xd80 [ 150.418292][ T6846] ? __local_bh_enable_ip+0x13a/0x1c0 [ 150.424149][ T6846] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 150.429986][ T6846] ? security_sctp_bind_connect+0x89/0xb0 [ 150.435980][ T6846] sctp_sendmsg+0x1575/0x28c0 [ 150.440803][ T6846] ? sctp_getsockopt+0xb60/0xb60 [ 150.446225][ T6846] ? aa_sk_perm+0x83c/0x970 [ 150.450783][ T6846] ? aa_af_perm+0x330/0x330 [ 150.455333][ T6846] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 150.461956][ T6846] ? sock_rps_record_flow+0x19/0x3f0 [ 150.467541][ T6846] ? inet_sendmsg+0xe9/0x2f0 [ 150.472342][ T6846] ? inet_send_prepare+0x260/0x260 [ 150.477721][ T6846] ____sys_sendmsg+0x5ba/0x960 [ 150.482519][ T6846] ? __lock_acquire+0x7d40/0x7d40 [ 150.487588][ T6846] ? __asan_memset+0x22/0x40 [ 150.492434][ T6846] ? __sys_sendmsg_sock+0x30/0x30 [ 150.497565][ T6846] ? __import_iovec+0x5f2/0x850 [ 150.502616][ T6846] ? import_iovec+0x73/0xa0 [ 150.507379][ T6846] ___sys_sendmsg+0x2a6/0x360 [ 150.512273][ T6846] ? __sys_sendmsg+0x2a0/0x2a0 [ 150.517069][ T6846] ? __lock_acquire+0x7d40/0x7d40 [ 150.522202][ T6846] __se_sys_sendmsg+0x1c2/0x2b0 [ 150.527236][ T6846] ? __x64_sys_sendmsg+0x80/0x80 [ 150.532487][ T6846] ? lockdep_hardirqs_on+0x98/0x150 [ 150.537728][ T6846] do_syscall_64+0x55/0xa0 [ 150.542424][ T6846] ? clear_bhb_loop+0x40/0x90 [ 150.547157][ T6846] ? clear_bhb_loop+0x40/0x90 [ 150.552044][ T6846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.558175][ T6846] RIP: 0033:0x7fd114d9acb9 [ 150.562936][ T6846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.583487][ T6846] RSP: 002b:00007fd115be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.592213][ T6846] RAX: ffffffffffffffda RBX: 00007fd115015fa0 RCX: 00007fd114d9acb9 [ 150.600521][ T6846] RDX: 0000000004008045 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 150.609054][ T6846] RBP: 00007fd115be6090 R08: 0000000000000000 R09: 0000000000000000 [ 150.617932][ T6846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.627581][ T6846] R13: 00007fd115016038 R14: 00007fd115015fa0 R15: 00007ffd2f799e28 [ 150.636033][ T6846] [ 150.902457][ T6851] syz.2.344 uses obsolete (PF_INET,SOCK_PACKET) [ 151.379391][ T6855] netlink: 56 bytes leftover after parsing attributes in process `syz.1.346'. [ 151.454659][ T6855] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 151.499623][ T6855] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 151.679301][ T6855] syz.1.346 (6855) used greatest stack depth: 18088 bytes left [ 152.072935][ T6865] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.348'. [ 154.776768][ T6882] netlink: 'syz.2.356': attribute type 29 has an invalid length. [ 154.904544][ T6882] netlink: 'syz.2.356': attribute type 29 has an invalid length. [ 154.913044][ T6883] netlink: 'syz.2.356': attribute type 29 has an invalid length. [ 157.647783][ T6916] netlink: 162840 bytes leftover after parsing attributes in process `syz.3.367'. [ 157.736905][ T6922] hsr0: mtu less than device minimum [ 158.149225][ T6930] C: renamed from team_slave_0 (while UP) [ 158.292660][ T6933] FAULT_INJECTION: forcing a failure. [ 158.292660][ T6933] name failslab, interval 1, probability 0, space 0, times 0 [ 158.318305][ T6930] netlink: 'syz.2.373': attribute type 3 has an invalid length. [ 158.337615][ T6930] netlink: 'syz.2.373': attribute type 1 has an invalid length. [ 158.346544][ T6933] CPU: 1 PID: 6933 Comm: syz.3.376 Not tainted syzkaller #0 [ 158.353876][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.364348][ T6933] Call Trace: [ 158.367633][ T6933] [ 158.370562][ T6933] dump_stack_lvl+0x18c/0x250 [ 158.375243][ T6933] ? show_regs_print_info+0x20/0x20 [ 158.380523][ T6933] ? load_image+0x400/0x400 [ 158.385048][ T6933] ? __might_sleep+0xe0/0xe0 [ 158.389782][ T6933] ? __lock_acquire+0x7d40/0x7d40 [ 158.395093][ T6933] should_fail_ex+0x39d/0x4d0 [ 158.400331][ T6933] should_failslab+0x9/0x20 [ 158.404844][ T6933] slab_pre_alloc_hook+0x59/0x310 [ 158.409966][ T6933] ? __lock_acquire+0x7d40/0x7d40 [ 158.415426][ T6933] kmem_cache_alloc_node+0x60/0x320 [ 158.420964][ T6933] ? __alloc_skb+0x103/0x2c0 [ 158.425930][ T6933] __alloc_skb+0x103/0x2c0 [ 158.430806][ T6933] netlink_sendmsg+0x66a/0xbf0 [ 158.435598][ T6933] ? netlink_getsockopt+0x590/0x590 [ 158.440892][ T6933] ? aa_sock_msg_perm+0x94/0x150 [ 158.446361][ T6933] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 158.451935][ T6933] ? security_socket_sendmsg+0x80/0xa0 [ 158.457806][ T6933] ? netlink_getsockopt+0x590/0x590 [ 158.463016][ T6933] ____sys_sendmsg+0x5ba/0x960 [ 158.467970][ T6933] ? __asan_memset+0x22/0x40 [ 158.472821][ T6933] ? __sys_sendmsg_sock+0x30/0x30 [ 158.478218][ T6933] ? __import_iovec+0x5f2/0x850 [ 158.483731][ T6933] ? import_iovec+0x73/0xa0 [ 158.488797][ T6933] ___sys_sendmsg+0x2a6/0x360 [ 158.494054][ T6933] ? __sys_sendmsg+0x2a0/0x2a0 [ 158.500258][ T6933] ? trace_call_bpf+0xc3/0x6c0 [ 158.505228][ T6933] __se_sys_sendmsg+0x1c2/0x2b0 [ 158.510377][ T6933] ? __x64_sys_sendmsg+0x80/0x80 [ 158.515790][ T6933] ? lockdep_hardirqs_on+0x98/0x150 [ 158.521646][ T6933] do_syscall_64+0x55/0xa0 [ 158.527292][ T6933] ? clear_bhb_loop+0x40/0x90 [ 158.533178][ T6933] ? clear_bhb_loop+0x40/0x90 [ 158.540992][ T6933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.547451][ T6933] RIP: 0033:0x7f7bdb99acb9 [ 158.551894][ T6933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.572789][ T6933] RSP: 002b:00007f7bdc8dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.581471][ T6933] RAX: ffffffffffffffda RBX: 00007f7bdbc15fa0 RCX: 00007f7bdb99acb9 [ 158.589700][ T6933] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 158.598729][ T6933] RBP: 00007f7bdc8dd090 R08: 0000000000000000 R09: 0000000000000000 [ 158.606893][ T6933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.615085][ T6933] R13: 00007f7bdbc16038 R14: 00007f7bdbc15fa0 R15: 00007ffd2e019918 [ 158.623264][ T6933] [ 158.630184][ T6930] netlink: 116 bytes leftover after parsing attributes in process `syz.2.373'. [ 158.665405][ T6939] netlink: 'syz.2.373': attribute type 25 has an invalid length. [ 159.527240][ T6959] netlink: 188 bytes leftover after parsing attributes in process `syz.1.381'. [ 160.203798][ T6970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.388'. [ 160.213123][ T6970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.388'. [ 160.333650][ T6976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.388'. [ 161.691726][ T7003] netlink: set zone limit has 8 unknown bytes [ 161.823905][ T7004] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.399'. [ 161.830352][ T7002] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 161.867957][ T6999] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.399'. [ 161.944070][ T7002] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.400'. [ 162.504571][ T7012] FAULT_INJECTION: forcing a failure. [ 162.504571][ T7012] name failslab, interval 1, probability 0, space 0, times 0 [ 162.617788][ T7012] CPU: 0 PID: 7012 Comm: syz.1.404 Not tainted syzkaller #0 [ 162.625603][ T7012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.636203][ T7012] Call Trace: [ 162.639588][ T7012] [ 162.642716][ T7012] dump_stack_lvl+0x18c/0x250 [ 162.647595][ T7012] ? show_regs_print_info+0x20/0x20 [ 162.652912][ T7012] ? load_image+0x400/0x400 [ 162.657543][ T7012] ? __might_sleep+0xe0/0xe0 [ 162.662256][ T7012] ? __lock_acquire+0x7d40/0x7d40 [ 162.667503][ T7012] should_fail_ex+0x39d/0x4d0 [ 162.672311][ T7012] should_failslab+0x9/0x20 [ 162.676944][ T7012] slab_pre_alloc_hook+0x59/0x310 [ 162.682096][ T7012] ? __lock_acquire+0x7d40/0x7d40 [ 162.687184][ T7012] kmem_cache_alloc+0x5a/0x2d0 [ 162.692075][ T7012] ? security_file_alloc+0x34/0x120 [ 162.697413][ T7012] security_file_alloc+0x34/0x120 [ 162.702574][ T7012] init_file+0x94/0x1f0 [ 162.706871][ T7012] alloc_empty_file+0xb7/0x1d0 [ 162.711680][ T7012] path_openat+0x113/0x3230 [ 162.716334][ T7012] ? __kasan_slab_alloc+0x6c/0x80 [ 162.721384][ T7012] ? do_sys_openat2+0xda/0x1d0 [ 162.726172][ T7012] ? __x64_sys_openat+0x139/0x160 [ 162.731222][ T7012] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.737327][ T7012] ? verify_lock_unused+0x140/0x140 [ 162.742557][ T7012] ? do_filp_open+0x430/0x430 [ 162.747278][ T7012] ? __virt_addr_valid+0x18c/0x540 [ 162.752523][ T7012] do_filp_open+0x1f5/0x430 [ 162.757273][ T7012] ? vfs_tmpfile+0x490/0x490 [ 162.761912][ T7012] ? _raw_spin_unlock+0x28/0x40 [ 162.766879][ T7012] ? alloc_fd+0x58f/0x630 [ 162.771293][ T7012] do_sys_openat2+0x134/0x1d0 [ 162.775998][ T7012] ? do_sys_open+0xe0/0xe0 [ 162.780547][ T7012] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 162.786844][ T7012] ? lock_chain_count+0x20/0x20 [ 162.791742][ T7012] __x64_sys_openat+0x139/0x160 [ 162.796799][ T7012] do_syscall_64+0x55/0xa0 [ 162.801252][ T7012] ? clear_bhb_loop+0x40/0x90 [ 162.806046][ T7012] ? clear_bhb_loop+0x40/0x90 [ 162.811026][ T7012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.817385][ T7012] RIP: 0033:0x7fd114d9acb9 [ 162.822003][ T7012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.842176][ T7012] RSP: 002b:00007fd115be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.850625][ T7012] RAX: ffffffffffffffda RBX: 00007fd115015fa0 RCX: 00007fd114d9acb9 [ 162.859055][ T7012] RDX: 0000000000200002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 162.867045][ T7012] RBP: 00007fd115be6090 R08: 0000000000000000 R09: 0000000000000000 [ 162.875119][ T7012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.883460][ T7012] R13: 00007fd115016038 R14: 00007fd115015fa0 R15: 00007ffd2f799e28 [ 162.891472][ T7012] [ 163.816203][ T7039] netlink: 'syz.3.414': attribute type 21 has an invalid length. [ 164.279557][ T7047] syzkaller0: entered promiscuous mode [ 164.302428][ T7047] syzkaller0: entered allmulticast mode [ 164.484039][ T7046] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 169.607270][ T7086] netlink: 60 bytes leftover after parsing attributes in process `syz.0.429'. [ 169.625960][ T7086] netlink: 60 bytes leftover after parsing attributes in process `syz.0.429'. [ 169.636766][ T7086] netlink: 60 bytes leftover after parsing attributes in process `syz.0.429'. [ 169.659459][ T7086] netlink: 60 bytes leftover after parsing attributes in process `syz.0.429'. [ 169.932349][ T7093] netlink: 'syz.3.432': attribute type 10 has an invalid length. [ 169.963902][ T7093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.432'. [ 169.991637][ T7093] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 173.005002][ T7158] netlink: 'syz.2.453': attribute type 39 has an invalid length. [ 173.513226][ T7167] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.458'. [ 173.718976][ T7173] netlink: 2 bytes leftover after parsing attributes in process `syz.1.460'. [ 173.744302][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.769857][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.813320][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.839218][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.861165][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.893916][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.913845][ T7173] batadv_slave_1: entered promiscuous mode [ 174.154740][ T7183] netlink: 180 bytes leftover after parsing attributes in process `syz.1.464'. [ 176.046154][ T7218] FAULT_INJECTION: forcing a failure. [ 176.046154][ T7218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.124110][ T7218] CPU: 0 PID: 7218 Comm: syz.1.475 Not tainted syzkaller #0 [ 176.131552][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.142155][ T7218] Call Trace: [ 176.145514][ T7218] [ 176.148485][ T7218] dump_stack_lvl+0x18c/0x250 [ 176.153687][ T7218] ? show_regs_print_info+0x20/0x20 [ 176.159116][ T7218] ? load_image+0x400/0x400 [ 176.163925][ T7218] ? __lock_acquire+0x7d40/0x7d40 [ 176.168998][ T7218] should_fail_ex+0x39d/0x4d0 [ 176.173825][ T7218] _copy_from_user+0x2f/0xe0 [ 176.178917][ T7218] __copy_msghdr+0x3bb/0x580 [ 176.184317][ T7218] ___sys_sendmsg+0x214/0x360 [ 176.189554][ T7218] ? get_pid_task+0x20/0x1e0 [ 176.194254][ T7218] ? __sys_sendmsg+0x2a0/0x2a0 [ 176.199326][ T7218] ? __lock_acquire+0x7d40/0x7d40 [ 176.204380][ T7218] __se_sys_sendmsg+0x1c2/0x2b0 [ 176.209274][ T7218] ? __x64_sys_sendmsg+0x80/0x80 [ 176.214233][ T7218] ? lockdep_hardirqs_on+0x98/0x150 [ 176.219464][ T7218] do_syscall_64+0x55/0xa0 [ 176.224158][ T7218] ? clear_bhb_loop+0x40/0x90 [ 176.228843][ T7218] ? clear_bhb_loop+0x40/0x90 [ 176.233602][ T7218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.239532][ T7218] RIP: 0033:0x7fd114d9acb9 [ 176.244375][ T7218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.264952][ T7218] RSP: 002b:00007fd115be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.274296][ T7218] RAX: ffffffffffffffda RBX: 00007fd115015fa0 RCX: 00007fd114d9acb9 [ 176.283260][ T7218] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 176.292370][ T7218] RBP: 00007fd115be6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.300431][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.308664][ T7218] R13: 00007fd115016038 R14: 00007fd115015fa0 R15: 00007ffd2f799e28 [ 176.316665][ T7218] [ 177.004868][ T7238] netlink: 'syz.0.482': attribute type 3 has an invalid length. [ 177.032952][ T7238] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 177.058161][ T7238] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.482'. [ 177.143832][ T7240] netlink: 830 bytes leftover after parsing attributes in process `syz.2.483'. [ 178.044062][ T7244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.484'. [ 178.113634][ T7253] bridge_slave_1: left allmulticast mode [ 178.120454][ T7253] bridge_slave_1: left promiscuous mode [ 178.164596][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.311697][ T7253] bridge_slave_0: left allmulticast mode [ 178.355424][ T7253] bridge_slave_0: left promiscuous mode [ 178.376565][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.997417][ T7255] netlink: 'syz.3.487': attribute type 10 has an invalid length. [ 179.049555][ T7255] team0: Device ipvlan1 failed to register rx_handler [ 180.755508][ T7291] netlink: 6 bytes leftover after parsing attributes in process `syz.0.499'. [ 180.793712][ T7291] openvswitch: netlink: Flow actions attr not present in new flow. [ 180.895446][ T7295] FAULT_INJECTION: forcing a failure. [ 180.895446][ T7295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.947797][ T7295] CPU: 0 PID: 7295 Comm: syz.2.501 Not tainted syzkaller #0 [ 180.956474][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.967257][ T7295] Call Trace: [ 180.970567][ T7295] [ 180.973615][ T7295] dump_stack_lvl+0x18c/0x250 [ 180.978586][ T7295] ? show_regs_print_info+0x20/0x20 [ 180.983908][ T7295] ? load_image+0x400/0x400 [ 180.988463][ T7295] ? __might_fault+0xaa/0x120 [ 180.993791][ T7295] ? __lock_acquire+0x7d40/0x7d40 [ 180.998951][ T7295] should_fail_ex+0x39d/0x4d0 [ 181.003663][ T7295] _copy_from_iter+0x1d9/0x12e0 [ 181.009352][ T7295] ? copyout_mc+0x70/0x70 [ 181.013759][ T7295] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 181.020414][ T7295] ? lock_chain_count+0x20/0x20 [ 181.026167][ T7295] ? _raw_spin_lock_irq+0xbb/0xf0 [ 181.031631][ T7295] ? _raw_spin_lock_irqsave+0x100/0x100 [ 181.037387][ T7295] ? page_copy_sane+0x4e/0x270 [ 181.042349][ T7295] copy_page_from_iter+0x7b/0x100 [ 181.047661][ T7295] pipe_write+0x868/0x1b10 [ 181.052209][ T7295] ? pipe_read+0x1310/0x1310 [ 181.057269][ T7295] ? end_current_label_crit_section+0x149/0x170 [ 181.064041][ T7295] ? common_file_perm+0x198/0x1f0 [ 181.069555][ T7295] vfs_write+0x46c/0x990 [ 181.074103][ T7295] ? file_end_write+0x250/0x250 [ 181.079104][ T7295] ? __fget_files+0x43d/0x4b0 [ 181.083903][ T7295] ? __fdget_pos+0x1d8/0x330 [ 181.089573][ T7295] ? ksys_write+0x75/0x260 [ 181.094813][ T7295] ksys_write+0x150/0x260 [ 181.102065][ T7295] ? __ia32_sys_read+0x90/0x90 [ 181.107590][ T7295] ? lockdep_hardirqs_on+0x98/0x150 [ 181.114091][ T7295] do_syscall_64+0x55/0xa0 [ 181.118976][ T7295] ? clear_bhb_loop+0x40/0x90 [ 181.123915][ T7295] ? clear_bhb_loop+0x40/0x90 [ 181.128799][ T7295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.134883][ T7295] RIP: 0033:0x7f4f0099acb9 [ 181.139314][ T7295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.160248][ T7295] RSP: 002b:00007f4f0193b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.169217][ T7295] RAX: ffffffffffffffda RBX: 00007f4f00c15fa0 RCX: 00007f4f0099acb9 [ 181.177194][ T7295] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000000 [ 181.185389][ T7295] RBP: 00007f4f0193b090 R08: 0000000000000000 R09: 0000000000000000 [ 181.193668][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.201918][ T7295] R13: 00007f4f00c16038 R14: 00007f4f00c15fa0 R15: 00007ffd41404368 [ 181.210108][ T7295] [ 181.239870][ T7299] netlink: 'syz.3.500': attribute type 10 has an invalid length. [ 182.417379][ T7327] netlink: 'syz.3.512': attribute type 21 has an invalid length. [ 183.267368][ T7326] delete_channel: no stack [ 183.281694][ T7341] netlink: 'syz.2.514': attribute type 39 has an invalid length. [ 183.549604][ T7339] netlink: 'syz.1.515': attribute type 1 has an invalid length. [ 183.633776][ T7339] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.515'. [ 184.860005][ T7368] FAULT_INJECTION: forcing a failure. [ 184.860005][ T7368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.004792][ T7368] CPU: 1 PID: 7368 Comm: syz.2.524 Not tainted syzkaller #0 [ 185.013289][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.025014][ T7368] Call Trace: [ 185.028804][ T7368] [ 185.032656][ T7368] dump_stack_lvl+0x18c/0x250 [ 185.038372][ T7368] ? show_regs_print_info+0x20/0x20 [ 185.043754][ T7368] ? load_image+0x400/0x400 [ 185.048396][ T7368] ? __might_fault+0xaa/0x120 [ 185.053240][ T7368] ? __lock_acquire+0x7d40/0x7d40 [ 185.058834][ T7368] should_fail_ex+0x39d/0x4d0 [ 185.063897][ T7368] _copy_from_user+0x2f/0xe0 [ 185.068611][ T7368] __sys_bpf+0x23e/0x890 [ 185.075100][ T7368] ? bpf_link_show_fdinfo+0x390/0x390 [ 185.081935][ T7368] ? lock_chain_count+0x20/0x20 [ 185.087781][ T7368] __x64_sys_bpf+0x7c/0x90 [ 185.093012][ T7368] do_syscall_64+0x55/0xa0 [ 185.098722][ T7368] ? clear_bhb_loop+0x40/0x90 [ 185.104211][ T7368] ? clear_bhb_loop+0x40/0x90 [ 185.109029][ T7368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.115117][ T7368] RIP: 0033:0x7f4f0099acb9 [ 185.119538][ T7368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.141343][ T7368] RSP: 002b:00007f4f0193b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.149947][ T7368] RAX: ffffffffffffffda RBX: 00007f4f00c15fa0 RCX: 00007f4f0099acb9 [ 185.158175][ T7368] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 185.166769][ T7368] RBP: 00007f4f0193b090 R08: 0000000000000000 R09: 0000000000000000 [ 185.174835][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.183244][ T7368] R13: 00007f4f00c16038 R14: 00007f4f00c15fa0 R15: 00007ffd41404368 [ 185.191592][ T7368] [ 186.332788][ T7377] netlink: 'syz.3.528': attribute type 39 has an invalid length. [ 187.583372][ T7388] netlink: 'syz.2.531': attribute type 1 has an invalid length. [ 187.683959][ T7388] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.531'. [ 189.266249][ T7410] netlink: 'syz.2.537': attribute type 3 has an invalid length. [ 189.509932][ T7410] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 189.563871][ T7410] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.537'. [ 190.043916][ T7423] netlink: 132 bytes leftover after parsing attributes in process `syz.2.545'. [ 190.105571][ T5773] Bluetooth: hci3: ISO packet for unknown connection handle 20 [ 191.806297][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 191.806315][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 191.815533][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 191.819871][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 191.893213][ T7450] netlink: 'syz.0.553': attribute type 10 has an invalid length. [ 192.785425][ T7461] netlink: 'syz.1.554': attribute type 3 has an invalid length. [ 192.833625][ T7461] netlink: 'syz.1.554': attribute type 1 has an invalid length. [ 192.842357][ T7461] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.554'. [ 193.398208][ T7464] syzkaller0: entered promiscuous mode [ 193.489470][ T7464] syzkaller0: entered allmulticast mode [ 194.850232][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.874542][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.296912][ T7482] delete_channel: no stack [ 198.502015][ T7480] netlink: 'syz.0.563': attribute type 10 has an invalid length. [ 198.510428][ T7480] batman_adv: batadv0: Adding interface: wlan0 [ 198.517247][ T7480] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.543612][ T7480] batman_adv: batadv0: Interface activated: wlan0 [ 198.561907][ T7483] netlink: 'syz.3.564': attribute type 10 has an invalid length. [ 199.052908][ T7504] veth0_macvtap: left promiscuous mode [ 199.092433][ T7501] netlink: 'syz.3.571': attribute type 3 has an invalid length. [ 199.104036][ T7501] netlink: 'syz.3.571': attribute type 1 has an invalid length. [ 199.123845][ T7501] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.571'. [ 199.349138][ T7510] netlink: 14 bytes leftover after parsing attributes in process `syz.3.573'. [ 199.516526][ T7514] netlink: 'syz.0.572': attribute type 9 has an invalid length. [ 199.533685][ T7514] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.572'. [ 200.994989][ T7533] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.577'. [ 201.274860][ T7541] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 201.333301][ T7541] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 201.420489][ T7541] netlink: 60 bytes leftover after parsing attributes in process `syz.3.583'. [ 201.492014][ T7541] netlink: 60 bytes leftover after parsing attributes in process `syz.3.583'. [ 201.576430][ T7544] netlink: 60 bytes leftover after parsing attributes in process `syz.3.583'. [ 201.625339][ T7543] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.585'. [ 201.644901][ T7549] netlink: 60 bytes leftover after parsing attributes in process `syz.3.583'. [ 202.395474][ T7570] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.593'. [ 202.577582][ T7574] syzkaller0: entered promiscuous mode [ 202.595943][ T7574] syzkaller0: entered allmulticast mode [ 206.984087][ T7613] netlink: 'syz.0.605': attribute type 39 has an invalid length. [ 207.782145][ T7638] FAULT_INJECTION: forcing a failure. [ 207.782145][ T7638] name failslab, interval 1, probability 0, space 0, times 0 [ 207.796718][ T7638] CPU: 0 PID: 7638 Comm: syz.2.616 Not tainted syzkaller #0 [ 207.804153][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.814246][ T7638] Call Trace: [ 207.817628][ T7638] [ 207.820560][ T7638] dump_stack_lvl+0x18c/0x250 [ 207.825330][ T7638] ? sctp_sendmsg+0x1575/0x28c0 [ 207.830274][ T7638] ? ___sys_sendmsg+0x2a6/0x360 [ 207.835120][ T7638] ? show_regs_print_info+0x20/0x20 [ 207.840327][ T7638] ? load_image+0x400/0x400 [ 207.845019][ T7638] should_fail_ex+0x39d/0x4d0 [ 207.849706][ T7638] should_failslab+0x9/0x20 [ 207.854210][ T7638] slab_pre_alloc_hook+0x59/0x310 [ 207.859238][ T7638] ? sctp_add_bind_addr+0x8c/0x360 [ 207.864365][ T7638] __kmem_cache_alloc_node+0x53/0x250 [ 207.869734][ T7638] ? sctp_add_bind_addr+0x8c/0x360 [ 207.874842][ T7638] kmalloc_trace+0x2a/0xe0 [ 207.879384][ T7638] sctp_add_bind_addr+0x8c/0x360 [ 207.884355][ T7638] sctp_copy_local_addr_list+0x315/0x4f0 [ 207.890105][ T7638] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 207.895912][ T7638] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 207.902170][ T7638] ? sctp_v6_is_any+0x64/0x70 [ 207.906848][ T7638] ? sctp_copy_one_addr+0x8c/0x350 [ 207.912146][ T7638] sctp_bind_addr_copy+0xb3/0x3c0 [ 207.917462][ T7638] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 207.923879][ T7638] sctp_connect_new_asoc+0x2f9/0x6a0 [ 207.929518][ T7638] ? __sctp_connect+0xd80/0xd80 [ 207.934533][ T7638] ? __local_bh_enable_ip+0x13a/0x1c0 [ 207.940170][ T7638] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 207.945887][ T7638] ? security_sctp_bind_connect+0x89/0xb0 [ 207.951966][ T7638] sctp_sendmsg+0x1575/0x28c0 [ 207.956765][ T7638] ? sctp_getsockopt+0xb60/0xb60 [ 207.961877][ T7638] ? aa_sk_perm+0x83c/0x970 [ 207.966507][ T7638] ? aa_af_perm+0x330/0x330 [ 207.971088][ T7638] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 207.978423][ T7638] ? sock_rps_record_flow+0x19/0x3f0 [ 207.983758][ T7638] ? inet_sendmsg+0xe9/0x2f0 [ 207.988544][ T7638] ? inet_send_prepare+0x260/0x260 [ 207.993687][ T7638] ____sys_sendmsg+0x5ba/0x960 [ 207.998594][ T7638] ? __lock_acquire+0x7d40/0x7d40 [ 208.003724][ T7638] ? __asan_memset+0x22/0x40 [ 208.008504][ T7638] ? __sys_sendmsg_sock+0x30/0x30 [ 208.013878][ T7638] ? __import_iovec+0x5f2/0x850 [ 208.018751][ T7638] ? import_iovec+0x73/0xa0 [ 208.023473][ T7638] ___sys_sendmsg+0x2a6/0x360 [ 208.028261][ T7638] ? __sys_sendmsg+0x2a0/0x2a0 [ 208.033066][ T7638] ? __lock_acquire+0x7d40/0x7d40 [ 208.038317][ T7638] __se_sys_sendmsg+0x1c2/0x2b0 [ 208.043280][ T7638] ? __x64_sys_sendmsg+0x80/0x80 [ 208.048415][ T7638] ? lockdep_hardirqs_on+0x98/0x150 [ 208.053847][ T7638] do_syscall_64+0x55/0xa0 [ 208.058328][ T7638] ? clear_bhb_loop+0x40/0x90 [ 208.063162][ T7638] ? clear_bhb_loop+0x40/0x90 [ 208.067895][ T7638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.074443][ T7638] RIP: 0033:0x7f4f0099acb9 [ 208.079236][ T7638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.099234][ T7638] RSP: 002b:00007f4f0193b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.109678][ T7638] RAX: ffffffffffffffda RBX: 00007f4f00c15fa0 RCX: 00007f4f0099acb9 [ 208.117741][ T7638] RDX: 0000000004008045 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 208.125827][ T7638] RBP: 00007f4f0193b090 R08: 0000000000000000 R09: 0000000000000000 [ 208.133887][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.141878][ T7638] R13: 00007f4f00c16038 R14: 00007f4f00c15fa0 R15: 00007ffd41404368 [ 208.150209][ T7638] [ 213.214110][ T7690] netlink: 60 bytes leftover after parsing attributes in process `syz.2.635'. [ 213.224439][ T7690] netlink: 60 bytes leftover after parsing attributes in process `syz.2.635'. [ 213.238519][ T7690] netlink: 60 bytes leftover after parsing attributes in process `syz.2.635'. [ 213.777686][ T7711] FAULT_INJECTION: forcing a failure. [ 213.777686][ T7711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.815093][ T7711] CPU: 0 PID: 7711 Comm: syz.0.644 Not tainted syzkaller #0 [ 213.822783][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.832982][ T7711] Call Trace: [ 213.836371][ T7711] [ 213.839332][ T7711] dump_stack_lvl+0x18c/0x250 [ 213.844859][ T7711] ? show_regs_print_info+0x20/0x20 [ 213.850530][ T7711] ? load_image+0x400/0x400 [ 213.855259][ T7711] ? __lock_acquire+0x7d40/0x7d40 [ 213.861550][ T7711] ? snprintf+0xe9/0x140 [ 213.866016][ T7711] should_fail_ex+0x39d/0x4d0 [ 213.871792][ T7711] _copy_to_user+0x2f/0xa0 [ 213.876431][ T7711] simple_read_from_buffer+0xe7/0x150 [ 213.882304][ T7711] proc_fail_nth_read+0x1e8/0x260 [ 213.887901][ T7711] ? proc_fault_inject_write+0x360/0x360 [ 213.894203][ T7711] ? fsnotify_perm+0x271/0x5e0 [ 213.899545][ T7711] ? proc_fault_inject_write+0x360/0x360 [ 213.905329][ T7711] vfs_read+0x28b/0x970 [ 213.909779][ T7711] ? kernel_read+0x1e0/0x1e0 [ 213.914685][ T7711] ? __fget_files+0x28/0x4b0 [ 213.919780][ T7711] ? __fget_files+0x28/0x4b0 [ 213.924625][ T7711] ? __fget_files+0x43d/0x4b0 [ 213.930561][ T7711] ? __fdget_pos+0x2a3/0x330 [ 213.935190][ T7711] ? ksys_read+0x75/0x260 [ 213.939538][ T7711] ksys_read+0x150/0x260 [ 213.943881][ T7711] ? vfs_write+0x990/0x990 [ 213.948393][ T7711] ? lockdep_hardirqs_on+0x98/0x150 [ 213.953646][ T7711] do_syscall_64+0x55/0xa0 [ 213.958159][ T7711] ? clear_bhb_loop+0x40/0x90 [ 213.962838][ T7711] ? clear_bhb_loop+0x40/0x90 [ 213.967627][ T7711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.973713][ T7711] RIP: 0033:0x7f98c7f5b58e [ 213.978228][ T7711] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.998637][ T7711] RSP: 002b:00007f98c8e0afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.007678][ T7711] RAX: ffffffffffffffda RBX: 00007f98c8e0b6c0 RCX: 00007f98c7f5b58e [ 214.016815][ T7711] RDX: 000000000000000f RSI: 00007f98c8e0b0a0 RDI: 0000000000000004 [ 214.024872][ T7711] RBP: 00007f98c8e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 214.033270][ T7711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.041583][ T7711] R13: 00007f98c8216038 R14: 00007f98c8215fa0 R15: 00007fffb24f6d98 [ 214.049844][ T7711] [ 214.253977][ T7724] netlink: 'syz.3.646': attribute type 21 has an invalid length. [ 214.547422][ T7734] syzkaller0: entered promiscuous mode [ 214.560516][ T7734] syzkaller0: entered allmulticast mode [ 214.867542][ T7752] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.659'. [ 215.103093][ T7761] netlink: 'syz.2.664': attribute type 10 has an invalid length. [ 215.126768][ T7761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.664'. [ 215.141176][ T7761] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 215.419877][ T7772] cgroup: fork rejected by pids controller in /syz0 [ 216.478962][ T4394] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.686122][ T4394] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.822945][ T4394] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.927361][ T4394] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.002653][ T4394] batman_adv: batadv0: Interface deactivated: wlan0 [ 218.023099][ T4394] batman_adv: batadv0: Removing interface: wlan0 [ 218.088870][ T4394] hsr_slave_0: left promiscuous mode [ 218.095497][ T4394] hsr_slave_1: left promiscuous mode [ 218.102327][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.110292][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.119220][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.127271][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.137401][ T4394] bridge_slave_1: left allmulticast mode [ 218.143798][ T4394] bridge_slave_1: left promiscuous mode [ 218.150751][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.161888][ T4394] bridge_slave_0: left allmulticast mode [ 218.167948][ T4394] bridge_slave_0: left promiscuous mode [ 218.173996][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.192708][ T4394] veth1_vlan: left promiscuous mode [ 218.199236][ T4394] veth0_vlan: left promiscuous mode [ 218.801579][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 218.865746][ T4394] team0 (unregistering): Port device team_slave_0 removed [ 218.917676][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.972953][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.409012][ T4394] bond0 (unregistering): Released all slaves [ 219.927902][ T4394] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.004951][ T4394] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.080947][ T4394] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.140534][ T4394] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.281542][ T4394] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.354980][ T4394] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.438580][ T4394] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.518437][ T4394] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.580551][ T4394] batman_adv: batadv0: Interface deactivated: wlan0 [ 221.599409][ T4394] batman_adv: batadv0: Removing interface: wlan0 [ 221.828568][ T4394] hsr_slave_0: left promiscuous mode [ 221.835044][ T4394] hsr_slave_1: left promiscuous mode [ 221.841192][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.849003][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.857181][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.866869][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.876623][ T4394] batman_adv: batadv0: Interface deactivated: vlan1 [ 221.883646][ T4394] batman_adv: batadv0: Removing interface: vlan1 [ 221.895177][ T4394] hsr_slave_0: left promiscuous mode [ 221.901293][ T4394] hsr_slave_1: left promiscuous mode [ 221.907381][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.915553][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.924388][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.931840][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.940362][ T4394] batman_adv: batadv0: Interface deactivated: vlan1 [ 221.947181][ T4394] batman_adv: batadv0: Removing interface: vlan1 [ 221.954602][ T4394] bridge_slave_1: left allmulticast mode [ 221.960389][ T4394] bridge_slave_1: left promiscuous mode [ 221.966319][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.976017][ T4394] bridge_slave_0: left allmulticast mode [ 221.981731][ T4394] bridge_slave_0: left promiscuous mode [ 221.988435][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.019419][ T4394] veth1_vlan: left promiscuous mode [ 222.027992][ T4394] veth1_vlan: left promiscuous mode [ 222.627640][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 222.668356][ T4394] team0 (unregistering): Port device team_slave_0 removed [ 222.708370][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.990231][ T4394] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 223.042763][ T4394] bond0 (unregistering): Released all slaves [ 223.488327][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 223.528705][ T4394] team0 (unregistering): Port device C removed [ 223.570268][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.948918][ T4394] bond0 (unregistering): Released all slaves