last executing test programs: 10.591142042s ago: executing program 0 (id=2418): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000940)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34903, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x6}, 0x1005ac, 0x0, 0x0, 0x4, 0x76, 0xffff0000, 0x9, 0x0, 0xffffbffe, 0x0, 0x5}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x28) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 3.338451702s ago: executing program 3 (id=2503): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 3.217279935s ago: executing program 3 (id=2505): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x13, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x9d, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 2.310354477s ago: executing program 3 (id=2515): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) 1.31413204s ago: executing program 3 (id=2524): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) close(r4) close(0x4) 1.074438436s ago: executing program 3 (id=2527): perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1201, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x18, 0x3}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000002) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x40000062) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0x81, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 843.182591ms ago: executing program 2 (id=2530): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 710.205424ms ago: executing program 2 (id=2531): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) 677.201775ms ago: executing program 1 (id=2532): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 612.666496ms ago: executing program 1 (id=2533): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 578.494997ms ago: executing program 0 (id=2420): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x5, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 494.047809ms ago: executing program 2 (id=2534): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) close(r4) close(0x4) 454.08694ms ago: executing program 1 (id=2535): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34903, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x6}, 0x1005ac, 0x0, 0x0, 0x4, 0x76, 0xffff0000, 0x9, 0x0, 0xffffbffe, 0x0, 0x5}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x28) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 408.603961ms ago: executing program 0 (id=2536): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x800}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0x129}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0xfffc) 355.305223ms ago: executing program 2 (id=2537): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001640)="27031c00f40e14000200000000000000f8e0f000000002ee1680ca82973d3bd4b8369542d1a5a4749ea4ee0268dee3462f48e476647eaae2e77d372c1aeef315af37bf5d489188ef71ebba34fec91398548da0448622e52680ee115c9f75994e4105575bbc55b9afc422ac4737e1acdf77302e2113e92a19eacc5ec63ae0968791dbf30526f3f089d88545bb54a60b483d16eb590d84af47cdd693dbc436bbc8209eed5b3ac4d3f6212e26edd4f0d0533188bc8c7f31bf1eb78c06e4df7e2d6885ade0ddb8a0433e97b6249555738dc6c987571eea162c9b48392bcdfaf8538bdb1f72ea00"/243, 0xf3}, {&(0x7f0000001a80)="7cdb015fbb1990080000006a2615837b6487d32d2fb46cbd152314980741e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab81963cf096b03d0369ef39458a06a2bccd5f12f4584d19a07664fe933703f7f6030000003abfd437d1e03de09e6074561fe9216c8b8ba00820c3de3c53bdba305901d7103513c9c2b71ea428a38f832416f3cafeccc552044f00ff3570a9ab9cf26b9af6af17547bf7f4e1762be569a68d54e854db809b155cc566b08f25c90861e29ab717f760ad57bbfd48e867a91d63c1ac78aafe22fc56f053ed1cc6", 0xda}, {&(0x7f0000000800)="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", 0xbce}], 0x3}, 0x4008018) 309.615644ms ago: executing program 0 (id=2538): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 279.680364ms ago: executing program 1 (id=2539): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r1, 0x10) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1, 0x0, 0x0, 0x2000000}, 0x80d1) close(r0) 221.545505ms ago: executing program 0 (id=2540): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 220.132255ms ago: executing program 2 (id=2541): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200)=r3, 0x4) 120.180118ms ago: executing program 2 (id=2542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 119.075748ms ago: executing program 1 (id=2543): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 70.177919ms ago: executing program 0 (id=2544): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x5, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 2.196581ms ago: executing program 3 (id=2545): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x2, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 0s ago: executing program 1 (id=2546): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) close(r4) close(0x4) kernel console output (not intermixed with test programs): ng attributes in process `syz.0.457'. [ 138.547390][ T7271] netlink: 'syz.2.460': attribute type 14 has an invalid length. [ 138.583143][ T7271] netlink: 164 bytes leftover after parsing attributes in process `syz.2.460'. [ 139.183795][ T7280] netlink: 128 bytes leftover after parsing attributes in process `syz.1.467'. [ 139.233714][ T7280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.341578][ T7282] veth1_macvtap: left promiscuous mode [ 139.355827][ T7282] macsec0: entered allmulticast mode [ 139.800321][ T7298] netlink: 'syz.1.473': attribute type 14 has an invalid length. [ 139.818598][ T7298] netlink: 164 bytes leftover after parsing attributes in process `syz.1.473'. [ 139.849605][ T7296] netlink: 'syz.3.471': attribute type 13 has an invalid length. [ 139.861615][ T7296] netlink: 'syz.3.471': attribute type 4 has an invalid length. [ 139.873502][ T7296] netlink: 120 bytes leftover after parsing attributes in process `syz.3.471'. [ 140.433487][ T7322] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 140.452128][ T7322] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.479'. [ 140.467553][ T7322] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 140.482728][ T7322] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.479'. [ 140.528699][ T7325] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.480'. [ 140.550100][ T7325] netlink: 'syz.2.480': attribute type 29 has an invalid length. [ 140.558937][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 140.569378][ T7325] netlink: 'syz.2.480': attribute type 29 has an invalid length. [ 140.577470][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 140.760744][ T7329] netlink: 'syz.2.482': attribute type 14 has an invalid length. [ 140.780091][ T7329] netlink: 164 bytes leftover after parsing attributes in process `syz.2.482'. [ 141.131925][ T7332] netlink: 'syz.0.483': attribute type 2 has an invalid length. [ 141.196982][ T7332] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 141.321614][ T7332] netlink: 9 bytes leftover after parsing attributes in process `syz.0.483'. [ 141.478491][ T7337] sit0: entered allmulticast mode [ 144.690837][ T7382] __nla_validate_parse: 2 callbacks suppressed [ 144.690877][ T7382] netlink: 10 bytes leftover after parsing attributes in process `syz.3.501'. [ 144.953327][ T7398] validate_nla: 1 callbacks suppressed [ 144.953341][ T7398] netlink: 'syz.2.506': attribute type 14 has an invalid length. [ 144.967011][ T7398] netlink: 164 bytes leftover after parsing attributes in process `syz.2.506'. [ 145.077740][ T7395] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.505'. [ 145.182270][ T7402] netlink: 'syz.2.508': attribute type 10 has an invalid length. [ 145.894418][ T7418] sock: sock_timestamping_bind_phc: sock not bind to device [ 145.903892][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 146.092534][ T7424] netlink: 60 bytes leftover after parsing attributes in process `syz.0.515'. [ 146.117821][ T7423] netlink: 60 bytes leftover after parsing attributes in process `syz.0.515'. [ 146.328379][ T7426] netlink: 'syz.0.516': attribute type 11 has an invalid length. [ 146.336458][ T7426] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.516'. [ 146.595188][ T7432] netlink: 120 bytes leftover after parsing attributes in process `syz.2.518'. [ 146.809650][ T7446] netlink: 56 bytes leftover after parsing attributes in process `syz.1.523'. [ 146.972454][ T7453] netlink: 'syz.3.525': attribute type 6 has an invalid length. [ 146.985694][ T7453] netlink: 164 bytes leftover after parsing attributes in process `syz.3.525'. [ 148.372512][ T7494] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 148.385542][ T7478] delete_channel: no stack [ 148.392829][ T7494] netlink: 'syz.2.536': attribute type 3 has an invalid length. [ 148.417874][ T7494] netlink: 'syz.2.536': attribute type 10 has an invalid length. [ 148.653310][ T7509] netlink: 'syz.1.539': attribute type 29 has an invalid length. [ 148.687789][ T7509] netlink: 'syz.1.539': attribute type 29 has an invalid length. [ 148.763316][ T7516] netlink: 'syz.1.539': attribute type 29 has an invalid length. [ 149.299791][ T7525] netlink: 'syz.2.546': attribute type 14 has an invalid length. [ 150.362000][ T7542] netlink: 'syz.3.551': attribute type 40 has an invalid length. [ 150.642513][ T7552] netlink: 'syz.1.555': attribute type 14 has an invalid length. [ 150.673705][ T7552] __nla_validate_parse: 4 callbacks suppressed [ 150.673721][ T7552] netlink: 164 bytes leftover after parsing attributes in process `syz.1.555'. [ 151.390879][ T7569] netlink: 'syz.1.562': attribute type 6 has an invalid length. [ 151.415441][ T7569] netlink: 164 bytes leftover after parsing attributes in process `syz.1.562'. [ 152.661795][ T7583] netlink: 'syz.1.566': attribute type 14 has an invalid length. [ 152.671940][ T7583] netlink: 164 bytes leftover after parsing attributes in process `syz.1.566'. [ 153.482453][ T7607] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.574'. [ 153.530807][ T7610] netlink: 'syz.3.575': attribute type 14 has an invalid length. [ 153.540034][ T7610] netlink: 164 bytes leftover after parsing attributes in process `syz.3.575'. [ 153.741543][ T7618] netlink: 'syz.2.579': attribute type 19 has an invalid length. [ 153.749732][ T7618] netlink: 55 bytes leftover after parsing attributes in process `syz.2.579'. [ 153.764430][ T7618] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.579'. [ 154.115934][ T7625] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.580'. [ 154.442688][ T7629] netlink: 'syz.3.584': attribute type 14 has an invalid length. [ 154.461125][ T7629] netlink: 164 bytes leftover after parsing attributes in process `syz.3.584'. [ 155.264881][ T7662] netlink: 'syz.1.593': attribute type 14 has an invalid length. [ 155.312010][ T7662] netlink: 164 bytes leftover after parsing attributes in process `syz.1.593'. [ 155.469030][ T7666] : renamed from caif0 [ 157.817337][ T7666] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 157.833645][ T7667] netlink: 'syz.3.595': attribute type 10 has an invalid length. [ 158.519729][ T7684] __nla_validate_parse: 1 callbacks suppressed [ 158.519818][ T7684] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.600'. [ 158.547992][ T7684] netlink: zone id is out of range [ 158.573358][ T7684] netlink: zone id is out of range [ 158.583632][ T7684] netlink: zone id is out of range [ 158.601822][ T7684] netlink: zone id is out of range [ 158.613844][ T7684] netlink: zone id is out of range [ 158.622380][ T7684] netlink: zone id is out of range [ 158.633279][ T7684] netlink: zone id is out of range [ 158.645222][ T7684] netlink: zone id is out of range [ 158.650887][ T7684] netlink: zone id is out of range [ 159.140499][ T7695] netlink: 'syz.2.604': attribute type 14 has an invalid length. [ 159.181018][ T7695] netlink: 164 bytes leftover after parsing attributes in process `syz.2.604'. [ 159.561351][ T7714] netlink: 'syz.0.609': attribute type 21 has an invalid length. [ 159.615099][ T7714] netlink: 'syz.0.609': attribute type 4 has an invalid length. [ 160.954459][ T7734] netlink: 'syz.2.616': attribute type 14 has an invalid length. [ 160.982805][ T7734] netlink: 164 bytes leftover after parsing attributes in process `syz.2.616'. [ 163.795720][ T7751] netlink: 'syz.3.620': attribute type 33 has an invalid length. [ 163.805831][ T7751] netlink: 152 bytes leftover after parsing attributes in process `syz.3.620'. [ 163.906547][ T7756] netlink: 830 bytes leftover after parsing attributes in process `syz.2.622'. [ 163.936891][ T7756] netlink: 'syz.2.622': attribute type 10 has an invalid length. [ 163.946086][ T7756] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.622'. [ 164.391861][ T7762] netlink: 'syz.3.624': attribute type 10 has an invalid length. [ 164.588441][ T7762] team0: Device ipvlan1 failed to register rx_handler [ 165.220666][ T7770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.245151][ T7770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.281463][ T7770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.299525][ T7775] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.626'. [ 165.311279][ T7770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.353595][ T7775] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.626'. [ 168.411833][ T7781] delete_channel: no stack [ 168.701253][ T7802] netlink: 14 bytes leftover after parsing attributes in process `syz.1.637'. [ 168.724982][ T7802] net_ratelimit: 332 callbacks suppressed [ 168.725000][ T7802] netlink: del zone limit has 4 unknown bytes [ 169.805224][ T7814] netlink: 14 bytes leftover after parsing attributes in process `syz.3.640'. [ 169.834269][ T7814] hsr_slave_0: left promiscuous mode [ 169.840457][ T7814] hsr_slave_1: left promiscuous mode [ 169.892799][ T7812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.490617][ T7832] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.645'. [ 171.030077][ T7835] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.646'. [ 172.309388][ T7830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.317156][ T7830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.325308][ T7830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.333000][ T7830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.340981][ T7830] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 172.348133][ T7830] batman_adv: batadv0: Removing interface: virt_wifi0 [ 172.382604][ T7832] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.645'. [ 172.479553][ T7841] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.647'. [ 172.490825][ T7841] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 172.887933][ T7861] netlink: 'syz.2.654': attribute type 14 has an invalid length. [ 172.915005][ T7861] netlink: 164 bytes leftover after parsing attributes in process `syz.2.654'. [ 173.220361][ T7866] netlink: 14 bytes leftover after parsing attributes in process `syz.0.655'. [ 173.628417][ T7866] hsr_slave_0: left promiscuous mode [ 173.638462][ T7866] hsr_slave_1: left promiscuous mode [ 173.882540][ T7876] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.657'. [ 175.198064][ T7873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.206203][ T7873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.214042][ T7873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.221944][ T7873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.265484][ T7875] netlink: 'syz.2.659': attribute type 13 has an invalid length. [ 175.274347][ T7875] netlink: 172 bytes leftover after parsing attributes in process `syz.2.659'. [ 175.305870][ T7875] erspan0: refused to change device tx_queue_len [ 175.320524][ T7876] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.657'. [ 175.609087][ T7898] netlink: 8647 bytes leftover after parsing attributes in process `syz.2.668'. [ 176.189579][ T7900] netlink: 14 bytes leftover after parsing attributes in process `syz.1.669'. [ 176.199285][ T7900] hsr_slave_0: left promiscuous mode [ 176.216767][ T7900] hsr_slave_1: left promiscuous mode [ 176.464481][ T7915] netlink: 'syz.2.673': attribute type 21 has an invalid length. [ 176.472402][ T7915] netlink: 'syz.2.673': attribute type 4 has an invalid length. [ 176.483477][ T7915] netlink: 156 bytes leftover after parsing attributes in process `syz.2.673'. [ 178.451637][ T7935] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.681'. [ 178.463035][ T7935] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 178.536892][ T5782] Bluetooth: hci3: unexpected event 0x30 length: 151 > 3 [ 178.815966][ T7949] netlink: 'syz.1.685': attribute type 3 has an invalid length. [ 178.846318][ T7949] netlink: 132 bytes leftover after parsing attributes in process `syz.1.685'. [ 179.086713][ T7959] netlink: 156 bytes leftover after parsing attributes in process `syz.1.688'. [ 179.119321][ T7958] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 179.146416][ T7958] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 179.215432][ T7963] netlink: 'syz.1.688': attribute type 4 has an invalid length. [ 180.019733][ T8004] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.693'. [ 180.030366][ T8004] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 180.271923][ T8014] netlink: 'syz.3.696': attribute type 9 has an invalid length. [ 180.319656][ T8014] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.696'. [ 182.209731][ T8039] netlink: 'syz.3.704': attribute type 21 has an invalid length. [ 182.217622][ T8039] netlink: 128 bytes leftover after parsing attributes in process `syz.3.704'. [ 182.228202][ T8039] netlink: 'syz.3.704': attribute type 4 has an invalid length. [ 182.682895][ T8054] sit0: entered allmulticast mode [ 182.942774][ T8060] raw_sendmsg: syz.3.711 forgot to set AF_INET. Fix it! [ 183.493893][ T8074] sit0: entered promiscuous mode [ 183.816939][ T8085] netlink: 'syz.3.720': attribute type 14 has an invalid length. [ 183.832386][ T8085] netlink: 164 bytes leftover after parsing attributes in process `syz.3.720'. [ 184.351241][ T8101] netlink: 'syz.1.724': attribute type 10 has an invalid length. [ 185.428643][ T8101] team0: Device wg1 is of different type [ 185.684374][ T8116] netlink: 'syz.3.730': attribute type 14 has an invalid length. [ 185.692384][ T8116] netlink: 164 bytes leftover after parsing attributes in process `syz.3.730'. [ 186.002189][ T8133] netlink: 'syz.3.737': attribute type 28 has an invalid length. [ 186.061191][ T8138] netlink: 'syz.0.738': attribute type 10 has an invalid length. [ 186.079116][ T8138] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 186.258525][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 186.264617][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 186.271119][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 186.277410][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 186.316682][ T8147] netlink: 'syz.3.740': attribute type 14 has an invalid length. [ 186.344848][ T8147] netlink: 164 bytes leftover after parsing attributes in process `syz.3.740'. [ 186.379924][ T8134] delete_channel: no stack [ 186.487730][ T8151] netlink: 'syz.1.742': attribute type 4 has an invalid length. [ 186.497135][ T8151] netlink: 152 bytes leftover after parsing attributes in process `syz.1.742'. [ 186.578790][ T8151] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 186.677038][ T8151] netlink: 13183 bytes leftover after parsing attributes in process `syz.1.742'. [ 186.889729][ T8167] netlink: 'syz.0.747': attribute type 10 has an invalid length. [ 186.897654][ T8167] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.747'. [ 187.287023][ T8174] netlink: 'syz.0.751': attribute type 14 has an invalid length. [ 187.314914][ T8174] netlink: 164 bytes leftover after parsing attributes in process `syz.0.751'. [ 187.462546][ T8175] netlink: 'syz.1.750': attribute type 21 has an invalid length. [ 187.485136][ T8175] netlink: 128 bytes leftover after parsing attributes in process `syz.1.750'. [ 187.494785][ T8175] netlink: 'syz.1.750': attribute type 4 has an invalid length. [ 188.311473][ T8205] netlink: 164 bytes leftover after parsing attributes in process `syz.2.762'. [ 189.394726][ T8240] validate_nla: 2 callbacks suppressed [ 189.401909][ T8240] netlink: 'syz.0.773': attribute type 14 has an invalid length. [ 189.413799][ T8240] netlink: 164 bytes leftover after parsing attributes in process `syz.0.773'. [ 189.637412][ T8244] netlink: 'syz.2.775': attribute type 17 has an invalid length. [ 189.646476][ T8244] netlink: 'syz.2.775': attribute type 16 has an invalid length. [ 189.656759][ T8244] netlink: 152 bytes leftover after parsing attributes in process `syz.2.775'. [ 189.809543][ T8253] netlink: 'syz.1.778': attribute type 3 has an invalid length. [ 189.838283][ T1148] tipc: Subscription rejected, illegal request [ 189.849278][ T8253] netlink: 'syz.1.778': attribute type 4 has an invalid length. [ 190.125393][ T8267] netlink: 'syz.3.785': attribute type 14 has an invalid length. [ 190.211941][ T8269] netlink: 'syz.2.784': attribute type 21 has an invalid length. [ 191.596678][ T8291] netlink: 'syz.2.794': attribute type 14 has an invalid length. [ 191.615330][ T8291] __nla_validate_parse: 5 callbacks suppressed [ 191.615344][ T8291] netlink: 164 bytes leftover after parsing attributes in process `syz.2.794'. [ 191.658344][ T8297] netlink: set zone limit has 8 unknown bytes [ 191.693129][ T8293] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 191.701469][ T8293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.796'. [ 191.722844][ T8293] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 191.925885][ T8310] lo: entered promiscuous mode [ 191.997529][ T8308] netlink: 'syz.2.800': attribute type 10 has an invalid length. [ 192.402516][ T8308] macvlan0: entered promiscuous mode [ 192.572341][ T8308] macvlan0: entered allmulticast mode [ 192.583523][ T8308] veth1_vlan: entered allmulticast mode [ 192.604645][ T8308] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 192.887781][ T8334] netlink: 164 bytes leftover after parsing attributes in process `syz.2.807'. [ 192.992211][ T8337] netlink: 830 bytes leftover after parsing attributes in process `syz.1.810'. [ 194.421525][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.428787][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.624312][ T8364] validate_nla: 1 callbacks suppressed [ 194.624328][ T8364] netlink: 'syz.2.820': attribute type 14 has an invalid length. [ 194.645977][ T8364] netlink: 164 bytes leftover after parsing attributes in process `syz.2.820'. [ 194.752692][ T8359] syzkaller0: entered promiscuous mode [ 194.758858][ T8359] syzkaller0: entered allmulticast mode [ 195.113557][ T8381] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.826'. [ 196.587196][ T8387] netlink: 168 bytes leftover after parsing attributes in process `syz.2.827'. [ 196.674175][ T8397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.707892][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.732223][ T8397] bridge0: entered allmulticast mode [ 196.767241][ T8401] netlink: 'syz.2.831': attribute type 14 has an invalid length. [ 196.775588][ T8401] netlink: 164 bytes leftover after parsing attributes in process `syz.2.831'. [ 196.803340][ T8397] bridge_slave_1: left allmulticast mode [ 196.824986][ T8397] bridge_slave_1: left promiscuous mode [ 196.831825][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.232330][ T8417] netlink: 'syz.1.837': attribute type 6 has an invalid length. [ 197.285180][ T8417] netlink: 164 bytes leftover after parsing attributes in process `syz.1.837'. [ 197.615807][ T8436] netlink: 'syz.0.844': attribute type 14 has an invalid length. [ 197.623675][ T8436] netlink: 164 bytes leftover after parsing attributes in process `syz.0.844'. [ 198.227670][ T8465] netlink: 'syz.3.855': attribute type 14 has an invalid length. [ 198.239233][ T8465] netlink: 164 bytes leftover after parsing attributes in process `syz.3.855'. [ 198.475971][ T8471] netlink: 'syz.3.858': attribute type 3 has an invalid length. [ 198.483978][ T8471] netlink: 152 bytes leftover after parsing attributes in process `syz.3.858'. [ 198.512036][ T8478] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.857'. [ 198.544832][ T8469] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.857'. [ 198.585232][ T8473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.857'. [ 198.599010][ T8481] netlink: 'syz.0.860': attribute type 3 has an invalid length. [ 198.616542][ T8481] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.860'. [ 201.596584][ T8495] netlink: 'syz.2.865': attribute type 10 has an invalid length. [ 201.653695][ T8495] bridge_slave_1: left allmulticast mode [ 201.668557][ T8495] bridge_slave_1: left promiscuous mode [ 201.686405][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.747549][ T8495] bridge_slave_1: entered promiscuous mode [ 201.764244][ T8495] bridge_slave_1: entered allmulticast mode [ 201.772004][ T8495] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 201.783010][ T8500] netlink: 'syz.3.866': attribute type 14 has an invalid length. [ 201.792692][ T8500] netlink: 164 bytes leftover after parsing attributes in process `syz.3.866'. [ 202.113607][ T8519] netlink: 'syz.0.871': attribute type 10 has an invalid length. [ 202.213150][ T8519] syz_tun: entered promiscuous mode [ 202.831487][ T8519] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 203.645525][ T8547] netlink: 'syz.3.878': attribute type 14 has an invalid length. [ 203.664883][ T8547] netlink: 164 bytes leftover after parsing attributes in process `syz.3.878'. [ 204.715184][ T8559] netlink: 'syz.1.882': attribute type 10 has an invalid length. [ 204.816288][ T8559] macvlan0: entered promiscuous mode [ 204.982178][ T8559] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 205.393783][ T8578] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 205.405644][ T8587] netlink: 'syz.1.890': attribute type 14 has an invalid length. [ 205.413600][ T8587] netlink: 164 bytes leftover after parsing attributes in process `syz.1.890'. [ 205.422880][ T8578] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.888'. [ 205.669050][ T8589] netlink: 148 bytes leftover after parsing attributes in process `syz.0.894'. [ 205.694510][ T8589] netlink: 'syz.0.894': attribute type 10 has an invalid length. [ 205.715020][ T8589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.894'. [ 205.724095][ T8589] dummy0: entered promiscuous mode [ 205.752491][ T8589] dummy0: entered allmulticast mode [ 205.799713][ T8589] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 205.926352][ T8595] netlink: 'syz.3.896': attribute type 39 has an invalid length. [ 206.707304][ T8617] netlink: 'syz.1.901': attribute type 14 has an invalid length. [ 206.724860][ T8617] netlink: 164 bytes leftover after parsing attributes in process `syz.1.901'. [ 208.227395][ T8655] netlink: 'syz.1.913': attribute type 14 has an invalid length. [ 208.235642][ T8655] netlink: 164 bytes leftover after parsing attributes in process `syz.1.913'. [ 208.401886][ T8642] delete_channel: no stack [ 208.969474][ T8672] syzkaller0: entered promiscuous mode [ 213.773790][ T8729] netlink: 'syz.1.933': attribute type 11 has an invalid length. [ 213.792066][ T8729] netlink: 176 bytes leftover after parsing attributes in process `syz.1.933'. [ 214.334418][ T8736] netlink: 'syz.2.937': attribute type 17 has an invalid length. [ 214.793081][ T8755] sctp: [Deprecated]: syz.1.944 (pid 8755) Use of int in maxseg socket option. [ 214.793081][ T8755] Use struct sctp_assoc_value instead [ 214.813731][ T8757] netlink: 54588 bytes leftover after parsing attributes in process `syz.1.944'. [ 214.851008][ T8755] netlink: 40 bytes leftover after parsing attributes in process `syz.1.944'. [ 215.858590][ T8774] netlink: 'syz.1.949': attribute type 13 has an invalid length. [ 215.882410][ T8774] netlink: 168 bytes leftover after parsing attributes in process `syz.1.949'. [ 220.379944][ T8827] FAULT_INJECTION: forcing a failure. [ 220.379944][ T8827] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 220.424639][ T8828] netlink: 'syz.3.968': attribute type 33 has an invalid length. [ 220.448978][ T8828] netlink: 152 bytes leftover after parsing attributes in process `syz.3.968'. [ 220.468671][ T8828] `: renamed from ip6tnl0 (while UP) [ 220.499212][ T8827] CPU: 0 PID: 8827 Comm: syz.0.967 Not tainted syzkaller #0 [ 220.506578][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.516678][ T8827] Call Trace: [ 220.519991][ T8827] [ 220.522955][ T8827] dump_stack_lvl+0x18c/0x250 [ 220.527689][ T8827] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.533888][ T8827] ? show_regs_print_info+0x20/0x20 [ 220.539126][ T8827] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.545338][ T8827] ? dump_stack+0x9/0x20 [ 220.549649][ T8827] should_fail_ex+0x394/0x4c0 [ 220.554394][ T8827] _copy_from_user+0x2f/0xe0 [ 220.559032][ T8827] __sys_bpf+0x23e/0x890 [ 220.563321][ T8827] ? bpf_link_show_fdinfo+0x390/0x390 [ 220.568775][ T8827] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.575010][ T8827] __x64_sys_bpf+0x7c/0x90 [ 220.579473][ T8827] do_syscall_64+0x55/0xb0 [ 220.583923][ T8827] ? clear_bhb_loop+0x40/0x90 [ 220.588634][ T8827] ? clear_bhb_loop+0x40/0x90 [ 220.593350][ T8827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.599298][ T8827] RIP: 0033:0x7fc01ab9e0d9 [ 220.603755][ T8827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.623400][ T8827] RSP: 002b:00007fc01b9d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.631863][ T8827] RAX: ffffffffffffffda RBX: 00007fc01ae25fa0 RCX: 00007fc01ab9e0d9 [ 220.639868][ T8827] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 220.647872][ T8827] RBP: 00007fc01b9d8090 R08: 0000000000000000 R09: 0000000000000000 [ 220.655876][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.663880][ T8827] R13: 00007fc01ae26038 R14: 00007fc01ae25fa0 R15: 00007ffebb81a078 [ 220.671934][ T8827] [ 220.747259][ T8828] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 220.766206][ T8830] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.969'. [ 221.173835][ T8846] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.975'. [ 221.204079][ T8847] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.975'. [ 223.319766][ T8860] FAULT_INJECTION: forcing a failure. [ 223.319766][ T8860] name failslab, interval 1, probability 0, space 0, times 1 [ 223.354725][ T8860] CPU: 0 PID: 8860 Comm: syz.3.980 Not tainted syzkaller #0 [ 223.362069][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.372149][ T8860] Call Trace: [ 223.375447][ T8860] [ 223.378398][ T8860] dump_stack_lvl+0x18c/0x250 [ 223.383104][ T8860] ? show_regs_print_info+0x20/0x20 [ 223.388326][ T8860] ? load_image+0x420/0x420 [ 223.392861][ T8860] ? __might_sleep+0xe0/0xe0 [ 223.397483][ T8860] ? __lock_acquire+0x7d80/0x7d80 [ 223.402531][ T8860] should_fail_ex+0x394/0x4c0 [ 223.407239][ T8860] should_failslab+0x9/0x20 [ 223.411766][ T8860] slab_pre_alloc_hook+0x59/0x300 [ 223.416818][ T8860] ? tracing_gen_ctx_irq_test+0xbc/0x140 [ 223.422469][ T8860] ? perf_swevent_event+0x1ca/0x570 [ 223.427692][ T8860] ? __get_vm_area_node+0x125/0x370 [ 223.432906][ T8860] __kmem_cache_alloc_node+0x53/0x250 [ 223.438284][ T8860] ? __get_vm_area_node+0x125/0x370 [ 223.443479][ T8860] kmalloc_node_trace+0x26/0xe0 [ 223.448332][ T8860] __get_vm_area_node+0x125/0x370 [ 223.453357][ T8860] __vmalloc_node_range+0x36f/0x1320 [ 223.458637][ T8860] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 223.464181][ T8860] ? mark_lock+0x94/0x320 [ 223.468516][ T8860] ? aa_get_newest_label+0xfd/0x5c0 [ 223.473706][ T8860] ? free_vm_area+0x50/0x50 [ 223.478204][ T8860] ? end_current_label_crit_section+0x170/0x170 [ 223.484432][ T8860] ? perf_tp_event+0x13f5/0x1550 [ 223.489379][ T8860] ? verify_lock_unused+0x140/0x140 [ 223.494570][ T8860] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 223.500106][ T8860] __vmalloc+0x7a/0x90 [ 223.504172][ T8860] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 223.509709][ T8860] bpf_prog_alloc_no_stats+0x46/0x430 [ 223.515079][ T8860] bpf_prog_alloc+0x3d/0x1a0 [ 223.519665][ T8860] bpf_prog_load+0x6b2/0x1610 [ 223.524343][ T8860] ? map_freeze+0x420/0x420 [ 223.528836][ T8860] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.535005][ T8860] ? lockdep_hardirqs_on+0x98/0x150 [ 223.540214][ T8860] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.546365][ T8860] ? __sys_bpf+0x2a8/0x890 [ 223.550771][ T8860] ? __sanitizer_cov_trace_switch+0x65/0xe0 [ 223.556665][ T8860] __sys_bpf+0x5ba/0x890 [ 223.560906][ T8860] ? bpf_link_show_fdinfo+0x390/0x390 [ 223.566284][ T8860] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.572436][ T8860] __x64_sys_bpf+0x7c/0x90 [ 223.576844][ T8860] do_syscall_64+0x55/0xb0 [ 223.581249][ T8860] ? clear_bhb_loop+0x40/0x90 [ 223.585914][ T8860] ? clear_bhb_loop+0x40/0x90 [ 223.590582][ T8860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.596464][ T8860] RIP: 0033:0x7f844719e0d9 [ 223.600869][ T8860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.620464][ T8860] RSP: 002b:00007f84480a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.628871][ T8860] RAX: ffffffffffffffda RBX: 00007f8447425fa0 RCX: 00007f844719e0d9 [ 223.636832][ T8860] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 223.644798][ T8860] RBP: 00007f84480a4090 R08: 0000000000000000 R09: 0000000000000000 [ 223.652761][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.660718][ T8860] R13: 00007f8447426038 R14: 00007f8447425fa0 R15: 00007ffe3472f338 [ 223.668690][ T8860] [ 223.689270][ T8860] syz.3.980: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 223.706846][ T8860] CPU: 0 PID: 8860 Comm: syz.3.980 Not tainted syzkaller #0 [ 223.714154][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.724207][ T8860] Call Trace: [ 223.727482][ T8860] [ 223.730404][ T8860] dump_stack_lvl+0x18c/0x250 [ 223.735078][ T8860] ? show_regs_print_info+0x20/0x20 [ 223.740267][ T8860] ? load_image+0x420/0x420 [ 223.744775][ T8860] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 223.751188][ T8860] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 223.757681][ T8860] warn_alloc+0x246/0x340 [ 223.761999][ T8860] ? __get_vm_area_node+0x125/0x370 [ 223.767215][ T8860] ? zone_watermark_ok_safe+0x230/0x230 [ 223.772748][ T8860] ? rcu_is_watching+0x15/0xb0 [ 223.777509][ T8860] ? __get_vm_area_node+0x356/0x370 [ 223.782707][ T8860] __vmalloc_node_range+0x394/0x1320 [ 223.787984][ T8860] ? mark_lock+0x94/0x320 [ 223.792319][ T8860] ? aa_get_newest_label+0xfd/0x5c0 [ 223.797508][ T8860] ? free_vm_area+0x50/0x50 [ 223.802002][ T8860] ? end_current_label_crit_section+0x170/0x170 [ 223.808236][ T8860] ? perf_tp_event+0x13f5/0x1550 [ 223.813169][ T8860] ? verify_lock_unused+0x140/0x140 [ 223.818360][ T8860] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 223.823895][ T8860] __vmalloc+0x7a/0x90 [ 223.827958][ T8860] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 223.833494][ T8860] bpf_prog_alloc_no_stats+0x46/0x430 [ 223.838861][ T8860] bpf_prog_alloc+0x3d/0x1a0 [ 223.843447][ T8860] bpf_prog_load+0x6b2/0x1610 [ 223.848121][ T8860] ? map_freeze+0x420/0x420 [ 223.852617][ T8860] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.858770][ T8860] ? lockdep_hardirqs_on+0x98/0x150 [ 223.863964][ T8860] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.870112][ T8860] ? __sys_bpf+0x2a8/0x890 [ 223.874518][ T8860] ? __sanitizer_cov_trace_switch+0x65/0xe0 [ 223.880409][ T8860] __sys_bpf+0x5ba/0x890 [ 223.884672][ T8860] ? bpf_link_show_fdinfo+0x390/0x390 [ 223.890044][ T8860] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.896229][ T8860] __x64_sys_bpf+0x7c/0x90 [ 223.900652][ T8860] do_syscall_64+0x55/0xb0 [ 223.905072][ T8860] ? clear_bhb_loop+0x40/0x90 [ 223.909748][ T8860] ? clear_bhb_loop+0x40/0x90 [ 223.914429][ T8860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.920319][ T8860] RIP: 0033:0x7f844719e0d9 [ 223.924726][ T8860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.944329][ T8860] RSP: 002b:00007f84480a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.952736][ T8860] RAX: ffffffffffffffda RBX: 00007f8447425fa0 RCX: 00007f844719e0d9 [ 223.960697][ T8860] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 223.968656][ T8860] RBP: 00007f84480a4090 R08: 0000000000000000 R09: 0000000000000000 [ 223.976614][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.984572][ T8860] R13: 00007f8447426038 R14: 00007f8447425fa0 R15: 00007ffe3472f338 [ 223.992543][ T8860] [ 224.009441][ T8860] Mem-Info: [ 224.012953][ T8860] active_anon:7559 inactive_anon:0 isolated_anon:0 [ 224.012953][ T8860] active_file:17842 inactive_file:40010 isolated_file:0 [ 224.012953][ T8860] unevictable:768 dirty:217 writeback:0 [ 224.012953][ T8860] slab_reclaimable:10187 slab_unreclaimable:94893 [ 224.012953][ T8860] mapped:24255 shmem:1361 pagetables:547 [ 224.012953][ T8860] sec_pagetables:0 bounce:0 [ 224.012953][ T8860] kernel_misc_reclaimable:0 [ 224.012953][ T8860] free:1343401 free_pcp:6764 free_cma:0 [ 224.068566][ T8860] Node 0 active_anon:30236kB inactive_anon:0kB active_file:71368kB inactive_file:159840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96920kB dirty:868kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10424kB pagetables:2188kB sec_pagetables:0kB all_unreclaimable? no [ 224.134281][ T8860] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 224.186520][ T8860] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.224113][ T8864] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.983'. [ 224.245390][ T8864] netlink: 184 bytes leftover after parsing attributes in process `syz.2.983'. [ 224.262218][ T8860] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 224.267109][ T8864] netlink: 'syz.2.983': attribute type 4 has an invalid length. [ 224.278787][ T8860] Node 0 DMA32 free:1464844kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:30300kB inactive_anon:0kB active_file:71368kB inactive_file:159012kB unevictable:1536kB writepending:868kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:6460kB local_pcp:4116kB free_cma:0kB [ 224.284892][ T8864] netlink: 152 bytes leftover after parsing attributes in process `syz.2.983'. [ 224.353333][ T8860] lowmem_reserve[]: 0 0 0 0 0 [ 224.358309][ T8860] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.385383][ T8860] lowmem_reserve[]: 0 0 0 0 0 [ 224.390276][ T8860] Node 1 Normal free:3893140kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21280kB local_pcp:12992kB free_cma:0kB [ 224.420150][ T8860] lowmem_reserve[]: 0 0 0 0 0 [ 224.425092][ T8860] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 224.438052][ T8860] Node 0 DMA32: 261*4kB (UM) 1455*8kB (UM) 460*16kB (UME) 1526*32kB (UME) 353*64kB (UME) 59*128kB (UME) 51*256kB (UME) 46*512kB (UME) 22*1024kB (UME) 10*2048kB (UM) 314*4096kB (M) = 1464780kB [ 224.459718][ T8860] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 224.471967][ T8860] Node 1 Normal: 241*4kB (UME) 62*8kB (UME) 32*16kB (UME) 35*32kB (UME) 18*64kB (UE) 6*128kB (UME) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3893140kB [ 224.489852][ T8860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.499556][ T8860] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.509196][ T8860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.518906][ T8860] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.528542][ T8860] 59216 total pagecache pages [ 224.533356][ T8860] 0 pages in swap cache [ 224.537629][ T8860] Free swap = 124996kB [ 224.542071][ T8860] Total swap = 124996kB [ 224.546397][ T8860] 2097051 pages RAM [ 224.550318][ T8860] 0 pages HighMem/MovableOnly [ 224.555443][ T8860] 416958 pages reserved [ 224.559717][ T8860] 0 pages cma reserved [ 224.778629][ T8864] wlan1: mtu less than device minimum [ 224.802134][ T8864] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 225.188539][ T8887] netlink: 60 bytes leftover after parsing attributes in process `syz.1.986'. [ 225.198013][ T8887] netlink: 60 bytes leftover after parsing attributes in process `syz.1.986'. [ 225.207315][ T8874] netlink: 60 bytes leftover after parsing attributes in process `syz.1.986'. [ 225.252299][ T8879] netlink: 'syz.3.988': attribute type 10 has an invalid length. [ 227.592076][ T8907] netlink: 'syz.1.999': attribute type 21 has an invalid length. [ 227.723454][ T8912] __nla_validate_parse: 3 callbacks suppressed [ 227.723472][ T8912] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.999'. [ 227.750011][ T8912] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.999'. [ 231.913656][ T8952] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1013'. [ 232.337356][ T8962] netlink: 'syz.2.1016': attribute type 3 has an invalid length. [ 232.381780][ T8962] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1016'. [ 232.908855][ T8972] netlink: 'syz.3.1020': attribute type 21 has an invalid length. [ 233.535009][ T9000] netlink: 18319 bytes leftover after parsing attributes in process `syz.3.1029'. [ 233.763478][ T9006] netlink: 'syz.0.1032': attribute type 14 has an invalid length. [ 233.796256][ T9006] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1032'. [ 233.964689][ T9011] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1034'. [ 235.145219][ T9047] netlink: 'syz.3.1044': attribute type 14 has an invalid length. [ 235.153091][ T9047] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1044'. [ 235.944585][ T9080] netlink: 'syz.2.1054': attribute type 14 has an invalid length. [ 235.965156][ T9080] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1054'. [ 235.989022][ T9081] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1055'. [ 236.214694][ T9083] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1056'. [ 236.724456][ T9106] netlink: 'syz.0.1062': attribute type 21 has an invalid length. [ 236.745884][ T9106] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1062'. [ 236.755653][ T9106] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1062'. [ 236.839804][ T9110] netlink: 'syz.1.1066': attribute type 14 has an invalid length. [ 236.849040][ T9110] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1066'. [ 236.925790][ T9112] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 236.934311][ T9112] netlink: 'syz.1.1067': attribute type 3 has an invalid length. [ 237.484257][ T9132] netlink: 'syz.1.1075': attribute type 14 has an invalid length. [ 238.051921][ T9155] netlink: 'syz.1.1083': attribute type 25 has an invalid length. [ 238.061537][ T9155] netlink: 'syz.1.1083': attribute type 29 has an invalid length. [ 238.254192][ T9157] netlink: 'syz.3.1084': attribute type 14 has an invalid length. [ 238.496957][ T9166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.729733][ T9171] netlink: 'syz.3.1090': attribute type 39 has an invalid length. [ 239.183611][ T9187] netlink: 'syz.0.1096': attribute type 14 has an invalid length. [ 239.192637][ T9187] __nla_validate_parse: 4 callbacks suppressed [ 239.192650][ T9187] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1096'. [ 241.062280][ T9210] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1098'. [ 241.083402][ T9210] bridge_slave_1: default FDB implementation only supports local addresses [ 241.311185][ T9220] netlink: 'syz.1.1106': attribute type 14 has an invalid length. [ 241.322817][ T9220] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1106'. [ 241.816006][ T9237] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1114'. [ 242.275810][ T9254] netlink: 'syz.3.1119': attribute type 14 has an invalid length. [ 242.292374][ T9254] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1119'. [ 242.394243][ T9261] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1123'. [ 242.539048][ T9265] netlink: 'syz.0.1125': attribute type 29 has an invalid length. [ 242.547458][ T9265] netlink: 'syz.0.1125': attribute type 29 has an invalid length. [ 242.639323][ T9268] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1126'. [ 243.188124][ T9286] netlink: 'syz.2.1131': attribute type 14 has an invalid length. [ 243.197576][ T9286] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1131'. [ 243.793422][ T9305] netlink: 'syz.3.1139': attribute type 49 has an invalid length. [ 243.812905][ T9305] netlink: 'syz.3.1139': attribute type 13 has an invalid length. [ 243.825447][ T9305] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1139'. [ 243.858101][ T9305] erspan0: refused to change device tx_queue_len [ 243.871983][ T9305] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 243.890252][ T9308] netlink: 'syz.2.1140': attribute type 14 has an invalid length. [ 243.900624][ T9308] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1140'. [ 244.727433][ T9336] netlink: 'syz.1.1149': attribute type 14 has an invalid length. [ 244.745039][ T9336] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1149'. [ 245.504078][ T9363] netlink: 'syz.3.1159': attribute type 14 has an invalid length. [ 245.513134][ T9363] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1159'. [ 246.119778][ T9387] netlink: 'syz.0.1168': attribute type 14 has an invalid length. [ 246.127854][ T9387] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1168'. [ 246.346944][ T9394] syz.0.1170[9394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.347088][ T9394] syz.0.1170[9394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.451073][ T9396] netlink: 'syz.0.1171': attribute type 1 has an invalid length. [ 246.578826][ T5771] cgroup: fork rejected by pids controller in /syz1 [ 246.579728][ T9396] netlink: 'syz.0.1171': attribute type 21 has an invalid length. [ 246.605609][ T9396] netlink: 'syz.0.1171': attribute type 6 has an invalid length. [ 246.613408][ T9396] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1171'. [ 247.222068][ T2972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.318720][ T2972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.389744][ T2972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.122363][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.134900][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.142837][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.159101][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.169744][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.179287][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.442566][ T2972] ip6gretap0 (unregistering): left allmulticast mode [ 248.472655][ T2972] ip6gretap0 (unregistering): left promiscuous mode [ 248.486724][ T2972] Ÿë: port 1(ip6gretap0) entered disabled state [ 249.477942][ T9429] chnl_net:caif_netlink_parms(): no params data found [ 249.750375][ T9429] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.758074][ T9429] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.765939][ T9429] bridge_slave_0: entered allmulticast mode [ 249.773552][ T9429] bridge_slave_0: entered promiscuous mode [ 249.787286][ T9429] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.794643][ T9429] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.802501][ T9429] bridge_slave_1: entered allmulticast mode [ 249.810401][ T9429] bridge_slave_1: entered promiscuous mode [ 250.254137][ T5088] Bluetooth: hci0: command tx timeout [ 250.661426][ T9429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.701430][ T9429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.880968][ T9429] team0: Port device team_slave_0 added [ 250.960777][ T9429] team0: Port device team_slave_1 added [ 251.592140][ T2972] bridge_slave_1: left allmulticast mode [ 251.608165][ T2972] bridge_slave_1: left promiscuous mode [ 251.613999][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.636534][ T2972] bridge_slave_0: left allmulticast mode [ 251.645237][ T2972] bridge_slave_0: left promiscuous mode [ 251.657891][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.716557][ T2972] veth1_macvtap: left promiscuous mode [ 251.731210][ T2972] veth0_macvtap: left promiscuous mode [ 251.745484][ T2972] veth1_vlan: left promiscuous mode [ 251.751271][ T2972] veth0_vlan: left promiscuous mode [ 252.271583][ T2972] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 252.316393][ T5088] Bluetooth: hci0: command tx timeout [ 252.526768][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 252.563452][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 252.602737][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.646184][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.945547][ T2972] bond0 (unregistering): Released all slaves [ 253.029439][ T9429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.037318][ T9429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.063284][ T9429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.132426][ T9429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.144916][ T9429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.194045][ T9429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.373020][ T9429] hsr_slave_0: entered promiscuous mode [ 253.386085][ T9429] hsr_slave_1: entered promiscuous mode [ 254.414864][ T5088] Bluetooth: hci0: command tx timeout [ 255.048602][ T9429] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.122471][ T9429] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.171546][ T9429] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.194379][ T9429] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 255.377953][ T9429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.427359][ T9429] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.446853][ T9602] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1217'. [ 255.474584][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.481833][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.528122][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.535365][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.839693][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.847337][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.039934][ T9429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.186603][ T9429] veth0_vlan: entered promiscuous mode [ 256.228565][ T9429] veth1_vlan: entered promiscuous mode [ 256.291862][ T9429] veth0_macvtap: entered promiscuous mode [ 256.324363][ T9623] netlink: 'syz.3.1222': attribute type 13 has an invalid length. [ 256.332650][ T9623] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1222'. [ 256.376085][ T9623] erspan0: refused to change device tx_queue_len [ 256.394795][ T9429] veth1_macvtap: entered promiscuous mode [ 256.456581][ T9429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.486559][ T9429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.494852][ T5088] Bluetooth: hci0: command tx timeout [ 256.526370][ T9429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.547118][ T9429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.558223][ T9429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.570995][ T9429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.580350][ T9625] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1220'. [ 256.600236][ T9429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.613599][ T9429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.622971][ T9429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.632130][ T9429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.605237][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.616875][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.723712][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.732521][ T9646] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1226'. [ 257.754997][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.033655][ T9656] netlink: 'syz.1.1178': attribute type 14 has an invalid length. [ 258.045155][ T9656] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1178'. [ 260.108974][ T9734] netlink: 'syz.0.1243': attribute type 2 has an invalid length. [ 260.126056][ T9734] netlink: 'syz.0.1243': attribute type 8 has an invalid length. [ 260.134064][ T9734] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1243'. [ 260.439652][ T9756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.836829][ T9773] netlink: 'syz.1.1251': attribute type 27 has an invalid length. [ 260.844699][ T9773] netlink: 'syz.1.1251': attribute type 3 has an invalid length. [ 260.955486][ T9778] netlink: 'syz.0.1253': attribute type 6 has an invalid length. [ 260.996985][ T9778] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1253'. [ 261.030699][ T9786] netlink: 'syz.0.1253': attribute type 10 has an invalid length. [ 261.178697][ T9786] team0: Port device geneve1 added [ 261.193810][ T9785] netlink: 'syz.2.1255': attribute type 6 has an invalid length. [ 261.202550][ T9785] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1255'. [ 261.635289][ T9808] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1260'. [ 261.718420][ T9808] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 261.791152][ T9814] netlink: 'syz.2.1261': attribute type 41 has an invalid length. [ 261.828334][ T9814] netlink: 'syz.2.1261': attribute type 41 has an invalid length. [ 261.978683][ T9818] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1263'. [ 262.001670][ T9818] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1263'. [ 262.025542][ T9818] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1263'. [ 262.043821][ T9818] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1263'. [ 262.107162][ T9818] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1263'. [ 262.567237][ T9834] netlink: 'syz.2.1270': attribute type 25 has an invalid length. [ 262.609209][ T9834] netlink: 'syz.2.1270': attribute type 29 has an invalid length. [ 262.670523][ T9827] netlink: 'syz.1.1266': attribute type 10 has an invalid length. [ 262.701064][ T9827] team0: Device ipvlan1 failed to register rx_handler [ 262.919054][ T9842] : port 1(team0) entered blocking state [ 262.925166][ T9842] : port 1(team0) entered disabled state [ 262.931276][ T9842] team0: entered allmulticast mode [ 262.937388][ T9842] team_slave_1: entered allmulticast mode [ 262.943695][ T9842] geneve1: entered allmulticast mode [ 262.973340][ T9842] team0: entered promiscuous mode [ 262.992156][ T9842] team_slave_1: entered promiscuous mode [ 262.998776][ T9842] geneve1: entered promiscuous mode [ 263.052126][ T9847] netlink: 'syz.1.1274': attribute type 4 has an invalid length. [ 263.064082][ T9847] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1274'. [ 263.104174][ T9850] netlink: 'syz.2.1275': attribute type 21 has an invalid length. [ 264.433257][ T9877] netlink: 'syz.0.1284': attribute type 1 has an invalid length. [ 264.443408][ T9877] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1284'. [ 264.512468][ T9880] netlink: 'syz.1.1285': attribute type 4 has an invalid length. [ 264.932689][ T9899] netlink: 'syz.0.1290': attribute type 10 has an invalid length. [ 264.979265][ T9899] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 265.037404][ T9903] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.081912][ T9903] bridge0: entered allmulticast mode [ 265.151721][ T9904] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.158971][ T9904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.181626][ T9904] bridge0: entered promiscuous mode [ 266.054114][ T9937] Â: renamed from ip6gretap0 (while UP) [ 266.700063][ T9948] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 266.715755][ T9948] syzkaller1: linktype set to 769 [ 266.783352][ T9948] __nla_validate_parse: 3 callbacks suppressed [ 266.783395][ T9948] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1305'. [ 266.822893][ T9950] validate_nla: 1 callbacks suppressed [ 266.822909][ T9950] netlink: 'syz.3.1306': attribute type 12 has an invalid length. [ 266.860864][ T9954] netlink: 'syz.3.1306': attribute type 3 has an invalid length. [ 266.879342][ T9950] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1306'. [ 266.894795][ T9954] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1306'. [ 266.918919][ T9956] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1308'. [ 267.262042][ T9959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1307'. [ 267.396716][ T9959] bridge_slave_0 (unregistering): left allmulticast mode [ 267.411525][ T9959] bridge_slave_0 (unregistering): left promiscuous mode [ 267.429654][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.645477][ T9972] netlink: 'syz.0.1312': attribute type 21 has an invalid length. [ 268.223821][ T9986] syzkaller0: entered promiscuous mode [ 268.236894][ T9986] syzkaller0: entered allmulticast mode [ 268.812921][T10014] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1325'. [ 269.759447][T10037] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1329'. [ 269.895146][T10037] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.947737][T10039] netlink: 'syz.0.1333': attribute type 10 has an invalid length. [ 269.956269][T10039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1333'. [ 269.977111][T10037] bridge_slave_0 (unregistering): left allmulticast mode [ 269.989363][T10037] bridge_slave_0 (unregistering): left promiscuous mode [ 270.016999][T10037] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.078710][T10039] netlink: 'syz.0.1333': attribute type 10 has an invalid length. [ 270.111105][T10039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1333'. [ 270.560320][T10056] netlink: 'syz.3.1338': attribute type 21 has an invalid length. [ 270.569225][T10056] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1338'. [ 271.051200][T10067] netlink: 'syz.0.1344': attribute type 29 has an invalid length. [ 271.062498][T10067] netlink: 'syz.0.1344': attribute type 29 has an invalid length. [ 272.129434][T10103] __nla_validate_parse: 1 callbacks suppressed [ 272.129453][T10103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1353'. [ 272.358803][T10104] sit0: entered allmulticast mode [ 272.383598][T10105] sit0: entered promiscuous mode [ 272.433404][T10107] netlink: 'syz.2.1356': attribute type 27 has an invalid length. [ 272.445366][T10107] netlink: 'syz.2.1356': attribute type 3 has an invalid length. [ 272.863495][ T5088] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 273.244687][T10138] netlink: 'syz.2.1366': attribute type 10 has an invalid length. [ 273.273984][T10138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1366'. [ 273.359307][T10138] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 273.700770][ T5088] Bluetooth: hci3: ISO packet for unknown connection handle 2878 [ 274.023569][T10171] netlink: 'syz.0.1376': attribute type 25 has an invalid length. [ 274.042752][T10171] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1376'. [ 274.182771][T10186] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1380'. [ 274.875335][ T5088] Bluetooth: hci1: command 0x0406 tx timeout [ 275.107727][T10200] netlink: 'syz.2.1385': attribute type 21 has an invalid length. [ 275.134911][T10200] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1385'. [ 275.144062][T10200] netlink: 'syz.2.1385': attribute type 4 has an invalid length. [ 275.181047][T10200] netlink: 'syz.2.1385': attribute type 3 has an invalid length. [ 275.204865][T10200] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1385'. [ 275.440744][T10208] FAULT_INJECTION: forcing a failure. [ 275.440744][T10208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.478007][T10208] CPU: 0 PID: 10208 Comm: syz.2.1388 Not tainted syzkaller #0 [ 275.485522][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.495591][T10208] Call Trace: [ 275.498880][T10208] [ 275.501824][T10208] dump_stack_lvl+0x18c/0x250 [ 275.506518][T10208] ? show_regs_print_info+0x20/0x20 [ 275.511766][T10208] ? load_image+0x420/0x420 [ 275.516294][T10208] ? __might_fault+0xaa/0x120 [ 275.520989][T10208] ? __lock_acquire+0x7d80/0x7d80 [ 275.526039][T10208] should_fail_ex+0x394/0x4c0 [ 275.530751][T10208] _copy_from_user+0x2f/0xe0 [ 275.535367][T10208] ___sys_sendmsg+0x1c7/0x360 [ 275.540058][T10208] ? __sys_sendmsg+0x2b0/0x2b0 [ 275.544853][T10208] __se_sys_sendmsg+0x1d0/0x2c0 [ 275.549694][T10208] ? __x64_sys_sendmsg+0x80/0x80 [ 275.554648][T10208] ? syscall_enter_from_user_mode+0x2e/0x80 [ 275.560550][T10208] do_syscall_64+0x55/0xb0 [ 275.564956][T10208] ? clear_bhb_loop+0x40/0x90 [ 275.569623][T10208] ? clear_bhb_loop+0x40/0x90 [ 275.574293][T10208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.580176][T10208] RIP: 0033:0x7f4e2ff9e0d9 [ 275.584585][T10208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.604183][T10208] RSP: 002b:00007f4e30dde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.612589][T10208] RAX: ffffffffffffffda RBX: 00007f4e30225fa0 RCX: 00007f4e2ff9e0d9 [ 275.620550][T10208] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 275.628513][T10208] RBP: 00007f4e30dde090 R08: 0000000000000000 R09: 0000000000000000 [ 275.636488][T10208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.644446][T10208] R13: 00007f4e30226038 R14: 00007f4e30225fa0 R15: 00007ffeab736608 [ 275.652420][T10208] [ 275.986986][T10220] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1392'. [ 276.005163][T10220] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 276.024904][T10220] netlink: 21820 bytes leftover after parsing attributes in process `syz.2.1392'. [ 276.063170][T10223] netlink: 'syz.0.1393': attribute type 29 has an invalid length. [ 276.083386][T10223] netlink: 'syz.0.1393': attribute type 29 has an invalid length. [ 276.257974][T10230] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.1396'. [ 276.295290][T10233] FAULT_INJECTION: forcing a failure. [ 276.295290][T10233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.315067][T10233] CPU: 1 PID: 10233 Comm: syz.2.1395 Not tainted syzkaller #0 [ 276.322571][T10233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.332644][T10233] Call Trace: [ 276.335946][T10233] [ 276.338892][T10233] dump_stack_lvl+0x18c/0x250 [ 276.343602][T10233] ? show_regs_print_info+0x20/0x20 [ 276.348822][T10233] ? load_image+0x420/0x420 [ 276.353355][T10233] ? __might_fault+0xaa/0x120 [ 276.358054][T10233] ? __lock_acquire+0x7d80/0x7d80 [ 276.363100][T10233] ? __virt_addr_valid+0x10c/0x380 [ 276.368240][T10233] should_fail_ex+0x394/0x4c0 [ 276.372949][T10233] _copy_from_user+0x2f/0xe0 [ 276.377561][T10233] sctp_setsockopt+0x19e/0x11e0 [ 276.382438][T10233] ? sock_common_recvmsg+0x190/0x190 [ 276.387746][T10233] do_sock_setsockopt+0x175/0x1a0 [ 276.392793][T10233] ? __fdget+0x180/0x210 [ 276.397061][T10233] __x64_sys_setsockopt+0x182/0x200 [ 276.402279][T10233] do_syscall_64+0x55/0xb0 [ 276.406714][T10233] ? clear_bhb_loop+0x40/0x90 [ 276.411407][T10233] ? clear_bhb_loop+0x40/0x90 [ 276.416111][T10233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.422022][T10233] RIP: 0033:0x7f4e2ff9e0d9 [ 276.426452][T10233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.446074][T10233] RSP: 002b:00007f4e30dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.454511][T10233] RAX: ffffffffffffffda RBX: 00007f4e30226090 RCX: 00007f4e2ff9e0d9 [ 276.462506][T10233] RDX: 0000000000000079 RSI: 0000000000000084 RDI: 0000000000000005 [ 276.470496][T10233] RBP: 00007f4e30dbd090 R08: 0000000000000008 R09: 0000000000000000 [ 276.478488][T10233] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.486475][T10233] R13: 00007f4e30226128 R14: 00007f4e30226090 R15: 00007ffeab736608 [ 276.494479][T10233] [ 276.746800][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1399'. [ 277.074480][T10250] FAULT_INJECTION: forcing a failure. [ 277.074480][T10250] name failslab, interval 1, probability 0, space 0, times 0 [ 277.104985][T10250] CPU: 0 PID: 10250 Comm: syz.1.1401 Not tainted syzkaller #0 [ 277.112503][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.122577][T10250] Call Trace: [ 277.125875][T10250] [ 277.128822][T10250] dump_stack_lvl+0x18c/0x250 [ 277.133521][T10250] ? show_regs_print_info+0x20/0x20 [ 277.138734][T10250] ? load_image+0x420/0x420 [ 277.143262][T10250] ? __might_sleep+0xe0/0xe0 [ 277.147872][T10250] ? __lock_acquire+0x7d80/0x7d80 [ 277.152923][T10250] should_fail_ex+0x394/0x4c0 [ 277.157655][T10250] should_failslab+0x9/0x20 [ 277.162163][T10250] slab_pre_alloc_hook+0x59/0x300 [ 277.167193][T10250] ? __lock_acquire+0x7d80/0x7d80 [ 277.172216][T10250] kmem_cache_alloc_node+0x5e/0x310 [ 277.177414][T10250] ? netlink_autobind+0x11e/0x300 [ 277.182427][T10250] ? __alloc_skb+0x103/0x2c0 [ 277.187013][T10250] __alloc_skb+0x103/0x2c0 [ 277.191424][T10250] netlink_sendmsg+0x66a/0xbf0 [ 277.196181][T10250] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 277.201633][T10250] ? netlink_getsockopt+0x590/0x590 [ 277.206841][T10250] ? apparmor_socket_sendmsg+0x8e/0x330 [ 277.212378][T10250] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 277.217656][T10250] ? security_socket_sendmsg+0x80/0xa0 [ 277.223107][T10250] ? netlink_getsockopt+0x590/0x590 [ 277.228307][T10250] ____sys_sendmsg+0x61b/0x980 [ 277.233068][T10250] ? __asan_memset+0x22/0x40 [ 277.237657][T10250] ? __sys_sendmsg_sock+0x30/0x30 [ 277.242668][T10250] ? __import_iovec+0x5f2/0x850 [ 277.247518][T10250] ? import_iovec+0x73/0xa0 [ 277.252018][T10250] ___sys_sendmsg+0x2a6/0x360 [ 277.256689][T10250] ? __sys_sendmsg+0x2b0/0x2b0 [ 277.261442][T10250] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 277.267421][T10250] ? lockdep_hardirqs_on+0x98/0x150 [ 277.272621][T10250] ? kasan_check_range+0x85/0x290 [ 277.277642][T10250] __se_sys_sendmsg+0x1d0/0x2c0 [ 277.282481][T10250] ? perf_trace_preemptirq_template+0x269/0x330 [ 277.288716][T10250] ? __x64_sys_sendmsg+0x80/0x80 [ 277.293654][T10250] ? lockdep_hardirqs_on+0x98/0x150 [ 277.298849][T10250] do_syscall_64+0x55/0xb0 [ 277.303253][T10250] ? clear_bhb_loop+0x40/0x90 [ 277.307920][T10250] ? clear_bhb_loop+0x40/0x90 [ 277.312590][T10250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.318486][T10250] RIP: 0033:0x7ff9a2b9e0d9 [ 277.322892][T10250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.342489][T10250] RSP: 002b:00007ff9a39f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.350891][T10250] RAX: ffffffffffffffda RBX: 00007ff9a2e25fa0 RCX: 00007ff9a2b9e0d9 [ 277.358855][T10250] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 277.366817][T10250] RBP: 00007ff9a39f3090 R08: 0000000000000000 R09: 0000000000000000 [ 277.374785][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.382746][T10250] R13: 00007ff9a2e26038 R14: 00007ff9a2e25fa0 R15: 00007fffe8a27688 [ 277.390716][T10250] [ 277.508022][T10256] netlink: 'syz.0.1404': attribute type 29 has an invalid length. [ 277.620022][T10256] netlink: 'syz.0.1404': attribute type 29 has an invalid length. [ 277.942400][T10272] netlink: 'syz.3.1407': attribute type 21 has an invalid length. [ 277.974978][T10272] netlink: 'syz.3.1407': attribute type 13 has an invalid length. [ 277.985691][T10272] __nla_validate_parse: 1 callbacks suppressed [ 277.985705][T10272] netlink: 6188 bytes leftover after parsing attributes in process `syz.3.1407'. [ 278.060397][T10280] netlink: 'syz.2.1410': attribute type 14 has an invalid length. [ 278.081323][T10280] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1410'. [ 278.345190][T10287] FAULT_INJECTION: forcing a failure. [ 278.345190][T10287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.393984][T10287] CPU: 0 PID: 10287 Comm: syz.2.1412 Not tainted syzkaller #0 [ 278.401520][T10287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.411571][T10287] Call Trace: [ 278.414840][T10287] [ 278.417776][T10287] dump_stack_lvl+0x18c/0x250 [ 278.422482][T10287] ? show_regs_print_info+0x20/0x20 [ 278.427702][T10287] ? load_image+0x420/0x420 [ 278.432235][T10287] ? __lock_acquire+0x7d80/0x7d80 [ 278.437303][T10287] ? snprintf+0xe9/0x140 [ 278.441551][T10287] should_fail_ex+0x394/0x4c0 [ 278.446232][T10287] _copy_to_user+0x2f/0xa0 [ 278.450639][T10287] simple_read_from_buffer+0xe7/0x150 [ 278.456004][T10287] proc_fail_nth_read+0x1e8/0x260 [ 278.461027][T10287] ? proc_fault_inject_write+0x360/0x360 [ 278.466661][T10287] ? fsnotify_perm+0x271/0x5e0 [ 278.471417][T10287] ? proc_fault_inject_write+0x360/0x360 [ 278.477044][T10287] vfs_read+0x298/0x990 [ 278.481223][T10287] ? kernel_read+0x1e0/0x1e0 [ 278.485809][T10287] ? __fget_files+0x28/0x460 [ 278.490395][T10287] ? __fget_files+0x3fc/0x460 [ 278.495076][T10287] ? __fdget_pos+0x2a3/0x330 [ 278.499660][T10287] ? ksys_read+0x74/0x260 [ 278.503986][T10287] ksys_read+0x151/0x260 [ 278.508222][T10287] ? vfs_write+0x9a0/0x9a0 [ 278.512634][T10287] ? lockdep_hardirqs_on+0x98/0x150 [ 278.517828][T10287] do_syscall_64+0x55/0xb0 [ 278.522236][T10287] ? clear_bhb_loop+0x40/0x90 [ 278.526905][T10287] ? clear_bhb_loop+0x40/0x90 [ 278.531576][T10287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.537463][T10287] RIP: 0033:0x7f4e2ff5e90e [ 278.541867][T10287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 278.561462][T10287] RSP: 002b:00007f4e30dbcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.569866][T10287] RAX: ffffffffffffffda RBX: 00007f4e30dbd6c0 RCX: 00007f4e2ff5e90e [ 278.577828][T10287] RDX: 000000000000000f RSI: 00007f4e30dbd0a0 RDI: 0000000000000007 [ 278.585809][T10287] RBP: 00007f4e30dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 278.593771][T10287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.601751][T10287] R13: 00007f4e30226128 R14: 00007f4e30226090 R15: 00007ffeab736608 [ 278.609732][T10287] [ 278.935516][T10292] netlink: 'syz.2.1414': attribute type 10 has an invalid length. [ 278.955292][T10292] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1414'. [ 278.965752][T10292] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 279.367067][T10314] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1418'. [ 279.571000][T10316] netlink: 'syz.2.1420': attribute type 14 has an invalid length. [ 279.586809][T10316] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1420'. [ 279.839741][T10321] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 279.848443][T10321] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 280.584299][T10349] netlink: 'syz.3.1428': attribute type 58 has an invalid length. [ 280.595025][T10349] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1428'. [ 280.630845][T10352] netlink: 'syz.0.1429': attribute type 14 has an invalid length. [ 280.643510][T10352] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1429'. [ 280.943727][T10377] netlink: 'syz.0.1437': attribute type 12 has an invalid length. [ 280.964230][T10377] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1437'. [ 281.297293][T10391] team0: Port device geneve1 added [ 281.354172][T10400] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1443'. [ 281.491460][T10403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.496527][T10405] FAULT_INJECTION: forcing a failure. [ 281.496527][T10405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.498717][T10403] IPv6: NLM_F_CREATE should be set when creating new route [ 281.498800][T10403] IPv6: NLM_F_CREATE should be set when creating new route [ 281.498825][T10403] IPv6: NLM_F_CREATE should be set when creating new route [ 281.508958][T10403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.521546][T10405] CPU: 0 PID: 10405 Comm: syz.1.1445 Not tainted syzkaller #0 [ 281.550104][T10405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.560153][T10405] Call Trace: [ 281.563422][T10405] [ 281.566344][T10405] dump_stack_lvl+0x18c/0x250 [ 281.571030][T10405] ? show_regs_print_info+0x20/0x20 [ 281.576218][T10405] ? load_image+0x420/0x420 [ 281.580718][T10405] ? __might_fault+0xaa/0x120 [ 281.585392][T10405] ? __lock_acquire+0x7d80/0x7d80 [ 281.590411][T10405] should_fail_ex+0x394/0x4c0 [ 281.595090][T10405] _copy_from_iter+0x1cd/0x1290 [ 281.599939][T10405] ? rcu_is_watching+0x15/0xb0 [ 281.604698][T10405] ? copyout_mc+0x70/0x70 [ 281.609038][T10405] ? __virt_addr_valid+0x10c/0x380 [ 281.614143][T10405] ? __virt_addr_valid+0x10c/0x380 [ 281.619249][T10405] ? __virt_addr_valid+0x10c/0x380 [ 281.624354][T10405] ? __check_object_size+0x4fc/0xa40 [ 281.629656][T10405] netlink_sendmsg+0x76b/0xbf0 [ 281.634418][T10405] ? netlink_getsockopt+0x590/0x590 [ 281.639607][T10405] ? apparmor_socket_sendmsg+0x8e/0x330 [ 281.645142][T10405] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 281.650423][T10405] ? security_socket_sendmsg+0x80/0xa0 [ 281.655872][T10405] ? netlink_getsockopt+0x590/0x590 [ 281.661060][T10405] ____sys_sendmsg+0x61b/0x980 [ 281.665816][T10405] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.671967][T10405] ? __asan_memset+0x22/0x40 [ 281.676551][T10405] ? __sys_sendmsg_sock+0x30/0x30 [ 281.681566][T10405] ? __import_iovec+0x5f2/0x850 [ 281.686418][T10405] ? import_iovec+0x73/0xa0 [ 281.690915][T10405] ___sys_sendmsg+0x2a6/0x360 [ 281.695588][T10405] ? __sys_sendmsg+0x2b0/0x2b0 [ 281.700379][T10405] __se_sys_sendmsg+0x1d0/0x2c0 [ 281.705220][T10405] ? __x64_sys_sendmsg+0x80/0x80 [ 281.710155][T10405] ? syscall_enter_from_user_mode+0x2e/0x80 [ 281.716045][T10405] do_syscall_64+0x55/0xb0 [ 281.720453][T10405] ? clear_bhb_loop+0x40/0x90 [ 281.725141][T10405] ? clear_bhb_loop+0x40/0x90 [ 281.729808][T10405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.735690][T10405] RIP: 0033:0x7ff9a2b9e0d9 [ 281.740095][T10405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.759691][T10405] RSP: 002b:00007ff9a39f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.768096][T10405] RAX: ffffffffffffffda RBX: 00007ff9a2e25fa0 RCX: 00007ff9a2b9e0d9 [ 281.776057][T10405] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 281.784016][T10405] RBP: 00007ff9a39f3090 R08: 0000000000000000 R09: 0000000000000000 [ 281.791977][T10405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.799936][T10405] R13: 00007ff9a2e26038 R14: 00007ff9a2e25fa0 R15: 00007fffe8a27688 [ 281.807908][T10405] [ 282.047320][T10414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1447'. [ 282.531046][T10430] validate_nla: 6 callbacks suppressed [ 282.531062][T10430] netlink: 'syz.0.1452': attribute type 14 has an invalid length. [ 283.241170][T10459] netlink: 'syz.1.1462': attribute type 14 has an invalid length. [ 283.260475][T10459] __nla_validate_parse: 2 callbacks suppressed [ 283.260488][T10459] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1462'. [ 283.305462][T10452] netlink: 'syz.2.1459': attribute type 2 has an invalid length. [ 283.324883][T10463] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.101503][T10484] netlink: 'syz.0.1469': attribute type 33 has an invalid length. [ 284.155170][T10484] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1469'. [ 284.214918][T10484] `: renamed from ip6tnl0 (while UP) [ 284.399663][T10484] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 284.428988][T10493] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1470'. [ 284.449998][T10493] tc_dump_action: action bad kind [ 285.102171][T10506] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1475'. [ 285.115234][T10504] netlink: 'syz.1.1474': attribute type 14 has an invalid length. [ 285.134921][T10504] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1474'. [ 285.370680][T10516] netlink: 'syz.0.1478': attribute type 14 has an invalid length. [ 285.381363][T10516] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1478'. [ 285.393566][T10517] netlink: 'syz.0.1478': attribute type 14 has an invalid length. [ 285.425818][T10517] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1478'. [ 285.481619][ T5088] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12 [ 285.491508][T10523] netlink: 'syz.3.1480': attribute type 2 has an invalid length. [ 285.516328][T10523] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 285.558031][T10523] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1480'. [ 285.968772][T10538] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1482'. [ 286.042613][T10539] netlink: 'syz.1.1484': attribute type 14 has an invalid length. [ 286.101712][T10539] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1484'. [ 287.514953][ T5088] Bluetooth: hci2: command 0x0406 tx timeout [ 289.138941][T10557] netlink: 'syz.3.1491': attribute type 10 has an invalid length. [ 289.732939][T10564] netlink: 'syz.2.1494': attribute type 14 has an invalid length. [ 289.743534][T10564] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1494'. [ 290.124954][T10570] netlink: 'syz.3.1497': attribute type 33 has an invalid length. [ 290.133309][T10570] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1497'. [ 290.154143][T10570] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 291.152939][T10585] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1501'. [ 293.386907][T10590] netlink: 'syz.0.1503': attribute type 14 has an invalid length. [ 293.396722][T10590] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1503'. [ 294.076266][T10617] syz.3.1511: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 294.165843][T10617] CPU: 0 PID: 10617 Comm: syz.3.1511 Not tainted syzkaller #0 [ 294.173366][T10617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.183444][T10617] Call Trace: [ 294.186743][T10617] [ 294.189686][T10617] dump_stack_lvl+0x18c/0x250 [ 294.194391][T10617] ? show_regs_print_info+0x20/0x20 [ 294.199616][T10617] ? load_image+0x420/0x420 [ 294.204154][T10617] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 294.210602][T10617] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 294.217134][T10617] warn_alloc+0x246/0x340 [ 294.221491][T10617] ? stack_trace_save+0xaa/0x100 [ 294.226456][T10617] ? zone_watermark_ok_safe+0x230/0x230 [ 294.232036][T10617] ? kasan_set_track+0x5f/0x70 [ 294.236824][T10617] ? kasan_set_track+0x4e/0x70 [ 294.241610][T10617] ? __kasan_kmalloc+0x8f/0xa0 [ 294.246400][T10617] ? xsk_init_queue+0xad/0x100 [ 294.251188][T10617] ? xsk_setsockopt+0x4c9/0x750 [ 294.256064][T10617] ? do_sock_setsockopt+0x175/0x1a0 [ 294.261279][T10617] ? __x64_sys_setsockopt+0x182/0x200 [ 294.266675][T10617] __vmalloc_node_range+0x129/0x1320 [ 294.272019][T10617] ? free_vm_area+0x50/0x50 [ 294.276562][T10617] vmalloc_user+0x74/0x80 [ 294.280923][T10617] ? xskq_create+0xbf/0x170 [ 294.285443][T10617] xskq_create+0xbf/0x170 [ 294.289796][T10617] xsk_init_queue+0xad/0x100 [ 294.294419][T10617] xsk_setsockopt+0x4c9/0x750 [ 294.299124][T10617] ? xsk_poll+0x670/0x670 [ 294.303487][T10617] ? __fget_files+0x28/0x460 [ 294.308105][T10617] ? aa_sock_opt_perm+0x74/0x100 [ 294.313067][T10617] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 294.318640][T10617] ? security_socket_setsockopt+0x7e/0xa0 [ 294.324378][T10617] ? xsk_poll+0x670/0x670 [ 294.328740][T10617] do_sock_setsockopt+0x175/0x1a0 [ 294.333791][T10617] ? __fdget+0x180/0x210 [ 294.338068][T10617] __x64_sys_setsockopt+0x182/0x200 [ 294.343299][T10617] do_syscall_64+0x55/0xb0 [ 294.347736][T10617] ? clear_bhb_loop+0x40/0x90 [ 294.352442][T10617] ? clear_bhb_loop+0x40/0x90 [ 294.357142][T10617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.363061][T10617] RIP: 0033:0x7f844719e0d9 [ 294.367498][T10617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.387128][T10617] RSP: 002b:00007f8448083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 294.395578][T10617] RAX: ffffffffffffffda RBX: 00007f8447426090 RCX: 00007f844719e0d9 [ 294.403582][T10617] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d [ 294.411587][T10617] RBP: 00007f8447235024 R08: 0000000000000004 R09: 0000000000000000 [ 294.419586][T10617] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 294.427583][T10617] R13: 00007f8447426128 R14: 00007f8447426090 R15: 00007ffe3472f338 [ 294.435603][T10617] [ 294.642677][T10617] Mem-Info: [ 294.650781][T10617] active_anon:9813 inactive_anon:0 isolated_anon:0 [ 294.650781][T10617] active_file:17998 inactive_file:40040 isolated_file:0 [ 294.650781][T10617] unevictable:768 dirty:343 writeback:0 [ 294.650781][T10617] slab_reclaimable:10665 slab_unreclaimable:94353 [ 294.650781][T10617] mapped:24544 shmem:3402 pagetables:551 [ 294.650781][T10617] sec_pagetables:0 bounce:0 [ 294.650781][T10617] kernel_misc_reclaimable:0 [ 294.650781][T10617] free:1335388 free_pcp:13586 free_cma:0 [ 294.765008][T10617] Node 0 active_anon:35852kB inactive_anon:0kB active_file:71992kB inactive_file:159960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98176kB dirty:1372kB writeback:0kB shmem:8672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10708kB pagetables:2204kB sec_pagetables:0kB all_unreclaimable? no [ 294.835155][T10617] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 294.882385][T10617] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 294.913225][T10617] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 294.919450][T10617] Node 0 DMA32 free:1432804kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:31116kB inactive_anon:0kB active_file:71992kB inactive_file:159132kB unevictable:1536kB writepending:1372kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:40308kB local_pcp:20648kB free_cma:0kB [ 294.962280][T10617] lowmem_reserve[]: 0 0 0 0 0 [ 294.970553][T10617] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.007182][T10617] lowmem_reserve[]: 0 0 0 0 0 [ 295.012011][T10617] Node 1 Normal free:3893140kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21280kB local_pcp:12992kB free_cma:0kB [ 295.046919][T10617] lowmem_reserve[]: 0 0 0 0 0 [ 295.051732][T10617] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 295.068429][T10617] Node 0 DMA32: 260*4kB (UM) 533*8kB (UME) 275*16kB (UME) 971*32kB (UME) 583*64kB (UM) 162*128kB (UM) 28*256kB (UM) 16*512kB (UME) 17*1024kB (UM) 7*2048kB (UM) 314*4096kB (UM) = 1432072kB [ 295.090747][T10617] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 295.103384][T10617] Node 1 Normal: 241*4kB (UME) 62*8kB (UME) 32*16kB (UME) 35*32kB (UME) 18*64kB (UE) 6*128kB (UME) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3893140kB [ 295.129651][T10617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.141386][T10617] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.152808][T10617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.164732][T10617] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.177779][T10617] 59399 total pagecache pages [ 295.182485][T10617] 0 pages in swap cache [ 295.188941][T10617] Free swap = 124996kB [ 295.193128][T10617] Total swap = 124996kB [ 295.199659][T10617] 2097051 pages RAM [ 295.203493][T10617] 0 pages HighMem/MovableOnly [ 295.208286][T10617] 416958 pages reserved [ 295.214670][T10617] 0 pages cma reserved [ 297.114417][T10628] netlink: 'syz.3.1514': attribute type 14 has an invalid length. [ 297.122932][T10628] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1514'. [ 297.587748][T10652] netlink: 'syz.3.1524': attribute type 14 has an invalid length. [ 297.604127][T10652] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1524'. [ 297.785373][T10662] netlink: 'syz.3.1528': attribute type 10 has an invalid length. [ 297.810512][T10662] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1528'. [ 297.911958][T10666] netlink: 'syz.1.1529': attribute type 3 has an invalid length. [ 297.929906][T10666] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1529'. [ 300.803861][T10676] netlink: 'syz.3.1531': attribute type 21 has an invalid length. [ 300.815356][T10676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1531'. [ 300.827304][T10676] netlink: 'syz.3.1531': attribute type 1 has an invalid length. [ 300.989171][T10688] netlink: 'syz.2.1533': attribute type 10 has an invalid length. [ 301.072762][T10685] netlink: 'syz.2.1533': attribute type 10 has an invalid length. [ 301.081347][T10694] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1536'. [ 301.212966][T10697] FAULT_INJECTION: forcing a failure. [ 301.212966][T10697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.242776][T10697] CPU: 0 PID: 10697 Comm: syz.3.1537 Not tainted syzkaller #0 [ 301.250284][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.260355][T10697] Call Trace: [ 301.263644][T10697] [ 301.266587][T10697] dump_stack_lvl+0x18c/0x250 [ 301.271290][T10697] ? show_regs_print_info+0x20/0x20 [ 301.276518][T10697] ? load_image+0x420/0x420 [ 301.281051][T10697] ? __lock_acquire+0x7d80/0x7d80 [ 301.286101][T10697] ? snprintf+0xe9/0x140 [ 301.290365][T10697] should_fail_ex+0x394/0x4c0 [ 301.295062][T10697] _copy_to_user+0x2f/0xa0 [ 301.299498][T10697] simple_read_from_buffer+0xe7/0x150 [ 301.304885][T10697] proc_fail_nth_read+0x1e8/0x260 [ 301.309926][T10697] ? proc_fault_inject_write+0x360/0x360 [ 301.315581][T10697] ? fsnotify_perm+0x271/0x5e0 [ 301.320360][T10697] ? proc_fault_inject_write+0x360/0x360 [ 301.326006][T10697] vfs_read+0x298/0x990 [ 301.330178][T10697] ? kernel_read+0x1e0/0x1e0 [ 301.334779][T10697] ? __fget_files+0x28/0x460 [ 301.339378][T10697] ? __fget_files+0x3fc/0x460 [ 301.344069][T10697] ? __fdget_pos+0x2a3/0x330 [ 301.348666][T10697] ? ksys_read+0x74/0x260 [ 301.353007][T10697] ksys_read+0x151/0x260 [ 301.357260][T10697] ? vfs_write+0x9a0/0x9a0 [ 301.361691][T10697] ? lockdep_hardirqs_on+0x98/0x150 [ 301.366900][T10697] do_syscall_64+0x55/0xb0 [ 301.371316][T10697] ? clear_bhb_loop+0x40/0x90 [ 301.375997][T10697] ? clear_bhb_loop+0x40/0x90 [ 301.380683][T10697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.386606][T10697] RIP: 0033:0x7f844715e90e [ 301.391031][T10697] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 301.410641][T10697] RSP: 002b:00007f84480a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.419060][T10697] RAX: ffffffffffffffda RBX: 00007f84480a46c0 RCX: 00007f844715e90e [ 301.427036][T10697] RDX: 000000000000000f RSI: 00007f84480a40a0 RDI: 0000000000000006 [ 301.435009][T10697] RBP: 00007f84480a4090 R08: 0000000000000000 R09: 0000000000000000 [ 301.442983][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.450959][T10697] R13: 00007f8447426038 R14: 00007f8447425fa0 R15: 00007ffe3472f338 [ 301.459034][T10697] [ 301.479006][T10702] sctp: [Deprecated]: syz.1.1539 (pid 10702) Use of int in maxseg socket option. [ 301.479006][T10702] Use struct sctp_assoc_value instead [ 301.588860][T10705] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1540'. [ 301.730425][T10711] ip6gre0: mtu less than device minimum [ 304.921570][T10727] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1548'. [ 305.194036][T10737] netlink: 'syz.2.1550': attribute type 29 has an invalid length. [ 305.224595][T10737] netlink: 'syz.2.1550': attribute type 29 has an invalid length. [ 305.431412][T10746] netlink: 'syz.0.1554': attribute type 10 has an invalid length. [ 306.429694][T10759] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1558'. [ 306.442565][T10759] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.1558'. [ 306.507686][T10765] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1559'. [ 306.659062][T10773] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1562'. [ 307.177899][T10801] netlink: 'syz.1.1567': attribute type 10 has an invalid length. [ 307.347794][T10799] netlink: 'syz.0.1568': attribute type 6 has an invalid length. [ 307.363843][T10799] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1568'. [ 307.378666][T10800] netlink: 'syz.0.1568': attribute type 6 has an invalid length. [ 307.387546][T10800] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1568'. [ 307.695018][T10808] netlink: 'syz.0.1571': attribute type 29 has an invalid length. [ 307.710640][T10808] netlink: 'syz.0.1571': attribute type 29 has an invalid length. [ 307.742600][T10808] netlink: 'syz.0.1571': attribute type 29 has an invalid length. [ 307.759852][T10808] netlink: 'syz.0.1571': attribute type 29 has an invalid length. [ 307.970785][T10824] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1576'. [ 308.663533][T10854] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1583'. [ 308.673592][T10854] tc_dump_action: action bad kind [ 308.825657][T10859] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.1586'. [ 309.838471][T10892] veth0_vlan: entered allmulticast mode [ 310.376144][T10910] validate_nla: 8 callbacks suppressed [ 310.376160][T10910] netlink: 'syz.3.1605': attribute type 30 has an invalid length. [ 310.774639][T10917] __nla_validate_parse: 5 callbacks suppressed [ 310.774657][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'. [ 310.794613][T10917] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1607'. [ 313.008334][T10947] netlink: 'syz.3.1620': attribute type 11 has an invalid length. [ 313.087316][T10947] netlink: 'syz.3.1620': attribute type 2 has an invalid length. [ 313.146055][T10947] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.1620'. [ 314.431685][T10980] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1628'. [ 314.466975][T10979] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1628'. [ 315.050553][T10998] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 315.106493][T11003] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1644'. [ 315.147190][T10998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1634'. [ 315.168352][T11004] netlink: 'syz.0.1636': attribute type 10 has an invalid length. [ 315.196990][T11004] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1636'. [ 315.269170][T11004] batman_adv: batadv0: Adding interface: virt_wifi0 [ 315.291609][T11004] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.354487][T11004] batman_adv: batadv0: Interface activated: virt_wifi0 [ 315.984285][T11020] netlink: 'syz.1.1641': attribute type 5 has an invalid length. [ 315.993659][T11020] netlink: 'syz.1.1641': attribute type 1 has an invalid length. [ 316.011622][T11020] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.1641'. [ 316.284205][T11031] netlink: 'syz.1.1646': attribute type 14 has an invalid length. [ 316.302585][T11031] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1646'. [ 316.630571][T11050] netlink: 'syz.2.1653': attribute type 1 has an invalid length. [ 316.671202][T11050] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1653'. [ 317.052070][T11059] netlink: 'syz.3.1655': attribute type 10 has an invalid length. [ 317.267286][T11059] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 317.279958][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.284513][T11059] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 317.292102][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.476892][T11059] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 317.531014][T11073] netlink: 'syz.0.1659': attribute type 14 has an invalid length. [ 317.548376][T11073] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1659'. [ 317.844623][T11079] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1663'. [ 317.994570][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1664'. [ 318.020805][T11086] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1664'. [ 318.148742][T11086] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 318.205465][T11086] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 318.564870][T11108] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1669'. [ 318.613014][T11111] netlink: 'syz.2.1670': attribute type 14 has an invalid length. [ 318.627107][T11111] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1670'. [ 318.845488][T11120] netlink: 'syz.0.1674': attribute type 13 has an invalid length. [ 318.868320][T11120] netlink: 'syz.0.1674': attribute type 58 has an invalid length. [ 318.887099][T11120] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1674'. [ 319.056101][T11131] netlink: 'syz.3.1672': attribute type 10 has an invalid length. [ 319.228815][T11131] team0: Port device dummy0 added [ 319.317366][T11133] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 321.812293][T11169] IPv6: pim6reg1: Disabled Multicast RS [ 323.504700][T11187] validate_nla: 2 callbacks suppressed [ 323.504715][T11187] netlink: 'syz.1.1693': attribute type 14 has an invalid length. [ 323.519401][T11187] __nla_validate_parse: 5 callbacks suppressed [ 323.519415][T11187] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1693'. [ 323.668606][T11192] netlink: 'syz.3.1695': attribute type 10 has an invalid length. [ 323.683170][T11192] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1695'. [ 323.737282][T11198] syz.1.1697[11198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.737493][T11198] syz.1.1697[11198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.610233][ T5088] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 324.621784][ T5088] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 325.324530][T11267] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1728'. [ 327.144924][T11307] netlink: 'syz.1.1745': attribute type 29 has an invalid length. [ 327.170177][T11307] netlink: 'syz.1.1745': attribute type 29 has an invalid length. [ 327.193188][T11307] netlink: 'syz.1.1745': attribute type 29 has an invalid length. [ 327.212188][T11307] netlink: 'syz.1.1745': attribute type 29 has an invalid length. [ 327.372889][T11311] netlink: 'syz.1.1747': attribute type 12 has an invalid length. [ 327.391946][T11311] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1747'. [ 327.558723][T11317] netlink: 'syz.0.1750': attribute type 2 has an invalid length. [ 328.957865][T11341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1760'. [ 328.958826][T11343] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1761'. [ 328.976643][T11341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1760'. [ 328.996691][T11341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1760'. [ 329.060890][ T5088] Bluetooth: hci2: Malformed LE Event: 0x02 [ 329.206163][T11354] netlink: 'syz.1.1766': attribute type 10 has an invalid length. [ 329.214306][T11354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1766'. [ 329.245198][T11354] veth0_vlan: entered allmulticast mode [ 329.251640][T11354] bridge0: port 1(veth0_vlan) entered blocking state [ 329.285147][T11354] bridge0: port 1(veth0_vlan) entered disabled state [ 329.300919][T11354] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 329.337050][T11356] netlink: 'syz.3.1767': attribute type 3 has an invalid length. [ 329.366454][T11356] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1767'. [ 329.859898][T11375] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1776'. [ 330.100749][T11383] netlink: 'syz.1.1780': attribute type 10 has an invalid length. [ 330.145753][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.288883][T11383] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.301729][T11383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.352001][T11383] team0: Port device bridge0 added [ 330.733912][ T5088] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 331.011481][ T5088] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 331.536290][ T5088] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 331.902268][ T5088] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 334.208821][ T5088] Bluetooth: hci0: unexpected event 0x31 length: 151 > 6 [ 334.412586][T11447] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1809'. [ 334.434130][T11447] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1809'. [ 334.467226][T11447] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1809'. [ 334.495868][T11447] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1809'. [ 336.849449][ T11] tipc: Subscription rejected, illegal request [ 337.473160][T11556] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1859'. [ 337.904664][T11562] netdevsim netdevsim2: Direct firmware load for @ failed with error -2 [ 337.918705][T11562] netdevsim netdevsim2: Falling back to sysfs fallback for: @ [ 338.076820][T11572] syzkaller0: entered promiscuous mode [ 338.082349][T11572] syzkaller0: entered allmulticast mode [ 340.114375][T11592] netlink: 'syz.1.1875': attribute type 39 has an invalid length. [ 340.290963][T11592] hsr_slave_1 (unregistering): left promiscuous mode [ 340.695632][T11610] netdevsim netdevsim0: Direct firmware load for @ failed with error -2 [ 340.704439][T11610] netdevsim netdevsim0: Falling back to sysfs fallback for: @ [ 341.325000][T11630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1889'. [ 341.349222][T11630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1889'. [ 341.360464][T11630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1889'. [ 341.650809][T11644] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1897'. [ 341.661677][T11644] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1897'. [ 341.672867][T11644] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1897'. [ 341.697540][T11644] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1897'. [ 342.309999][T11662] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 342.335830][T11662] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 343.039839][T11676] netlink: 'syz.0.1910': attribute type 10 has an invalid length. [ 343.148084][T11678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1911'. [ 343.380428][T11678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1911'. [ 343.394225][T11681] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1911'. [ 344.229972][ T5088] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 344.719406][T11738] netlink: 'syz.1.1940': attribute type 29 has an invalid length. [ 344.751080][T11738] netlink: 'syz.1.1940': attribute type 29 has an invalid length. [ 344.782054][T11741] netlink: 'syz.1.1940': attribute type 29 has an invalid length. [ 344.835226][T11738] netlink: 'syz.1.1940': attribute type 29 has an invalid length. [ 346.604551][T11810] syzkaller0: entered promiscuous mode [ 346.610213][T11810] syzkaller0: entered allmulticast mode [ 346.662397][T11812] netlink: 'syz.3.1973': attribute type 39 has an invalid length. [ 349.885103][T11878] netlink: 'syz.2.2002': attribute type 10 has an invalid length. [ 349.932225][T11878] team0: Device wg1 is of different type [ 350.033406][T11890] netlink: 'syz.1.2005': attribute type 2 has an invalid length. [ 350.051768][T11890] netlink: 'syz.1.2005': attribute type 8 has an invalid length. [ 350.068791][T11890] __nla_validate_parse: 1 callbacks suppressed [ 350.068806][T11890] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2005'. [ 350.681674][T11920] netlink: 'syz.2.2018': attribute type 4 has an invalid length. [ 350.690249][T11920] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2018'. [ 350.707670][T11920] wlan1: mtu less than device minimum [ 350.730834][T11920] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 354.242919][ T5088] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 355.012065][T12014] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2062'. [ 355.222695][T12052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2080'. [ 355.235057][T12052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2080'. [ 355.248548][T12052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2080'. [ 355.275023][T12052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2080'. [ 355.922843][T12083] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2096'. [ 356.357865][T12107] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2106'. [ 356.367859][T12107] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2106'. [ 356.401202][T12107] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2106'. [ 356.440984][T12107] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2106'. [ 356.960899][T12137] @0Ù: renamed from syz_tun (while UP) [ 357.436855][ T5088] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 358.039733][ T5088] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 358.580504][ T5088] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 359.925193][T12282] syzkaller0: entered promiscuous mode [ 359.967239][T12282] syzkaller0: entered allmulticast mode [ 361.374722][ T5088] Bluetooth: hci3: unexpected event 0x20 length: 15 > 7 [ 362.015401][ T5088] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 362.086248][T12363] netlink: 'syz.2.2214': attribute type 10 has an invalid length. [ 362.161428][T12363] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.183444][T12363] team0: entered promiscuous mode [ 362.203132][T12363] team_slave_0: entered promiscuous mode [ 362.209725][T12363] team_slave_1: entered promiscuous mode [ 362.217740][T12363] team0: entered allmulticast mode [ 362.223184][T12363] team_slave_0: entered allmulticast mode [ 362.241502][T12363] team_slave_1: entered allmulticast mode [ 362.259779][T12363] bond0: (slave team0): Enslaving as an active interface with an up link [ 362.728642][ T5088] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 363.301294][ T5088] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 363.797726][T12435] syzkaller0: entered promiscuous mode [ 363.839594][T12435] syzkaller0: entered allmulticast mode [ 365.191717][ T5088] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 366.507549][T12488] syzkaller0: entered promiscuous mode [ 366.524994][T12488] syzkaller0: entered allmulticast mode [ 366.872968][T12510] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2281'. [ 368.379746][T12504] netlink: 'syz.0.2278': attribute type 10 has an invalid length. [ 368.401436][T12504] team0: left allmulticast mode [ 368.406584][T12504] team_slave_1: left allmulticast mode [ 368.412158][T12504] geneve1: left allmulticast mode [ 368.417825][T12504] team0: left promiscuous mode [ 368.422612][T12504] team_slave_1: left promiscuous mode [ 368.428280][T12504] geneve1: left promiscuous mode [ 368.433443][T12504] : port 1(team0) entered disabled state [ 368.443605][T12504] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.451923][T12504] bond0: (slave team0): Enslaving as an active interface with an up link [ 368.460736][T12510] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2281'. [ 368.669587][T12535] netlink: 'syz.3.2290': attribute type 12 has an invalid length. [ 368.685131][T12535] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2290'. [ 368.818273][T12542] syz.2.2296[12542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.818413][T12542] syz.2.2296[12542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.845294][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 368.963384][T12548] syzkaller0: entered promiscuous mode [ 368.986803][T12548] syzkaller0: entered allmulticast mode [ 369.243446][T12554] syzkaller0: entered promiscuous mode [ 369.259452][T12554] syzkaller0: entered allmulticast mode [ 370.001376][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.029108][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.037772][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.058667][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.080345][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 370.093597][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.556950][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 371.881305][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.940786][T12597] netlink: 'syz.1.2318': attribute type 21 has an invalid length. [ 372.003744][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.023117][T12566] chnl_net:caif_netlink_parms(): no params data found [ 372.152427][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.160069][ T5088] Bluetooth: hci1: command tx timeout [ 372.233989][T12566] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.255123][T12566] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.262393][T12566] bridge_slave_0: entered allmulticast mode [ 372.270491][T12566] bridge_slave_0: entered promiscuous mode [ 372.288815][ T49] bond0: (slave netdevsim0): Releasing backup interface [ 372.296335][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 372.304832][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 372.315556][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.329696][T12566] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.337042][T12566] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.344239][T12566] bridge_slave_1: entered allmulticast mode [ 372.351752][T12566] bridge_slave_1: entered promiscuous mode [ 372.380822][T12566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.393753][T12566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.426044][T12566] team0: Port device team_slave_0 added [ 372.450007][T12566] team0: Port device team_slave_1 added [ 372.505369][T12566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.520197][T12566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.547717][T12566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.561364][T12566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.568672][T12566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.597919][T12566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.840196][T12566] hsr_slave_0: entered promiscuous mode [ 372.850174][T12566] hsr_slave_1: entered promiscuous mode [ 372.883617][T12566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.891579][T12566] Cannot create hsr debugfs directory [ 373.124142][T12612] syzkaller0: entered promiscuous mode [ 373.131063][T12612] syzkaller0: entered allmulticast mode [ 374.235246][ T5088] Bluetooth: hci1: command tx timeout [ 375.321289][T12638] netlink: 'syz.1.2330': attribute type 10 has an invalid length. [ 375.330244][T12638] veth1_macvtap: left promiscuous mode [ 375.736501][T12667] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.160579][ T49] bond0: (slave wlan1): Releasing backup interface [ 376.172228][ T49] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode [ 376.182733][ T49] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode [ 376.315058][ T5088] Bluetooth: hci1: command tx timeout [ 376.395359][ T49] hsr_slave_0: left promiscuous mode [ 376.401759][ T49] hsr_slave_1: left promiscuous mode [ 376.408380][ T49] bond0: left allmulticast mode [ 376.413243][ T49] bond_slave_0: left allmulticast mode [ 376.419332][ T49] bond_slave_1: left allmulticast mode [ 376.424876][ T49] macvlan0: left allmulticast mode [ 376.430009][ T49] veth1_vlan: left allmulticast mode [ 376.438101][ T49] bridge_slave_1: left allmulticast mode [ 376.443776][ T49] team0: left allmulticast mode [ 376.449068][ T49] team_slave_0: left allmulticast mode [ 376.455581][ T49] team_slave_1: left allmulticast mode [ 376.461850][ T49] bridge0: port 3(bond0) entered disabled state [ 376.484353][ T49] veth1_vlan: left promiscuous mode [ 376.489793][ T49] veth0_vlan: left promiscuous mode [ 376.690409][ T49] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 376.942277][ T49] team_slave_1 (unregistering): left promiscuous mode [ 376.952278][ T49] team0 (unregistering): Port device team_slave_1 removed [ 376.988401][ T49] team_slave_0 (unregistering): left promiscuous mode [ 376.997157][ T49] team0 (unregistering): Port device team_slave_0 removed [ 377.033489][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.042396][ T49] bond_slave_1 (unregistering): left promiscuous mode [ 377.079545][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.089595][ T49] bond_slave_0 (unregistering): left promiscuous mode [ 377.128231][ T49] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 377.137260][ T49] bridge_slave_1 (unregistering): left promiscuous mode [ 377.304376][ T49] bond0 (unregistering): (slave team0): Releasing backup interface [ 377.313095][ T49] team0 (unregistering): left promiscuous mode [ 377.342215][ T49] bond0 (unregistering): Released all slaves [ 377.493087][T12566] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 377.503706][T12566] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 377.523485][T12566] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 377.555812][T12566] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 377.723266][T12566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.759840][T12566] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.782015][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.789165][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.809835][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.817019][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.119467][T12566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.181204][T12566] veth0_vlan: entered promiscuous mode [ 378.194548][T12566] veth1_vlan: entered promiscuous mode [ 378.243420][T12566] veth0_macvtap: entered promiscuous mode [ 378.255496][T12566] veth1_macvtap: entered promiscuous mode [ 378.277370][T12566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.289098][T12566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.299690][T12566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.311747][T12566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.330969][T12566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.351987][T12566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.364050][T12566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.378251][T12566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.391284][T12566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.403510][ T5088] Bluetooth: hci1: command tx timeout [ 378.412221][T12566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.429306][T12566] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.441283][T12566] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.458609][T12566] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.470818][T12566] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.588018][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.609374][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.647543][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.656503][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.719045][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.734441][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.173871][T12745] syzkaller0: entered promiscuous mode [ 379.184865][T12745] syzkaller0: entered allmulticast mode [ 381.173363][T12777] syzkaller0: entered promiscuous mode [ 381.179998][T12777] syzkaller0: entered allmulticast mode [ 383.469610][ T5088] Bluetooth: hci3: unexpected event 0x18 length: 15 < 23 [ 383.531846][T12834] syz.1.2385[12834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.531979][T12834] syz.1.2385[12834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.072964][T12923] syzkaller0: entered promiscuous mode [ 386.128787][T12923] syzkaller0: entered allmulticast mode [ 386.240539][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 386.254609][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 386.262925][ T5783] bond0: (slave c@0Ù): Releasing backup interface [ 386.270833][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 386.282543][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 386.293043][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 386.302044][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 386.476462][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.320331][ T5773] Bluetooth: hci3: command tx timeout [ 388.407973][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.554574][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.973042][T12930] chnl_net:caif_netlink_parms(): no params data found [ 389.732444][T12930] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.744589][T12930] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.754109][T12930] bridge_slave_0: entered allmulticast mode [ 389.762267][T12930] bridge_slave_0: entered promiscuous mode [ 389.903073][T12930] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.911758][T12930] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.923823][T12930] bridge_slave_1: entered allmulticast mode [ 389.932464][T12930] bridge_slave_1: entered promiscuous mode [ 390.117844][T12930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.156544][T12930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.287660][T12930] team0: Port device team_slave_0 added [ 390.304450][T12930] team0: Port device team_slave_1 added [ 390.375448][T12930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.382433][T12930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.394970][ T5773] Bluetooth: hci3: command tx timeout [ 390.421336][T12930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.469530][T12930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.490161][T12930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.522527][T12930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.719610][T12930] hsr_slave_0: entered promiscuous mode [ 390.731916][T12930] hsr_slave_1: entered promiscuous mode [ 390.746279][T12930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.754257][T12930] Cannot create hsr debugfs directory [ 391.596051][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.622252][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.647613][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.669658][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.688199][ T12] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 391.705388][ T12] batman_adv: batadv0: Removing interface: virt_wifi0 [ 391.749201][ T12] veth1_vlan: left promiscuous mode [ 391.758039][ T12] veth0_vlan: left promiscuous mode [ 392.035226][ T12] team0 (unregistering): Port device geneve1 removed [ 392.460239][ T12] team0 (unregistering): Port device team_slave_1 removed [ 392.479288][ T5773] Bluetooth: hci3: command tx timeout [ 392.565275][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.618521][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.678086][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 393.006218][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 393.049816][ T12] bond0 (unregistering): Released all slaves [ 393.573692][T12930] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 393.598898][T12930] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 393.637339][T12930] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 393.661103][T12930] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 393.819292][T12930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.859108][T12930] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.872249][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.879500][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.914170][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.921410][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.376406][T12930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.478352][T12930] veth0_vlan: entered promiscuous mode [ 394.499782][T12930] veth1_vlan: entered promiscuous mode [ 394.555878][ T5773] Bluetooth: hci3: command tx timeout [ 394.562843][T12930] veth0_macvtap: entered promiscuous mode [ 394.593051][T12930] veth1_macvtap: entered promiscuous mode [ 394.675483][T12930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.725604][T12930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.754857][T12930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.781545][T12930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.802982][T12930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.825640][T12930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.836380][T12930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.849439][T12930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.863447][T12930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.886844][T12930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.940370][T12930] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.966723][T12930] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.984821][T12930] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.994924][T12930] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.209124][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.236402][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.299701][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.308378][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.458289][T13235] syz.0.2420[13235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.458428][T13235] syz.0.2420[13235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.978440][T13258] syz.0.2544[13258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.008544][T13258] syz.0.2544[13258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.013334][T13255] syzkaller0: entered promiscuous mode [ 396.041844][T13255] syzkaller0: entered allmulticast mode [ 396.069642][T13255] [ 396.072009][T13255] ====================================================== [ 396.079021][T13255] WARNING: possible circular locking dependency detected [ 396.086072][T13255] syzkaller #0 Not tainted [ 396.090476][T13255] ------------------------------------------------------ [ 396.097477][T13255] syz.2.2542/13255 is trying to acquire lock: [ 396.103527][T13255] ffff888079625a38 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x94/0x630 [ 396.112502][T13255] [ 396.112502][T13255] but task is already holding lock: [ 396.119854][T13255] ffff8880b8e37de8 (stock_lock){-.-.}-{2:2}, at: refill_stock+0xea/0x450 [ 396.128327][T13255] [ 396.128327][T13255] which lock already depends on the new lock. [ 396.128327][T13255] [ 396.138716][T13255] [ 396.138716][T13255] the existing dependency chain (in reverse order) is: [ 396.147719][T13255] [ 396.147719][T13255] -> #1 (stock_lock){-.-.}-{2:2}: [ 396.154991][T13255] try_charge_memcg+0x237/0x17c0 [ 396.160454][T13255] __memcg_kmem_charge_page+0x224/0x380 [ 396.166512][T13255] __alloc_pages+0x222/0x460 [ 396.171642][T13255] __kmalloc_large_node+0x8c/0x1f0 [ 396.177270][T13255] __kmalloc_node+0x112/0x240 [ 396.182469][T13255] bpf_map_kmalloc_node+0xbc/0x1b0 [ 396.188109][T13255] trie_update_elem+0x172/0xd60 [ 396.193493][T13255] bpf_map_update_value+0x64b/0x710 [ 396.199200][T13255] map_update_elem+0x586/0x710 [ 396.204473][T13255] __sys_bpf+0x6b5/0x890 [ 396.209224][T13255] __x64_sys_bpf+0x7c/0x90 [ 396.214152][T13255] do_syscall_64+0x55/0xb0 [ 396.219194][T13255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.225654][T13255] [ 396.225654][T13255] -> #0 (&trie->lock){-.-.}-{2:2}: [ 396.232945][T13255] __lock_acquire+0x37ef/0x7d80 [ 396.238334][T13255] lock_acquire+0x19e/0x420 [ 396.243355][T13255] _raw_spin_lock_irqsave+0xb4/0x100 [ 396.249218][T13255] trie_delete_elem+0x94/0x630 [ 396.254497][T13255] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 396.260467][T13255] trace_call_bpf+0x333/0x6c0 [ 396.265670][T13255] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 396.271729][T13255] perf_trace_lock_acquire+0x342/0x400 [ 396.277697][T13255] lock_acquire+0x3ef/0x420 [ 396.282714][T13255] percpu_ref_put+0x35/0x180 [ 396.287828][T13255] __refill_stock+0x12a/0x3d0 [ 396.293047][T13255] refill_stock+0x19e/0x450 [ 396.298063][T13255] try_charge_memcg+0x1281/0x17c0 [ 396.303600][T13255] obj_cgroup_charge+0x36e/0x630 [ 396.309047][T13255] slab_pre_alloc_hook+0x2e2/0x300 [ 396.314673][T13255] kmem_cache_alloc+0x5a/0x2c0 [ 396.319951][T13255] alloc_empty_file+0x9e/0x1d0 [ 396.325227][T13255] path_openat+0x120/0x3270 [ 396.330242][T13255] do_filp_open+0x1f2/0x430 [ 396.335254][T13255] do_sys_openat2+0x134/0x1d0 [ 396.340444][T13255] __x64_sys_openat+0x139/0x160 [ 396.345809][T13255] do_syscall_64+0x55/0xb0 [ 396.350736][T13255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.357142][T13255] [ 396.357142][T13255] other info that might help us debug this: [ 396.357142][T13255] [ 396.367360][T13255] Possible unsafe locking scenario: [ 396.367360][T13255] [ 396.374799][T13255] CPU0 CPU1 [ 396.380156][T13255] ---- ---- [ 396.385508][T13255] lock(stock_lock); [ 396.389485][T13255] lock(&trie->lock); [ 396.396062][T13255] lock(stock_lock); [ 396.402551][T13255] lock(&trie->lock); [ 396.406609][T13255] [ 396.406609][T13255] *** DEADLOCK *** [ 396.406609][T13255] [ 396.414735][T13255] 2 locks held by syz.2.2542/13255: [ 396.419924][T13255] #0: ffff8880b8e37de8 (stock_lock){-.-.}-{2:2}, at: refill_stock+0xea/0x450 [ 396.428801][T13255] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: trace_call_bpf+0xc3/0x6c0 [ 396.438131][T13255] [ 396.438131][T13255] stack backtrace: [ 396.444002][T13255] CPU: 0 PID: 13255 Comm: syz.2.2542 Not tainted syzkaller #0 [ 396.451448][T13255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.461499][T13255] Call Trace: [ 396.464778][T13255] [ 396.467703][T13255] dump_stack_lvl+0x18c/0x250 [ 396.472391][T13255] ? load_image+0x420/0x420 [ 396.476919][T13255] ? show_regs_print_info+0x20/0x20 [ 396.482113][T13255] ? print_circular_bug+0x12b/0x1a0 [ 396.487311][T13255] check_noncircular+0x2fc/0x400 [ 396.492245][T13255] ? print_deadlock_bug+0x5d0/0x5d0 [ 396.497434][T13255] ? lockdep_lock+0xf5/0x230 [ 396.502018][T13255] ? _find_first_zero_bit+0xd6/0x100 [ 396.507339][T13255] __lock_acquire+0x37ef/0x7d80 [ 396.512204][T13255] ? perf_trace_buf_alloc+0x131/0x290 [ 396.517567][T13255] ? verify_lock_unused+0x140/0x140 [ 396.522756][T13255] ? perf_trace_lock_acquire+0x1a7/0x400 [ 396.528381][T13255] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 396.534957][T13255] ? fixup_exception+0x11bb/0x1d90 [ 396.540089][T13255] lock_acquire+0x19e/0x420 [ 396.544582][T13255] ? trie_delete_elem+0x94/0x630 [ 396.549519][T13255] ? do_user_addr_fault+0xf5c/0x12d0 [ 396.554797][T13255] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 396.561373][T13255] ? read_lock_is_recursive+0x20/0x20 [ 396.566737][T13255] ? kernelmode_fixup_or_oops+0x7c/0xf0 [ 396.572274][T13255] _raw_spin_lock_irqsave+0xb4/0x100 [ 396.577561][T13255] ? trie_delete_elem+0x94/0x630 [ 396.582493][T13255] ? _raw_spin_lock+0x40/0x40 [ 396.587178][T13255] trie_delete_elem+0x94/0x630 [ 396.591950][T13255] ? rep_movs_alternative+0x22/0x90 [ 396.597147][T13255] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 396.602597][T13255] trace_call_bpf+0x333/0x6c0 [ 396.607264][T13255] ? trace_call_bpf+0xc3/0x6c0 [ 396.612022][T13255] ? mark_lock+0x94/0x320 [ 396.616346][T13255] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 396.622402][T13255] ? __lock_acquire+0x1336/0x7d80 [ 396.627421][T13255] ? trace_call_bpf+0xc3/0x6c0 [ 396.632182][T13255] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 396.637727][T13255] perf_trace_lock_acquire+0x342/0x400 [ 396.643177][T13255] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 396.649752][T13255] ? perf_trace_lock_acquire+0x342/0x400 [ 396.655377][T13255] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 396.661955][T13255] lock_acquire+0x3ef/0x420 [ 396.666451][T13255] ? percpu_ref_put+0x19/0x180 [ 396.671207][T13255] ? verify_lock_unused+0x140/0x140 [ 396.676403][T13255] ? read_lock_is_recursive+0x20/0x20 [ 396.681767][T13255] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 396.688347][T13255] ? __lock_acquire+0x1262/0x7d80 [ 396.693367][T13255] ? percpu_ref_put+0x19/0x180 [ 396.698128][T13255] percpu_ref_put+0x35/0x180 [ 396.702715][T13255] ? percpu_ref_put+0x19/0x180 [ 396.707472][T13255] __refill_stock+0x12a/0x3d0 [ 396.712146][T13255] refill_stock+0x19e/0x450 [ 396.716641][T13255] ? refill_stock+0xea/0x450 [ 396.721224][T13255] ? mem_cgroup_uncharge_skmem+0x1b0/0x1b0 [ 396.727025][T13255] ? page_counter_try_charge+0x293/0x2c0 [ 396.732647][T13255] ? try_charge_memcg+0x3e1/0x17c0 [ 396.737775][T13255] try_charge_memcg+0x1281/0x17c0 [ 396.742796][T13255] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 396.749376][T13255] ? try_charge_memcg+0x21a/0x17c0 [ 396.754487][T13255] ? folio_flags+0x120/0x120 [ 396.759071][T13255] ? percpu_ref_tryget+0x15/0x180 [ 396.764088][T13255] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 396.769803][T13255] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 396.775777][T13255] ? percpu_ref_tryget+0x15/0x180 [ 396.780795][T13255] ? percpu_ref_tryget+0x15/0x180 [ 396.785810][T13255] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 396.791519][T13255] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 396.797259][T13255] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 396.803064][T13255] obj_cgroup_charge+0x36e/0x630 [ 396.807998][T13255] ? get_obj_cgroup_from_current+0xd4/0x280 [ 396.813882][T13255] ? obj_cgroup_charge+0xed/0x630 [ 396.818897][T13255] ? mod_objcg_mlstate+0x320/0x320 [ 396.823998][T13255] ? percpu_ref_tryget+0x15/0x180 [ 396.829019][T13255] ? get_obj_cgroup_from_current+0xd4/0x280 [ 396.834904][T13255] ? get_obj_cgroup_from_current+0xd4/0x280 [ 396.840794][T13255] slab_pre_alloc_hook+0x2e2/0x300 [ 396.845904][T13255] kmem_cache_alloc+0x5a/0x2c0 [ 396.850660][T13255] ? alloc_empty_file+0x9e/0x1d0 [ 396.855588][T13255] alloc_empty_file+0x9e/0x1d0 [ 396.860341][T13255] path_openat+0x120/0x3270 [ 396.864833][T13255] ? trace_call_bpf+0xc3/0x6c0 [ 396.869597][T13255] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 396.875401][T13255] ? verify_lock_unused+0x140/0x140 [ 396.880591][T13255] ? do_filp_open+0x430/0x430 [ 396.885264][T13255] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 396.891851][T13255] do_filp_open+0x1f2/0x430 [ 396.896350][T13255] ? vfs_tmpfile+0x620/0x620 [ 396.900944][T13255] ? _raw_spin_unlock+0x28/0x40 [ 396.905792][T13255] ? alloc_fd+0x590/0x640 [ 396.910144][T13255] do_sys_openat2+0x134/0x1d0 [ 396.914817][T13255] ? do_sys_open+0xe0/0xe0 [ 396.919225][T13255] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 396.925197][T13255] ? lock_chain_count+0x20/0x20 [ 396.930045][T13255] __x64_sys_openat+0x139/0x160 [ 396.934894][T13255] do_syscall_64+0x55/0xb0 [ 396.939325][T13255] ? clear_bhb_loop+0x40/0x90 [ 396.944014][T13255] ? clear_bhb_loop+0x40/0x90 [ 396.948699][T13255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.954596][T13255] RIP: 0033:0x7fd35f39e0d9 [ 396.959006][T13255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.978608][T13255] RSP: 002b:00007fd360339028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 396.987016][T13255] RAX: ffffffffffffffda RBX: 00007fd35f625fa0 RCX: 00007fd35f39e0d9 [ 396.994980][T13255] RDX: 00000000001c1842 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 397.002947][T13255] RBP: 00007fd35f435024 R08: 0000000000000000 R09: 0000000000000000 [ 397.010912][T13255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.018898][T13255] R13: 00007fd35f626038 R14: 00007fd35f625fa0 R15: 00007ffce5aa6a98 [ 397.026888][T13255]